Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/6123c4-2bc5-4df9-ad13-e1d99b8706e4/1/EAi6VCmnCbxY7NuuPxfhvJ06TVw.mft
File:                     EAi6VCmnCbxY7NuuPxfhvJ06TVw.mft (raw, json)
Hash identifier:          iodNmk8j2XH4MN9/u9Od0o68SyKG7bv+dNdTZk910ws=
Subject key identifier:   0F:17:45:0A:4F:23:E7:D5:EE:FF:9F:98:39:C3:1B:55:C0:C7:1E:A7
Authority key identifier: 10:08:BA:54:29:A7:09:BC:58:EC:DB:AE:3F:17:E1:BC:9D:3A:4D:5C
Certificate issuer:       /CN=1008ba5429a709bc58ecdbae3f17e1bc9d3a4d5c
Certificate serial:       0199FCFD47BCBDC81C7A301E8D9D386F475B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EAi6VCmnCbxY7NuuPxfhvJ06TVw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/6123c4-2bc5-4df9-ad13-e1d99b8706e4/1/EAi6VCmnCbxY7NuuPxfhvJ06TVw.mft
Manifest number:          16E7
Signing time:             Sun 19 Oct 2025 15:01:21 +0000
Manifest this update:     Sun 19 Oct 2025 15:01:21 +0000
Manifest next update:     Mon 20 Oct 2025 15:01:21 +0000
Files and hashes:         1: 1-oywLdb_fTClaD87m6tdnutytow.roa (hash: 85G/s34H92lI3gWWd+jbSoQ0zU6D8YYTSS9g9aEjRLM=)
                          2: DL_qFVZk3rxdJkKpcYlD8can1eU.roa (hash: AXUVIl86wlErBqiXfbh2Y2jtdLSsUFK8nHnHCkxSXzA=)
                          3: EAi6VCmnCbxY7NuuPxfhvJ06TVw.crl (hash: j99+SE0QOtECmgMVehwEZ68TGhzhSUdDGdgXuOe1U2Q=)
                          4: FrztCKqYCSU41yHs-FigFa0H85w.roa (hash: RjFVv75TF9wTHazX6BAAlQsVm5jIrUhlaCZKZtAdOks=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/6123c4-2bc5-4df9-ad13-e1d99b8706e4/1/EAi6VCmnCbxY7NuuPxfhvJ06TVw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/6123c4-2bc5-4df9-ad13-e1d99b8706e4/1/EAi6VCmnCbxY7NuuPxfhvJ06TVw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EAi6VCmnCbxY7NuuPxfhvJ06TVw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:fd:47:bc:bd:c8:1c:7a:30:1e:8d:9d:38:6f:47:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1008ba5429a709bc58ecdbae3f17e1bc9d3a4d5c
        Validity
            Not Before: Oct 19 15:01:21 2025 GMT
            Not After : Oct 20 15:01:21 2025 GMT
        Subject: CN=0f17450a4f23e7d5eeff9f9839c31b55c0c71ea7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:37:f9:0b:52:fb:6d:a9:ac:e9:65:5f:f9:9a:
                    d7:7a:59:c1:92:df:c9:43:f6:4a:1d:09:61:ea:3e:
                    a9:3c:43:83:59:a0:8f:a4:43:37:16:19:fd:61:db:
                    70:4a:28:f6:66:2d:72:3c:46:44:7b:f6:97:fd:81:
                    af:a1:29:e7:28:50:d0:8a:31:51:21:a5:28:fc:ac:
                    87:a7:dc:3a:34:2e:c9:42:31:7b:6d:63:d9:a5:06:
                    7d:da:70:50:48:54:96:a7:22:27:3b:0f:9b:76:7f:
                    c0:d0:d2:24:c9:8d:e6:11:04:dd:e5:87:71:ec:29:
                    20:80:fa:1c:11:3e:77:23:1e:a5:56:7c:4a:18:1a:
                    4b:eb:8f:fe:72:bc:fe:ca:3f:3a:de:8e:8b:2d:d3:
                    87:78:e8:38:51:2b:eb:c6:31:9e:3d:57:c5:cd:14:
                    c1:74:da:1c:17:44:73:61:55:35:be:69:42:93:9c:
                    7c:ed:96:bd:bf:61:cb:84:cc:6d:d0:ce:0f:b0:d5:
                    f4:30:23:aa:74:7c:b7:57:f1:f1:f4:dd:be:c8:86:
                    c1:68:cd:51:5e:4b:4b:64:3d:69:d5:2e:ac:14:cc:
                    0f:76:36:2c:87:93:f4:f7:0d:4f:42:85:34:0a:7f:
                    3f:e8:b1:69:4e:2c:6f:40:69:20:7b:ea:7e:c6:f9:
                    f9:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:17:45:0A:4F:23:E7:D5:EE:FF:9F:98:39:C3:1B:55:C0:C7:1E:A7
            X509v3 Authority Key Identifier:
                keyid:10:08:BA:54:29:A7:09:BC:58:EC:DB:AE:3F:17:E1:BC:9D:3A:4D:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EAi6VCmnCbxY7NuuPxfhvJ06TVw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6123c4-2bc5-4df9-ad13-e1d99b8706e4/1/EAi6VCmnCbxY7NuuPxfhvJ06TVw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6123c4-2bc5-4df9-ad13-e1d99b8706e4/1/EAi6VCmnCbxY7NuuPxfhvJ06TVw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:35:f0:5b:cb:16:10:5d:ac:12:68:79:20:c7:ad:ac:3c:46:
         4b:c2:8f:93:c2:55:aa:6d:ed:41:e8:75:81:3b:dd:51:d3:f8:
         c6:30:93:2c:4f:0d:1b:5e:63:91:c8:56:b3:37:10:34:d6:a5:
         8a:7f:e7:24:b9:02:ee:31:2d:3e:90:57:8e:dd:c1:03:56:c5:
         c2:7c:e0:40:2a:c4:3d:bc:0e:09:02:47:cf:51:90:9a:b3:ee:
         13:b3:5a:15:ed:09:45:35:fb:ed:b1:b7:80:87:91:d1:e2:f9:
         82:57:c1:4e:57:c1:3f:f3:2b:90:64:cb:0c:a7:6f:2d:e9:a4:
         e8:3d:a7:8b:53:1c:06:c2:03:9f:79:2f:f6:d8:42:9b:36:1b:
         7d:ea:b6:08:3f:23:fd:03:fa:09:05:62:82:c7:46:bf:1f:80:
         3c:e4:34:43:7d:2d:99:50:af:2b:34:1a:93:3e:fa:6d:2b:39:
         d3:29:71:ca:d3:63:e0:8a:b9:47:e5:69:32:d8:57:35:be:a1:
         b8:85:dd:a4:30:4f:eb:43:5c:e3:65:d5:cc:4d:85:9d:b8:24:
         10:56:38:50:0b:d3:a8:f1:72:4d:61:30:18:da:9c:52:9a:a8:
         ca:a7:29:49:a4:71:00:5b:22:fb:e0:51:1c:ad:10:30:66:1f:
         e8:cb:07:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:54:54 2025 by rpki-client