Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/ad46a5-f900-4ad1-b229-e18435e432dc/1/6wkUma3HabD7qf7TKEVDp0JcI1E.mft
File:                     6wkUma3HabD7qf7TKEVDp0JcI1E.mft (raw, json)
Hash identifier:          wtVgA5e0otxIwb5IErgzV08VHQOFmWXdCpW2AoQW37A=
Subject key identifier:   1D:CE:C7:98:36:C9:86:74:47:94:16:D1:2E:0D:AD:1E:88:B5:FD:B7
Authority key identifier: EB:09:14:99:AD:C7:69:B0:FB:A9:FE:D3:28:45:43:A7:42:5C:23:51
Certificate issuer:       /CN=eb091499adc769b0fba9fed3284543a7425c2351
Certificate serial:       0199FBEB9461CB4A53E17FE6529C1EA170B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6wkUma3HabD7qf7TKEVDp0JcI1E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/ad46a5-f900-4ad1-b229-e18435e432dc/1/6wkUma3HabD7qf7TKEVDp0JcI1E.mft
Manifest number:          16D2
Signing time:             Sun 19 Oct 2025 10:02:24 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:24 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:24 +0000
Files and hashes:         1: 6wkUma3HabD7qf7TKEVDp0JcI1E.crl (hash: FFLhUHqxijwhdH5yNdLpUBZKN9pXWnRmyWee+mQiqDU=)
                          2: GAIwhqy9s--sK4fAUb5ZmX0AYwU.roa (hash: Ns47X0wI0O3MuVbdsHwm7ba7lckhv6ZFSEeB9gRrT7M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/ad46a5-f900-4ad1-b229-e18435e432dc/1/6wkUma3HabD7qf7TKEVDp0JcI1E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/ad46a5-f900-4ad1-b229-e18435e432dc/1/6wkUma3HabD7qf7TKEVDp0JcI1E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6wkUma3HabD7qf7TKEVDp0JcI1E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 10:02:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:94:61:cb:4a:53:e1:7f:e6:52:9c:1e:a1:70:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb091499adc769b0fba9fed3284543a7425c2351
        Validity
            Not Before: Oct 19 10:02:24 2025 GMT
            Not After : Oct 20 10:02:24 2025 GMT
        Subject: CN=1dcec79836c98674479416d12e0dad1e88b5fdb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:3e:ac:f1:de:9f:29:12:b4:c7:a2:be:0b:31:
                    70:a8:0e:f6:b6:7e:0a:e5:c8:81:56:86:f5:13:a8:
                    b6:c7:7c:94:a5:6c:28:31:df:30:0d:5e:fc:a6:e3:
                    46:c4:27:3a:f8:18:51:16:bc:d2:e4:2b:8b:5f:71:
                    b9:45:5b:68:32:a6:77:0d:bd:69:b6:fe:56:a9:dc:
                    95:90:ea:33:96:20:bc:90:e2:6f:14:85:47:8a:29:
                    58:34:76:3b:f2:9a:47:a3:9f:a3:1d:be:1d:b2:88:
                    9b:bc:5c:40:a4:31:36:ea:7c:b5:7f:2f:41:50:ef:
                    55:eb:58:42:e7:a8:8d:ba:1d:23:37:03:76:97:58:
                    b8:73:47:3b:24:bf:d0:09:97:a0:db:f4:b1:56:e1:
                    51:5d:7c:c1:b3:f4:60:02:6b:e9:f5:e0:4c:84:ba:
                    cf:79:18:18:91:f5:78:01:62:9c:6e:90:30:ff:2f:
                    76:c9:b7:f4:77:8c:d4:6e:1d:bc:81:d9:37:2d:3c:
                    44:7e:05:d3:87:b4:2d:de:0f:8a:cf:43:11:40:17:
                    90:65:c7:e4:ed:e0:cb:8e:4e:b5:e8:9b:71:67:99:
                    8c:05:40:60:66:5e:40:ee:a0:70:60:bc:b4:e7:62:
                    34:b0:d2:41:a5:dc:27:ec:00:92:59:39:9d:2a:ee:
                    df:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:CE:C7:98:36:C9:86:74:47:94:16:D1:2E:0D:AD:1E:88:B5:FD:B7
            X509v3 Authority Key Identifier:
                keyid:EB:09:14:99:AD:C7:69:B0:FB:A9:FE:D3:28:45:43:A7:42:5C:23:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6wkUma3HabD7qf7TKEVDp0JcI1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ad46a5-f900-4ad1-b229-e18435e432dc/1/6wkUma3HabD7qf7TKEVDp0JcI1E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ad46a5-f900-4ad1-b229-e18435e432dc/1/6wkUma3HabD7qf7TKEVDp0JcI1E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:3d:44:37:87:f3:96:56:0d:b0:68:4b:02:d9:dc:63:61:b0:
         69:75:30:46:0c:1a:8d:ce:99:aa:bd:80:b4:62:b2:94:8f:0f:
         86:e9:b9:8d:b8:17:c8:eb:83:8c:a1:45:06:a5:3b:43:b6:dd:
         70:7d:8a:3c:9a:fd:d1:f3:ae:51:06:50:62:ca:b7:03:6c:97:
         35:4e:3b:c2:d8:a5:81:5b:e4:6e:f8:f8:d1:08:7f:00:ca:58:
         c6:60:ed:4d:b2:0b:71:83:80:f7:e9:94:22:88:68:39:8b:0b:
         77:e8:c3:91:e3:42:fd:c8:e3:af:f4:cc:4f:40:df:19:a8:0c:
         01:12:ec:39:e2:32:66:c1:5e:03:cf:57:e9:79:f7:e1:33:bf:
         48:e3:dd:73:0d:a8:7b:89:1b:64:a2:e6:58:45:b5:97:fa:15:
         a4:bb:26:c0:cc:92:f7:05:25:ef:c0:cb:a3:a2:05:f6:53:87:
         4c:94:d5:91:3b:ce:fc:5f:f1:9c:8f:1d:d7:8d:1b:fb:dc:ab:
         36:f5:4d:77:7e:0e:25:8b:ee:94:48:78:51:b5:45:b4:36:ed:
         65:f0:4b:33:9d:5d:69:3c:2e:be:b5:ef:a8:a1:3b:77:7d:77:
         c8:50:e5:66:7d:24:fe:7a:ed:9f:91:51:d8:ae:58:2f:f6:d6:
         57:0a:79:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:06:47 2025 by rpki-client