Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft
File:                     IOQloyti05gYxMuwCBB1aG_EyOg.mft (raw, json)
Hash identifier:          xvkdmg0sB6k7qrO9WiE6pfBSd5/M1Rz+OpYW6Y+SzGk=
Subject key identifier:   CE:5B:64:4A:09:49:86:DC:8E:B5:D6:9D:C3:68:39:E9:58:71:9E:D0
Authority key identifier: 20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8
Certificate issuer:       /CN=20e425a32b62d39818c4cbb0081075686fc4c8e8
Certificate serial:       019A006C7D177B542C0BB93314EA951E12A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft
Manifest number:          16FC
Signing time:             Mon 20 Oct 2025 07:01:41 +0000
Manifest this update:     Mon 20 Oct 2025 07:01:41 +0000
Manifest next update:     Tue 21 Oct 2025 07:01:41 +0000
Files and hashes:         1: 0l9u7U7-JAE9oPOAXydnoK5llfw.roa (hash: oY/oS9q71h1EkykDeqhOM86N3ajJJAt9KtXF0lNGiMw=)
                          2: 2fACuJecAc-smwkteOGVyDmQwaw.roa (hash: viMl4YuUNqgc5sNwoMnn50MgLIKYr6T6TslDseVt1Hs=)
                          3: 5B96JsENP7oPHcdFfVpqYDbmFYg.roa (hash: EHvXfHafsqrn16RMNZ7Iql67i0KDC/bzUoVDYjRF+eY=)
                          4: 78DP4JpO0GuLDhxFNhulhhaTqUo.roa (hash: Rh5+zMkCGInI8zzqysJQHxpiQCSJBnW+Xod+B9PdrOs=)
                          5: 8pYQBY1X6aonwnW6yuYCI5Wtti4.roa (hash: 092AtUWzwBmA/vVNEA+RmdDuKAr1lrKIcR3sMOt9fgU=)
                          6: BUn9VhicX5lnszohZN-B_W7zFEI.roa (hash: sw98I/lp9w4TPvzfatfd4Z7hM9xvkDPTUdNratN07GQ=)
                          7: D-NXxAC8NeHpEpwRfW7yOtZvJ_4.roa (hash: uOBxJRz4MueUQogrYlERneeeJCrcr4YCwkzWVxRxFkQ=)
                          8: I8vapMCNrfWppn81n36Xnnd_dc0.roa (hash: nkV+aB69M6byViVbXc/yY8edvpoQaOOIi8NiZU4LCHg=)
                          9: IOQloyti05gYxMuwCBB1aG_EyOg.crl (hash: lmrlEMXcFSnVVTAUXbFR3xNTyWfOF2VTwndO8YLcnwI=)
                          10: XwLFpRj0dZU0LB-jqIeBRVr3WiQ.roa (hash: Hh68YUysT9TlK/wnW8P9Ud671FM4CJjbFuG795wPTz4=)
                          11: eRkgvY74-9CZJr4M-OTHxN4lqmE.roa (hash: AtO77YvaiyWrZoekcdWH7Xc1AuC9D9yjpPvti/VuBs4=)
                          12: f9hPXV4ddBc04Tj4n8IyT5UmeTI.roa (hash: ehkZEN/NuxZsPtmevVrc57V++f4TSDUNScFVzak2JVo=)
                          13: j9uDa4qsDLlL7k3sqoqOQqkyaYg.roa (hash: 6UjU1Ddii7Tnr8YP+8IBQJ3W1ScDEYLrt5AGNeYkw7w=)
                          14: oFmlzP6ML3vgrJzYKtoah3Clk-k.roa (hash: w9hGd8N7afhoyUOGmiu3kSdi4CKMYM8sitELfKuLv2k=)
                          15: rIsYs00Wf7HbWx24CSUDr8qM3AA.roa (hash: Rm9hgt1r8vljNOunul0A1uzlnsmrlXuLijTx17itpBw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:00:6c:7d:17:7b:54:2c:0b:b9:33:14:ea:95:1e:12:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20e425a32b62d39818c4cbb0081075686fc4c8e8
        Validity
            Not Before: Oct 20 07:01:41 2025 GMT
            Not After : Oct 21 07:01:41 2025 GMT
        Subject: CN=ce5b644a094986dc8eb5d69dc36839e958719ed0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:04:5a:1c:f9:48:04:1e:1e:db:fc:47:6e:7e:
                    2d:3e:6f:14:4a:2b:e0:52:bd:10:86:bc:3a:e9:c9:
                    0d:b9:11:d2:c3:0a:8f:de:01:5d:4f:41:1a:cf:a1:
                    10:61:26:56:15:2f:d0:52:2d:b1:4c:26:ad:d7:80:
                    6e:9f:2e:fe:df:dd:00:af:e9:ed:e9:cf:fc:3e:0a:
                    96:53:e2:55:3a:ae:bf:a7:4b:13:f2:aa:7b:07:e7:
                    b5:d4:42:6d:79:4e:93:d6:66:59:22:67:ce:40:dd:
                    25:a0:87:c0:b6:1c:92:cc:3b:51:31:8f:cf:2c:ec:
                    3b:41:a1:a4:ef:95:a3:48:d6:72:84:71:d9:a7:9f:
                    03:79:ba:34:11:84:69:31:ad:7d:e1:5b:70:8b:a9:
                    da:bd:4f:0e:93:81:70:25:a1:63:d1:b7:e3:f7:99:
                    ce:80:0d:83:6d:1c:21:a1:b5:9f:c3:e5:99:60:a1:
                    ac:19:d0:7a:cb:ec:74:91:9b:e7:64:15:78:c0:b5:
                    76:23:06:96:7c:81:74:e8:65:fc:5e:1a:2b:12:5c:
                    f3:09:fa:8a:cf:99:dd:f7:e1:c9:3a:17:67:2a:33:
                    dc:6b:79:33:d1:51:02:d9:0f:c4:5c:67:f7:6f:26:
                    48:17:a7:ac:ad:99:e7:51:e9:48:e8:c8:0c:a8:ce:
                    12:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:5B:64:4A:09:49:86:DC:8E:B5:D6:9D:C3:68:39:E9:58:71:9E:D0
            X509v3 Authority Key Identifier:
                keyid:20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:7e:c2:39:c0:1e:76:ed:88:30:7b:d7:c0:51:62:a5:e2:14:
         96:ac:e6:1b:ca:2f:42:03:af:5b:5c:17:18:d5:f4:e7:ae:c7:
         97:f3:37:28:b1:13:7f:3c:12:61:75:ae:5a:30:77:0f:a8:eb:
         ad:4f:af:13:6f:5e:69:5e:23:da:e6:44:43:d8:58:dc:b8:9d:
         21:fd:ea:f6:6a:64:6f:e3:ba:55:e8:25:8b:de:a4:24:1a:4f:
         14:eb:69:5e:28:cb:23:35:fb:e1:6d:b8:cd:ab:bd:72:70:4f:
         c6:c2:95:2c:90:55:b6:7c:0f:0f:84:01:93:65:c6:f5:39:ca:
         a3:ff:6e:0d:f4:2e:45:ee:a1:94:b6:b3:d7:ca:40:c5:65:72:
         df:bd:7b:b8:2a:c0:cf:48:4a:ce:12:dd:70:84:f1:ce:e6:e6:
         6b:4e:fc:54:b2:d7:ca:34:9f:ef:be:dc:e3:02:59:78:47:0c:
         38:7f:63:5f:36:32:52:a1:a3:d8:71:82:fb:5c:ef:6f:96:bc:
         6a:77:e8:6a:3f:c4:60:78:ce:dc:76:71:89:b6:97:5d:99:75:
         6e:68:3b:0f:90:7e:d7:22:01:9f:4f:8d:9d:af:9e:f4:aa:9a:
         c2:df:4e:c3:39:86:c3:7d:72:eb:e3:22:2b:f8:33:ba:45:8a:
         8c:eb:f1:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:53:16 2025 by rpki-client