Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/16d85f-85b5-42e3-ad9f-eec05f49ac86/1/abfzv44Ke1kKD_qhycCsWAoLEZ4.mft
File:                     abfzv44Ke1kKD_qhycCsWAoLEZ4.mft (raw, json)
Hash identifier:          kXvTRCJGlRHUQIdyYdW5tcEqXatFVGCO/G5Avkj2SUQ=
Subject key identifier:   7C:DE:CB:0D:C4:BC:6A:01:14:28:95:A8:FD:EF:CB:83:22:99:CD:AD
Authority key identifier: 69:B7:F3:BF:8E:0A:7B:59:0A:0F:FA:A1:C9:C0:AC:58:0A:0B:11:9E
Certificate issuer:       /CN=69b7f3bf8e0a7b590a0ffaa1c9c0ac580a0b119e
Certificate serial:       0199FA6ABE5C02B50DAC10CAE95025F4F2C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/abfzv44Ke1kKD_qhycCsWAoLEZ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/16d85f-85b5-42e3-ad9f-eec05f49ac86/1/abfzv44Ke1kKD_qhycCsWAoLEZ4.mft
Manifest number:          0C
Signing time:             Sun 19 Oct 2025 03:02:03 +0000
Manifest this update:     Sun 19 Oct 2025 03:02:03 +0000
Manifest next update:     Mon 20 Oct 2025 03:02:03 +0000
Files and hashes:         1: R7q2gktvFsNXXsx_b10S5ynAXaw.roa (hash: +bf2vfop1BjTPFaIwsRZHC/bhXQwlqn19Fh+mJR9npc=)
                          2: abfzv44Ke1kKD_qhycCsWAoLEZ4.crl (hash: iATvSQWjurquRxnRUUBeL1BEXAUW2zBjCq9bVm5qL8A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/16d85f-85b5-42e3-ad9f-eec05f49ac86/1/abfzv44Ke1kKD_qhycCsWAoLEZ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/16d85f-85b5-42e3-ad9f-eec05f49ac86/1/abfzv44Ke1kKD_qhycCsWAoLEZ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/abfzv44Ke1kKD_qhycCsWAoLEZ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 03:02:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:6a:be:5c:02:b5:0d:ac:10:ca:e9:50:25:f4:f2:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69b7f3bf8e0a7b590a0ffaa1c9c0ac580a0b119e
        Validity
            Not Before: Oct 19 03:02:03 2025 GMT
            Not After : Oct 20 03:02:03 2025 GMT
        Subject: CN=7cdecb0dc4bc6a01142895a8fdefcb832299cdad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:0b:c0:22:8d:2b:8d:2e:1f:15:06:0f:5a:3c:
                    2d:4f:15:8f:29:23:34:ef:2c:36:77:e5:7d:a3:c0:
                    7f:88:4a:76:f0:bf:d0:f1:0b:dc:8f:59:ac:ae:73:
                    8f:64:bf:f9:a4:2a:af:45:03:ad:74:31:50:2a:16:
                    a6:5d:32:09:3f:27:a4:5c:fb:19:a8:dd:77:e5:83:
                    c9:51:9b:ca:ce:a9:9f:59:d2:bc:27:06:d3:63:8b:
                    0b:52:4f:b6:59:f5:79:aa:23:9f:d6:a9:bf:90:e8:
                    55:3c:fa:1f:f2:4d:aa:7f:90:8f:81:4e:53:38:d2:
                    c0:61:fd:a1:29:11:01:bc:3c:5d:a1:82:f3:ae:bb:
                    b6:6c:fc:a1:13:95:f3:6f:66:77:d7:03:7b:b5:f3:
                    45:4b:7f:e4:51:2c:14:12:d9:5f:33:ef:fa:2d:94:
                    ae:b5:df:7c:53:de:f5:33:c8:f7:f1:50:7c:52:1a:
                    15:cc:71:8a:be:f7:b8:00:00:9b:ea:3c:e3:e8:48:
                    bf:25:48:69:12:3d:ef:31:4d:f5:b9:f4:e4:65:bc:
                    76:b3:b8:02:52:30:d5:ab:f3:2b:44:e6:f4:31:5d:
                    10:1a:4b:bc:0f:13:f0:c3:e0:90:e7:6b:f1:55:8e:
                    d9:b6:30:7b:9d:ef:fc:31:5f:1a:93:eb:e5:89:de:
                    a1:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:DE:CB:0D:C4:BC:6A:01:14:28:95:A8:FD:EF:CB:83:22:99:CD:AD
            X509v3 Authority Key Identifier:
                keyid:69:B7:F3:BF:8E:0A:7B:59:0A:0F:FA:A1:C9:C0:AC:58:0A:0B:11:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/abfzv44Ke1kKD_qhycCsWAoLEZ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/16d85f-85b5-42e3-ad9f-eec05f49ac86/1/abfzv44Ke1kKD_qhycCsWAoLEZ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/16d85f-85b5-42e3-ad9f-eec05f49ac86/1/abfzv44Ke1kKD_qhycCsWAoLEZ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:0d:2c:7e:68:7b:ab:3f:71:d6:6b:7c:6e:05:75:a7:9f:c3:
         3c:41:5f:b9:cd:5f:df:3e:0a:50:0f:7b:a0:e8:75:98:65:c0:
         ed:e4:d1:a8:29:bd:b9:26:27:6c:5f:fb:2a:44:4a:e2:31:21:
         c1:dc:10:52:01:51:9f:f0:63:74:f0:c4:4d:e1:01:df:a0:06:
         f4:b4:a8:aa:74:6f:de:ea:d4:60:2d:40:f1:12:14:bf:0d:40:
         12:05:ef:4b:85:bb:de:d7:fe:d3:84:0a:4d:e3:54:28:88:f5:
         20:3f:ae:3d:27:dd:f2:e1:23:63:87:ee:17:97:d6:59:d7:d4:
         67:2d:dc:c3:af:7e:6b:c4:85:14:98:f5:fe:6d:91:03:e0:16:
         38:5b:87:fa:a0:3a:b9:78:82:34:b3:ce:19:50:e8:92:fa:e4:
         9f:c1:e9:f3:55:43:d8:3d:96:f0:c5:48:80:bc:c6:72:0f:af:
         2e:5d:a7:00:b3:74:c8:f1:21:a7:d2:9c:d9:4f:e0:cd:78:d6:
         a4:4c:ee:03:c5:10:e0:54:31:d8:5f:7a:01:47:29:96:92:b7:
         cf:37:71:18:b1:e1:ad:e0:f2:3a:5a:b9:fc:c8:90:76:74:f1:
         29:79:ff:f1:b3:71:85:e5:10:25:54:1e:de:ec:56:17:fb:6e:
         d9:8d:d7:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:58 2025 by rpki-client