Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.mft
File:                     3V8ufMLGh_WMDR9hMrstz984y2Q.mft (raw, json)
Hash identifier:          rDPYjeEBHR9eBH3fw3hpULsHea8VaFV4e0w/eRvP/2w=
Subject key identifier:   E5:AE:94:E3:5B:02:94:0E:9E:BF:83:CC:67:09:46:9E:38:78:C8:A7
Authority key identifier: DD:5F:2E:7C:C2:C6:87:F5:8C:0D:1F:61:32:BB:2D:CF:DF:38:CB:64
Certificate issuer:       /CN=dd5f2e7cc2c687f58c0d1f6132bb2dcfdf38cb64
Certificate serial:       0199FDD9510814B757A9958E97348317F46F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3V8ufMLGh_WMDR9hMrstz984y2Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.mft
Manifest number:          16F4
Signing time:             Sun 19 Oct 2025 19:01:41 +0000
Manifest this update:     Sun 19 Oct 2025 19:01:41 +0000
Manifest next update:     Mon 20 Oct 2025 19:01:41 +0000
Files and hashes:         1: 3V8ufMLGh_WMDR9hMrstz984y2Q.crl (hash: Y5OJrNhlLP1o7v+r/YOs1nDmqXUwSWWFbI6F6292kxg=)
                          2: I3GFCz8gt6Rki8DJxRT45IEltuo.roa (hash: uBBouPhKhyaXIv9GSGFn2zrE6uv7a/jKMDEUQeG9Dfo=)
                          3: RoNUSsRbSgnW76cSNeAr425YYHY.roa (hash: ty/WAAmbUm3G9276dnnVRYAsJCuw7HHC84siWPb6a6o=)
                          4: j06EmkksF4YrV0BvXtZ5BQd7X_0.roa (hash: W1w1cQpGhDndwAuyI1OFa9FFiGMVh7oMpQVYkrYTonk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3V8ufMLGh_WMDR9hMrstz984y2Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:d9:51:08:14:b7:57:a9:95:8e:97:34:83:17:f4:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd5f2e7cc2c687f58c0d1f6132bb2dcfdf38cb64
        Validity
            Not Before: Oct 19 19:01:41 2025 GMT
            Not After : Oct 20 19:01:41 2025 GMT
        Subject: CN=e5ae94e35b02940e9ebf83cc6709469e3878c8a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:dd:e3:86:5c:b4:39:ee:fd:d3:d2:cf:49:01:
                    33:e8:a1:90:8f:20:18:b5:ba:83:54:bb:dd:21:8b:
                    56:a9:47:35:cb:b1:3c:c0:7c:f8:f7:34:5b:e5:1a:
                    e5:c8:9a:d2:e7:5b:4d:59:57:6c:64:22:7a:2b:d8:
                    77:7f:30:4e:6c:4b:92:8e:ee:ce:8e:81:5a:3c:8d:
                    fa:36:6d:fe:fe:df:8c:dd:b1:2f:fe:c5:bb:4e:fb:
                    83:70:26:b0:14:cc:f0:22:3c:5d:4c:56:1c:66:f2:
                    07:d7:da:42:9a:38:58:41:8a:ce:3d:66:76:27:76:
                    e3:a6:13:66:ec:d9:49:48:15:dd:f4:7d:32:c2:62:
                    aa:13:05:d4:ea:ce:5f:8f:74:bb:76:bf:58:c8:cc:
                    3c:a5:c7:94:e9:d5:17:90:b0:d5:71:1e:43:7c:02:
                    90:4e:59:4a:58:c5:a8:99:a8:23:f9:7a:14:48:41:
                    ca:53:b5:6c:a1:65:41:7e:92:18:ef:5c:56:f7:7c:
                    e1:82:31:4f:37:ad:ed:5c:4d:19:4f:f8:6f:3d:26:
                    ab:64:b4:3f:bc:8f:5a:2a:6d:5f:69:8f:1b:7a:ff:
                    d0:e1:bc:b0:45:68:71:78:18:2c:05:e3:a9:9a:06:
                    c4:72:21:ed:9b:1f:c2:de:60:ec:27:7f:a4:ca:69:
                    e0:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:AE:94:E3:5B:02:94:0E:9E:BF:83:CC:67:09:46:9E:38:78:C8:A7
            X509v3 Authority Key Identifier:
                keyid:DD:5F:2E:7C:C2:C6:87:F5:8C:0D:1F:61:32:BB:2D:CF:DF:38:CB:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3V8ufMLGh_WMDR9hMrstz984y2Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:7c:f7:61:e9:e4:4b:7b:b9:08:dd:52:66:f9:1d:96:c7:e0:
         6b:4e:32:6c:1d:d6:67:b4:6b:14:20:42:d5:8e:e4:49:87:8c:
         50:25:04:d6:76:83:e3:0a:51:39:29:99:4c:49:0c:4b:9b:37:
         c6:eb:ee:be:cf:d9:c0:43:cc:11:d7:fb:d1:1b:b2:0a:6a:83:
         8b:19:4d:d0:aa:9b:9c:21:dd:3a:47:5f:36:5f:05:f3:a2:61:
         21:27:22:cc:8e:7a:ce:12:d2:eb:cb:71:4a:7c:c2:57:ae:90:
         e7:d4:4e:59:20:d8:dc:e0:86:bd:dc:97:ae:92:6e:ba:91:99:
         ac:cf:71:6e:e1:17:4c:6d:15:a5:fb:55:1d:25:61:17:ac:25:
         e7:d2:a3:13:e0:c1:22:5b:20:9e:8d:b3:ca:a2:7f:9d:42:09:
         ae:37:b3:0a:3b:b4:ba:7e:98:18:65:7f:d1:fc:50:11:62:db:
         47:be:a3:37:eb:5b:9a:94:5e:31:64:f9:dc:0f:49:e7:e6:4d:
         ca:b1:67:ec:fe:a9:b9:64:d1:c4:1b:c4:a6:75:5b:be:45:39:
         6b:5f:37:6e:fe:7e:93:46:db:1e:c6:51:3e:da:ba:59:7d:cf:
         37:f7:2a:ad:e1:5f:4c:21:76:87:29:8e:6b:5b:01:68:3b:0d:
         5c:e9:9b:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:30:31 2025 by rpki-client