Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.mft
File:                     RtmgpLV6Dux8TlKhGdtLHGVvTbQ.mft (raw, json)
Hash identifier:          uvK6BMxBcTBls70nT3Ln7Sbk3VUx1qY5aI9EIPtbW0I=
Subject key identifier:   84:CC:8A:35:0D:28:BE:BC:87:CE:87:CF:5A:AE:B3:BB:B8:FE:46:BA
Authority key identifier: 46:D9:A0:A4:B5:7A:0E:EC:7C:4E:52:A1:19:DB:4B:1C:65:6F:4D:B4
Certificate issuer:       /CN=46d9a0a4b57a0eec7c4e52a119db4b1c656f4db4
Certificate serial:       0199FCC6A9771753BB6C75D62090E8C78F7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.mft
Manifest number:          16E4
Signing time:             Sun 19 Oct 2025 14:01:41 +0000
Manifest this update:     Sun 19 Oct 2025 14:01:41 +0000
Manifest next update:     Mon 20 Oct 2025 14:01:41 +0000
Files and hashes:         1: ExN9i5VesHU3F7YUwnAG8cmmWIY.roa (hash: ohUReGOM59d9wdFacF3liO8XNYgM9oH2+Bntxv7lM1Y=)
                          2: L3NZE3diqCfrOMqlaqYV4hdJSf4.roa (hash: vcQOyWenVbLS69il7j69IF/EsJjMjN7DJNMQo/ozyO8=)
                          3: LHiOtk6tL1CXrv20IpGcmi0303Q.roa (hash: V/XoU0KL7XbTl000bnNR3hPbksWkdzPpz1xOimffKQc=)
                          4: RtmgpLV6Dux8TlKhGdtLHGVvTbQ.crl (hash: UxnS9zSsYAliFseDAlgbi+iF00fhb34HDOBV/CNBYPs=)
                          5: nc6Tssi0fJUCdpIrzpS6gtLsknA.roa (hash: +UGU2rdYiUMrGCv6hqB6GXiHSsxfMHPA919kyoWQjQg=)
                          6: sAtItIdVW20mI2NFNh8XtGHWZOE.roa (hash: dKze9gkE7+w/iOUYyZPsFpG7X/XK0rolO2v25V1/rGM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:c6:a9:77:17:53:bb:6c:75:d6:20:90:e8:c7:8f:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46d9a0a4b57a0eec7c4e52a119db4b1c656f4db4
        Validity
            Not Before: Oct 19 14:01:41 2025 GMT
            Not After : Oct 20 14:01:41 2025 GMT
        Subject: CN=84cc8a350d28bebc87ce87cf5aaeb3bbb8fe46ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:33:ba:ba:71:a8:19:61:eb:ce:b7:f0:95:df:
                    90:de:38:0e:9c:dd:54:a7:12:87:a2:56:05:e0:eb:
                    a9:a5:48:a9:e3:86:b9:d4:e7:bd:3c:0c:eb:7b:54:
                    f0:8c:5a:20:84:dc:29:fa:9b:97:29:f1:cc:e2:4f:
                    55:cc:04:d3:bb:91:4b:1f:c6:ba:74:8f:be:2f:2c:
                    9e:da:6a:8b:94:73:8d:b7:59:63:7d:54:8d:ee:79:
                    ed:69:c4:18:9d:c4:59:48:29:f5:4f:12:cc:fa:fa:
                    76:6d:54:10:70:b5:5e:85:2f:14:c3:f2:7c:01:a0:
                    71:52:96:46:47:42:10:80:9a:53:92:8e:62:06:b2:
                    0f:11:21:33:ad:21:1b:ae:0c:0f:22:d6:7e:7e:87:
                    6f:59:cd:cc:57:ab:b3:3c:09:d6:4f:63:bd:67:9a:
                    a4:ea:49:f2:f9:11:02:1a:9d:b5:89:59:15:f8:81:
                    12:3a:7a:74:33:e1:39:8a:f5:91:d1:d0:f2:b0:3d:
                    27:14:16:78:3a:39:c9:bb:51:81:0c:50:48:96:ea:
                    14:26:8a:98:a3:56:d6:2c:89:93:76:8b:6a:73:cf:
                    e1:e5:66:2e:ba:a5:34:35:75:02:b7:7d:8c:71:db:
                    4d:79:b6:2c:92:e1:e3:88:f3:8b:c1:47:61:2a:1c:
                    2b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:CC:8A:35:0D:28:BE:BC:87:CE:87:CF:5A:AE:B3:BB:B8:FE:46:BA
            X509v3 Authority Key Identifier:
                keyid:46:D9:A0:A4:B5:7A:0E:EC:7C:4E:52:A1:19:DB:4B:1C:65:6F:4D:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:5f:27:48:3d:7c:ae:e1:bd:d9:0c:05:99:e1:1a:be:98:99:
         fe:1d:d3:e9:87:a8:5b:e1:6d:a7:1b:86:af:69:7a:55:50:03:
         c6:02:61:44:4a:9e:c1:8b:b3:b0:07:57:9b:64:13:bb:17:85:
         b7:d4:6f:26:60:b4:1e:13:9a:ba:96:27:0f:40:05:f1:4d:59:
         b7:d9:94:c7:1a:8c:9b:e0:17:81:2f:5d:2f:ec:20:2f:6f:d6:
         c1:12:00:0d:de:d9:d0:cc:5e:5b:47:13:03:cb:da:53:fa:9a:
         b7:53:7f:54:a0:4d:90:2d:80:3e:ab:06:dd:d8:e1:a3:3a:14:
         c3:27:43:91:e5:59:b0:d1:3e:f8:57:d0:c1:df:1d:be:50:60:
         22:e1:c2:56:b2:03:a0:e3:c7:53:19:25:f6:af:ef:f0:70:23:
         de:74:07:ab:1e:0a:9c:ec:b6:84:7d:9b:d7:0c:e2:53:3c:3d:
         c6:1e:9f:c6:93:32:61:29:f4:f4:a6:25:01:80:28:b7:8f:b5:
         a2:ec:c2:90:18:31:4f:35:42:3e:b2:47:9a:f7:e8:61:c5:64:
         36:f0:7e:f2:ba:0a:2d:cc:dd:0c:35:33:0f:6b:d5:50:7a:68:
         0e:55:ad:83:af:8a:3f:aa:50:4b:23:11:a6:20:73:d0:35:b6:
         c9:37:e2:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:19:37 2025 by rpki-client