Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/35f43b-087c-490b-9c03-1857e4268fbf/1/6LZfHV6XDmCC0s_W-Z75yBdKFEA.mft
File:                     6LZfHV6XDmCC0s_W-Z75yBdKFEA.mft (raw, json)
Hash identifier:          XF9pFDcxFreqnyFr+OIH0ObyRbvJcODDZ6QlhndYnso=
Subject key identifier:   99:0D:9A:DE:9C:37:B2:B5:F5:96:AA:4E:64:D5:B6:3F:C0:91:B6:AD
Authority key identifier: E8:B6:5F:1D:5E:97:0E:60:82:D2:CF:D6:F9:9E:F9:C8:17:4A:14:40
Certificate issuer:       /CN=e8b65f1d5e970e6082d2cfd6f99ef9c8174a1440
Certificate serial:       0199FE7D9BB8FFDCD4C22909A00CA89AD7C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6LZfHV6XDmCC0s_W-Z75yBdKFEA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/35f43b-087c-490b-9c03-1857e4268fbf/1/6LZfHV6XDmCC0s_W-Z75yBdKFEA.mft
Manifest number:          16E3
Signing time:             Sun 19 Oct 2025 22:01:08 +0000
Manifest this update:     Sun 19 Oct 2025 22:01:08 +0000
Manifest next update:     Mon 20 Oct 2025 22:01:08 +0000
Files and hashes:         1: 1-Gp-Aj6rXUl3rCcfTEV_zKX81GM.roa (hash: jcNgC8sUFB2sRMcieBCYPhWYxbrZslrozKmwIIc2sSY=)
                          2: 6LZfHV6XDmCC0s_W-Z75yBdKFEA.crl (hash: k9JVU5DhmvP1YuNCgUvqQwjcW7Ool5rE+7DEjnmlB90=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/35f43b-087c-490b-9c03-1857e4268fbf/1/6LZfHV6XDmCC0s_W-Z75yBdKFEA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/35f43b-087c-490b-9c03-1857e4268fbf/1/6LZfHV6XDmCC0s_W-Z75yBdKFEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6LZfHV6XDmCC0s_W-Z75yBdKFEA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:7d:9b:b8:ff:dc:d4:c2:29:09:a0:0c:a8:9a:d7:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8b65f1d5e970e6082d2cfd6f99ef9c8174a1440
        Validity
            Not Before: Oct 19 22:01:08 2025 GMT
            Not After : Oct 20 22:01:08 2025 GMT
        Subject: CN=990d9ade9c37b2b5f596aa4e64d5b63fc091b6ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:1e:a4:52:fa:31:64:06:c0:e2:7a:f4:24:ef:
                    69:b5:70:86:df:7d:cb:2d:29:b9:3d:ad:a1:d7:76:
                    42:fa:e6:c1:86:49:ed:60:c5:9b:6a:b2:df:59:20:
                    af:d1:37:53:9b:23:5b:ca:90:5f:07:73:e4:25:0e:
                    32:2b:8d:6e:0b:fc:c8:a7:c6:7e:26:fb:b7:45:b6:
                    2e:32:aa:09:8c:6b:77:32:db:21:54:b8:cc:3f:be:
                    aa:b5:e8:d4:90:98:dd:76:3f:72:d1:82:af:76:29:
                    3e:44:d9:04:9f:97:6a:42:f8:8d:f6:ec:c1:cb:f0:
                    97:d6:cf:3d:05:bc:0e:4b:ac:5d:84:5a:44:65:13:
                    47:4d:b9:a8:ac:44:53:b1:e2:a0:51:90:c5:7f:b3:
                    91:d5:c2:bc:c8:f1:5a:95:22:a7:df:d1:05:cb:c2:
                    52:27:74:fc:9f:9e:52:77:43:b9:35:92:e3:15:ef:
                    90:63:62:f6:a0:d2:31:8f:5e:c9:44:2f:4a:e4:9f:
                    11:7d:5b:4a:b9:56:5e:36:b5:c0:6e:7e:ac:39:37:
                    95:be:94:11:cc:0a:4e:ea:8d:72:b1:bc:ce:30:e7:
                    d0:96:d0:b9:50:36:c0:38:04:29:a9:e9:3a:1b:a3:
                    cc:a0:77:33:69:c9:2b:e6:71:e0:87:36:14:fa:84:
                    17:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:0D:9A:DE:9C:37:B2:B5:F5:96:AA:4E:64:D5:B6:3F:C0:91:B6:AD
            X509v3 Authority Key Identifier:
                keyid:E8:B6:5F:1D:5E:97:0E:60:82:D2:CF:D6:F9:9E:F9:C8:17:4A:14:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LZfHV6XDmCC0s_W-Z75yBdKFEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/35f43b-087c-490b-9c03-1857e4268fbf/1/6LZfHV6XDmCC0s_W-Z75yBdKFEA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/35f43b-087c-490b-9c03-1857e4268fbf/1/6LZfHV6XDmCC0s_W-Z75yBdKFEA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:65:a8:7f:93:9a:69:c3:37:f3:5a:72:15:90:b9:15:38:5c:
         5d:5a:e0:58:23:ca:e2:23:c1:dc:3f:ab:92:c1:a2:90:2a:9d:
         71:0b:ca:54:98:72:f2:2c:29:0a:0b:b6:15:a1:10:56:d0:c2:
         38:71:b2:9a:dd:53:e2:16:13:e1:13:b4:ef:58:4c:6c:ba:0d:
         a0:a9:e8:d2:64:26:70:c6:ed:74:1d:da:30:0c:00:cd:e0:b9:
         88:48:c3:7b:12:d4:9b:ac:9f:f1:95:a0:a0:b4:f3:86:c4:77:
         0a:7e:a9:2c:b1:e5:de:62:d6:5d:41:85:5d:9f:63:1d:12:61:
         97:2a:da:b7:6f:12:3f:1b:31:c2:c7:2c:2d:0c:b6:81:bb:94:
         b6:44:99:6f:45:0f:e9:3c:ae:e9:30:5c:99:2a:e8:3b:c7:d2:
         7e:c9:62:1e:e8:51:64:37:e3:b4:b4:9c:ed:11:ed:16:8a:e8:
         c6:f3:1c:68:31:24:49:a7:a3:f8:76:b5:94:2d:2e:f4:7b:5b:
         33:88:7c:11:fc:b7:8e:d3:94:a0:24:87:f2:8a:27:69:c5:7f:
         91:c8:4e:7b:4b:a8:1d:8d:1f:f7:80:53:c1:a5:2d:06:52:6f:
         55:c9:13:60:06:03:d9:1b:9d:96:c5:70:1e:5c:71:e1:1c:11:
         89:2c:23:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:53:05 2025 by rpki-client