Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/3cac6b-2c2a-4b66-adee-d52325de6b08/1/01Cgds5KjOb7afH9pKGUYUqUGvo.mft
File:                     01Cgds5KjOb7afH9pKGUYUqUGvo.mft (raw, json)
Hash identifier:          Xl3Ksiiwc2qLGK8DWovkSDrD8IHMKK+UKdWVnoENAHE=
Subject key identifier:   EC:B0:F4:13:F8:4F:82:3D:68:70:06:BE:F1:D4:41:2A:26:0F:07:D3
Authority key identifier: D3:50:A0:76:CE:4A:8C:E6:FB:69:F1:FD:A4:A1:94:61:4A:94:1A:FA
Certificate issuer:       /CN=d350a076ce4a8ce6fb69f1fda4a194614a941afa
Certificate serial:       0199FA6A86788F2F458B30AB6F9868DB7634
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/01Cgds5KjOb7afH9pKGUYUqUGvo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/3cac6b-2c2a-4b66-adee-d52325de6b08/1/01Cgds5KjOb7afH9pKGUYUqUGvo.mft
Manifest number:          16E2
Signing time:             Sun 19 Oct 2025 03:01:49 +0000
Manifest this update:     Sun 19 Oct 2025 03:01:49 +0000
Manifest next update:     Mon 20 Oct 2025 03:01:49 +0000
Files and hashes:         1: 01Cgds5KjOb7afH9pKGUYUqUGvo.crl (hash: XcCWiCjG8so8MMDOali+D/TbVeF6XGxt87uuzNfbl4M=)
                          2: OHSnHISpUOg0a2IaET-7LST2nHw.roa (hash: oeWDTr24DHxY0Ln8Ar9TYuW/yYnaSQVcRJXJMi+oDck=)
                          3: qpaxXHw6CdsxQ2wzd3NCOLPGlGs.roa (hash: hJxFH9vZ+FKOP/6zKZOcfuqIjzXEfzETnfkGtTZDPOo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/3cac6b-2c2a-4b66-adee-d52325de6b08/1/01Cgds5KjOb7afH9pKGUYUqUGvo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/3cac6b-2c2a-4b66-adee-d52325de6b08/1/01Cgds5KjOb7afH9pKGUYUqUGvo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/01Cgds5KjOb7afH9pKGUYUqUGvo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 03:01:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:6a:86:78:8f:2f:45:8b:30:ab:6f:98:68:db:76:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d350a076ce4a8ce6fb69f1fda4a194614a941afa
        Validity
            Not Before: Oct 19 03:01:49 2025 GMT
            Not After : Oct 20 03:01:49 2025 GMT
        Subject: CN=ecb0f413f84f823d687006bef1d4412a260f07d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:09:9d:81:ea:33:54:a4:30:4f:fc:40:92:60:
                    4d:cf:bd:92:88:8e:63:f3:47:2b:70:aa:e6:12:65:
                    0d:81:5e:7c:e3:4d:54:68:3f:94:cd:ab:e2:6b:6a:
                    13:75:6d:9f:ee:8a:ab:65:f5:30:e5:bd:6f:2d:19:
                    4c:e7:5f:e5:09:28:a4:55:b8:8e:1b:f4:e5:ed:d8:
                    c9:17:14:c6:b9:5f:28:4c:b6:39:d6:1e:5c:e2:6e:
                    d3:3f:c9:7f:e2:34:3e:9b:c4:0e:1b:3e:29:21:67:
                    be:9b:3b:68:e1:75:5a:14:3b:01:2b:7b:fa:5e:db:
                    a9:a1:b6:e0:9a:7c:91:bb:d9:4a:0d:41:81:f9:a6:
                    6f:ce:ed:fc:c1:0e:ad:1f:59:fd:ac:cc:0a:08:38:
                    4d:0b:a7:40:94:56:e1:00:6d:9f:c9:16:fc:04:a9:
                    88:66:bd:37:b3:87:b9:79:f0:1c:25:29:13:c7:e3:
                    ea:e3:1d:5d:72:4b:dd:35:1a:24:41:c4:0a:82:16:
                    76:bc:05:e8:bc:26:dd:b8:b5:05:5e:b8:66:9e:87:
                    58:e3:de:5b:ea:15:57:06:6d:1a:fb:98:74:85:19:
                    72:0b:c8:20:ba:ea:5e:17:1d:04:27:12:81:62:3d:
                    77:6e:3a:0a:62:ad:e6:db:6e:77:a6:12:f2:8c:ef:
                    f4:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:B0:F4:13:F8:4F:82:3D:68:70:06:BE:F1:D4:41:2A:26:0F:07:D3
            X509v3 Authority Key Identifier:
                keyid:D3:50:A0:76:CE:4A:8C:E6:FB:69:F1:FD:A4:A1:94:61:4A:94:1A:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01Cgds5KjOb7afH9pKGUYUqUGvo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/3cac6b-2c2a-4b66-adee-d52325de6b08/1/01Cgds5KjOb7afH9pKGUYUqUGvo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/3cac6b-2c2a-4b66-adee-d52325de6b08/1/01Cgds5KjOb7afH9pKGUYUqUGvo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:eb:bc:70:72:28:24:4e:fa:e4:b7:12:14:cb:91:25:0f:de:
         a5:de:10:ce:18:bb:98:cd:cb:59:25:d8:50:40:9b:d8:dc:7a:
         7b:a5:15:d6:e9:87:c0:7f:2c:54:a0:62:ff:d5:a3:8f:67:0f:
         60:16:17:21:39:54:45:2e:04:1a:b3:cf:92:6d:d9:5a:30:3b:
         5a:6c:cb:a4:2c:81:70:3e:24:b7:5b:08:dd:61:55:c5:fd:47:
         24:46:be:0f:f5:30:e9:c1:46:c3:ce:27:2f:3d:be:08:f2:6a:
         4a:9b:b1:47:f0:33:f4:91:65:b1:2a:5b:17:67:e7:4c:7e:45:
         37:09:e0:28:ef:d1:0f:14:c9:9f:83:0b:49:25:30:da:6e:e2:
         83:9a:8e:23:d2:0b:2d:4a:e1:c7:9b:d0:96:84:f0:6e:44:64:
         35:2c:94:4b:a0:51:2c:4a:46:40:24:76:2b:db:9c:89:a3:1f:
         86:d0:7c:40:e1:ee:dd:8a:be:6a:d2:cc:c6:f8:c0:14:f5:1d:
         85:c3:a2:9d:c7:fa:b4:de:5f:34:af:ff:f4:85:61:c4:84:c7:
         b4:a7:07:f1:75:db:6f:7d:60:82:6e:e4:a1:86:b4:12:63:b2:
         d9:15:2b:11:fb:e6:91:4e:1f:df:c5:f5:09:49:c5:f3:ea:9a:
         de:e4:c5:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:06:36 2025 by rpki-client