Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/59afab-e0a8-42d0-873b-6005c0111f1e/1/R6guVXeaHqTvmWf4IdXMBbe9mek.mft
File:                     R6guVXeaHqTvmWf4IdXMBbe9mek.mft (raw, json)
Hash identifier:          oo7ncwSfz7gqyER0jIph8xEM8vtzQxHPzH3j3bD6qCQ=
Subject key identifier:   0A:32:9A:D9:62:FB:FA:B2:C6:2F:5F:CC:A3:9D:44:82:D1:85:76:55
Authority key identifier: 47:A8:2E:55:77:9A:1E:A4:EF:99:67:F8:21:D5:CC:05:B7:BD:99:E9
Certificate issuer:       /CN=47a82e55779a1ea4ef9967f821d5cc05b7bd99e9
Certificate serial:       0199FB7C8DA78CB00708C8DF44CCAF894AEA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R6guVXeaHqTvmWf4IdXMBbe9mek.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/59afab-e0a8-42d0-873b-6005c0111f1e/1/R6guVXeaHqTvmWf4IdXMBbe9mek.mft
Manifest number:          16E1
Signing time:             Sun 19 Oct 2025 08:01:07 +0000
Manifest this update:     Sun 19 Oct 2025 08:01:07 +0000
Manifest next update:     Mon 20 Oct 2025 08:01:07 +0000
Files and hashes:         1: CFUwFBzQtfgbafFzZOyLhQjWkGM.roa (hash: 97CGeBu3yLbE5oYRJj25Ylb6GhnLEinlvUvhqt045H4=)
                          2: R6guVXeaHqTvmWf4IdXMBbe9mek.crl (hash: s+6bLAjA2n+dOI6ASFICisJAGVSwYzokQElqBbugVC8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/59afab-e0a8-42d0-873b-6005c0111f1e/1/R6guVXeaHqTvmWf4IdXMBbe9mek.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/59afab-e0a8-42d0-873b-6005c0111f1e/1/R6guVXeaHqTvmWf4IdXMBbe9mek.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R6guVXeaHqTvmWf4IdXMBbe9mek.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:7c:8d:a7:8c:b0:07:08:c8:df:44:cc:af:89:4a:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47a82e55779a1ea4ef9967f821d5cc05b7bd99e9
        Validity
            Not Before: Oct 19 08:01:07 2025 GMT
            Not After : Oct 20 08:01:07 2025 GMT
        Subject: CN=0a329ad962fbfab2c62f5fcca39d4482d1857655
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:2d:6a:ef:ad:83:d1:74:79:56:7e:bf:9c:51:
                    70:ad:b7:8b:e2:30:6d:9f:77:19:4d:5c:f7:7c:9d:
                    3e:3d:17:16:e4:b6:d3:d8:d1:28:48:c8:54:4c:e0:
                    09:01:8a:42:3b:2d:9f:63:58:03:f6:3a:11:ac:80:
                    f1:df:7f:fc:58:d3:df:26:53:72:b0:90:c2:1f:d7:
                    0c:98:85:38:dc:90:f9:de:ca:3a:28:1f:5a:c7:de:
                    ed:a8:5c:59:9c:08:ac:ae:bf:d2:30:21:3a:35:ea:
                    2a:05:cc:07:b5:c1:34:88:e4:e1:9d:57:47:3f:d8:
                    f7:d3:18:60:a5:88:44:98:6f:30:b7:4e:d1:93:79:
                    d0:d7:d3:59:15:0b:5a:8b:1c:75:d7:a5:43:c8:5c:
                    e6:70:fb:85:5e:64:22:e9:b3:70:7e:25:39:02:b8:
                    3e:3c:c8:2d:97:46:89:b8:59:20:e8:e1:39:e8:38:
                    c2:6e:6d:3c:8a:7c:d4:d7:79:b3:b7:92:55:3e:d3:
                    37:85:41:f3:e5:51:a6:9e:f3:d7:96:0d:4e:68:ea:
                    87:90:05:78:63:cd:cd:78:9e:8e:1e:33:98:0b:6f:
                    75:ae:a9:0c:2d:75:47:3c:1a:c0:1a:58:c2:cd:fa:
                    98:00:4d:a5:70:5a:d5:19:ce:cd:69:fa:c6:74:87:
                    c6:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:32:9A:D9:62:FB:FA:B2:C6:2F:5F:CC:A3:9D:44:82:D1:85:76:55
            X509v3 Authority Key Identifier:
                keyid:47:A8:2E:55:77:9A:1E:A4:EF:99:67:F8:21:D5:CC:05:B7:BD:99:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R6guVXeaHqTvmWf4IdXMBbe9mek.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/59afab-e0a8-42d0-873b-6005c0111f1e/1/R6guVXeaHqTvmWf4IdXMBbe9mek.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/59afab-e0a8-42d0-873b-6005c0111f1e/1/R6guVXeaHqTvmWf4IdXMBbe9mek.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:1a:e0:0f:e3:19:d3:a2:54:32:0b:f4:83:3e:90:a0:f6:b1:
         8d:71:dd:fc:71:ad:8d:b7:01:e5:4f:6e:36:20:06:51:76:ef:
         b3:9e:10:b1:4b:f8:d7:26:04:08:92:1a:21:81:60:74:26:42:
         d7:96:ff:27:81:aa:d2:ae:08:19:74:81:93:21:1f:bf:8d:af:
         24:23:1d:e1:17:c2:40:2c:5c:8e:c7:80:96:16:e9:b8:8b:c9:
         fc:ff:eb:05:b7:37:ca:a4:78:51:b2:20:ee:2c:e7:f5:ca:7a:
         b9:6f:06:6b:16:bc:3c:52:c7:5c:96:b2:c9:02:1e:ce:d7:6b:
         85:2b:68:a3:ff:7b:fa:7f:a0:7e:66:04:5e:4f:ec:94:54:7e:
         67:40:ab:ab:36:c9:cb:b2:1f:52:d7:70:ee:2b:77:4f:4f:84:
         44:af:b3:8b:70:08:3a:13:7c:6c:47:06:ea:57:4c:a0:c1:18:
         76:54:6c:be:58:59:9f:5c:ee:09:68:79:85:54:69:97:3f:bd:
         f0:49:8c:1d:a1:45:30:c8:5f:e4:e5:5e:e7:3b:5f:1e:a2:5e:
         b6:94:fd:9d:5b:8d:51:79:8d:25:8b:50:f8:61:de:36:00:aa:
         3b:da:b4:76:a2:71:d0:3d:94:b5:e1:67:32:a3:b0:b1:b9:b2:
         b8:79:9f:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:14:08 2025 by rpki-client