Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.mft
File:                     fmXasjlAyzlPmqpmT-pNb49C4xg.mft (raw, json)
Hash identifier:          qP/lVGwbGxJK9Khhe2AUUtNHJ3Y92O3eDDhZyQb+RHY=
Subject key identifier:   DF:EA:42:FB:60:5E:CC:53:6F:40:66:68:DE:33:6A:FA:56:E9:EC:28
Authority key identifier: 7E:65:DA:B2:39:40:CB:39:4F:9A:AA:66:4F:EA:4D:6F:8F:42:E3:18
Certificate issuer:       /CN=7e65dab23940cb394f9aaa664fea4d6f8f42e318
Certificate serial:       0199FB7CC84450C500FE01A3ADB50ADB2A74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fmXasjlAyzlPmqpmT-pNb49C4xg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.mft
Manifest number:          16EB
Signing time:             Sun 19 Oct 2025 08:01:22 +0000
Manifest this update:     Sun 19 Oct 2025 08:01:22 +0000
Manifest next update:     Mon 20 Oct 2025 08:01:22 +0000
Files and hashes:         1: 2EgNkY8LCfJBqiF5G8pJe3q0hB4.roa (hash: wdnhU8m5AMaVCnPJuJ1ikMuyahXryJ7xnwDGzqvqxIk=)
                          2: B9gQbAB9xsN6pQfQdJIwTw0mN8w.roa (hash: x4fcMnOhpMuR2+7kVYptH+8Mn3pldQm1ilWOcm4WRJw=)
                          3: fmXasjlAyzlPmqpmT-pNb49C4xg.crl (hash: xzCxWupKKAawMJtiAM3Gd1ND0VOxgWP3pDwCqVmAfGQ=)
                          4: jKTi0IFy2Gsl-io5IjP67e8YnpY.roa (hash: zmbRyxceh2NVjEHPxC/G8V+VaBl1rJ3CnIcL4cBiYPg=)
                          5: onHMu3bAahxq_cU4SfKfk6E_UV4.roa (hash: iPBBLCVey8nRw59EFOtKkUkXyLv07ioTCFN/ZWTNZaI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fmXasjlAyzlPmqpmT-pNb49C4xg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 08:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:7c:c8:44:50:c5:00:fe:01:a3:ad:b5:0a:db:2a:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e65dab23940cb394f9aaa664fea4d6f8f42e318
        Validity
            Not Before: Oct 19 08:01:22 2025 GMT
            Not After : Oct 20 08:01:22 2025 GMT
        Subject: CN=dfea42fb605ecc536f406668de336afa56e9ec28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d7:9d:70:42:69:f9:20:fc:2c:b5:a6:c1:f6:
                    0d:32:6b:95:dc:63:23:dc:58:e9:47:e5:12:be:57:
                    3b:03:00:ca:c5:1a:7a:88:aa:a1:9d:cc:84:48:18:
                    4b:e3:47:0f:d9:75:84:91:65:ab:5b:5d:6c:20:0d:
                    70:65:87:13:17:ab:23:dc:4f:94:79:ef:77:d5:eb:
                    99:7d:82:d7:0f:f1:8d:9d:49:92:cb:02:f9:5b:da:
                    cc:94:3b:e7:c5:73:9f:13:88:56:97:3c:d5:8f:0b:
                    d3:6b:01:96:89:d5:f4:91:4a:7e:3f:de:28:be:57:
                    48:25:86:4f:52:f3:9e:5d:f3:70:ea:c8:28:d7:e3:
                    a8:48:15:96:13:b6:ed:19:d7:5c:ed:53:fb:6b:10:
                    c5:bc:f4:9a:4b:6a:9a:c8:7b:87:34:c8:cd:bf:de:
                    cb:26:c7:cb:a7:f5:6e:24:f6:3f:23:10:3d:15:1a:
                    c9:88:b0:dc:76:bc:12:45:fc:d5:d0:4a:9b:df:c0:
                    a4:97:9f:1e:ef:56:06:da:f4:91:03:61:e2:b6:cd:
                    4c:71:da:87:3b:53:4a:98:56:9f:ce:e1:86:a4:6e:
                    b5:90:a0:54:be:bc:46:52:78:6f:a8:27:f5:06:43:
                    59:51:4f:a9:44:8b:43:cb:e6:35:de:a3:c9:27:46:
                    6b:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:EA:42:FB:60:5E:CC:53:6F:40:66:68:DE:33:6A:FA:56:E9:EC:28
            X509v3 Authority Key Identifier:
                keyid:7E:65:DA:B2:39:40:CB:39:4F:9A:AA:66:4F:EA:4D:6F:8F:42:E3:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fmXasjlAyzlPmqpmT-pNb49C4xg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:69:c2:78:33:23:5f:d4:46:72:02:7e:42:35:69:f4:01:df:
         af:3d:71:33:f1:de:fc:15:71:85:d7:42:0d:b3:48:b2:97:a8:
         9d:ab:29:30:8e:c4:1b:33:27:86:54:5f:e5:5e:c2:de:46:61:
         59:11:2f:60:fe:f0:93:a3:8a:6d:d4:fd:1d:2b:b3:4a:95:d9:
         5f:4d:7e:70:c2:9a:c4:dc:ed:bf:40:60:75:f1:32:60:24:64:
         49:11:ef:10:a9:0e:8f:a2:80:c4:96:6b:11:91:56:d3:bb:73:
         48:68:60:ad:9d:55:91:89:71:3f:a2:f6:22:0c:a6:5b:c9:13:
         d1:b7:61:09:c0:1b:cd:88:d9:73:3b:71:82:90:77:99:a8:8c:
         ce:dc:71:3d:79:9c:6b:df:62:0e:91:e7:37:8e:cc:5c:e9:9f:
         42:b5:8f:1f:3d:30:ca:03:3b:62:46:d4:b1:a6:af:e4:ce:60:
         35:b1:ab:ee:23:7b:e2:3a:27:a4:c9:d6:52:63:1f:1c:f7:32:
         d7:67:b7:94:0e:6a:2d:e3:e8:9b:07:eb:04:1e:89:29:77:a7:
         45:10:af:20:b0:b0:81:37:b1:39:8c:93:74:ff:4e:d4:f8:44:
         44:ce:c9:ec:bb:85:42:82:ab:cd:38:00:9b:d6:41:8b:a6:72:
         b4:9c:b7:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:31:53 2025 by rpki-client