Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.mft
File:                     EHcd196iLjX9rxm1G4OfQ3IScLo.mft (raw, json)
Hash identifier:          3jIAkBkZvlthcRVNpzYryaSg25GMY1tOPgn9/Hmyb6s=
Subject key identifier:   F2:15:39:39:12:11:97:23:0D:4B:A8:00:2D:9B:A5:97:57:36:AE:9B
Authority key identifier: 10:77:1D:D7:DE:A2:2E:35:FD:AF:19:B5:1B:83:9F:43:72:12:70:BA
Certificate issuer:       /CN=10771dd7dea22e35fdaf19b51b839f43721270ba
Certificate serial:       0199FCC6155609CFEFF8BD04DCA11BE39AB8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EHcd196iLjX9rxm1G4OfQ3IScLo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.mft
Manifest number:          16E6
Signing time:             Sun 19 Oct 2025 14:01:03 +0000
Manifest this update:     Sun 19 Oct 2025 14:01:03 +0000
Manifest next update:     Mon 20 Oct 2025 14:01:03 +0000
Files and hashes:         1: 2W0mVYMtUj2Armlmk_FP_3q5ESY.roa (hash: w5Ej5+Qvny/iMXD/R+qRLBIbP+3L75HhJ+B0EUJmp8o=)
                          2: EHcd196iLjX9rxm1G4OfQ3IScLo.crl (hash: bZwaJAJyHkJjKWn7AZO/F3VhrKp//ZZrvDcjNFK3hZY=)
                          3: Lh4ykTJQfzCAQTP8wtaXdQr_9Fk.roa (hash: QG3UN2HjFfGKFrQvhtxeeeXreoHXBK1yS6QHGjO5Etg=)
                          4: VbGX6V55_AUgh-706a5pCl3f9Kg.roa (hash: IviXGlaLtNBbBi+wGZOwysY/nW7XfiJY8zoOrjfnvG8=)
                          5: efQyVpTfdzTLxoeY6EZRaCPb9ME.roa (hash: osXy82VNbyBuJJhgosvmVAstSYEdkdV+Zv1r3Rp3SjY=)
                          6: vPKCfihyP4aceHhSVf5O5t7dhks.roa (hash: BSL3nS6RO+KWTxuVXzJtjXxdHmqwKWboA1DQ+yINRvk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EHcd196iLjX9rxm1G4OfQ3IScLo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:c6:15:56:09:cf:ef:f8:bd:04:dc:a1:1b:e3:9a:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10771dd7dea22e35fdaf19b51b839f43721270ba
        Validity
            Not Before: Oct 19 14:01:03 2025 GMT
            Not After : Oct 20 14:01:03 2025 GMT
        Subject: CN=f2153939121197230d4ba8002d9ba5975736ae9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:fa:e6:d2:6f:a1:e7:22:21:7a:2e:8d:b8:0d:
                    ad:1e:b4:73:8c:06:cb:59:52:65:4e:e1:0e:0d:24:
                    cb:3a:e2:80:9c:e2:dc:57:70:21:14:a5:53:5c:54:
                    dd:6d:87:c3:6b:4a:9b:59:55:4c:bf:8a:7a:e8:a1:
                    a6:c2:25:52:d5:1b:90:2d:12:b6:49:a7:01:88:9e:
                    c0:97:62:fa:57:cc:55:be:4a:b4:dd:48:f1:90:ae:
                    35:13:95:4e:24:5e:5d:1f:7b:04:60:ca:a4:32:54:
                    b6:90:46:5a:4e:32:d3:83:3d:bc:a3:c5:2b:73:3e:
                    db:57:01:a2:ba:72:da:08:19:bd:82:6f:71:5b:99:
                    51:8f:81:df:e0:a7:a3:e9:b1:4d:16:59:c9:09:91:
                    75:1d:2a:ed:7a:59:03:a8:6a:c2:a3:18:28:3c:54:
                    fe:d0:91:ac:39:77:36:37:68:b8:30:7e:a4:54:04:
                    81:43:d9:40:69:c2:3a:4f:c0:82:43:43:80:59:cc:
                    e6:eb:4c:5d:2b:7d:a1:8c:e1:c1:b2:cc:a7:43:2e:
                    8c:e5:c1:19:27:c7:0b:80:09:1a:d2:62:bb:cd:ab:
                    b6:64:2e:09:9c:56:dc:d4:3f:d9:2b:fc:49:b8:cc:
                    62:88:2e:b7:9e:40:52:ba:e5:14:36:77:b6:3c:5e:
                    0a:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:15:39:39:12:11:97:23:0D:4B:A8:00:2D:9B:A5:97:57:36:AE:9B
            X509v3 Authority Key Identifier:
                keyid:10:77:1D:D7:DE:A2:2E:35:FD:AF:19:B5:1B:83:9F:43:72:12:70:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHcd196iLjX9rxm1G4OfQ3IScLo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:47:98:8e:56:73:dd:fc:0b:c6:a4:7e:40:08:ea:ff:68:32:
         94:b2:40:1e:26:42:18:cd:39:7b:e1:fa:ba:4b:49:c6:d4:a7:
         90:4f:7f:04:55:95:3e:d5:f4:d5:8a:d2:20:4d:ad:3f:fe:b4:
         98:69:95:e2:ba:ee:83:3a:87:4b:8c:d7:92:a5:5a:4a:f7:02:
         80:67:ff:de:cc:b6:95:a5:55:56:53:b9:c4:d7:b3:79:11:53:
         96:54:b7:9a:1b:5f:04:60:82:e7:84:9c:5f:d4:0e:c8:2f:33:
         24:de:8a:f3:81:bc:72:de:08:cb:c8:94:aa:ba:c7:35:5f:8a:
         a7:ab:2f:b4:cc:11:0c:c3:18:a8:7d:45:8b:a1:a3:05:59:ea:
         36:11:b2:c3:ec:1e:e4:7a:30:54:54:14:2f:76:e9:c3:65:f6:
         01:1e:9a:aa:74:f3:28:9f:56:48:63:69:e7:49:e3:c7:03:88:
         bf:06:be:56:db:96:7f:fd:6e:a6:93:30:a6:ac:8c:51:6e:b0:
         0d:0e:ca:83:dc:12:3e:ad:98:1e:f2:e6:86:7a:b0:84:f6:d8:
         23:c1:0d:7a:80:f3:33:14:ba:4e:ab:e7:b3:b6:07:5e:47:68:
         28:b2:13:22:69:19:ac:f7:76:2c:16:eb:e5:5c:1b:18:63:52:
         65:d7:d5:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:00:49 2025 by rpki-client