Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/KQbwJrH-Y2yaXaAR3H_WnFgdArg.mft
File:                     KQbwJrH-Y2yaXaAR3H_WnFgdArg.mft (raw, json)
Hash identifier:          yLBjtRgKR4ASlcwvjkN05+MZkDj98iQscZDKeBwVgqE=
Subject key identifier:   2C:9D:D2:25:5B:AF:A8:F2:96:2F:94:97:AC:A0:46:77:B4:45:0A:54
Authority key identifier: 29:06:F0:26:B1:FE:63:6C:9A:5D:A0:11:DC:7F:D6:9C:58:1D:02:B8
Certificate issuer:       /CN=2906f026b1fe636c9a5da011dc7fd69c581d02b8
Certificate serial:       0199FFC77905783F4822EF3CFB9815703104
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KQbwJrH-Y2yaXaAR3H_WnFgdArg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/KQbwJrH-Y2yaXaAR3H_WnFgdArg.mft
Manifest number:          16E9
Signing time:             Mon 20 Oct 2025 04:01:26 +0000
Manifest this update:     Mon 20 Oct 2025 04:01:26 +0000
Manifest next update:     Tue 21 Oct 2025 04:01:26 +0000
Files and hashes:         1: 8TWqg3TfqZs_5FrvevicA08_Me0.roa (hash: 4Z8rTsO/+irkApy694NCfCAKUJGTnN/zDl7bvRScmHU=)
                          2: E0LmXjQbMH-5PikYPEcuzzsWqGg.roa (hash: ptzM6Lx0G4exHD8wnG0yaiK9TLZgE439UHeYQgYNx5s=)
                          3: GKCHcnuOeAwv2OrVrhhlx1glPKg.roa (hash: lsZazQ3pOXhSWOPU2R2jWTWFqUlOxcs/A3f1wvZkH2U=)
                          4: KQbwJrH-Y2yaXaAR3H_WnFgdArg.crl (hash: bzcnNeu+W+DNpRzbCHke1OCFLOtYPvuME3Gcm78zOHc=)
                          5: wTbdYlsUFkp3d9dHZust_Lw_6AQ.roa (hash: OT9PLyVKPfe5qaWoveQ3/agGSLh/5l0V3Q2WNMZnLKQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/KQbwJrH-Y2yaXaAR3H_WnFgdArg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/KQbwJrH-Y2yaXaAR3H_WnFgdArg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KQbwJrH-Y2yaXaAR3H_WnFgdArg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 04:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ff:c7:79:05:78:3f:48:22:ef:3c:fb:98:15:70:31:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2906f026b1fe636c9a5da011dc7fd69c581d02b8
        Validity
            Not Before: Oct 20 04:01:26 2025 GMT
            Not After : Oct 21 04:01:26 2025 GMT
        Subject: CN=2c9dd2255bafa8f2962f9497aca04677b4450a54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:79:bc:76:54:01:d8:f3:d4:fc:5c:59:e7:e1:
                    83:3c:16:ac:13:f6:07:f1:9c:f5:91:f3:9f:ee:07:
                    36:a0:b1:39:14:ff:d0:82:87:2f:36:bb:83:58:f2:
                    49:db:8e:83:30:38:96:e8:f7:82:2f:a6:54:0e:5f:
                    27:35:a1:b1:53:2b:83:25:3c:0d:3c:8e:14:97:cf:
                    2a:79:e9:8f:39:04:b7:1f:06:4c:ea:90:ee:78:8a:
                    30:05:25:da:39:fc:91:44:a2:89:fb:d2:30:36:13:
                    90:01:7d:f3:f5:21:b8:a9:40:7f:a0:d4:c4:c6:0d:
                    57:22:c4:e9:22:6a:f8:b6:f1:21:57:93:fa:88:67:
                    4a:bb:2e:5b:2b:c6:d8:f3:51:dd:58:ae:a3:02:80:
                    7f:b7:ea:1e:29:6d:99:62:48:37:61:b2:90:5d:9c:
                    1b:02:3a:31:92:6b:98:f2:d8:e6:f0:9c:98:9c:c3:
                    02:0f:38:9b:92:c3:50:c8:39:21:4f:09:20:5b:8c:
                    5c:30:ab:d3:99:7d:49:ff:c0:9a:71:8f:13:41:66:
                    94:5a:50:07:7e:a1:4f:0d:67:88:80:89:f5:d6:d3:
                    f0:7e:09:1c:72:5f:bf:6d:b7:88:d3:d4:df:f9:d1:
                    82:e3:7d:cd:47:89:ce:87:25:67:79:33:db:6c:a6:
                    b8:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:9D:D2:25:5B:AF:A8:F2:96:2F:94:97:AC:A0:46:77:B4:45:0A:54
            X509v3 Authority Key Identifier:
                keyid:29:06:F0:26:B1:FE:63:6C:9A:5D:A0:11:DC:7F:D6:9C:58:1D:02:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQbwJrH-Y2yaXaAR3H_WnFgdArg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/KQbwJrH-Y2yaXaAR3H_WnFgdArg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/KQbwJrH-Y2yaXaAR3H_WnFgdArg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:26:d4:42:8c:f3:aa:02:c7:8c:61:f2:3c:0f:c5:4b:18:78:
         fc:05:b2:a0:f8:c4:17:64:f3:8a:9c:dc:04:d9:0c:22:d4:df:
         d4:76:f5:d9:83:9a:45:35:12:8f:fc:ff:4b:d0:79:cb:b3:a9:
         a7:62:10:e7:3b:99:b8:cf:bd:2d:19:66:0f:e7:da:7b:59:24:
         53:82:dc:fa:29:a6:b1:a3:4e:9e:40:94:d8:6b:40:51:b1:54:
         e2:8f:1e:3f:5d:96:b6:78:77:83:b7:4e:dd:71:a1:f5:dc:58:
         ff:7e:2f:fb:dc:e7:77:18:8d:2e:9d:0d:11:b4:02:32:8e:d7:
         f2:16:d8:1d:d2:ba:9e:a9:f2:64:09:e0:fa:50:f0:35:f7:ad:
         37:ac:dc:18:e9:52:9e:77:17:d6:8a:7e:25:bb:ca:80:32:f0:
         9e:fc:25:c0:d1:e8:63:17:70:49:33:28:cb:f0:43:68:2e:62:
         a5:f3:e1:33:9c:19:07:0c:f3:42:dd:64:a6:8f:c7:9e:20:e9:
         b4:ac:a5:b2:f3:79:86:68:ba:74:66:d6:35:e9:87:ce:f8:81:
         18:a0:11:70:51:c8:35:b8:60:21:90:3c:87:c8:9d:ec:7e:6e:
         44:95:6d:0a:7c:da:82:c1:af:dc:ae:7a:8d:d2:7d:58:ff:89:
         c9:a1:eb:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:32:03 2025 by rpki-client