Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/eefa72-8f4c-486c-b019-b4eaa0561fc7/1/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.mft
File:                     0gdchPUpyH3YX9Sv6k4JNDZq9Uo.mft (raw, json)
Hash identifier:          9HGGI0UvPsCrOe6PTzly34PO82un9YTFCuk39aER9ew=
Subject key identifier:   2E:06:3A:F7:6B:4A:94:12:6A:4A:AA:1D:A9:4A:57:C6:59:F6:CB:97
Authority key identifier: D2:07:5C:84:F5:29:C8:7D:D8:5F:D4:AF:EA:4E:09:34:36:6A:F5:4A
Certificate issuer:       /CN=d2075c84f529c87dd85fd4afea4e0934366af54a
Certificate serial:       0199FDD9BC9F5816ED0591198B6DD40F3A4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/eefa72-8f4c-486c-b019-b4eaa0561fc7/1/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.mft
Manifest number:          16E3
Signing time:             Sun 19 Oct 2025 19:02:09 +0000
Manifest this update:     Sun 19 Oct 2025 19:02:09 +0000
Manifest next update:     Mon 20 Oct 2025 19:02:09 +0000
Files and hashes:         1: 0gdchPUpyH3YX9Sv6k4JNDZq9Uo.crl (hash: PlsByiYg+NdDIQwmy8scjEYiqn57w4dZGpwC4HXlESo=)
                          2: 9e9KE2F8zCrYqsOR0ocKB3uWC0g.roa (hash: xWmWZ6mNV40OXaNhlTROFGFnywkkEouFvFZTD1JJjZc=)
                          3: MXxh0YHPMrk5arTCf3q6sfloz_s.roa (hash: N+z7kc9squE6rbdRMbjpnb079oubXEpLhtNwZjifRAU=)
                          4: PJMpQm9gwngY8P3_lMKl-7kl_Jo.roa (hash: kW2DqnWjgsO28lEW1wrqQlb2aOCM46/dPtOZpgqTEW0=)
                          5: q6I6gf2csqwaWg3RJJBU3r8Ww9s.roa (hash: TuJ+a/fTT9f6d+FkeMmzYXOZB23+5zFwPl6nA0Nxjxw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/eefa72-8f4c-486c-b019-b4eaa0561fc7/1/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/eefa72-8f4c-486c-b019-b4eaa0561fc7/1/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:d9:bc:9f:58:16:ed:05:91:19:8b:6d:d4:0f:3a:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2075c84f529c87dd85fd4afea4e0934366af54a
        Validity
            Not Before: Oct 19 19:02:09 2025 GMT
            Not After : Oct 20 19:02:09 2025 GMT
        Subject: CN=2e063af76b4a94126a4aaa1da94a57c659f6cb97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:22:ae:0a:cf:c9:13:b4:47:49:f2:72:f4:ec:
                    1d:6d:25:37:d0:c2:ae:78:f3:d5:05:6f:b0:69:64:
                    28:f7:be:76:c7:a9:7a:d8:6a:54:ce:30:f1:f8:38:
                    fe:38:60:be:c4:1c:44:53:24:f9:a6:3f:8a:62:2d:
                    f6:dd:c7:4c:e7:ec:4f:43:f7:bc:0a:ba:5e:bb:25:
                    6f:f5:69:42:47:7f:a7:9b:7d:54:85:48:37:3d:71:
                    e3:4d:59:07:ae:f5:86:5a:5c:0b:c7:b9:d1:de:c6:
                    60:4d:60:11:39:26:dd:e1:62:ff:e2:10:19:a6:e8:
                    04:6e:77:55:33:3f:f6:86:bf:8a:df:f0:84:ae:15:
                    9b:41:e4:a5:1f:22:d1:41:dd:ce:ad:7d:6c:0a:35:
                    5f:2d:29:62:ae:aa:67:04:5e:b6:12:4c:52:a0:af:
                    32:d5:75:21:a8:aa:88:95:17:0c:fc:12:cc:d3:98:
                    a5:97:ac:72:90:93:4f:8b:de:3d:3b:86:3f:34:1d:
                    4a:c5:b7:89:29:f7:7d:0c:be:e1:c5:47:5f:d1:a6:
                    d8:79:2d:21:32:a1:82:f3:d2:8f:13:61:57:be:eb:
                    fa:19:c0:de:74:07:c5:27:88:ef:dd:33:1b:c7:37:
                    53:a7:6c:ef:c9:7b:c8:94:91:ed:c2:7e:00:ca:d4:
                    c8:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:06:3A:F7:6B:4A:94:12:6A:4A:AA:1D:A9:4A:57:C6:59:F6:CB:97
            X509v3 Authority Key Identifier:
                keyid:D2:07:5C:84:F5:29:C8:7D:D8:5F:D4:AF:EA:4E:09:34:36:6A:F5:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/eefa72-8f4c-486c-b019-b4eaa0561fc7/1/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/eefa72-8f4c-486c-b019-b4eaa0561fc7/1/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:4a:60:e1:3e:92:67:29:0e:3e:cc:9b:db:0d:2c:48:56:71:
         69:cf:16:55:b1:a9:ec:8e:39:53:c8:54:89:40:79:2e:3c:43:
         b9:53:ea:0e:50:26:f9:e8:00:83:60:71:98:ca:c7:bb:97:53:
         78:88:4c:e7:60:c5:0a:bd:8f:07:e6:c0:e3:22:cf:21:1c:07:
         7d:48:68:4c:29:ce:b9:b9:2c:3c:06:0c:65:29:34:4b:96:63:
         ea:80:2f:d8:1e:6e:21:8e:62:25:fb:9f:d0:e8:0f:12:24:b6:
         8f:02:ad:c2:2e:b7:b6:6a:d3:5e:2c:37:08:9c:84:67:b3:44:
         b8:e5:d2:c9:12:96:f3:d6:b0:60:aa:61:70:9b:e3:9c:14:e8:
         b8:6c:4b:47:32:61:b4:29:0b:f3:7d:bc:3e:a4:6d:6d:f2:a0:
         10:9b:66:6f:b5:aa:72:c0:cc:98:d1:78:f9:b1:86:21:4c:92:
         15:8e:23:f4:49:b7:b2:0e:ac:d0:81:4e:d0:bf:79:c0:b5:41:
         19:81:0c:98:a1:a5:f6:ba:86:c5:cf:56:65:eb:72:c7:46:7b:
         c1:a7:4d:5c:3d:fb:1d:4a:90:d0:cd:78:dc:07:ec:b3:4c:7c:
         92:96:34:53:17:cd:f6:3c:d9:ce:cf:dd:ec:c0:55:03:7c:61:
         d3:f3:af:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:28:47 2025 by rpki-client