Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/75a920-2a3a-4129-800e-af2ec5d8dc3c/1/l_RnToI2vdw9IyegKwq_unmlSDw.mft
File:                     l_RnToI2vdw9IyegKwq_unmlSDw.mft (raw, json)
Hash identifier:          JD+KVfeqY79ok9Pap/iiNKg5dOzOqV3tV/16AaOwSkU=
Subject key identifier:   98:A1:F8:CE:BE:31:75:43:24:6E:11:47:23:FC:60:49:95:4B:D4:FD
Authority key identifier: 97:F4:67:4E:82:36:BD:DC:3D:23:27:A0:2B:0A:BF:BA:79:A5:48:3C
Certificate issuer:       /CN=97f4674e8236bddc3d2327a02b0abfba79a5483c
Certificate serial:       0199FAA0C953138E1CB036EEB1F1BCDF7A76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l_RnToI2vdw9IyegKwq_unmlSDw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/75a920-2a3a-4129-800e-af2ec5d8dc3c/1/l_RnToI2vdw9IyegKwq_unmlSDw.mft
Manifest number:          16E0
Signing time:             Sun 19 Oct 2025 04:01:05 +0000
Manifest this update:     Sun 19 Oct 2025 04:01:05 +0000
Manifest next update:     Mon 20 Oct 2025 04:01:05 +0000
Files and hashes:         1: QJQeMPlg9WGfXq72AZiCSewuDI8.roa (hash: r0Rvs4MlW/m7D+4R19PKkzv3HipqfF3UT75d6mitfBY=)
                          2: l_RnToI2vdw9IyegKwq_unmlSDw.crl (hash: VFhmZFXtsVuWH2JES7yWgu/7kMPfE6qQpcF+LqPFmgw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/75a920-2a3a-4129-800e-af2ec5d8dc3c/1/l_RnToI2vdw9IyegKwq_unmlSDw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/75a920-2a3a-4129-800e-af2ec5d8dc3c/1/l_RnToI2vdw9IyegKwq_unmlSDw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l_RnToI2vdw9IyegKwq_unmlSDw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 04:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:a0:c9:53:13:8e:1c:b0:36:ee:b1:f1:bc:df:7a:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97f4674e8236bddc3d2327a02b0abfba79a5483c
        Validity
            Not Before: Oct 19 04:01:05 2025 GMT
            Not After : Oct 20 04:01:05 2025 GMT
        Subject: CN=98a1f8cebe317543246e114723fc6049954bd4fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:fb:fc:25:1a:2a:5c:61:d6:de:1b:3e:cf:d8:
                    2f:a5:37:36:92:b9:c2:2e:3d:54:89:91:7a:05:92:
                    e7:32:56:2e:f9:f4:e7:de:6c:bb:6c:b1:f0:44:54:
                    9a:8e:f9:b4:03:42:c0:97:c0:61:7d:94:2e:8a:a1:
                    e7:6f:26:f4:c3:c4:11:d0:23:9b:39:56:87:81:52:
                    91:c7:1f:ee:2f:bb:b0:3c:c6:5f:78:af:3b:1c:70:
                    e6:5f:a5:aa:a3:7d:db:39:b5:b2:97:35:bd:06:c8:
                    e7:90:ae:a0:70:4d:65:22:26:36:a9:89:64:48:63:
                    cb:4f:ad:b4:96:8e:65:de:e5:19:8d:1e:d8:79:97:
                    f1:4d:5e:4b:c7:b0:25:12:ad:82:3d:09:e6:5f:a4:
                    e7:cb:97:c1:d1:56:f0:2d:a9:e8:02:fc:ac:96:e9:
                    76:f5:57:93:a0:11:b0:e5:1e:95:53:1c:d4:c2:64:
                    0c:8e:82:2c:b7:b0:f5:ef:a1:6f:03:83:05:f5:19:
                    ff:3c:ee:2b:d0:39:4e:3f:46:b7:90:18:0a:6f:f0:
                    76:bc:26:18:f2:2a:67:31:b7:c4:d3:a5:ff:65:93:
                    0e:f6:d4:19:e2:df:3c:bf:74:f4:cc:5a:3a:63:c1:
                    88:51:4a:c1:13:38:17:6f:7d:c7:0c:6e:84:18:e1:
                    35:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:A1:F8:CE:BE:31:75:43:24:6E:11:47:23:FC:60:49:95:4B:D4:FD
            X509v3 Authority Key Identifier:
                keyid:97:F4:67:4E:82:36:BD:DC:3D:23:27:A0:2B:0A:BF:BA:79:A5:48:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l_RnToI2vdw9IyegKwq_unmlSDw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/75a920-2a3a-4129-800e-af2ec5d8dc3c/1/l_RnToI2vdw9IyegKwq_unmlSDw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/75a920-2a3a-4129-800e-af2ec5d8dc3c/1/l_RnToI2vdw9IyegKwq_unmlSDw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:f8:1d:2c:01:39:e2:dc:24:67:ed:69:5a:a4:e5:e4:b2:88:
         b5:24:d5:7e:21:c8:43:e3:f5:ce:6e:fe:5b:57:7b:b7:e2:41:
         7d:67:5a:ab:a7:8c:ce:d4:73:39:4a:42:99:3e:95:ac:b5:13:
         e4:18:de:38:dc:01:9d:c3:ba:de:2a:3a:d9:e8:11:80:6c:8c:
         a6:a9:6b:0e:5c:bc:f4:c8:f9:6b:ad:cc:27:01:22:3a:7e:7d:
         c4:b8:6c:45:32:43:d9:7a:27:c4:3a:61:63:c0:38:1e:cb:4f:
         dc:85:79:16:ea:7c:02:c4:07:57:3e:a9:f8:b8:32:29:d1:ad:
         01:36:f3:38:af:06:6c:87:19:dd:f0:c1:d7:84:2b:b9:f3:09:
         ab:3d:77:1d:09:bf:2d:2c:8e:72:43:20:a9:f2:ce:ff:8e:3b:
         8a:9e:70:40:2b:01:ce:29:f1:33:ad:7a:9d:1e:af:fc:13:7c:
         91:73:97:8d:ea:cf:8b:c4:f8:16:f9:e1:95:a1:54:82:43:82:
         95:2b:8b:4b:77:9a:88:fe:47:7a:17:56:86:95:c9:cc:a4:b5:
         f4:bd:b9:ed:62:de:bc:80:86:84:a4:73:e0:50:d6:f7:87:b4:
         44:03:a2:b0:1c:2b:b1:81:d0:43:59:92:4e:2b:54:8e:d9:25:
         ea:c0:3a:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:07:51 2025 by rpki-client