Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/8c07ae-de72-476a-8029-f0816e38adde/1/M0EIdcp4zF49GS4FSpbfAwLH-Xo.mft
File:                     M0EIdcp4zF49GS4FSpbfAwLH-Xo.mft (raw, json)
Hash identifier:          rroSdtVRk80sS+HMykqwJSvjLA3hXBPu5wFDqG4lFz4=
Subject key identifier:   FC:2B:AE:4E:8E:DB:FB:A1:B2:DE:A9:D6:70:71:B2:7F:6D:60:57:C1
Authority key identifier: 33:41:08:75:CA:78:CC:5E:3D:19:2E:05:4A:96:DF:03:02:C7:F9:7A
Certificate issuer:       /CN=33410875ca78cc5e3d192e054a96df0302c7f97a
Certificate serial:       019A0110B8827D52A351852D779BAA324E91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M0EIdcp4zF49GS4FSpbfAwLH-Xo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/8c07ae-de72-476a-8029-f0816e38adde/1/M0EIdcp4zF49GS4FSpbfAwLH-Xo.mft
Manifest number:          16E5
Signing time:             Mon 20 Oct 2025 10:01:04 +0000
Manifest this update:     Mon 20 Oct 2025 10:01:04 +0000
Manifest next update:     Tue 21 Oct 2025 10:01:04 +0000
Files and hashes:         1: HqUdNukgCT5prgnM_K-f0-if2vo.roa (hash: /RVlSM2uyNgy2pOhW4SUxHsDBdur2yik6QdL4JVoNEA=)
                          2: M0EIdcp4zF49GS4FSpbfAwLH-Xo.crl (hash: TPwk9bszm54ZnRDrHzP+vlVuW+zPx0OdAwI57nEeZEI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/8c07ae-de72-476a-8029-f0816e38adde/1/M0EIdcp4zF49GS4FSpbfAwLH-Xo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/8c07ae-de72-476a-8029-f0816e38adde/1/M0EIdcp4zF49GS4FSpbfAwLH-Xo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M0EIdcp4zF49GS4FSpbfAwLH-Xo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:01:10:b8:82:7d:52:a3:51:85:2d:77:9b:aa:32:4e:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33410875ca78cc5e3d192e054a96df0302c7f97a
        Validity
            Not Before: Oct 20 10:01:04 2025 GMT
            Not After : Oct 21 10:01:04 2025 GMT
        Subject: CN=fc2bae4e8edbfba1b2dea9d67071b27f6d6057c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:39:57:0a:bc:2d:c0:a7:a9:28:5d:73:4e:f8:
                    a2:e0:40:5f:cf:d3:dc:52:73:ac:16:ff:3e:c1:04:
                    75:93:ab:e5:5d:9b:6d:bb:40:d7:0b:e3:61:97:c3:
                    d4:61:cc:54:8c:8b:ec:1e:22:92:b3:06:66:2f:35:
                    ff:b7:15:ff:b7:33:c8:a2:54:10:1c:24:84:81:e7:
                    87:dd:d4:9c:11:b6:25:ad:1c:ce:1a:69:d6:cc:e1:
                    e5:e9:1a:67:ab:72:66:c3:d0:c7:85:c0:3d:ce:d9:
                    56:63:36:76:f3:3c:90:72:f3:d0:4c:a4:fe:2c:21:
                    13:59:bc:07:9e:a2:8f:d8:f5:28:fd:c2:f9:45:9e:
                    e3:33:7d:87:6e:77:8b:91:4f:43:df:ca:36:23:65:
                    15:b5:66:7a:fc:01:46:c8:f2:ac:0e:2e:1f:d2:0d:
                    a6:52:b6:8a:e9:5f:85:0c:e2:9c:6c:16:c2:3d:33:
                    ff:08:fa:4c:8e:c4:21:ff:b3:25:2d:5f:79:62:bb:
                    52:8e:38:83:40:3a:b1:85:fe:43:ce:11:0e:aa:b0:
                    a9:7b:9c:b8:c6:12:52:3b:ce:2a:94:12:af:ba:d8:
                    3f:58:c2:ea:be:21:54:38:56:52:de:31:e6:71:50:
                    69:a3:4f:9c:a3:35:14:76:8d:9f:70:90:99:22:8a:
                    83:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:2B:AE:4E:8E:DB:FB:A1:B2:DE:A9:D6:70:71:B2:7F:6D:60:57:C1
            X509v3 Authority Key Identifier:
                keyid:33:41:08:75:CA:78:CC:5E:3D:19:2E:05:4A:96:DF:03:02:C7:F9:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M0EIdcp4zF49GS4FSpbfAwLH-Xo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/8c07ae-de72-476a-8029-f0816e38adde/1/M0EIdcp4zF49GS4FSpbfAwLH-Xo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/8c07ae-de72-476a-8029-f0816e38adde/1/M0EIdcp4zF49GS4FSpbfAwLH-Xo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:fe:70:94:5c:1e:3a:be:06:e6:20:b3:be:6a:c8:b3:d0:bf:
         d2:f7:c8:42:62:dc:35:57:8e:69:be:6d:e9:99:8e:c9:3c:60:
         3e:ec:e5:b0:72:59:84:3a:e0:77:1e:e7:6e:92:5f:c4:8c:57:
         f0:1c:23:28:ba:74:03:d8:6f:fd:44:45:64:81:93:11:e1:6f:
         63:ef:2e:41:99:d1:35:f2:65:2c:78:b4:7a:27:ec:23:07:cd:
         c1:ff:07:95:0a:90:69:c2:4c:0d:d8:f0:eb:3e:91:d8:d4:04:
         52:93:bb:30:7c:92:59:34:b7:f8:8d:e2:5b:64:4c:ea:c6:30:
         68:6b:30:0d:55:a5:c6:03:63:d7:28:80:1e:94:e2:50:b8:18:
         72:27:36:b3:d2:fb:0c:80:51:f0:20:e7:fc:c8:a9:ef:08:72:
         d2:c8:74:c1:76:cf:93:c9:c4:04:b2:14:b3:fc:50:56:15:54:
         d5:ec:c7:bd:35:51:06:4e:18:64:71:7b:2f:ee:eb:ef:21:e2:
         22:e4:6c:f2:b6:41:e3:8a:5a:bf:33:fa:16:6b:68:18:ee:8c:
         db:a6:0e:60:3b:af:e3:fa:8e:e3:35:66:2e:f0:2f:11:f2:a6:
         f0:0e:44:14:b9:4a:c0:10:90:fb:3e:41:87:64:19:4f:b5:e3:
         98:27:86:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:43:32 2025 by rpki-client