Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.mft
File:                     s3SeobmXm_8s0wZpSPg13VTO3sA.mft (raw, json)
Hash identifier:          im/eMUZp9vVG3b0EuvNF84y7/2taJkLTjvcc835pVqA=
Subject key identifier:   69:39:DF:25:FD:2E:38:F9:4F:96:07:43:72:7D:5A:55:E6:9F:2D:73
Authority key identifier: B3:74:9E:A1:B9:97:9B:FF:2C:D3:06:69:48:F8:35:DD:54:CE:DE:C0
Certificate issuer:       /CN=b3749ea1b9979bff2cd3066948f835dd54cedec0
Certificate serial:       0199FBEB7D0D9887F890B73B581D7AD8018B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s3SeobmXm_8s0wZpSPg13VTO3sA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.mft
Manifest number:          16E5
Signing time:             Sun 19 Oct 2025 10:02:18 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:18 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:18 +0000
Files and hashes:         1: JlKwrg5m2lqERiKY6JmlhVBin6Y.roa (hash: BkRh9N3Osfkv0XYuGUi4VGfe9yFTNu672Q4bahAacS8=)
                          2: s3SeobmXm_8s0wZpSPg13VTO3sA.crl (hash: /NBsmk4FKveMORQpV/pG1YQ0ej+bDv4DTrBEcOhLZ5E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s3SeobmXm_8s0wZpSPg13VTO3sA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:7d:0d:98:87:f8:90:b7:3b:58:1d:7a:d8:01:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3749ea1b9979bff2cd3066948f835dd54cedec0
        Validity
            Not Before: Oct 19 10:02:18 2025 GMT
            Not After : Oct 20 10:02:18 2025 GMT
        Subject: CN=6939df25fd2e38f94f960743727d5a55e69f2d73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:3f:c9:f9:10:60:9f:10:93:52:62:63:34:4a:
                    6e:d4:ea:77:87:5f:ab:57:57:45:1c:b7:84:ac:41:
                    17:12:58:1b:43:fe:f3:dc:61:ba:36:05:29:f6:98:
                    44:3a:92:c4:f3:d7:1d:5c:e3:da:f7:27:e1:eb:2d:
                    a5:94:28:b5:8c:f5:70:cf:f4:57:ef:c6:87:86:c4:
                    fe:85:bc:57:06:72:2c:eb:80:a2:0e:28:78:87:e3:
                    2c:1f:12:a4:01:0e:9a:ce:ba:c1:cd:b2:ab:88:d6:
                    ce:f0:29:f0:83:7b:47:5b:a4:69:e9:75:a6:52:cd:
                    f1:f1:ae:a7:71:85:84:4b:a8:c5:21:07:a1:dd:42:
                    63:06:59:f3:70:b8:18:99:cf:71:af:83:e2:d1:d4:
                    c5:db:11:33:1d:9b:6d:0e:f8:33:8e:86:a3:c0:60:
                    f6:68:d6:ac:49:2f:6b:df:b1:3c:a1:cd:a7:53:c6:
                    59:d8:0d:9a:9e:8a:91:d3:1d:2f:6c:5b:db:42:b7:
                    c7:82:a2:54:49:89:49:7b:c7:d5:0f:3d:45:36:07:
                    3f:24:b9:72:81:49:dd:f3:7e:93:f5:db:ac:f8:d0:
                    ea:2b:0f:b0:dd:1f:90:e5:02:59:d1:eb:27:b6:06:
                    43:8c:90:64:f9:e6:cc:ef:75:78:97:13:23:f2:97:
                    fb:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:39:DF:25:FD:2E:38:F9:4F:96:07:43:72:7D:5A:55:E6:9F:2D:73
            X509v3 Authority Key Identifier:
                keyid:B3:74:9E:A1:B9:97:9B:FF:2C:D3:06:69:48:F8:35:DD:54:CE:DE:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s3SeobmXm_8s0wZpSPg13VTO3sA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:39:0f:c8:bb:2c:21:b5:e5:24:77:87:54:dc:5c:3b:ca:5b:
         db:36:bb:1d:4d:d7:d8:cb:0d:20:f0:b2:84:15:31:c5:5e:34:
         76:08:f2:c9:32:a5:8b:80:39:af:0d:d2:4a:6e:54:74:1a:c7:
         df:b1:fd:5e:d2:3c:1e:e6:b2:e5:8b:7e:eb:ee:f9:56:c0:0a:
         24:cd:47:81:04:dc:d2:53:65:a0:05:6e:ff:37:9f:6b:23:54:
         4a:fd:08:6d:37:09:84:2c:06:9d:2c:44:79:0a:02:e0:e6:d0:
         38:8b:4a:ce:79:b2:41:37:66:d7:4d:b2:a0:6b:d7:40:88:74:
         38:33:61:36:78:3c:b9:df:07:a5:1f:71:6d:bf:0f:8c:08:ae:
         f0:8d:21:9b:7f:3f:2a:f9:fa:a2:fb:07:cb:11:25:0c:90:27:
         69:d4:1d:63:4c:96:a9:85:75:8c:7f:41:0d:c9:dc:cd:b1:ad:
         da:b1:51:4d:a5:58:e5:11:4f:37:63:0d:7b:9b:6c:84:69:c7:
         52:14:39:17:86:a2:7c:76:1b:4f:e7:42:d4:a5:e7:9f:41:57:
         82:78:d8:7a:d3:24:9c:27:e1:f6:18:3c:c1:37:8f:c0:b9:f1:
         9a:a8:eb:e0:c2:ae:7a:63:99:20:4e:3d:15:d9:ae:8d:7c:df:
         b4:11:97:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:19:23 2025 by rpki-client