Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/CeodRTGwcdZXRpnBLlr6Qfib1Ak.mft
File:                     CeodRTGwcdZXRpnBLlr6Qfib1Ak.mft (raw, json)
Hash identifier:          m4Gf6lTEz5tQHxZThynWFcaLuoWxyc6FPrvbUupSnDg=
Subject key identifier:   13:2F:62:AE:FF:D3:AA:EA:2E:1B:E4:B1:86:0E:7F:B0:E8:DD:60:EF
Authority key identifier: 09:EA:1D:45:31:B0:71:D6:57:46:99:C1:2E:5A:FA:41:F8:9B:D4:09
Certificate issuer:       /CN=09ea1d4531b071d6574699c12e5afa41f89bd409
Certificate serial:       0199FB0F2935CC1A62DCF2AD2399AD1A3D9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CeodRTGwcdZXRpnBLlr6Qfib1Ak.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/CeodRTGwcdZXRpnBLlr6Qfib1Ak.mft
Manifest number:          16E8
Signing time:             Sun 19 Oct 2025 06:01:38 +0000
Manifest this update:     Sun 19 Oct 2025 06:01:38 +0000
Manifest next update:     Mon 20 Oct 2025 06:01:38 +0000
Files and hashes:         1: 4to_68QAA5EZP6QVD93278mKQ9M.roa (hash: Din2sy8w9QJ69ucmdkg50bJdWrDL1O3pEtYdPufl40o=)
                          2: CeodRTGwcdZXRpnBLlr6Qfib1Ak.crl (hash: 2MQywaj2RTg5CDNNtAG79J5l3MvS7NrGzOU65kWeM04=)
                          3: kA5bGRl5EHENPG-lFJ-KaUPwtEE.roa (hash: SCW2no/wqMGhhPF1PG24OTD/SWeQikiX3GB3gK0CJDQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/CeodRTGwcdZXRpnBLlr6Qfib1Ak.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/CeodRTGwcdZXRpnBLlr6Qfib1Ak.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CeodRTGwcdZXRpnBLlr6Qfib1Ak.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:0f:29:35:cc:1a:62:dc:f2:ad:23:99:ad:1a:3d:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09ea1d4531b071d6574699c12e5afa41f89bd409
        Validity
            Not Before: Oct 19 06:01:38 2025 GMT
            Not After : Oct 20 06:01:38 2025 GMT
        Subject: CN=132f62aeffd3aaea2e1be4b1860e7fb0e8dd60ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a7:01:5e:47:48:f5:b0:58:f9:bf:88:ee:bb:
                    0e:10:0e:35:bd:0c:21:0b:7d:60:ad:73:c4:c7:6b:
                    f4:c5:67:88:5d:f8:54:43:28:d2:27:6b:37:d2:43:
                    eb:70:be:ed:6f:41:ef:06:74:86:f2:94:83:af:8e:
                    57:00:e3:0e:dd:63:f5:71:01:7a:ab:67:bc:fd:4c:
                    26:90:d3:d1:5e:23:62:6c:b9:53:f6:f9:21:16:bc:
                    5c:53:f6:fe:24:16:b2:fd:f7:76:1b:94:87:e6:ec:
                    39:74:bd:f5:73:dd:2a:bd:56:0b:9e:40:9a:79:4a:
                    92:95:ae:b9:c9:b6:53:09:8f:17:0d:44:98:af:3d:
                    b5:48:e2:b4:83:20:32:f2:90:08:70:df:3e:8b:5e:
                    e1:27:ac:2c:c3:d8:ce:ce:6c:12:d6:da:8f:09:38:
                    61:13:b1:8f:42:3e:73:45:84:72:8b:3a:93:50:62:
                    0e:cc:d5:1b:98:1b:39:63:03:04:11:9c:8d:7c:7e:
                    d3:fb:ab:61:c2:cc:cc:e6:80:98:9e:b8:0d:4e:ac:
                    5a:d5:a2:d4:8d:3d:19:f6:2c:c2:aa:30:52:9f:c8:
                    e1:86:33:6f:9d:90:6d:65:0f:85:f3:8b:6a:15:6b:
                    d9:6d:68:15:bc:e3:06:b3:53:e5:e8:14:7a:ce:20:
                    c3:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:2F:62:AE:FF:D3:AA:EA:2E:1B:E4:B1:86:0E:7F:B0:E8:DD:60:EF
            X509v3 Authority Key Identifier:
                keyid:09:EA:1D:45:31:B0:71:D6:57:46:99:C1:2E:5A:FA:41:F8:9B:D4:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeodRTGwcdZXRpnBLlr6Qfib1Ak.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/CeodRTGwcdZXRpnBLlr6Qfib1Ak.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a7ca61-2e8d-4bbe-9c36-4e6d130bda0f/1/CeodRTGwcdZXRpnBLlr6Qfib1Ak.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:b8:b4:ec:3e:8a:5a:fa:f2:8a:c6:33:60:16:71:7d:27:b8:
         98:09:74:6d:66:82:22:e1:40:05:7b:a3:f8:7e:3b:fd:b8:9b:
         f6:59:4b:39:2f:f5:9d:71:ee:5b:db:d2:c1:8b:46:a4:73:6a:
         4b:c9:32:93:ac:a5:5d:ef:80:79:a9:e4:0d:b8:fa:cb:0c:b3:
         9a:de:b0:54:95:3e:dd:2a:8a:9f:8e:ee:16:6f:c2:2f:11:98:
         c2:63:1e:88:3a:aa:95:92:35:d1:d0:19:81:d3:b9:2f:a1:82:
         6a:ab:d8:86:8e:0d:ca:07:6b:d4:1b:84:f2:a6:b5:ed:2f:94:
         2a:89:70:c7:33:5c:69:fa:04:56:a2:76:58:e8:b6:59:40:36:
         01:ad:d2:fb:f0:98:fd:8c:41:df:84:44:02:93:82:35:a9:22:
         40:98:b8:56:47:00:8e:45:59:c9:e0:2b:38:3d:12:d5:22:0d:
         2a:b6:39:aa:bc:fe:14:fc:32:79:b4:2f:e6:4b:84:58:47:cf:
         84:8a:44:f0:5d:a1:2e:69:b4:7f:d3:8f:35:2f:3c:e2:25:f7:
         18:73:63:34:4a:50:46:eb:20:d1:70:26:40:d6:71:af:6b:23:
         ef:45:90:8b:cb:b0:d5:68:78:72:8b:b0:3e:90:6b:cb:ed:3e:
         7c:5f:03:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:15:18 2025 by rpki-client