Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/XM3soXHkIseck4wnMqkNSKjFPAY.mft
File:                     XM3soXHkIseck4wnMqkNSKjFPAY.mft (raw, json)
Hash identifier:          +H3/s4tLgQPiwONZ7EgehWeEuCky7UUTLuDmb0yB2P0=
Subject key identifier:   EE:BE:D1:F3:6F:59:F0:2B:6A:C2:B5:E5:1E:1F:CC:FB:0E:AA:48:A4
Authority key identifier: 5C:CD:EC:A1:71:E4:22:C7:9C:93:8C:27:32:A9:0D:48:A8:C5:3C:06
Certificate issuer:       /CN=5ccdeca171e422c79c938c2732a90d48a8c53c06
Certificate serial:       0199FE7E183E3A6BCAFB53C2AE696BE60F16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XM3soXHkIseck4wnMqkNSKjFPAY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/XM3soXHkIseck4wnMqkNSKjFPAY.mft
Manifest number:          16F1
Signing time:             Sun 19 Oct 2025 22:01:40 +0000
Manifest this update:     Sun 19 Oct 2025 22:01:40 +0000
Manifest next update:     Mon 20 Oct 2025 22:01:40 +0000
Files and hashes:         1: 1ZFRCjoLi_l_VlnDb8o8tJWIa2E.roa (hash: vVgcWoftvDNuMTcgCwdMnGyQwGXGLdFZoBkxUeU+jcg=)
                          2: LxxlY-veNdEFSuClmgliyHMOZOA.roa (hash: eyCm9s0PQeZ1TTpko+C38z1BbPAWbfE1nA0PWObj7+Q=)
                          3: NqBM7SejbvGbff9d0C8tNNMd9cE.roa (hash: NsdFpCr4tDnCXl/0XE2a5AdGU138fFNht03h3yMplDQ=)
                          4: Td-MjJ9z3BFMN-CR2k1YuGa_k_c.roa (hash: 0YQPkgNx9PD50yI1FD2kcNedXzzoW6sYrN+X7fEAhd4=)
                          5: XM3soXHkIseck4wnMqkNSKjFPAY.crl (hash: 0FodneX2JzZlkTRrRR6q0+GZ0t8KYnnTomlVZMDLSwc=)
                          6: aa3wYkdpjQEDieV4Tr1D1UlS-yQ.roa (hash: OvNz6w0TsSCTT94cQ7JVYM2YwdlsjARoid2lWLlXj5c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/XM3soXHkIseck4wnMqkNSKjFPAY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/XM3soXHkIseck4wnMqkNSKjFPAY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XM3soXHkIseck4wnMqkNSKjFPAY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:7e:18:3e:3a:6b:ca:fb:53:c2:ae:69:6b:e6:0f:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ccdeca171e422c79c938c2732a90d48a8c53c06
        Validity
            Not Before: Oct 19 22:01:40 2025 GMT
            Not After : Oct 20 22:01:40 2025 GMT
        Subject: CN=eebed1f36f59f02b6ac2b5e51e1fccfb0eaa48a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:51:19:bd:ff:b4:2c:0c:8b:65:c6:b3:fb:28:
                    a7:ac:58:79:80:b3:ed:98:fc:e1:ee:4c:13:d1:69:
                    b6:7f:a6:92:69:b5:de:3c:ea:63:10:42:5e:d8:4e:
                    83:15:a4:8c:a8:0f:07:41:1e:0f:2e:7a:b0:d9:91:
                    a5:75:97:fe:7a:a3:ef:4f:a1:06:6a:a3:5b:17:5f:
                    ad:3d:13:79:16:5c:d0:57:51:14:69:53:2d:f9:70:
                    0b:45:9b:10:c4:d8:c5:b6:90:2f:71:b5:7c:7a:53:
                    50:38:54:da:67:43:23:ae:2f:56:31:f6:2b:87:6f:
                    cb:17:56:8d:16:8a:92:d4:64:55:f7:9c:51:11:67:
                    c0:c6:83:6e:cf:15:f4:5a:cb:57:ac:0f:ce:24:7a:
                    96:18:5d:70:7c:d9:9d:ca:a2:50:7a:65:c1:68:49:
                    56:04:c0:be:4d:64:bc:29:f9:84:90:d3:66:37:11:
                    3c:84:94:d2:ae:08:c2:13:0a:76:c8:b8:c3:2e:fd:
                    bb:f9:0c:6d:f6:f7:09:e9:c3:39:4f:85:91:61:b2:
                    3b:27:bb:c6:6c:ff:84:cf:4d:69:98:a5:79:8e:d6:
                    9e:94:62:2b:08:15:a4:e4:2b:c8:e0:3f:e8:94:58:
                    47:b2:8e:e0:30:c4:49:bd:9d:78:e9:2a:6f:52:b9:
                    df:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:BE:D1:F3:6F:59:F0:2B:6A:C2:B5:E5:1E:1F:CC:FB:0E:AA:48:A4
            X509v3 Authority Key Identifier:
                keyid:5C:CD:EC:A1:71:E4:22:C7:9C:93:8C:27:32:A9:0D:48:A8:C5:3C:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XM3soXHkIseck4wnMqkNSKjFPAY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/XM3soXHkIseck4wnMqkNSKjFPAY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/XM3soXHkIseck4wnMqkNSKjFPAY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:59:ff:9c:01:50:7f:cf:25:31:76:78:c7:f3:9c:c5:57:37:
         98:45:9d:2b:02:8f:c7:2c:cc:b7:ae:9f:83:00:ea:03:78:53:
         a6:f6:3e:41:55:31:4a:88:86:f3:ef:c2:9e:95:dd:79:46:10:
         fc:5d:43:65:bd:06:82:ee:28:10:6c:17:92:4a:c6:dd:87:14:
         79:93:8c:75:c9:8c:27:94:1e:22:61:6f:65:0f:0b:bc:10:e3:
         04:fb:da:70:2e:8e:a8:0e:fc:a4:80:3d:52:bf:f2:83:31:ae:
         00:ea:bf:16:2f:d5:09:b6:56:09:e3:04:f6:9b:e5:ab:99:0e:
         70:bf:bb:30:b7:e0:8b:d8:95:cb:d2:d0:b2:9a:ce:7d:07:7d:
         33:7e:0f:97:6a:f5:f3:1e:7d:1c:88:13:48:84:86:af:ad:64:
         a1:58:10:39:de:04:b2:f6:f7:f8:37:fd:48:ec:e6:e6:a5:70:
         49:bf:1f:0f:7e:e9:c2:4c:81:a7:df:3f:7f:61:ec:fa:31:11:
         b9:3b:a0:ba:98:a7:53:90:b6:b2:21:63:db:9b:65:f7:d0:81:
         a6:a6:d7:15:30:95:aa:f8:a6:f8:d8:df:d6:9f:a1:89:75:f4:
         cb:9f:fd:01:68:a9:8f:fe:80:37:7c:0c:c7:6c:24:96:6f:e6:
         b2:d4:79:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:50:09 2025 by rpki-client