Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/0c7243-1ffb-49d2-b5c1-b402e8a1d934/1/f-DnWTVOg8wZMgOBEJ3iLaDxpwA.mft
File:                     f-DnWTVOg8wZMgOBEJ3iLaDxpwA.mft (raw, json)
Hash identifier:          6s6gYz9kdxIpEbdTLoGzfOgEjrw00nWbTAY9Ow2lOec=
Subject key identifier:   A8:A0:97:CA:3E:BB:2A:43:C3:CD:35:C8:18:29:90:A4:96:E7:68:59
Authority key identifier: 7F:E0:E7:59:35:4E:83:CC:19:32:03:81:10:9D:E2:2D:A0:F1:A7:00
Certificate issuer:       /CN=7fe0e759354e83cc19320381109de22da0f1a700
Certificate serial:       0199FD33DFFD400E8EEC9784839A622A69AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f-DnWTVOg8wZMgOBEJ3iLaDxpwA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/0c7243-1ffb-49d2-b5c1-b402e8a1d934/1/f-DnWTVOg8wZMgOBEJ3iLaDxpwA.mft
Manifest number:          16E8
Signing time:             Sun 19 Oct 2025 16:00:59 +0000
Manifest this update:     Sun 19 Oct 2025 16:00:59 +0000
Manifest next update:     Mon 20 Oct 2025 16:00:59 +0000
Files and hashes:         1: J0_szuc94cDOPgNJ0yLN783Wnvs.roa (hash: 9y3mjauYNrbe3lUEgqyehF1KTbocvn7jwNFB7RZHERI=)
                          2: J1Y1sr_zchu3Z4XMLqO-OvK8UPY.roa (hash: wEQuNZ06+AXloUeRMR6QwQxwPhXa3MGT1uIFt5gyxuw=)
                          3: f-DnWTVOg8wZMgOBEJ3iLaDxpwA.crl (hash: VnKskZ5/Y0hXxSOy+eMD/Xeiyp4rU2cj435V2S0QtaU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/0c7243-1ffb-49d2-b5c1-b402e8a1d934/1/f-DnWTVOg8wZMgOBEJ3iLaDxpwA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/0c7243-1ffb-49d2-b5c1-b402e8a1d934/1/f-DnWTVOg8wZMgOBEJ3iLaDxpwA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/f-DnWTVOg8wZMgOBEJ3iLaDxpwA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:33:df:fd:40:0e:8e:ec:97:84:83:9a:62:2a:69:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fe0e759354e83cc19320381109de22da0f1a700
        Validity
            Not Before: Oct 19 16:00:59 2025 GMT
            Not After : Oct 20 16:00:59 2025 GMT
        Subject: CN=a8a097ca3ebb2a43c3cd35c8182990a496e76859
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ef:e4:fe:d6:16:bf:a9:3a:37:9c:a6:35:b0:
                    15:31:cc:ca:a3:6f:20:df:80:76:6a:df:9f:31:6b:
                    85:f2:f8:52:0a:82:81:0a:a8:18:ac:53:ad:32:2b:
                    4d:f9:f0:db:f7:b2:61:56:4e:cf:c7:f7:40:25:83:
                    cd:87:cb:8c:6a:e3:1c:04:b9:d8:a5:f6:d1:e6:e0:
                    9d:bc:51:f7:7a:e9:45:ad:ba:59:47:19:e2:a3:a1:
                    aa:71:e6:eb:c5:af:58:07:4a:b2:5b:e7:66:63:63:
                    bd:84:6d:fb:a3:1f:68:9b:b6:46:9b:a1:17:ec:8a:
                    58:8e:46:42:6f:c1:d0:4b:f0:fb:64:44:01:0e:b6:
                    f1:9c:8d:2c:2f:19:5f:dd:a6:3e:e5:19:e1:56:78:
                    68:e2:d7:1e:5b:fd:1b:19:98:81:73:89:2d:d2:4e:
                    7d:67:b3:0b:f0:24:0e:17:9c:61:30:d7:f7:04:7c:
                    cb:ca:31:1b:8e:f8:ef:0a:c1:b3:63:da:fb:9e:ae:
                    22:b2:53:13:77:b5:5e:3a:3d:f7:5e:cf:18:9b:5a:
                    cd:ac:98:9f:be:69:a7:1e:63:76:f1:f1:57:9e:ef:
                    e8:da:7c:a7:3e:31:81:4a:e3:49:45:1f:9a:68:ad:
                    c7:88:ad:da:0d:e0:ab:ea:62:9e:b0:64:16:12:0b:
                    d0:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:A0:97:CA:3E:BB:2A:43:C3:CD:35:C8:18:29:90:A4:96:E7:68:59
            X509v3 Authority Key Identifier:
                keyid:7F:E0:E7:59:35:4E:83:CC:19:32:03:81:10:9D:E2:2D:A0:F1:A7:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-DnWTVOg8wZMgOBEJ3iLaDxpwA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/0c7243-1ffb-49d2-b5c1-b402e8a1d934/1/f-DnWTVOg8wZMgOBEJ3iLaDxpwA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/0c7243-1ffb-49d2-b5c1-b402e8a1d934/1/f-DnWTVOg8wZMgOBEJ3iLaDxpwA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:f8:45:95:9a:cd:19:38:00:46:0a:b6:48:1f:83:5f:38:00:
         e6:e9:98:ec:5c:08:03:1e:9a:e2:5c:df:87:b5:c2:a1:bd:4a:
         3e:e8:76:5d:5a:18:d0:0b:5d:5c:6a:aa:0d:a6:c1:11:c2:b2:
         b7:6d:5f:14:42:7a:08:67:22:ef:d3:56:a4:6d:40:c6:a0:1e:
         16:57:d6:7e:be:58:6b:88:76:c8:2e:94:03:bd:a6:0d:95:a4:
         af:55:7e:ed:0c:c3:f7:f3:00:be:b9:ae:1d:61:91:ec:bc:8d:
         f7:e5:97:9e:ae:4d:fd:23:3e:00:a5:ba:b7:11:aa:35:dd:dd:
         e8:88:aa:0b:6c:02:eb:d0:54:78:86:3b:00:5b:11:37:a2:7f:
         a8:08:cc:a2:a1:b7:fb:d2:29:04:d2:aa:b6:0d:ff:57:f8:93:
         c7:11:b3:66:67:0d:d6:8d:b5:e1:2b:c6:e4:69:f5:40:94:dd:
         4e:a2:2b:0d:f6:e6:1f:19:9f:56:76:80:a9:22:a2:6e:bc:ba:
         e3:0d:51:cf:5b:31:8f:95:c2:a7:78:fb:01:d8:f8:c3:69:fc:
         04:43:7d:4b:45:c9:02:75:71:30:d7:85:f5:28:da:45:d5:92:
         7a:e6:66:77:80:bc:fc:ca:4f:7b:04:6e:2e:2c:2d:b2:db:15:
         72:fb:34:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:00:27 2025 by rpki-client