Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.mft
File:                     _3J2xNjPr8BMJvhfs0_Z7OR2lpU.mft (raw, json)
Hash identifier:          fN5emBVmL2UjLSas84KJCkFs6jqlNyXWG3AdpU+nWZg=
Subject key identifier:   DE:2E:0D:F4:A9:26:BC:48:8F:3D:2F:91:B0:55:46:B5:ED:FA:12:E0
Authority key identifier: FF:72:76:C4:D8:CF:AF:C0:4C:26:F8:5F:B3:4F:D9:EC:E4:76:96:95
Certificate issuer:       /CN=ff7276c4d8cfafc04c26f85fb34fd9ece4769695
Certificate serial:       0199FB7CB681DC7ABC49CEB33010B1CEDFDE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.mft
Manifest number:          16E2
Signing time:             Sun 19 Oct 2025 08:01:18 +0000
Manifest this update:     Sun 19 Oct 2025 08:01:18 +0000
Manifest next update:     Mon 20 Oct 2025 08:01:18 +0000
Files and hashes:         1: 6D6NbO4mpX3571YePb7wBqCbgBc.roa (hash: 360JpGFWi4fwKRE3FPgMGW/rJz0k3wsKNSQFnzGnVZI=)
                          2: _3J2xNjPr8BMJvhfs0_Z7OR2lpU.crl (hash: MEbQufqASTlEeJ+sDTfBTzmdxZUNZKrE5z5Fyqn0Tbg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:7c:b6:81:dc:7a:bc:49:ce:b3:30:10:b1:ce:df:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff7276c4d8cfafc04c26f85fb34fd9ece4769695
        Validity
            Not Before: Oct 19 08:01:18 2025 GMT
            Not After : Oct 20 08:01:18 2025 GMT
        Subject: CN=de2e0df4a926bc488f3d2f91b05546b5edfa12e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:7a:8e:a1:2a:c9:77:6f:c1:1c:f7:ec:67:8e:
                    f8:d4:24:50:2e:65:3b:87:fa:30:ba:a3:c6:87:c5:
                    f5:8f:1d:8c:96:4c:93:ae:31:cb:0e:75:b8:08:a0:
                    49:56:f0:b7:a4:7b:15:9d:8c:db:b8:05:b6:d8:3d:
                    71:2a:9b:a5:ee:c0:7f:66:cf:fb:2f:a6:7f:08:c0:
                    90:2a:11:57:09:4d:68:b7:fd:3b:28:0d:68:15:ac:
                    36:d7:f3:e8:6e:9a:fb:6e:54:86:de:6d:50:e3:dd:
                    4a:5f:59:a6:59:91:1d:68:f7:69:1c:a4:25:44:41:
                    aa:d6:ca:cf:76:0d:5a:7f:da:f8:8c:f5:b6:bb:62:
                    60:2b:e0:3f:79:e6:2d:c9:9e:7b:e9:29:35:3d:9a:
                    ac:e7:ad:da:95:8d:5b:c3:24:bb:21:6f:c7:cd:d7:
                    5d:48:38:a5:1a:9c:b2:a4:3c:79:5c:50:f8:c9:e2:
                    d1:35:56:31:9a:e2:50:bb:1a:b7:a6:bf:b8:8e:8c:
                    24:e5:56:27:cb:21:28:73:76:18:1d:85:b0:f8:03:
                    0e:45:9e:bf:a4:f1:cf:f0:0a:59:f5:84:93:5c:6a:
                    e6:9b:38:e9:97:3c:3a:36:e2:f0:c2:36:2f:59:b1:
                    d4:e1:24:bc:7b:09:00:1c:fb:43:31:14:ef:4d:8d:
                    aa:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:2E:0D:F4:A9:26:BC:48:8F:3D:2F:91:B0:55:46:B5:ED:FA:12:E0
            X509v3 Authority Key Identifier:
                keyid:FF:72:76:C4:D8:CF:AF:C0:4C:26:F8:5F:B3:4F:D9:EC:E4:76:96:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:be:7d:84:85:65:cd:ba:73:a9:0e:c9:71:cf:4e:64:8c:b6:
         f0:68:75:be:64:cf:f6:92:9e:cb:af:e1:44:85:00:c8:95:7f:
         a0:48:ed:8c:bf:54:f6:eb:bc:1b:6e:fd:f4:ab:b2:38:60:f4:
         17:40:93:2b:d9:f5:6d:04:f8:07:67:aa:46:f3:39:05:d4:25:
         b8:2e:a3:a1:6f:4e:40:9d:8d:6f:1d:37:49:2b:ab:e5:a0:87:
         ff:c2:ad:c5:25:37:d5:0d:fd:a4:f0:e8:9d:26:05:59:73:5b:
         73:6a:a1:cf:84:1c:6a:9c:6e:a2:a9:10:cc:71:ba:bc:c3:40:
         69:2a:17:4a:71:1e:2b:03:14:a2:bf:2e:3f:aa:11:ee:6e:17:
         2d:1a:c8:e7:a0:b0:bb:e2:8c:18:df:bb:dc:b8:ba:b4:a2:72:
         03:d6:c1:ca:4a:44:c9:2d:3f:8b:6c:24:bf:31:bd:cb:25:48:
         8c:a4:a1:82:20:c1:be:82:b9:1c:4c:9b:06:68:1f:fd:1a:e9:
         ca:cd:76:c2:45:8c:74:b3:e2:f8:d5:9f:c2:63:1a:e9:58:ed:
         af:25:2a:00:a4:60:4e:6e:9e:3e:77:6b:59:e8:83:5e:93:05:
         b0:c8:ac:bf:2c:bf:f6:4a:c9:bc:fa:2b:30:0a:79:33:6c:a9:
         11:68:a2:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:51 2025 by rpki-client