Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/afa091-b16f-4527-8b00-1ddac2b08404/1/v5gt73eibXzBlHOzpAZNzFIX5HE.mft
File:                     v5gt73eibXzBlHOzpAZNzFIX5HE.mft (raw, json)
Hash identifier:          s4lXDaOqX0wukjoLQwgL5VN96ilTMS/sklqDU7Do2Rk=
Subject key identifier:   81:C1:D0:B5:0C:07:9E:F9:64:59:A5:F3:98:33:B0:E9:B1:92:1F:62
Authority key identifier: BF:98:2D:EF:77:A2:6D:7C:C1:94:73:B3:A4:06:4D:CC:52:17:E4:71
Certificate issuer:       /CN=bf982def77a26d7cc19473b3a4064dcc5217e471
Certificate serial:       0199FCC6923DB666588579F7423704AF3747
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v5gt73eibXzBlHOzpAZNzFIX5HE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/afa091-b16f-4527-8b00-1ddac2b08404/1/v5gt73eibXzBlHOzpAZNzFIX5HE.mft
Manifest number:          16E3
Signing time:             Sun 19 Oct 2025 14:01:35 +0000
Manifest this update:     Sun 19 Oct 2025 14:01:35 +0000
Manifest next update:     Mon 20 Oct 2025 14:01:35 +0000
Files and hashes:         1: JoXkjArh1eQOEzJmDg5eyKhlAZU.roa (hash: IpnTumi25Jm35YnmbE0mTeFwDsMDbPll4BvRMHinz6I=)
                          2: v5gt73eibXzBlHOzpAZNzFIX5HE.crl (hash: krhuoUuBMzjZ9152MpsT1rfscv8xbvX832zG0X3PSYw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/afa091-b16f-4527-8b00-1ddac2b08404/1/v5gt73eibXzBlHOzpAZNzFIX5HE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/afa091-b16f-4527-8b00-1ddac2b08404/1/v5gt73eibXzBlHOzpAZNzFIX5HE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v5gt73eibXzBlHOzpAZNzFIX5HE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 14:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:c6:92:3d:b6:66:58:85:79:f7:42:37:04:af:37:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf982def77a26d7cc19473b3a4064dcc5217e471
        Validity
            Not Before: Oct 19 14:01:35 2025 GMT
            Not After : Oct 20 14:01:35 2025 GMT
        Subject: CN=81c1d0b50c079ef96459a5f39833b0e9b1921f62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b4:a7:79:41:d8:7c:a6:29:47:8e:e0:dd:72:
                    f5:51:8b:22:66:8e:3d:9f:16:c1:09:14:4b:c7:cf:
                    b9:ef:de:8f:ee:d2:80:0d:ab:34:95:d9:72:9a:77:
                    c8:16:43:0e:b9:ae:9e:71:91:28:a1:a4:4c:02:fe:
                    60:5c:ed:58:5f:ee:20:53:54:a7:6a:f6:d3:b5:c1:
                    99:db:c2:a7:63:d2:59:50:e8:6b:80:ea:48:aa:f0:
                    d1:c7:eb:68:75:aa:b9:8b:eb:aa:60:21:b6:c7:37:
                    2f:be:30:42:4d:69:6a:81:54:b1:9d:98:d2:98:3c:
                    89:56:a5:a3:2d:00:b1:70:0f:4d:4d:61:e9:93:93:
                    96:65:65:79:2f:78:6b:79:6c:3b:f4:8e:73:f2:b1:
                    6c:f4:0d:a7:88:84:86:ce:b1:f9:ca:cc:62:87:1e:
                    2d:7f:1c:41:ea:c8:7a:05:77:08:9b:6b:22:f0:f3:
                    96:e6:96:57:1c:30:3b:16:c4:e7:42:9b:db:79:24:
                    2c:36:5f:49:c0:4d:da:3b:92:c1:b8:45:8c:e6:23:
                    00:07:01:c8:c1:61:44:e6:7d:ff:f0:fd:69:b1:e5:
                    93:43:ff:43:36:8c:8e:ee:4c:6c:2f:f4:ff:be:53:
                    2b:88:97:47:e3:f9:36:4a:92:3e:fe:e3:64:49:4a:
                    12:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:C1:D0:B5:0C:07:9E:F9:64:59:A5:F3:98:33:B0:E9:B1:92:1F:62
            X509v3 Authority Key Identifier:
                keyid:BF:98:2D:EF:77:A2:6D:7C:C1:94:73:B3:A4:06:4D:CC:52:17:E4:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v5gt73eibXzBlHOzpAZNzFIX5HE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/afa091-b16f-4527-8b00-1ddac2b08404/1/v5gt73eibXzBlHOzpAZNzFIX5HE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/afa091-b16f-4527-8b00-1ddac2b08404/1/v5gt73eibXzBlHOzpAZNzFIX5HE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:8f:f9:bf:7e:aa:46:74:5c:9b:73:0b:bc:c2:65:0c:a1:f0:
         4d:64:7f:a0:aa:25:52:1f:ed:48:4d:c8:ec:72:00:fd:0e:b4:
         c5:82:41:8d:48:e0:ea:1b:78:4f:82:1b:29:4b:71:66:97:44:
         f7:97:26:a5:40:6c:3c:ab:ea:10:3d:aa:bb:18:9b:9c:19:d5:
         26:54:90:f1:6b:4b:e4:74:36:aa:c5:9d:3d:d9:b1:b5:68:7b:
         75:91:fa:e0:e5:09:0f:cc:ed:63:0f:8f:00:fc:bf:c5:82:24:
         7f:4e:62:12:d5:19:2a:d0:6f:2f:e8:2a:8e:37:68:54:44:9b:
         66:06:ff:2d:8d:d3:a9:03:e9:97:63:7a:b2:1e:93:13:31:e3:
         08:2f:3a:ff:28:29:c3:0b:af:6f:38:ed:51:18:10:e4:28:56:
         43:3f:15:86:e3:24:50:e3:6a:e6:5b:d0:ae:f7:2a:d8:d9:bc:
         4d:3a:63:0d:b5:6d:a0:04:eb:b3:5a:4e:b1:4f:82:70:d8:92:
         32:79:b1:da:a0:ef:d8:39:a4:64:db:ff:25:02:89:4f:b2:c9:
         a4:87:60:e0:a6:df:30:6c:ab:0e:33:51:af:c4:7c:87:9f:dd:
         1f:b8:91:86:29:96:b0:d5:1e:be:f1:37:c5:23:38:a7:71:19:
         82:8b:ee:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:36:30 2025 by rpki-client