Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xaL0JAfyHJ12kPsw_YzbK_320DA.mft
File:                     xaL0JAfyHJ12kPsw_YzbK_320DA.mft (raw, json)
Hash identifier:          0T8KlvYIqXIMELf304qkNThZ0Gub2kMpVX5/ZA8tk6Y=
Subject key identifier:   50:6B:93:00:51:19:0C:97:5F:DF:D4:F6:54:AC:78:DB:35:D8:C3:3F
Authority key identifier: C5:A2:F4:24:07:F2:1C:9D:76:90:FB:30:FD:8C:DB:2B:FD:F6:D0:30
Certificate issuer:       /CN=c5a2f42407f21c9d7690fb30fd8cdb2bfdf6d030
Certificate serial:       0199FDD8D5093B27551B115E05B813B17485
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xaL0JAfyHJ12kPsw_YzbK_320DA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xaL0JAfyHJ12kPsw_YzbK_320DA.mft
Manifest number:          16FA
Signing time:             Sun 19 Oct 2025 19:01:09 +0000
Manifest this update:     Sun 19 Oct 2025 19:01:09 +0000
Manifest next update:     Mon 20 Oct 2025 19:01:09 +0000
Files and hashes:         1: FVhHxIVfuNm-pwvjTgX_cs_Hfcs.roa (hash: mY8drD0B5z14cvplqrvZqDtdowa1l5LQ8YBe8N40mz4=)
                          2: xaL0JAfyHJ12kPsw_YzbK_320DA.crl (hash: J88p28Uuh1sZ3DbC5jk7SNCUIh5uxWYyDPR/TXXyXjs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xaL0JAfyHJ12kPsw_YzbK_320DA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xaL0JAfyHJ12kPsw_YzbK_320DA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xaL0JAfyHJ12kPsw_YzbK_320DA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 19:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:d8:d5:09:3b:27:55:1b:11:5e:05:b8:13:b1:74:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5a2f42407f21c9d7690fb30fd8cdb2bfdf6d030
        Validity
            Not Before: Oct 19 19:01:09 2025 GMT
            Not After : Oct 20 19:01:09 2025 GMT
        Subject: CN=506b930051190c975fdfd4f654ac78db35d8c33f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a1:1b:5d:3e:b4:f2:e0:fa:85:ac:22:11:11:
                    91:9d:49:62:7b:b1:66:5f:c6:33:30:dc:c8:4c:56:
                    84:e0:71:ba:86:a3:dd:30:71:0d:40:3b:14:26:1e:
                    55:80:2e:5d:58:16:21:41:23:8b:8e:9b:04:4c:c2:
                    8f:3f:72:e0:4f:1e:f8:fe:eb:d6:38:9c:bd:aa:2c:
                    c4:8f:7f:92:82:e2:77:ef:21:de:e0:42:c1:f8:33:
                    02:18:0b:0e:4f:de:f9:9d:da:c9:ed:5f:61:b2:d6:
                    57:84:4b:3d:f1:8a:38:b8:a8:fa:50:44:3e:26:77:
                    cb:c9:8d:31:97:22:fa:82:b7:8b:ad:bf:32:55:11:
                    3d:24:1b:01:87:42:49:72:23:8e:c5:e4:8f:40:64:
                    c6:42:33:14:c7:7b:69:3f:e8:a4:09:d8:b5:15:cd:
                    98:0e:76:2b:8b:f9:09:18:3b:cf:f1:cf:80:3e:0a:
                    49:09:f4:fa:d5:0d:f6:cc:f9:90:1c:69:26:72:bf:
                    53:97:19:d7:97:fc:53:d4:9c:b4:d3:5a:a5:19:ac:
                    6c:e9:29:f2:77:38:9c:33:55:c5:c3:96:92:45:ef:
                    08:03:d5:89:38:71:82:f2:79:0a:fd:97:08:be:d5:
                    77:44:83:7c:69:b0:0f:c0:a3:e7:5f:6d:1b:fc:1c:
                    e1:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:6B:93:00:51:19:0C:97:5F:DF:D4:F6:54:AC:78:DB:35:D8:C3:3F
            X509v3 Authority Key Identifier:
                keyid:C5:A2:F4:24:07:F2:1C:9D:76:90:FB:30:FD:8C:DB:2B:FD:F6:D0:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xaL0JAfyHJ12kPsw_YzbK_320DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xaL0JAfyHJ12kPsw_YzbK_320DA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xaL0JAfyHJ12kPsw_YzbK_320DA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:8f:2c:8c:17:a6:0d:0f:21:32:bd:ff:06:db:b5:ca:50:03:
         79:cd:c2:b2:6e:bf:8f:67:9a:0c:3f:c0:39:2b:94:bc:81:f7:
         3f:66:be:81:e0:64:25:31:f5:a4:49:09:f6:57:10:f0:60:90:
         e3:9e:68:8b:7b:6c:ec:d2:f9:f5:19:1b:a3:e6:11:86:10:42:
         48:4a:76:87:46:5f:44:47:7f:6d:be:72:af:d0:e6:07:7a:a2:
         a6:9e:4f:96:ed:f3:4f:eb:10:8c:87:2f:0d:2c:3c:c2:fa:fc:
         35:d0:03:14:f7:e5:3b:01:24:74:b3:bd:8d:18:e8:d3:e7:b0:
         8b:da:57:59:47:60:c8:49:dc:cd:8a:82:08:7d:d9:1c:30:5e:
         11:b6:27:6c:b1:a1:a8:6b:fb:39:05:06:3d:92:af:27:d0:5a:
         fd:c6:e5:91:6c:77:6c:71:eb:9d:c1:d6:d4:dc:28:69:52:a8:
         7e:60:b5:d7:e0:5f:5a:bb:68:8c:4b:d7:3b:a1:aa:d1:35:a5:
         ac:72:b8:fd:bd:ec:e5:10:eb:b8:4b:e9:07:39:66:b2:88:a0:
         6b:1f:aa:f7:2d:89:32:68:c1:bb:e4:f5:8e:c8:36:50:df:ec:
         5e:fe:3c:90:ec:2a:f7:db:9d:28:85:85:00:cc:a1:33:ff:cb:
         9c:7e:25:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:59:56 2025 by rpki-client