Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft
File:                     1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft (raw, json)
Hash identifier:          3yi4MnX2KWBYTecNqx5KA7JyD7Qhf4LJIUzz8QQ9VnM=
Subject key identifier:   2B:B8:39:68:D4:F3:06:C1:67:0F:E3:D6:BD:33:D3:09:60:DA:F8:12
Authority key identifier: F8:85:7E:CF:44:1E:5E:A1:D7:18:1F:EC:7E:97:E6:DB:C1:22:0F:C2
Certificate issuer:       /CN=f8857ecf441e5ea1d7181fec7e97e6dbc1220fc2
Certificate serial:       0199FB0EF5E8581DF9DD0E233744F5F18EC3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-IV-z0QeXqHXGB_sfpfm28EiD8I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft
Manifest number:          16ED
Signing time:             Sun 19 Oct 2025 06:01:25 +0000
Manifest this update:     Sun 19 Oct 2025 06:01:25 +0000
Manifest next update:     Mon 20 Oct 2025 06:01:25 +0000
Files and hashes:         1: 1-IV-z0QeXqHXGB_sfpfm28EiD8I.crl (hash: V9lWhCdicaNNWk4T41pDv1BBsMWj0O8C3EZI2OgRtws=)
                          2: 1-vIuocsySS4hCLwPwzSGGi0Y9tc.roa (hash: +g5xAqCWTvxo7PyMWD8c44r3EF7O21NmsWOjSdPveho=)
                          3: 6xCL5BtIX0Zw-bEyK4PbFZQ3IoU.roa (hash: nI7BiO9oHKEpbeXY5Oxc7XDGorODwyRSr7ofWs5lz2E=)
                          4: CCa8r2qpCvCDgqqDcfo4PuokNhg.roa (hash: kaZQfZ66nJ9UAy07CUOVheGM2eaFszN0P5WDSIi6z7o=)
                          5: L_Dg0on8d5LaF_HjlpEXS7IQZ4o.roa (hash: hPCKAEOYOgu3sLuyZtqWs1ysCg/phNwXs4ZElEe0znQ=)
                          6: VLB7zCgm9pvaqKu6mzLINMfkozA.roa (hash: 47IXsdsMymeSm5xy4aWnRGiTVKD1XHMeiXkhj2C3NVs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-IV-z0QeXqHXGB_sfpfm28EiD8I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:0e:f5:e8:58:1d:f9:dd:0e:23:37:44:f5:f1:8e:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8857ecf441e5ea1d7181fec7e97e6dbc1220fc2
        Validity
            Not Before: Oct 19 06:01:25 2025 GMT
            Not After : Oct 20 06:01:25 2025 GMT
        Subject: CN=2bb83968d4f306c1670fe3d6bd33d30960daf812
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:f4:cc:da:f9:7f:86:98:c3:c7:6d:27:4f:f4:
                    d4:5f:ac:5e:91:33:9c:f4:18:34:a9:62:8b:3f:12:
                    5f:be:6c:f1:8e:87:78:5f:33:78:8d:04:d6:48:72:
                    0d:50:45:bf:3f:e2:2c:a9:a0:e3:09:91:73:2a:e4:
                    4e:88:d7:be:ed:51:7f:12:f7:ad:74:14:7e:75:f9:
                    8a:39:7b:46:bc:a1:59:3c:48:e4:e0:3d:e6:d2:87:
                    18:a4:c8:bc:bc:37:3b:86:ab:e9:1c:93:f8:d5:40:
                    e9:ed:bf:9a:f6:23:bc:74:75:8d:6e:06:ad:ec:44:
                    b4:a8:ee:e4:f9:71:4e:ca:f0:fb:2a:14:7b:71:a1:
                    93:7f:da:d2:4b:54:d6:d2:08:98:d4:1f:55:96:f5:
                    ea:a5:f6:f3:b0:86:fa:b7:1d:3d:55:91:b4:95:dd:
                    8c:ba:80:cf:dc:25:21:8f:69:f6:17:aa:6a:aa:a0:
                    a7:ef:db:69:61:15:7f:4d:da:b2:cd:81:12:e4:74:
                    80:bf:a9:cc:ab:31:48:68:75:ec:d8:bf:69:3d:f7:
                    3e:64:d4:52:85:1a:38:02:ab:72:ca:12:22:14:77:
                    27:5d:88:03:55:c9:02:c6:a7:c7:9b:5c:f4:27:02:
                    ef:4c:7d:ed:60:33:b1:43:ed:d4:66:d6:e2:9b:ba:
                    5c:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:B8:39:68:D4:F3:06:C1:67:0F:E3:D6:BD:33:D3:09:60:DA:F8:12
            X509v3 Authority Key Identifier:
                keyid:F8:85:7E:CF:44:1E:5E:A1:D7:18:1F:EC:7E:97:E6:DB:C1:22:0F:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-IV-z0QeXqHXGB_sfpfm28EiD8I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:71:9d:ee:e2:ea:50:af:93:e7:12:03:99:50:ab:78:de:7e:
         64:8d:bc:3a:e8:73:6a:b5:90:ab:a7:80:d2:a2:ca:c8:15:13:
         a3:ce:60:3b:69:ef:1b:73:33:ae:96:86:7f:5b:36:a2:68:32:
         e8:79:b5:80:20:04:62:dd:c1:b8:9a:1e:52:cc:eb:0f:9d:66:
         4d:eb:d5:8b:8c:9c:67:b4:d7:96:b3:5e:e6:60:0f:60:ec:71:
         65:27:67:fe:50:54:14:cd:f0:2a:f7:2b:f8:6a:0b:3e:ef:85:
         ed:6a:05:1d:37:f4:5f:b2:17:4b:54:48:f2:94:2f:f4:2c:51:
         0f:ae:b1:b2:4b:69:83:b8:dc:25:a9:66:f0:dd:d7:f9:b9:e6:
         d8:12:a0:ef:8a:d1:35:cf:d7:13:f4:06:e8:cb:d5:61:b5:f2:
         e4:22:5e:7f:91:db:82:bb:f8:c3:a1:2a:a9:b3:90:99:5c:89:
         94:18:e6:88:08:fd:21:29:1c:5d:34:59:9b:6f:45:3c:02:96:
         5a:2b:7e:ef:d8:75:8f:15:7d:bb:1d:5b:ae:ef:a8:ee:a9:45:
         5f:5f:c8:8e:ce:96:df:2d:8d:da:51:ca:bb:a0:14:8c:5a:ce:
         97:30:22:5e:c9:45:19:e5:18:be:56:34:6d:3b:19:af:1b:4e:
         bd:ff:6b:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:52 2025 by rpki-client