Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b4515e-8641-45b0-b75f-096921c91c41/1/3vwmhsKavvGPQLMOfpUTJHpm7xM.mft
File:                     3vwmhsKavvGPQLMOfpUTJHpm7xM.mft (raw, json)
Hash identifier:          X0NbduqzL+0dayRbJd9i1jPzskbLBvfG9cjI1PGDBEM=
Subject key identifier:   8C:A4:F0:8A:8C:43:6B:A4:26:E0:F3:5C:FA:04:99:C9:66:DC:71:31
Authority key identifier: DE:FC:26:86:C2:9A:BE:F1:8F:40:B3:0E:7E:95:13:24:7A:66:EF:13
Certificate issuer:       /CN=defc2686c29abef18f40b30e7e9513247a66ef13
Certificate serial:       0199FB7CD607B95C5CE2BA28D02BE73DFE50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3vwmhsKavvGPQLMOfpUTJHpm7xM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/b4515e-8641-45b0-b75f-096921c91c41/1/3vwmhsKavvGPQLMOfpUTJHpm7xM.mft
Manifest number:          16E1
Signing time:             Sun 19 Oct 2025 08:01:26 +0000
Manifest this update:     Sun 19 Oct 2025 08:01:26 +0000
Manifest next update:     Mon 20 Oct 2025 08:01:26 +0000
Files and hashes:         1: 2jede6KT-wWXlr-gV_HV5g4z3cE.roa (hash: mv6a2TTy4FTvxK1u9z+/AeZmzO5akrk+XnGtMMkB+UQ=)
                          2: 3vwmhsKavvGPQLMOfpUTJHpm7xM.crl (hash: YtZHHdvSyQbUkOZQtGbm7vmMMamhB/sxflPYXxnNBAE=)
                          3: IJD_U3KWZ58BdYUivTasUkoSb14.roa (hash: QMy/+qKyMyM01JHQHllqOzvjbF1AM/QefZV5csA0T9s=)
                          4: NxF2Cyt5llnCNI_vXdmc9sDjjDg.roa (hash: R2BQ5eg/vIm8OWNUAn8Iiim/Pq6eL5zypKjZ8nuw8W0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/b4515e-8641-45b0-b75f-096921c91c41/1/3vwmhsKavvGPQLMOfpUTJHpm7xM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/b4515e-8641-45b0-b75f-096921c91c41/1/3vwmhsKavvGPQLMOfpUTJHpm7xM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3vwmhsKavvGPQLMOfpUTJHpm7xM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:7c:d6:07:b9:5c:5c:e2:ba:28:d0:2b:e7:3d:fe:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=defc2686c29abef18f40b30e7e9513247a66ef13
        Validity
            Not Before: Oct 19 08:01:26 2025 GMT
            Not After : Oct 20 08:01:26 2025 GMT
        Subject: CN=8ca4f08a8c436ba426e0f35cfa0499c966dc7131
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f6:c3:47:21:22:c8:8c:d4:1a:a8:39:71:76:
                    33:e4:b1:c8:0d:e9:b7:e9:96:16:80:a0:fb:ce:0e:
                    4c:ea:36:bc:90:90:f5:30:9b:ba:7f:2e:8d:33:8d:
                    86:12:15:59:62:70:eb:66:73:1d:3f:c0:fc:47:39:
                    05:f2:e8:36:8c:76:72:46:b7:ab:be:6e:ee:16:18:
                    52:cf:00:bd:9f:bf:ab:7f:cd:e0:2d:65:d0:d1:00:
                    06:bb:9e:d4:2f:ab:88:8e:5d:e0:53:5f:6d:fb:1a:
                    97:52:df:7e:d8:18:f6:8d:40:19:9f:40:6f:49:10:
                    89:9c:09:76:4f:08:9f:89:69:64:67:13:27:91:ad:
                    22:7c:aa:b1:58:f0:e8:b4:44:98:cf:ca:d1:0c:c6:
                    47:33:5a:b0:9f:95:a1:db:4a:a3:f0:ae:7a:64:41:
                    07:31:90:ec:a8:47:9b:73:fd:36:15:12:69:58:53:
                    13:4a:d9:8a:a0:2a:fb:13:7a:52:2d:10:34:0f:b7:
                    fc:55:bc:75:b6:15:2f:90:e5:0b:0f:b7:4f:0b:fc:
                    bb:d9:d3:a1:ff:17:8b:f2:3a:9b:d2:fc:30:bb:b3:
                    3f:bc:ad:82:f9:e4:03:b3:df:be:b2:f4:92:31:36:
                    84:c9:8a:2b:95:f9:fb:63:67:45:97:5c:51:00:a7:
                    22:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:A4:F0:8A:8C:43:6B:A4:26:E0:F3:5C:FA:04:99:C9:66:DC:71:31
            X509v3 Authority Key Identifier:
                keyid:DE:FC:26:86:C2:9A:BE:F1:8F:40:B3:0E:7E:95:13:24:7A:66:EF:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3vwmhsKavvGPQLMOfpUTJHpm7xM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b4515e-8641-45b0-b75f-096921c91c41/1/3vwmhsKavvGPQLMOfpUTJHpm7xM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b4515e-8641-45b0-b75f-096921c91c41/1/3vwmhsKavvGPQLMOfpUTJHpm7xM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:97:4e:95:b9:f9:db:70:9e:08:41:06:25:58:46:76:a9:b2:
         f6:f1:81:06:3e:4c:63:fb:7b:4c:6b:4e:cb:f5:21:dd:b3:da:
         f1:dd:53:8a:ee:c5:89:f3:d7:ab:fc:28:b8:4a:df:71:e0:60:
         4e:86:9d:93:1f:87:e7:21:05:0c:a4:c0:97:1b:9f:16:5b:8a:
         d3:88:c7:dd:43:3c:d8:45:b4:ea:58:9c:06:58:5d:65:64:4d:
         9d:dd:7f:0c:ad:7a:21:98:20:e8:4c:96:9f:f9:a7:f7:f8:2e:
         33:18:fb:6c:ed:d2:3c:be:7c:c0:90:fb:48:20:7b:d5:ed:aa:
         a0:a8:78:9a:fa:0b:f8:8d:0c:f9:bb:b2:d2:8b:cf:67:75:89:
         82:f7:31:e7:1b:04:a5:7b:b4:5d:e4:8f:28:1a:95:9c:93:e1:
         9d:fd:01:fb:f7:d9:e9:c9:c3:4d:41:c3:b9:91:56:87:e8:64:
         34:0e:75:0f:cf:b8:90:7d:d1:89:f2:78:e6:d5:5e:4c:45:94:
         c5:89:5e:12:2c:97:d5:d9:df:96:bb:c3:17:f3:cb:34:af:9a:
         39:f0:4d:ef:d0:ff:82:d8:4a:20:03:42:77:0b:10:68:0b:8e:
         29:89:cd:af:d0:a7:24:9b:b7:ca:d0:ca:b4:25:73:4f:18:50:
         66:14:25:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:23:01 2025 by rpki-client