Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/e1a78b-dd36-4ee9-a260-3b1aad9fdd57/1/rRAvGvF9AP2Ao9n-n_6B0EzhdEc.mft
File:                     rRAvGvF9AP2Ao9n-n_6B0EzhdEc.mft (raw, json)
Hash identifier:          2xMD8fKxTfG0eHJQX5Sj0AkTh9OobCL8MUROie6bogs=
Subject key identifier:   27:EC:9D:44:A5:BD:BE:79:6D:D5:F6:AD:23:10:FC:21:22:F6:77:A3
Authority key identifier: AD:10:2F:1A:F1:7D:00:FD:80:A3:D9:FE:9F:FE:81:D0:4C:E1:74:47
Certificate issuer:       /CN=ad102f1af17d00fd80a3d9fe9ffe81d04ce17447
Certificate serial:       0199FC58D5AB27B54596F58A23E666236C61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rRAvGvF9AP2Ao9n-n_6B0EzhdEc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/e1a78b-dd36-4ee9-a260-3b1aad9fdd57/1/rRAvGvF9AP2Ao9n-n_6B0EzhdEc.mft
Manifest number:          16E2
Signing time:             Sun 19 Oct 2025 12:01:44 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:44 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:44 +0000
Files and hashes:         1: FbMzdZ6d131ZqxxEpoI_GtnkvJI.roa (hash: 7d7wChwbMGPeRXkmkbPscoua0cT1OAJDT7heJW95UEI=)
                          2: rRAvGvF9AP2Ao9n-n_6B0EzhdEc.crl (hash: p875MPGPQ9ZplxsIFpYv7hegslP0rcB3upSB1AP/KX4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/e1a78b-dd36-4ee9-a260-3b1aad9fdd57/1/rRAvGvF9AP2Ao9n-n_6B0EzhdEc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/e1a78b-dd36-4ee9-a260-3b1aad9fdd57/1/rRAvGvF9AP2Ao9n-n_6B0EzhdEc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rRAvGvF9AP2Ao9n-n_6B0EzhdEc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:58:d5:ab:27:b5:45:96:f5:8a:23:e6:66:23:6c:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad102f1af17d00fd80a3d9fe9ffe81d04ce17447
        Validity
            Not Before: Oct 19 12:01:44 2025 GMT
            Not After : Oct 20 12:01:44 2025 GMT
        Subject: CN=27ec9d44a5bdbe796dd5f6ad2310fc2122f677a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:dc:d3:11:a4:41:09:9b:4f:40:b6:db:2f:4d:
                    7e:1d:a9:bc:99:01:6c:ad:e7:dc:75:a6:1c:dd:d3:
                    e1:fe:93:1c:9e:02:ca:fb:f9:ac:a0:74:3f:0a:a4:
                    90:74:62:d7:1b:86:4b:e7:70:b2:05:de:3c:b2:95:
                    cd:d6:bd:eb:b5:80:74:6f:a7:34:b9:64:1e:3a:20:
                    3d:51:c4:1c:33:1a:98:c3:50:e2:8e:e6:38:5c:56:
                    56:c0:25:71:00:44:8d:49:87:ad:9b:8d:fa:70:24:
                    7c:23:a4:3d:f7:e0:2e:06:41:ae:66:b4:f4:1a:42:
                    f9:62:89:af:09:9d:8e:b0:b9:f0:fe:50:54:58:b0:
                    6c:83:a2:59:03:24:0c:9a:18:b1:d3:c4:2d:ea:5e:
                    e3:7a:b7:c3:c9:d0:48:6a:bc:1c:ef:fc:e0:f2:82:
                    4f:21:76:11:9e:7d:ba:c5:da:7e:1d:82:45:22:3f:
                    f4:b2:1b:fa:aa:6e:12:50:db:af:53:ff:de:8e:76:
                    6b:e3:fe:1e:d1:4a:41:fa:ea:52:3f:c9:ea:32:7b:
                    83:b9:6e:fd:61:cc:ca:b4:cb:e6:59:88:9b:f1:57:
                    2b:4b:2e:bb:9f:54:06:f5:82:d7:b8:f9:5b:da:e9:
                    87:96:18:14:9a:09:35:09:4d:84:cd:40:e3:0d:c5:
                    08:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:EC:9D:44:A5:BD:BE:79:6D:D5:F6:AD:23:10:FC:21:22:F6:77:A3
            X509v3 Authority Key Identifier:
                keyid:AD:10:2F:1A:F1:7D:00:FD:80:A3:D9:FE:9F:FE:81:D0:4C:E1:74:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rRAvGvF9AP2Ao9n-n_6B0EzhdEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/e1a78b-dd36-4ee9-a260-3b1aad9fdd57/1/rRAvGvF9AP2Ao9n-n_6B0EzhdEc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/e1a78b-dd36-4ee9-a260-3b1aad9fdd57/1/rRAvGvF9AP2Ao9n-n_6B0EzhdEc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:04:06:e0:22:56:3e:17:05:37:d1:36:8a:78:9a:2e:06:59:
         5e:c4:1b:94:b0:f3:8f:5c:7a:ce:6e:9e:85:52:14:bb:e0:02:
         56:61:7a:a5:70:44:29:d8:ce:79:28:5e:ab:8c:c5:2e:02:57:
         2c:24:76:f0:5e:7d:a6:f2:ad:4b:4d:7f:cc:08:95:b0:80:f7:
         3d:1e:f0:65:12:22:e3:a7:ef:d6:c1:31:49:82:82:e3:34:74:
         a4:bb:6a:7a:90:9c:c5:fd:64:47:e5:56:a1:a7:6e:b1:16:c0:
         3f:e0:c8:5a:ea:12:7f:e2:19:a7:ab:99:e3:ac:59:a2:87:6a:
         ea:1e:11:f1:ae:32:7c:3a:80:a3:9b:ef:35:43:71:c8:9b:7d:
         47:3b:e4:bc:db:aa:7c:8e:b3:ca:dc:c0:1d:70:9b:d1:4f:be:
         64:7a:ca:56:75:36:61:74:6b:50:82:fe:be:92:6e:13:59:1f:
         25:56:78:88:e7:59:74:e1:41:00:7b:d3:f7:be:34:65:e9:1b:
         68:8c:40:92:91:60:7c:67:4e:d6:91:05:f1:03:ab:c1:93:f4:
         88:10:d4:41:8a:5d:d9:9b:93:a2:84:d4:c8:43:0d:05:4b:c8:
         3f:89:c1:fa:2a:9d:d4:4a:1a:65:9e:0f:28:78:8e:10:96:c1:
         79:5f:b7:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:18:47 2025 by rpki-client