Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f00ccc-ec3f-40df-a9fc-7cc79917300a/1/Lb24n7QRj_pV-v2_ReGSgr4Oes8.mft
File:                     Lb24n7QRj_pV-v2_ReGSgr4Oes8.mft (raw, json)
Hash identifier:          D3RKHvuNcdeQcvy0CQo3f7VlAQmcGtpiW5PFgZF0uK0=
Subject key identifier:   52:45:32:F8:15:34:CC:AF:3B:CF:CE:60:F8:18:61:5A:18:20:7A:DD
Authority key identifier: 2D:BD:B8:9F:B4:11:8F:FA:55:FA:FD:BF:45:E1:92:82:BE:0E:7A:CF
Certificate issuer:       /CN=2dbdb89fb4118ffa55fafdbf45e19282be0e7acf
Certificate serial:       0199FE0FF51A7B3F670363ECD64083D578DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Lb24n7QRj_pV-v2_ReGSgr4Oes8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/f00ccc-ec3f-40df-a9fc-7cc79917300a/1/Lb24n7QRj_pV-v2_ReGSgr4Oes8.mft
Manifest number:          16E3
Signing time:             Sun 19 Oct 2025 20:01:22 +0000
Manifest this update:     Sun 19 Oct 2025 20:01:22 +0000
Manifest next update:     Mon 20 Oct 2025 20:01:22 +0000
Files and hashes:         1: 1-zaXNM8IjBevuapBNy17UgtMDPI.roa (hash: qqGCZZPHpyNcqi3nXwcUIZYDresP/fXUbRojoE1EMpQ=)
                          2: Lb24n7QRj_pV-v2_ReGSgr4Oes8.crl (hash: jlfY2S18pF5Lwal8Ihgs0n43it51nVgPAjPIwbNSiEo=)
                          3: jV6ZfPR6YwqVEX_jWrfo-E3Ut1A.roa (hash: aKYc4lH7d/oqBFxJQA9n8W63icM0UlQYroSqqHHtI28=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/f00ccc-ec3f-40df-a9fc-7cc79917300a/1/Lb24n7QRj_pV-v2_ReGSgr4Oes8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/f00ccc-ec3f-40df-a9fc-7cc79917300a/1/Lb24n7QRj_pV-v2_ReGSgr4Oes8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Lb24n7QRj_pV-v2_ReGSgr4Oes8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:0f:f5:1a:7b:3f:67:03:63:ec:d6:40:83:d5:78:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2dbdb89fb4118ffa55fafdbf45e19282be0e7acf
        Validity
            Not Before: Oct 19 20:01:22 2025 GMT
            Not After : Oct 20 20:01:22 2025 GMT
        Subject: CN=524532f81534ccaf3bcfce60f818615a18207add
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b7:56:57:27:0c:fd:10:b2:0b:5c:4e:02:9e:
                    5a:40:fe:ec:55:73:6f:98:f3:0b:7e:6a:f6:d5:24:
                    83:c5:91:bf:48:49:0f:05:97:d0:46:1d:cc:a8:7c:
                    c8:1b:11:8c:93:2b:8d:39:ef:2e:ab:f1:a4:80:74:
                    2c:50:88:0a:95:d6:54:42:e9:26:79:66:0b:1c:a0:
                    ce:df:78:8d:b1:63:45:9c:c7:17:20:ea:c8:5c:31:
                    99:14:2d:75:f2:52:e9:b5:80:c3:fd:d2:63:12:24:
                    a2:f5:20:98:e7:5c:ee:25:81:4f:8c:b7:df:10:28:
                    64:6c:65:35:e8:cf:89:7e:05:86:99:a5:7d:cf:ee:
                    68:91:6c:21:ca:bb:af:87:10:1d:d5:e6:d0:87:6e:
                    bc:f5:27:e5:69:c2:a9:64:e7:a6:3f:58:92:82:5a:
                    11:b7:6b:99:6f:f7:b5:66:bc:a7:e1:15:cd:55:ed:
                    97:86:7b:d6:ed:10:e0:15:27:14:c0:39:64:7d:2a:
                    b8:b6:7a:34:49:1b:ea:79:ca:40:d8:bf:bc:71:e9:
                    74:34:1d:50:ef:20:f4:a1:52:39:db:b0:ae:cf:8d:
                    13:26:1d:7e:5e:40:5f:32:e9:18:4d:d9:42:57:ff:
                    4c:06:cc:5e:28:c0:38:8a:44:a2:12:16:92:cc:9b:
                    ac:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:45:32:F8:15:34:CC:AF:3B:CF:CE:60:F8:18:61:5A:18:20:7A:DD
            X509v3 Authority Key Identifier:
                keyid:2D:BD:B8:9F:B4:11:8F:FA:55:FA:FD:BF:45:E1:92:82:BE:0E:7A:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lb24n7QRj_pV-v2_ReGSgr4Oes8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f00ccc-ec3f-40df-a9fc-7cc79917300a/1/Lb24n7QRj_pV-v2_ReGSgr4Oes8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f00ccc-ec3f-40df-a9fc-7cc79917300a/1/Lb24n7QRj_pV-v2_ReGSgr4Oes8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:0a:97:ce:1e:3f:2d:4e:26:65:bb:7f:82:a3:82:36:8a:2e:
         24:62:7d:bb:4d:f9:f5:66:88:9a:64:e3:4a:b5:4a:a9:f0:01:
         6d:eb:44:b9:b8:da:4d:a6:d1:7d:a8:f9:2a:07:1f:a1:e8:d5:
         97:b8:31:0a:42:cf:b6:6f:eb:bf:b2:56:c8:a0:8c:59:b9:67:
         a1:d2:50:e5:ea:a7:90:51:0a:10:52:1f:13:be:26:73:fd:74:
         78:56:43:3f:e7:88:71:40:4c:a0:99:88:78:b3:93:69:c3:c8:
         c4:20:94:71:b9:64:ef:0d:a4:da:39:1f:4f:66:08:20:a0:10:
         b5:43:75:b0:9e:65:98:de:3f:48:63:89:6d:25:0f:d8:27:ac:
         6f:54:b8:06:04:75:c9:cb:f4:12:07:03:18:51:0e:66:34:75:
         90:3d:13:3f:b5:d5:21:8c:63:09:26:f4:70:06:67:63:a6:2d:
         2c:fc:b6:9b:cf:08:c8:dc:c7:3b:82:37:d6:43:76:dd:53:a6:
         e2:0a:b2:8e:3f:e2:41:f8:cd:d7:db:20:28:ca:09:49:f1:ea:
         e6:6a:bd:ef:08:78:cd:6a:a5:67:3b:ca:4e:e7:b9:ee:91:2d:
         e6:e9:b2:e4:a8:51:ec:f7:7a:e8:45:73:55:15:48:28:b0:d5:
         37:61:61:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:55:26 2025 by rpki-client