Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/188d75-2bf2-48f1-91f7-c48ca27a9c01/1/mPngwgrNyPqnRBoIQ_-KAfPZ28U.mft
File:                     mPngwgrNyPqnRBoIQ_-KAfPZ28U.mft (raw, json)
Hash identifier:          p2cWwUtDwitMRiwMY9QmythmInMC9TfNY2QfOwDjYc0=
Subject key identifier:   2F:25:63:8D:FA:78:DC:AE:34:B6:84:B2:58:7C:16:A0:23:97:17:98
Authority key identifier: 98:F9:E0:C2:0A:CD:C8:FA:A7:44:1A:08:43:FF:8A:01:F3:D9:DB:C5
Certificate issuer:       /CN=98f9e0c20acdc8faa7441a0843ff8a01f3d9dbc5
Certificate serial:       0199FC58869DCAD7864DF5936033B6B02E79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mPngwgrNyPqnRBoIQ_-KAfPZ28U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/188d75-2bf2-48f1-91f7-c48ca27a9c01/1/mPngwgrNyPqnRBoIQ_-KAfPZ28U.mft
Manifest number:          16E3
Signing time:             Sun 19 Oct 2025 12:01:24 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:24 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:24 +0000
Files and hashes:         1: 6VEj8hFX83dP4cTfcpFmDeB3WK4.roa (hash: 9iNEtr8XsCFGn75dg2M+2IpdUdlrA9H+OLDn6Iw/O78=)
                          2: mPngwgrNyPqnRBoIQ_-KAfPZ28U.crl (hash: XgCl5XMmmSP0QS5Iec5qIQclTF2DACZMzXU28NwQwnw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/188d75-2bf2-48f1-91f7-c48ca27a9c01/1/mPngwgrNyPqnRBoIQ_-KAfPZ28U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/188d75-2bf2-48f1-91f7-c48ca27a9c01/1/mPngwgrNyPqnRBoIQ_-KAfPZ28U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mPngwgrNyPqnRBoIQ_-KAfPZ28U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:58:86:9d:ca:d7:86:4d:f5:93:60:33:b6:b0:2e:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98f9e0c20acdc8faa7441a0843ff8a01f3d9dbc5
        Validity
            Not Before: Oct 19 12:01:24 2025 GMT
            Not After : Oct 20 12:01:24 2025 GMT
        Subject: CN=2f25638dfa78dcae34b684b2587c16a023971798
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:0e:94:16:8d:60:6a:c8:7f:65:59:92:0b:f7:
                    ea:11:8f:de:dc:f6:0d:34:76:65:b5:6d:f7:d6:9b:
                    58:9e:13:0f:ba:c7:b2:aa:21:38:2c:f3:ce:bf:bf:
                    67:e0:1c:11:bb:9e:ad:58:16:40:6c:76:35:29:e3:
                    61:fc:62:a4:d6:8c:be:3d:76:2e:59:ca:4d:41:b1:
                    14:ae:37:4f:11:c5:d2:76:c7:57:3a:f8:0a:50:cc:
                    19:36:90:03:c9:ec:de:a6:1b:66:29:a3:c4:9e:98:
                    43:94:3c:12:c4:cc:e3:07:53:2a:cd:06:77:1e:cb:
                    ce:9c:d9:66:db:24:bf:bb:32:3d:b7:0d:dd:3b:00:
                    75:48:93:a7:af:08:c8:c1:1c:18:c6:e8:4a:f8:9b:
                    5c:af:b3:7e:4b:92:6b:71:57:56:e7:ac:ec:3a:7b:
                    5b:63:15:cf:01:b8:4a:e2:8f:4d:6f:d6:94:cc:cc:
                    6e:4e:94:e3:54:0d:8b:66:40:a5:bb:4e:45:2b:94:
                    33:38:85:f1:0b:b1:11:5b:99:ca:ae:85:2d:95:d5:
                    1d:79:56:93:4e:59:f0:bd:d6:a9:c3:46:8e:77:4d:
                    ea:19:92:c0:c8:eb:be:bc:9d:e1:08:99:43:52:7f:
                    c1:d2:b5:b6:93:10:b4:59:45:da:17:29:f8:ce:4e:
                    bd:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:25:63:8D:FA:78:DC:AE:34:B6:84:B2:58:7C:16:A0:23:97:17:98
            X509v3 Authority Key Identifier:
                keyid:98:F9:E0:C2:0A:CD:C8:FA:A7:44:1A:08:43:FF:8A:01:F3:D9:DB:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mPngwgrNyPqnRBoIQ_-KAfPZ28U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/188d75-2bf2-48f1-91f7-c48ca27a9c01/1/mPngwgrNyPqnRBoIQ_-KAfPZ28U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/188d75-2bf2-48f1-91f7-c48ca27a9c01/1/mPngwgrNyPqnRBoIQ_-KAfPZ28U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:89:9f:4a:13:ad:ad:c9:d1:5b:f8:e8:2b:9d:4f:8a:57:34:
         60:03:b2:59:be:e9:4f:e9:60:26:8a:52:25:82:ba:a7:b9:d7:
         cf:d9:35:6e:1e:75:7c:d0:88:20:c3:5b:5b:a2:d8:9e:13:5a:
         cb:5a:f7:6c:21:47:5b:61:2c:0e:4b:45:b2:83:ae:e4:a5:ca:
         38:54:cd:55:c7:a2:96:34:99:81:58:eb:51:d4:8e:84:b4:5f:
         93:59:c2:16:ce:c2:49:d7:8c:66:c4:b8:3f:49:4a:a1:64:c1:
         82:28:eb:9e:d2:f7:24:5b:3a:0c:1f:4a:c0:c1:37:13:04:9b:
         2d:b5:80:dc:9a:43:e9:0d:ca:35:71:15:dd:ee:e4:1d:f0:a9:
         52:0a:92:32:33:fa:b0:e4:a5:37:97:24:71:95:c3:57:ca:20:
         f8:a7:30:a4:7c:6e:8d:a3:59:48:42:16:fc:54:c5:0d:da:32:
         a3:60:38:4b:df:1a:46:20:b4:6f:f0:b4:91:4c:09:e9:94:e0:
         36:9a:af:ee:a0:41:3d:78:4b:7a:0a:ee:de:a9:30:09:b9:41:
         31:9e:2f:46:bb:1f:33:3d:b6:2c:76:f8:8d:6a:8f:32:57:b3:
         f3:c0:c6:28:d9:f9:db:46:7a:bc:e9:c7:8f:46:47:62:aa:ed:
         85:9a:2a:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:35:29 2025 by rpki-client