Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/5c65af-b3f9-4bb3-a702-2bc90794d38d/1/Ruvdrmp6zug6MioOdDpnWdhTZfI.mft
File:                     Ruvdrmp6zug6MioOdDpnWdhTZfI.mft (raw, json)
Hash identifier:          0PqhkOqY3Rb4gf1Ut7cFLLYJ1y1/6D4IwoqpCzsk1DE=
Subject key identifier:   B8:96:8D:09:35:26:F9:93:2D:D5:0C:39:62:72:5F:BE:62:4C:98:71
Authority key identifier: 46:EB:DD:AE:6A:7A:CE:E8:3A:32:2A:0E:74:3A:67:59:D8:53:65:F2
Certificate issuer:       /CN=46ebddae6a7acee83a322a0e743a6759d85365f2
Certificate serial:       0199FD3406D2B8580E7FAF2CEEC4D0A557F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ruvdrmp6zug6MioOdDpnWdhTZfI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/5c65af-b3f9-4bb3-a702-2bc90794d38d/1/Ruvdrmp6zug6MioOdDpnWdhTZfI.mft
Manifest number:          16E2
Signing time:             Sun 19 Oct 2025 16:01:09 +0000
Manifest this update:     Sun 19 Oct 2025 16:01:09 +0000
Manifest next update:     Mon 20 Oct 2025 16:01:09 +0000
Files and hashes:         1: BKkYw6wCv0BCzIN9mNvcFYakNOY.roa (hash: JOy8URSCrbw8xxAKeoSqWbsMyce29owmtAkGhYDeHjY=)
                          2: H1WmesnGsPGxvhrpIvl23X68COY.roa (hash: NWrgkD59WkzlbvqU60CxucBVP2HdE5fZ9W7KVT7TpRE=)
                          3: Ruvdrmp6zug6MioOdDpnWdhTZfI.crl (hash: PlSRz+8WlVxe/vsj4zytDZ+iZaEQT4WTOQzhv1hIG7s=)
                          4: igy17iTeqaYCdBBLyoPaHClVJqQ.roa (hash: B+Liv7dvp/EsH5cWaQvjUo2qiny7+O+NyRrhBkq35hU=)
                          5: wcBe8u24JXjeTWcCpL97nHKl1AU.roa (hash: OcQcSR3oTfsUHozUBTzFplqG9Qb0tgWAtrlG+anwobY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/5c65af-b3f9-4bb3-a702-2bc90794d38d/1/Ruvdrmp6zug6MioOdDpnWdhTZfI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/5c65af-b3f9-4bb3-a702-2bc90794d38d/1/Ruvdrmp6zug6MioOdDpnWdhTZfI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ruvdrmp6zug6MioOdDpnWdhTZfI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:34:06:d2:b8:58:0e:7f:af:2c:ee:c4:d0:a5:57:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46ebddae6a7acee83a322a0e743a6759d85365f2
        Validity
            Not Before: Oct 19 16:01:09 2025 GMT
            Not After : Oct 20 16:01:09 2025 GMT
        Subject: CN=b8968d093526f9932dd50c3962725fbe624c9871
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:07:a9:79:71:f8:67:57:cb:b4:6e:2a:48:6f:
                    b7:7a:ad:78:3a:11:be:ce:0a:9c:a8:ff:4e:e8:3d:
                    bf:61:e1:9e:1a:b1:18:85:aa:f9:50:3e:12:a1:9a:
                    4b:16:d1:55:e1:30:07:21:48:bb:8c:11:a9:d5:db:
                    a7:2d:4f:8a:40:0c:58:6b:19:14:57:5e:d9:9b:fd:
                    ec:53:79:a7:05:81:67:03:b5:25:3d:00:ea:43:a2:
                    07:0c:0b:a7:90:42:62:68:7b:76:e6:cd:19:6d:3a:
                    3b:3b:eb:d0:9e:44:c8:e9:cd:f6:2b:de:24:95:11:
                    4c:4d:7f:4a:36:dc:f5:91:08:9f:a3:e0:b0:f7:70:
                    f5:d3:05:28:22:62:d1:38:0d:08:a1:c8:aa:1e:fa:
                    5c:68:c7:a1:2b:ff:10:cd:59:1b:1f:a9:d1:7c:c3:
                    eb:9b:64:a7:19:e8:e9:dd:66:81:b2:c2:31:6c:93:
                    a4:c3:15:c3:4d:f6:82:d6:b0:e7:16:a0:60:72:2d:
                    3f:ba:f6:c3:eb:86:d1:98:11:ba:08:e6:1e:f2:66:
                    cf:90:b7:99:5d:26:66:12:f1:2c:6d:d8:09:72:0e:
                    12:a8:87:35:1a:54:dc:40:03:c8:e9:b0:e5:15:8a:
                    60:95:5d:c8:f8:49:28:c9:ff:63:45:43:54:00:78:
                    5c:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:96:8D:09:35:26:F9:93:2D:D5:0C:39:62:72:5F:BE:62:4C:98:71
            X509v3 Authority Key Identifier:
                keyid:46:EB:DD:AE:6A:7A:CE:E8:3A:32:2A:0E:74:3A:67:59:D8:53:65:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ruvdrmp6zug6MioOdDpnWdhTZfI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5c65af-b3f9-4bb3-a702-2bc90794d38d/1/Ruvdrmp6zug6MioOdDpnWdhTZfI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5c65af-b3f9-4bb3-a702-2bc90794d38d/1/Ruvdrmp6zug6MioOdDpnWdhTZfI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:92:ab:bb:eb:e4:22:9e:ae:0f:c3:a6:03:06:2a:67:d1:c2:
         12:c3:f4:e3:2a:b7:ea:b2:fa:4f:6e:e0:c1:f8:5a:1b:30:80:
         f8:0c:f1:93:17:3a:6a:08:01:c4:f4:e7:6d:5a:b4:16:74:15:
         79:a3:0f:86:92:2e:0b:0f:4e:71:08:d5:f3:38:68:0d:33:9d:
         4f:c4:c7:90:e7:d4:f9:72:3d:3c:b8:34:fc:4d:2d:77:4c:7b:
         c5:af:36:84:b3:ad:a9:6c:4a:4e:7d:fd:91:d9:f9:ad:e1:f4:
         3b:00:3b:d6:f9:df:49:58:bc:cd:bb:b1:2a:2b:85:50:c2:cf:
         49:df:cb:1d:f9:56:9d:47:82:f2:6d:92:bc:09:9d:96:87:03:
         85:aa:81:c5:30:fc:35:14:6a:aa:86:19:9e:c3:c7:a9:17:22:
         96:0b:3b:88:be:aa:d8:fc:b0:14:38:08:0d:33:9f:03:4b:9b:
         ed:e7:f2:5d:6c:f9:63:b2:4c:d0:d0:6f:b9:5a:97:9b:5a:4f:
         42:dc:0c:a9:fe:7a:49:b3:ff:6c:ab:c6:4c:2a:03:91:48:a6:
         d9:f2:90:05:67:d6:5a:b3:e0:f2:51:29:de:2d:35:84:46:38:
         b2:8b:4d:84:1f:1f:df:5b:bf:94:5b:7f:b7:6a:8d:03:d1:f9:
         6c:ed:be:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:29:51 2025 by rpki-client