Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.mft
File:                     i2n8YSi-WRQBrPgrwkYa9jbr6OY.mft (raw, json)
Hash identifier:          QKCad0j2nPkq5xKoTckHk3OjLZKul8CAlGxrAeokQ9o=
Subject key identifier:   CA:2D:6B:9F:D6:F6:0E:C9:DE:F2:2C:FD:7E:6F:21:05:A1:9D:11:DD
Authority key identifier: 8B:69:FC:61:28:BE:59:14:01:AC:F8:2B:C2:46:1A:F6:36:EB:E8:E6
Certificate issuer:       /CN=8b69fc6128be591401acf82bc2461af636ebe8e6
Certificate serial:       0199FC58E8941C089A47D22F1B7BE1ACB48C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2n8YSi-WRQBrPgrwkYa9jbr6OY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.mft
Manifest number:          16F8
Signing time:             Sun 19 Oct 2025 12:01:49 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:49 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:49 +0000
Files and hashes:         1: RZK0b0ovThhwOspu5E-ursP21fk.roa (hash: QD9vKhIKNC6G+l7AznXUzzLsXomMDZljRclFB7nn2HQ=)
                          2: fiISLcTtszje5XVI9V1A5UtzzeY.roa (hash: eVRxObYN5WO+IJLUe7vH/MdccTrSwqFAfOP7RIW37BY=)
                          3: i2n8YSi-WRQBrPgrwkYa9jbr6OY.crl (hash: isZ1/Pnvo6OG6iIumtK706s8eP64MNgqYPtiMoM0rmo=)
                          4: jI6BNQdThJo2MEdSZOm1_susYMk.roa (hash: rpQAWWU68zMZ9YE0YNIh6QHC51Xor5PQY1DDvCq8+m8=)
                          5: uqvRjoImP67-V2pzEWGA2vqwBPY.roa (hash: yGPp5s4cB95t+0hM/KR3osWVzparRNQvZpkZjxE6wzs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2n8YSi-WRQBrPgrwkYa9jbr6OY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:58:e8:94:1c:08:9a:47:d2:2f:1b:7b:e1:ac:b4:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b69fc6128be591401acf82bc2461af636ebe8e6
        Validity
            Not Before: Oct 19 12:01:49 2025 GMT
            Not After : Oct 20 12:01:49 2025 GMT
        Subject: CN=ca2d6b9fd6f60ec9def22cfd7e6f2105a19d11dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d5:70:e1:74:e8:bc:09:e7:3e:9f:16:71:08:
                    0d:23:8c:d2:a9:e5:f0:cc:b6:5a:a3:5c:ad:a8:71:
                    39:77:f1:f1:9b:f5:7b:d2:f9:82:53:bb:2c:e5:b5:
                    c1:5f:3b:58:39:ef:a4:28:47:fe:8c:b1:72:8c:17:
                    98:bc:07:e3:7e:e7:06:9c:da:1a:10:95:23:8c:4f:
                    f8:b9:d0:be:da:8c:34:cf:f3:fc:fb:29:31:33:d5:
                    82:04:f6:fb:c7:f3:e7:24:1f:f4:b6:e9:0a:2b:00:
                    ee:91:09:aa:1c:a3:c3:27:6b:b9:59:60:76:50:7b:
                    a2:1d:6e:6c:1c:bd:77:71:ff:3a:30:88:e0:23:e3:
                    8f:89:ee:72:a6:26:ec:3b:6b:a8:9b:d2:97:f1:6e:
                    0d:95:d4:09:9f:e7:ef:a7:0e:c2:9d:b2:77:44:73:
                    b7:74:8b:5d:b5:4a:90:fc:77:38:0e:9b:c3:e3:41:
                    4b:5f:ab:b6:7c:54:0c:ab:ae:84:43:35:aa:28:63:
                    b6:5a:2d:fc:46:03:7a:51:7d:53:15:e5:ae:d7:87:
                    bd:b8:fb:2f:2c:d4:b0:ff:03:dd:4b:56:dd:b1:5d:
                    e2:59:01:46:93:f2:cc:04:ea:bc:b5:38:d4:c5:4b:
                    8a:16:ae:59:f1:2c:f6:d5:3a:67:59:50:3a:3f:7e:
                    31:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:2D:6B:9F:D6:F6:0E:C9:DE:F2:2C:FD:7E:6F:21:05:A1:9D:11:DD
            X509v3 Authority Key Identifier:
                keyid:8B:69:FC:61:28:BE:59:14:01:AC:F8:2B:C2:46:1A:F6:36:EB:E8:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2n8YSi-WRQBrPgrwkYa9jbr6OY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:e5:1f:47:bd:b8:a6:6a:b3:0b:43:5e:99:44:85:66:6b:a0:
         c1:74:e0:3d:18:7a:5d:fd:40:0f:b3:5e:45:71:24:b5:7f:e5:
         e5:6c:0e:0f:cb:9b:2f:f7:03:ff:ea:39:3b:cb:bb:9c:22:6a:
         a3:5c:f2:23:d0:91:e1:ae:6f:f8:39:11:5e:64:83:51:c2:8c:
         1b:20:70:f9:42:2b:58:8e:75:93:1c:30:58:72:00:07:b6:ec:
         8c:44:c7:22:bd:25:2c:86:52:9e:9f:6c:c7:58:79:40:86:d4:
         36:91:f7:22:db:07:5d:29:84:ed:51:4c:72:64:42:1d:d0:19:
         79:e2:5a:00:67:62:90:00:7b:e1:f8:a1:80:94:6d:08:9b:5e:
         1f:bd:d0:ff:df:23:bb:ff:ff:55:4f:3d:66:6a:73:ee:b0:67:
         57:b8:eb:2b:e1:c6:7d:3d:73:db:26:5f:e3:28:ad:ec:e3:92:
         72:88:ae:bd:de:59:ca:bf:68:8f:18:ff:04:ef:e3:c3:d0:70:
         c0:40:ed:35:31:41:27:96:f7:e0:a7:a6:82:45:00:09:16:8b:
         12:04:3a:68:f4:bb:5f:1e:2c:a7:ce:cc:88:02:fa:9a:8c:e1:
         fd:19:3f:c4:66:f7:e5:d3:17:02:8d:7e:22:f0:b2:94:ce:74:
         30:14:4e:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:30:52 2025 by rpki-client