Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.mft
File:                     iPNC3REnxnrxEWqx-ZfifLTIhOg.mft (raw, json)
Hash identifier:          5igcwyIY2tI/SKJbHijXKPZPaN2sf0VnkE+YOfHeK68=
Subject key identifier:   06:CD:27:4F:DA:6E:76:2C:68:B6:BE:FC:CA:58:05:E2:71:03:BD:2E
Authority key identifier: 88:F3:42:DD:11:27:C6:7A:F1:11:6A:B1:F9:97:E2:7C:B4:C8:84:E8
Certificate issuer:       /CN=88f342dd1127c67af1116ab1f997e27cb4c884e8
Certificate serial:       0199FAA164977D53E65C8958317C5F6FE6D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iPNC3REnxnrxEWqx-ZfifLTIhOg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.mft
Manifest number:          16E2
Signing time:             Sun 19 Oct 2025 04:01:44 +0000
Manifest this update:     Sun 19 Oct 2025 04:01:44 +0000
Manifest next update:     Mon 20 Oct 2025 04:01:44 +0000
Files and hashes:         1: 0tVPRt7zVqUIIvmXairhGKRXv0U.roa (hash: dhSo1lkIbUUIXrPA3/k2AFZiXI7dxBUbTf590V+gQts=)
                          2: iPNC3REnxnrxEWqx-ZfifLTIhOg.crl (hash: 7L0UzotGtIjvsKidndLXPNFaveYMbBiQZg8SrReTNz4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iPNC3REnxnrxEWqx-ZfifLTIhOg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 04:01:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:a1:64:97:7d:53:e6:5c:89:58:31:7c:5f:6f:e6:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88f342dd1127c67af1116ab1f997e27cb4c884e8
        Validity
            Not Before: Oct 19 04:01:44 2025 GMT
            Not After : Oct 20 04:01:44 2025 GMT
        Subject: CN=06cd274fda6e762c68b6befcca5805e27103bd2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:50:d4:65:b5:40:bc:3c:82:38:dd:37:94:f6:
                    b3:42:0b:3b:bd:01:a0:42:27:5e:a3:14:6b:84:9a:
                    0a:6c:c2:55:bc:c9:2e:a7:36:d4:fe:de:4f:89:ec:
                    8f:f7:63:d1:bc:e4:17:81:dd:71:da:1a:9b:a9:e0:
                    46:60:3d:9b:6c:f0:7c:1d:8f:19:ad:12:e0:39:1c:
                    4a:75:b7:c7:96:0b:df:ff:1c:14:5d:ba:92:ed:84:
                    4d:eb:9e:1f:40:90:25:af:31:cb:03:20:fb:a5:3f:
                    fb:14:b3:54:4d:4a:3b:6b:71:78:21:8c:e7:51:df:
                    c5:69:5b:6c:3c:db:c7:c9:6b:ae:fe:fe:28:32:1f:
                    9d:18:63:62:46:52:40:c3:81:f5:65:c8:f2:b5:19:
                    ac:e1:01:b6:23:cb:08:ee:17:fc:3a:42:c0:e6:ab:
                    ae:67:ab:07:dd:57:e5:77:c9:93:02:b6:2a:31:6c:
                    0f:52:46:9c:3b:1e:4c:96:b8:ba:ea:14:c7:ce:16:
                    c8:24:e9:fe:7f:86:4f:4d:48:f5:96:f0:ad:a8:22:
                    46:bf:c5:37:6f:8e:6b:95:6d:d5:21:7b:a1:ea:64:
                    d2:a0:b2:92:89:11:70:c7:67:84:69:4b:98:dd:f3:
                    9c:18:d5:9a:4f:44:eb:92:2c:af:cd:72:01:60:fa:
                    89:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:CD:27:4F:DA:6E:76:2C:68:B6:BE:FC:CA:58:05:E2:71:03:BD:2E
            X509v3 Authority Key Identifier:
                keyid:88:F3:42:DD:11:27:C6:7A:F1:11:6A:B1:F9:97:E2:7C:B4:C8:84:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPNC3REnxnrxEWqx-ZfifLTIhOg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/24fd15-22a9-4bd6-a232-8b36e9d063a1/1/iPNC3REnxnrxEWqx-ZfifLTIhOg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:08:ea:9e:39:92:ed:08:75:34:7d:b5:f0:d1:bb:f9:12:72:
         fc:d2:73:eb:c2:32:08:b7:00:8c:f3:f6:da:dc:7b:6c:a8:b5:
         ec:90:f6:33:a1:4a:d9:de:1d:dc:df:59:a2:64:22:ed:6f:87:
         34:2d:c5:61:fa:f1:16:59:2a:31:a9:32:c6:e2:ce:71:31:62:
         ba:93:aa:8b:53:05:31:ae:c5:9c:a4:65:89:e4:01:87:86:2a:
         74:ac:da:e1:28:3b:49:75:27:32:f0:41:9c:00:0e:fb:fa:6d:
         f7:06:08:77:08:2e:f5:bb:67:2c:01:e3:ce:31:4a:11:e8:bf:
         f2:80:20:74:b6:3d:0e:27:5d:49:bb:1c:c0:b1:4b:8e:0f:f3:
         6b:4e:61:48:22:92:80:cc:35:a8:a1:9a:ed:0e:ad:ba:ec:63:
         e2:b3:c6:fb:32:68:e2:2f:f6:4d:2c:fc:7d:25:f4:50:ed:64:
         e3:3a:d7:2a:f9:1c:d7:bc:9b:ea:c8:d5:e8:d9:06:f1:ea:ac:
         5d:be:5c:32:83:2f:01:fc:07:a1:6f:9c:c3:51:ff:c9:44:37:
         6e:ae:66:a9:0e:96:57:64:37:99:99:5e:4a:e6:b5:bf:77:cf:
         9f:49:70:e8:6a:cd:13:33:40:00:87:f8:68:eb:21:4d:3a:44:
         e7:27:60:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:06:36 2025 by rpki-client