Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/c20ad5-fdfc-4458-85b1-bfacbb1a177d/1/9vHFba9wXxLpXUL0d_jgo9hvOZY.mft
File:                     9vHFba9wXxLpXUL0d_jgo9hvOZY.mft (raw, json)
Hash identifier:          Mj+PUjrAqF7+GT7wLf0Il2s5gQYHLTL23HAd/gUQj28=
Subject key identifier:   C6:67:FC:B0:F5:84:80:BD:3E:89:6F:65:B1:9B:5D:F3:25:EE:E5:B3
Authority key identifier: F6:F1:C5:6D:AF:70:5F:12:E9:5D:42:F4:77:F8:E0:A3:D8:6F:39:96
Certificate issuer:       /CN=f6f1c56daf705f12e95d42f477f8e0a3d86f3996
Certificate serial:       0199FBEBEB77A5960CDCBE939F736A296283
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9vHFba9wXxLpXUL0d_jgo9hvOZY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/c20ad5-fdfc-4458-85b1-bfacbb1a177d/1/9vHFba9wXxLpXUL0d_jgo9hvOZY.mft
Manifest number:          16E1
Signing time:             Sun 19 Oct 2025 10:02:46 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:46 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:46 +0000
Files and hashes:         1: 9vHFba9wXxLpXUL0d_jgo9hvOZY.crl (hash: RbU9t07oOdKfMbVS14lg0wJvkUADGBexs660z2SgWVo=)
                          2: Img54cKN_P2HeWXe3kxJunOOT3s.roa (hash: ZYdWRN98ug8vbW7f1puvPVmIzjvPFY5NjRNyBZI+eL8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/c20ad5-fdfc-4458-85b1-bfacbb1a177d/1/9vHFba9wXxLpXUL0d_jgo9hvOZY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/c20ad5-fdfc-4458-85b1-bfacbb1a177d/1/9vHFba9wXxLpXUL0d_jgo9hvOZY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9vHFba9wXxLpXUL0d_jgo9hvOZY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 10:02:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:eb:77:a5:96:0c:dc:be:93:9f:73:6a:29:62:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6f1c56daf705f12e95d42f477f8e0a3d86f3996
        Validity
            Not Before: Oct 19 10:02:46 2025 GMT
            Not After : Oct 20 10:02:46 2025 GMT
        Subject: CN=c667fcb0f58480bd3e896f65b19b5df325eee5b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:1a:b7:12:3d:5f:ed:f5:01:57:2f:15:28:b2:
                    14:c3:fd:42:e7:f2:3b:28:37:c5:24:4d:4a:80:15:
                    a4:7e:4e:d4:de:a7:5e:ce:7e:9d:df:7d:95:cb:f4:
                    b8:ba:9f:7a:a1:bd:17:33:84:9c:ab:ea:0b:e8:06:
                    2d:da:68:65:b7:ae:76:4f:5c:80:4e:34:8b:f4:ee:
                    1f:86:da:86:db:30:0c:e9:ef:23:57:57:9c:42:c4:
                    a8:cb:48:3d:ad:c8:f4:d5:c3:90:7d:ff:e7:4b:85:
                    f2:86:a9:e3:bb:83:64:4b:87:8b:d4:d5:36:77:ae:
                    c0:66:89:3d:32:b9:17:45:1e:f7:c7:f5:b6:f3:50:
                    92:3b:ad:43:fa:8e:91:35:07:7d:44:59:cb:a3:4b:
                    ee:f1:dc:85:8a:cd:1d:49:8d:3e:cb:a8:36:d0:4e:
                    cb:59:b6:aa:c8:db:22:e5:fa:4e:1f:35:fc:88:1b:
                    6a:73:6a:fc:67:f2:85:3a:5e:ec:ed:04:d3:b1:2d:
                    b6:bb:b6:89:c4:1a:59:81:e2:6e:17:02:71:5d:da:
                    5f:e7:cb:1b:1d:37:f9:d7:4d:df:58:26:27:b5:54:
                    50:11:f6:b0:b2:69:97:33:6e:6f:e1:4d:07:d5:f9:
                    c9:fd:14:f9:78:88:ea:3a:7f:cd:d0:3c:08:c7:0a:
                    56:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:67:FC:B0:F5:84:80:BD:3E:89:6F:65:B1:9B:5D:F3:25:EE:E5:B3
            X509v3 Authority Key Identifier:
                keyid:F6:F1:C5:6D:AF:70:5F:12:E9:5D:42:F4:77:F8:E0:A3:D8:6F:39:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9vHFba9wXxLpXUL0d_jgo9hvOZY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/c20ad5-fdfc-4458-85b1-bfacbb1a177d/1/9vHFba9wXxLpXUL0d_jgo9hvOZY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/c20ad5-fdfc-4458-85b1-bfacbb1a177d/1/9vHFba9wXxLpXUL0d_jgo9hvOZY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:d5:ac:27:d4:e6:fb:05:05:7b:9d:b6:74:12:1a:5e:be:79:
         a8:dd:ee:74:d4:3a:96:5e:ca:a4:70:80:50:30:fe:bb:8d:01:
         1a:52:c6:a7:72:63:0f:b6:49:69:c2:05:3d:b9:bb:3a:b5:49:
         38:cb:e9:8b:d1:a1:4a:60:50:07:30:c5:75:ca:ac:dd:3b:09:
         b7:5e:bf:c9:f5:7e:86:e1:0c:d2:75:16:b3:18:73:70:a9:69:
         37:fc:7c:8a:d6:f7:aa:a3:0a:ff:41:81:39:4e:15:93:8d:12:
         40:5e:52:3b:70:26:9a:53:5c:67:fb:a9:f7:66:74:dc:41:37:
         a2:ad:14:b2:46:82:4a:2e:ba:78:3d:d5:6d:19:ee:6f:c2:df:
         b0:5e:80:10:41:d5:58:0d:6c:a0:20:08:35:b8:8b:13:95:be:
         56:68:a8:9f:ad:66:c0:d0:8b:7b:cd:e2:e4:e6:49:f6:40:ba:
         a4:83:5a:7d:f7:86:e2:14:fb:b6:f9:6e:aa:e3:30:b7:e0:ad:
         0c:73:c4:f2:fe:b9:23:24:ae:27:26:33:b5:8f:29:61:50:63:
         2d:31:93:90:e9:e1:d6:2e:3f:f9:2e:e2:23:4d:9e:5d:c5:57:
         8f:af:d7:da:84:e8:62:db:9d:d3:4c:57:e5:57:8c:a4:18:ab:
         3c:a4:67:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:45:49 2025 by rpki-client