Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/e5c697-cc93-4d71-b940-9ba85be3bf09/1/p4wD9FkI30xFw_B9KkssQCRdUTI.mft
File:                     p4wD9FkI30xFw_B9KkssQCRdUTI.mft (raw, json)
Hash identifier:          qjzbZo6pbqeMLo1JXaLAOMJ4JnpeK+gar+aQGXnHSXo=
Subject key identifier:   D2:3A:A1:D9:83:EA:E4:BB:0F:58:60:6E:D3:A0:DB:54:F3:B7:7E:BB
Authority key identifier: A7:8C:03:F4:59:08:DF:4C:45:C3:F0:7D:2A:4B:2C:40:24:5D:51:32
Certificate issuer:       /CN=a78c03f45908df4c45c3f07d2a4b2c40245d5132
Certificate serial:       0199FDDA4E17AE47C16EE4F32125D2B64B7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p4wD9FkI30xFw_B9KkssQCRdUTI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/e5c697-cc93-4d71-b940-9ba85be3bf09/1/p4wD9FkI30xFw_B9KkssQCRdUTI.mft
Manifest number:          16E6
Signing time:             Sun 19 Oct 2025 19:02:46 +0000
Manifest this update:     Sun 19 Oct 2025 19:02:46 +0000
Manifest next update:     Mon 20 Oct 2025 19:02:46 +0000
Files and hashes:         1: p4wD9FkI30xFw_B9KkssQCRdUTI.crl (hash: 4qHqM2xipsoq92ZTGNqkIdV0KNzVgKAHHL/9+PYWJWE=)
                          2: zPOGOjbboaQbMeAXK6bmSX50QU0.roa (hash: OFCJwWf3DDsRtbtAfKkoaMdc4vMktJu9Jl985uyVWSg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/e5c697-cc93-4d71-b940-9ba85be3bf09/1/p4wD9FkI30xFw_B9KkssQCRdUTI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/e5c697-cc93-4d71-b940-9ba85be3bf09/1/p4wD9FkI30xFw_B9KkssQCRdUTI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p4wD9FkI30xFw_B9KkssQCRdUTI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 19:02:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:da:4e:17:ae:47:c1:6e:e4:f3:21:25:d2:b6:4b:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a78c03f45908df4c45c3f07d2a4b2c40245d5132
        Validity
            Not Before: Oct 19 19:02:46 2025 GMT
            Not After : Oct 20 19:02:46 2025 GMT
        Subject: CN=d23aa1d983eae4bb0f58606ed3a0db54f3b77ebb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:19:bb:42:75:0e:8b:53:37:b6:85:a5:73:b0:
                    e2:01:a5:08:62:5d:1d:fe:cc:be:bb:dd:90:2b:38:
                    87:28:42:75:ce:33:17:21:d3:f9:94:5b:0f:79:d4:
                    7d:9c:c9:92:b9:85:c4:e7:31:27:69:68:94:00:d7:
                    86:8e:db:33:38:f0:96:e8:15:c2:88:c8:6b:0e:00:
                    9c:f1:a2:23:b6:e0:8b:99:b6:b2:6b:83:d4:b1:94:
                    91:27:0e:cd:3f:19:36:a1:e9:23:ae:4f:a6:b9:bf:
                    01:a6:71:b9:27:a8:be:25:af:4b:f7:1c:7e:f6:c2:
                    1f:10:52:40:4a:d0:fc:13:ae:98:e3:f4:45:b6:ba:
                    26:be:c8:53:8c:bc:a6:d7:6b:ca:4a:06:29:e6:cf:
                    ee:5e:bf:4a:97:b2:82:b4:0a:5f:46:82:bb:07:14:
                    1d:3d:91:98:e9:d5:d8:0c:0a:ea:18:bc:39:ae:d5:
                    07:9d:3d:85:5b:54:5e:4d:9e:86:ed:d5:9e:d6:b2:
                    80:2e:8f:af:03:9f:69:d7:49:a9:80:ec:a3:97:6a:
                    ea:79:03:1b:71:7b:73:f3:54:e5:68:a4:19:ea:72:
                    2b:d7:81:2d:0e:fd:a7:f4:8c:5a:e2:54:a9:30:58:
                    3e:ad:d3:0e:84:05:8a:14:3c:47:24:cc:74:91:de:
                    0d:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:3A:A1:D9:83:EA:E4:BB:0F:58:60:6E:D3:A0:DB:54:F3:B7:7E:BB
            X509v3 Authority Key Identifier:
                keyid:A7:8C:03:F4:59:08:DF:4C:45:C3:F0:7D:2A:4B:2C:40:24:5D:51:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p4wD9FkI30xFw_B9KkssQCRdUTI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/e5c697-cc93-4d71-b940-9ba85be3bf09/1/p4wD9FkI30xFw_B9KkssQCRdUTI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/e5c697-cc93-4d71-b940-9ba85be3bf09/1/p4wD9FkI30xFw_B9KkssQCRdUTI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:3c:48:19:a2:95:59:06:75:25:f2:f6:91:7b:a7:7b:7a:99:
         fd:7e:46:02:41:f2:d7:bd:fe:16:4e:b3:c7:3a:bf:a3:e3:63:
         d8:eb:c1:52:9e:d6:15:58:ff:ca:05:84:29:83:c1:c5:dc:bb:
         73:0f:b4:81:43:2b:e6:ed:d8:8d:21:12:d1:20:09:6e:f4:e9:
         75:f5:a0:8a:48:f2:17:ae:4e:a4:0b:87:ac:0c:d1:90:1d:46:
         d6:f7:cf:8d:90:d8:1b:e3:ba:71:8f:5f:05:ca:5e:78:b0:7a:
         b2:1e:c0:0f:60:13:b9:24:e0:e4:b2:c6:ee:a6:2b:73:0a:9c:
         c6:fb:77:c9:f6:9f:27:26:87:04:60:fa:bb:e1:c9:7d:14:98:
         55:a6:d4:11:9f:e4:f2:9e:92:9c:3b:96:29:b6:78:7a:6a:04:
         2a:b6:7a:eb:b6:c8:4e:01:89:44:ba:f4:e2:f7:30:be:c1:e2:
         3f:33:8d:33:fc:ac:de:40:6b:da:11:32:78:de:70:58:a2:67:
         e5:d3:67:b9:f8:17:b4:65:ba:99:a3:18:36:c7:50:19:35:0f:
         b4:fe:9c:c8:2d:39:1e:63:9d:f6:b1:2a:4f:9d:b4:06:0d:9e:
         7c:f8:57:ab:ed:3a:ae:3a:32:c7:0b:6c:0f:ee:1a:3d:5e:24:
         fc:e3:80:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:25:09 2025 by rpki-client