Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.mft
File:                     MlDVjXew-l3OxPQq6W80e8gNqj4.mft (raw, json)
Hash identifier:          v60F5ULX4Iz/WQ6D+x8lu7+ak5jsscLpTKl1fDLx3g8=
Subject key identifier:   EC:20:B3:99:9E:61:D0:D4:CF:21:F0:BD:6D:69:5E:BF:EB:49:0D:21
Authority key identifier: 32:50:D5:8D:77:B0:FA:5D:CE:C4:F4:2A:E9:6F:34:7B:C8:0D:AA:3E
Certificate issuer:       /CN=3250d58d77b0fa5dcec4f42ae96f347bc80daa3e
Certificate serial:       019A01B646E5BC79EFD6CA31E5CED2B74278
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MlDVjXew-l3OxPQq6W80e8gNqj4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.mft
Manifest number:          16E5
Signing time:             Mon 20 Oct 2025 13:01:54 +0000
Manifest this update:     Mon 20 Oct 2025 13:01:54 +0000
Manifest next update:     Tue 21 Oct 2025 13:01:54 +0000
Files and hashes:         1: MlDVjXew-l3OxPQq6W80e8gNqj4.crl (hash: XcKh8DyXOe2jTNd/qTkmFv2X6hfRzDXpPH84agOXu00=)
                          2: ndShIgCcbsHhUOk-1qX-uYRIuS0.roa (hash: czNtU+SX8QXrL7dVcdfeMOMIGpfeCslspqe7rpd0A8Q=)
                          3: xNxMZxSDyX7cldenO1Ro1zeTZuQ.roa (hash: EdeIoFQQfBBtul4Dl4kQ19MbiTrPJ3gXVWY5FjQfawo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MlDVjXew-l3OxPQq6W80e8gNqj4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:01:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:01:b6:46:e5:bc:79:ef:d6:ca:31:e5:ce:d2:b7:42:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3250d58d77b0fa5dcec4f42ae96f347bc80daa3e
        Validity
            Not Before: Oct 20 13:01:54 2025 GMT
            Not After : Oct 21 13:01:54 2025 GMT
        Subject: CN=ec20b3999e61d0d4cf21f0bd6d695ebfeb490d21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:09:16:06:f3:16:a7:2c:5e:00:f7:15:09:d7:
                    f1:39:c5:5f:71:98:89:f7:ab:3e:c2:91:60:80:c4:
                    ec:07:5c:d2:f2:dc:e5:a4:14:cc:1c:55:49:5a:ee:
                    71:30:a2:28:61:62:16:86:a0:cc:cd:3a:3e:c4:2b:
                    ba:f5:37:a7:22:1f:57:f8:f7:a7:da:e8:6b:9f:9e:
                    01:a0:37:ac:9a:51:00:f4:3b:af:4d:52:4e:6f:5f:
                    21:52:d0:4c:44:9f:de:15:20:2c:3f:e3:51:67:dd:
                    b5:ee:5f:c2:aa:1c:d7:86:37:52:7f:14:78:77:f5:
                    78:7a:c1:33:0b:c2:94:91:d1:54:d1:26:30:32:b3:
                    97:76:74:9e:df:17:b6:50:d7:e6:e8:70:d9:cc:f6:
                    bc:fb:7e:8d:73:57:e1:61:6c:7d:9c:de:ad:81:46:
                    a6:4a:3e:8a:13:ad:34:80:8a:1c:1c:fa:9c:35:3b:
                    9d:5c:6a:d0:10:45:b1:32:75:73:e7:5f:76:9f:32:
                    ba:e8:47:a8:8c:b7:48:22:69:5c:64:03:82:69:83:
                    e3:fe:eb:69:34:e0:1a:3b:74:ac:48:70:34:bc:a9:
                    08:a0:04:1d:37:28:d3:c9:7c:06:98:10:65:73:58:
                    c2:a8:0e:6c:06:30:95:ce:ca:30:67:8b:d1:c6:85:
                    7c:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:20:B3:99:9E:61:D0:D4:CF:21:F0:BD:6D:69:5E:BF:EB:49:0D:21
            X509v3 Authority Key Identifier:
                keyid:32:50:D5:8D:77:B0:FA:5D:CE:C4:F4:2A:E9:6F:34:7B:C8:0D:AA:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlDVjXew-l3OxPQq6W80e8gNqj4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:c2:15:e5:df:ab:87:dd:24:e3:f1:05:d0:aa:e5:4f:50:0c:
         b3:13:29:1f:b1:01:aa:a5:00:d4:c5:67:7b:8b:35:98:a7:0a:
         f6:87:99:c5:92:ba:a8:79:69:be:f4:11:e7:33:e9:e5:19:a9:
         54:c6:e2:22:da:37:ff:5d:4e:ed:23:ef:0b:62:b7:dc:42:1b:
         e0:80:fb:4c:11:b2:7e:ff:cf:94:37:50:73:85:41:06:45:ce:
         7a:1e:63:ed:4c:99:bd:41:cf:31:9d:42:dd:1d:0c:e4:3c:3c:
         a4:54:ec:34:71:a4:0d:70:df:90:5e:c5:86:57:c4:69:26:c6:
         cc:15:61:97:a9:15:35:92:e2:c9:c7:83:8e:a5:0e:48:5e:d1:
         09:63:ab:9a:40:f3:db:60:74:5e:b1:f4:08:c5:50:07:ed:a0:
         ab:f6:f5:36:b8:aa:8b:f0:e2:ce:99:3c:cc:15:bf:03:64:3f:
         d6:53:61:2f:ce:61:6d:6e:57:49:74:c7:40:66:a7:2d:08:5b:
         f2:68:95:ad:bf:32:c5:0b:42:d4:d7:82:72:72:d1:00:06:62:
         8a:2a:4e:7c:86:62:cf:9e:25:15:a6:e9:c0:af:83:46:ef:09:
         fc:d6:fb:c7:11:59:52:39:ae:8e:64:e1:b7:dd:1c:a0:75:7b:
         f8:7a:1b:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:41:01 2025 by rpki-client