Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/10mM0yfqM7_4Yp1_Sda-Otxf8yw.mft
File:                     10mM0yfqM7_4Yp1_Sda-Otxf8yw.mft (raw, json)
Hash identifier:          4FXc+dWNU3mBaKNHgPTe9FZEIHyCE4qYZASboDNf+PA=
Subject key identifier:   6D:2D:D0:8E:AC:55:1F:86:55:23:5A:A2:FE:C4:3B:20:E9:F6:3E:EE
Authority key identifier: D7:49:8C:D3:27:EA:33:BF:F8:62:9D:7F:49:D6:BE:3A:DC:5F:F3:2C
Certificate issuer:       /CN=d7498cd327ea33bff8629d7f49d6be3adc5ff32c
Certificate serial:       0199FC58CBDD560F515A687F14B3AF43CBFA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/10mM0yfqM7_4Yp1_Sda-Otxf8yw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/10mM0yfqM7_4Yp1_Sda-Otxf8yw.mft
Manifest number:          16E3
Signing time:             Sun 19 Oct 2025 12:01:41 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:41 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:41 +0000
Files and hashes:         1: 10mM0yfqM7_4Yp1_Sda-Otxf8yw.crl (hash: vU0+14iRs8MnlHNJ1sT+OdrgQlIbRmq0MW/+gtuLpvE=)
                          2: sndMGN9hrwytu8M86g8e17_E-wk.roa (hash: 5lmWBoAQNAypsv2KN0NMYJT+hXVE7BGT1N8Z8n2QPIo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/10mM0yfqM7_4Yp1_Sda-Otxf8yw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/10mM0yfqM7_4Yp1_Sda-Otxf8yw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/10mM0yfqM7_4Yp1_Sda-Otxf8yw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:58:cb:dd:56:0f:51:5a:68:7f:14:b3:af:43:cb:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7498cd327ea33bff8629d7f49d6be3adc5ff32c
        Validity
            Not Before: Oct 19 12:01:41 2025 GMT
            Not After : Oct 20 12:01:41 2025 GMT
        Subject: CN=6d2dd08eac551f8655235aa2fec43b20e9f63eee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:3b:bd:fb:59:97:2b:0a:ea:ba:db:67:66:43:
                    b1:f1:5b:44:bf:f5:49:64:8d:5c:15:21:45:e8:58:
                    05:cc:24:ec:34:dd:0b:09:e9:c4:6d:10:c9:2a:cc:
                    e5:e8:b2:16:6b:77:9b:cb:b3:8b:ac:f1:5f:dc:56:
                    ac:37:76:c0:98:c0:44:15:97:be:6f:05:8c:39:73:
                    da:65:53:68:f7:3e:2a:a0:83:72:64:60:b7:1d:f1:
                    56:bd:8f:d2:fc:7c:55:66:c5:fa:6d:81:7b:d1:3b:
                    da:ed:f0:1a:8b:4f:b6:27:c5:fc:29:de:88:97:f8:
                    d4:30:5b:e8:6a:95:09:fd:27:58:e5:a3:8a:37:51:
                    85:f2:d0:3d:1c:1f:48:c4:9c:8d:29:91:6a:e5:08:
                    0e:4a:4d:d6:dd:b9:cd:2a:5c:77:46:8f:86:6e:7e:
                    ce:a7:8c:8c:99:7a:50:04:cd:f7:71:cf:1e:4b:ab:
                    7d:9f:e5:bf:43:55:68:99:65:91:65:65:38:64:fe:
                    b2:1b:d1:67:92:28:5c:6a:dd:ff:02:c8:66:b1:f2:
                    a1:3c:d7:ca:e8:20:ef:c0:67:99:bb:f5:2f:ad:03:
                    e0:41:b2:fa:c3:c7:6b:f9:d2:bf:ad:b5:d5:47:38:
                    5a:37:49:b8:65:52:4a:a2:a3:86:ee:ca:c0:dd:15:
                    5b:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:2D:D0:8E:AC:55:1F:86:55:23:5A:A2:FE:C4:3B:20:E9:F6:3E:EE
            X509v3 Authority Key Identifier:
                keyid:D7:49:8C:D3:27:EA:33:BF:F8:62:9D:7F:49:D6:BE:3A:DC:5F:F3:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10mM0yfqM7_4Yp1_Sda-Otxf8yw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/10mM0yfqM7_4Yp1_Sda-Otxf8yw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/10mM0yfqM7_4Yp1_Sda-Otxf8yw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:5f:d1:03:36:76:89:d7:8d:c9:8c:54:ef:81:74:75:c1:34:
         e0:1d:4f:08:bf:ca:18:2a:fc:be:07:7d:e6:19:05:29:a9:eb:
         78:8e:4c:d7:ea:6a:34:34:36:d8:ad:31:a0:b2:95:6a:e3:bd:
         72:70:0d:fb:93:e3:62:e7:e5:32:84:65:57:75:0e:fc:ec:5a:
         d5:c6:e1:39:7e:92:53:87:89:50:88:8e:3e:c6:91:66:5c:1a:
         70:f2:bf:43:96:43:f8:9c:d6:a2:70:3c:02:9f:e4:5c:9d:d9:
         f0:8b:23:cd:b0:5f:05:b0:9e:59:6c:62:0a:40:a7:9f:25:48:
         1c:00:e6:9f:f1:df:92:77:05:ac:0a:88:e9:bb:99:7f:b5:12:
         32:4a:c8:e4:c4:95:19:db:f0:66:e7:7c:4a:24:91:0f:8b:44:
         26:ff:53:a4:e8:af:ed:62:1a:47:bc:2f:69:a1:df:25:5f:30:
         e4:23:38:0c:4c:4f:1e:da:26:27:fa:27:57:49:c0:61:00:71:
         37:21:6c:7a:a6:f7:61:b1:be:3c:0a:77:20:70:66:9e:b5:82:
         a8:ba:8c:da:2f:65:e9:87:05:7c:57:7f:6b:c2:f4:62:67:76:
         b3:5c:ab:34:d6:7c:20:55:18:fc:f8:7f:7c:3c:df:7b:79:73:
         ab:0b:9b:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:33:57 2025 by rpki-client