Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/13mWjmbtvqNy75W6or9okThWekA.mft
File:                     13mWjmbtvqNy75W6or9okThWekA.mft (raw, json)
Hash identifier:          zhB7S6qydfvVpml93UrzVyMViyVXN1duMwF2C3xf5w8=
Subject key identifier:   3E:B4:7B:13:5E:74:B5:64:35:DB:66:AB:CB:94:17:9D:DE:E3:7B:E1
Authority key identifier: D7:79:96:8E:66:ED:BE:A3:72:EF:95:BA:A2:BF:68:91:38:56:7A:40
Certificate issuer:       /CN=d779968e66edbea372ef95baa2bf689138567a40
Certificate serial:       0199FDDA488A2BE22F5F50DE4DF2F525A176
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/13mWjmbtvqNy75W6or9okThWekA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/13mWjmbtvqNy75W6or9okThWekA.mft
Manifest number:          16E5
Signing time:             Sun 19 Oct 2025 19:02:44 +0000
Manifest this update:     Sun 19 Oct 2025 19:02:44 +0000
Manifest next update:     Mon 20 Oct 2025 19:02:44 +0000
Files and hashes:         1: 13mWjmbtvqNy75W6or9okThWekA.crl (hash: uh1TrRIPnXEJ08GsqAODV93F0X1RXDceOEbe2WbalXc=)
                          2: I4emCne_29V28uUFcYz5hu_Rezg.roa (hash: 96USF7uc276n2Rs/poozBmGnwe39xgiKf2HQGb9xcQc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/13mWjmbtvqNy75W6or9okThWekA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/13mWjmbtvqNy75W6or9okThWekA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/13mWjmbtvqNy75W6or9okThWekA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:da:48:8a:2b:e2:2f:5f:50:de:4d:f2:f5:25:a1:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d779968e66edbea372ef95baa2bf689138567a40
        Validity
            Not Before: Oct 19 19:02:44 2025 GMT
            Not After : Oct 20 19:02:44 2025 GMT
        Subject: CN=3eb47b135e74b56435db66abcb94179ddee37be1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:4e:d3:47:1e:4f:ee:e6:a6:a3:18:8e:1d:94:
                    b2:fd:54:86:a5:db:95:35:97:02:26:cd:54:e9:f0:
                    89:c2:54:46:0d:fc:93:3c:1f:fd:f5:58:50:7e:3d:
                    c9:72:8d:da:d0:83:80:26:4d:3d:34:9d:99:87:28:
                    53:fe:a7:ee:26:b7:f5:c0:7b:5f:97:9f:a9:ff:97:
                    80:f6:23:55:07:aa:87:42:c8:89:90:b8:b4:4e:f0:
                    14:41:04:bb:f5:96:3f:d5:73:4c:12:b6:3a:c8:66:
                    ff:ee:6a:ea:b2:96:bd:fb:ff:c6:39:35:40:e5:24:
                    8e:62:93:e7:2a:b2:6e:27:fe:d8:f0:92:14:51:d2:
                    13:c7:25:5d:86:13:b7:99:f5:12:67:b1:e4:ee:1e:
                    18:61:14:c9:18:ad:26:25:32:6f:67:fa:1b:70:90:
                    fd:d7:43:5c:e3:9f:46:62:ba:cb:b6:2f:15:20:42:
                    85:9b:0f:84:4d:f2:df:a9:7a:d8:34:a0:06:a1:a0:
                    88:0a:89:96:c6:ea:c0:c7:39:34:08:b5:b7:aa:80:
                    ab:c6:05:8c:f4:41:c8:9d:15:39:d9:39:94:dc:a5:
                    a1:bb:db:64:78:3c:d3:1e:a2:33:b3:a9:be:1b:d4:
                    67:44:e6:ca:a1:86:de:d7:f1:9e:d3:3d:8a:0a:b9:
                    47:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:B4:7B:13:5E:74:B5:64:35:DB:66:AB:CB:94:17:9D:DE:E3:7B:E1
            X509v3 Authority Key Identifier:
                keyid:D7:79:96:8E:66:ED:BE:A3:72:EF:95:BA:A2:BF:68:91:38:56:7A:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13mWjmbtvqNy75W6or9okThWekA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/13mWjmbtvqNy75W6or9okThWekA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/13mWjmbtvqNy75W6or9okThWekA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:ac:2d:1c:a1:a4:13:f0:ae:7e:e5:e6:db:85:06:18:85:20:
         4f:ef:62:bb:86:22:9c:e1:48:b3:7e:af:ed:36:57:04:62:b8:
         7a:3a:0c:b8:42:91:e3:2c:f2:9c:66:6f:6e:ca:1c:9c:64:74:
         de:bc:cf:a0:c0:e7:cb:16:2e:19:10:38:8f:e3:19:eb:f9:20:
         78:a8:ff:d4:dd:88:dd:a2:1c:60:36:29:4e:a4:06:9e:c5:cf:
         8e:c7:6e:82:fa:00:a4:03:9e:43:47:60:2e:fc:09:74:b1:cd:
         a7:44:44:77:5f:02:83:ab:ca:be:af:aa:97:4d:de:d8:ef:29:
         c4:82:ff:f8:ed:95:67:82:ef:32:fb:22:e8:2b:20:d2:43:d4:
         45:a2:ee:e3:44:f0:e0:72:01:ae:26:45:fe:73:14:35:8d:92:
         3c:25:7b:34:42:6a:3b:67:ef:dd:f5:2e:78:4c:5f:6a:d6:c5:
         e7:49:65:c8:13:d4:a2:9d:60:b5:c3:d6:4d:b9:72:b8:88:c6:
         37:4e:2f:8f:e2:9a:fc:82:98:3e:58:37:e3:c7:7b:e4:d0:46:
         9f:24:8c:da:b0:7f:78:96:0e:af:d2:02:2f:9f:a7:a8:44:f5:
         87:df:8b:98:71:c4:eb:a9:0d:32:bd:16:b2:f7:ba:67:80:f6:
         27:d3:fd:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:59:29 2025 by rpki-client