Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/8bi7seGGpZnUzAWMq_TfDiUvMfo.mft
File:                     8bi7seGGpZnUzAWMq_TfDiUvMfo.mft (raw, json)
Hash identifier:          qeNkDlxUIwhyg7suJ7GdGWDQuhmAodqzHC6RsxVa7MA=
Subject key identifier:   50:0C:2A:9E:F9:53:18:B8:72:43:08:40:CC:6D:22:76:C3:FA:A8:70
Authority key identifier: F1:B8:BB:B1:E1:86:A5:99:D4:CC:05:8C:AB:F4:DF:0E:25:2F:31:FA
Certificate issuer:       /CN=f1b8bbb1e186a599d4cc058cabf4df0e252f31fa
Certificate serial:       0199FAD7B852C7AC7692011543D1D1ED10CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8bi7seGGpZnUzAWMq_TfDiUvMfo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/8bi7seGGpZnUzAWMq_TfDiUvMfo.mft
Manifest number:          16D0
Signing time:             Sun 19 Oct 2025 05:01:05 +0000
Manifest this update:     Sun 19 Oct 2025 05:01:05 +0000
Manifest next update:     Mon 20 Oct 2025 05:01:05 +0000
Files and hashes:         1: 8bi7seGGpZnUzAWMq_TfDiUvMfo.crl (hash: QjHb/UtO901G08mvkV0IJZ9D1eEjI6jILBRWzABpxTQ=)
                          2: rPef_fSf30lKUIt0FiquYhoXATY.roa (hash: Z0VOnnMDQ8rVUNalJ6zJanV6z7u+O1OwYpukhKJNqvw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/8bi7seGGpZnUzAWMq_TfDiUvMfo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/8bi7seGGpZnUzAWMq_TfDiUvMfo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8bi7seGGpZnUzAWMq_TfDiUvMfo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 05:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:d7:b8:52:c7:ac:76:92:01:15:43:d1:d1:ed:10:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1b8bbb1e186a599d4cc058cabf4df0e252f31fa
        Validity
            Not Before: Oct 19 05:01:05 2025 GMT
            Not After : Oct 20 05:01:05 2025 GMT
        Subject: CN=500c2a9ef95318b872430840cc6d2276c3faa870
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ed:84:33:d5:65:84:7b:e5:56:4e:0e:77:7d:
                    c3:cb:04:ef:12:9e:11:eb:6e:d5:80:40:ba:62:03:
                    0f:83:73:a7:ff:f5:37:09:fb:0b:65:62:74:f7:6c:
                    18:50:42:af:fd:87:2f:05:66:f5:be:b6:ca:a9:02:
                    64:48:a1:af:c2:5e:01:ae:c3:b4:4b:ff:c1:92:9a:
                    8b:be:36:4f:09:d0:fd:53:fd:26:26:3b:50:dc:0f:
                    f7:ed:c4:57:06:70:40:f7:66:49:86:12:af:96:18:
                    f7:1a:93:c9:92:bf:91:ab:cb:c0:da:e3:f7:1e:70:
                    28:0f:f0:c7:0b:e1:cb:d5:30:5b:4f:8c:c4:32:81:
                    be:2e:12:80:89:ee:51:5f:5c:08:74:6c:9e:ba:86:
                    b6:e7:f3:b2:ba:cc:8e:fd:30:38:ff:28:7d:1a:45:
                    b7:eb:6a:ef:b4:56:97:66:32:89:de:28:08:c0:31:
                    0d:52:fd:0b:e7:e1:7e:3c:f2:5b:f2:fd:f4:a0:9e:
                    5d:98:c2:26:d4:6b:e7:39:df:b3:36:6b:c6:c2:1e:
                    de:fb:b3:4e:3c:93:11:7a:9e:42:57:4f:22:a4:f2:
                    a0:83:79:62:9a:fb:f8:52:08:bd:9b:50:b5:0e:cf:
                    0c:b5:6b:7f:ce:92:a2:ca:09:a2:ac:fd:f3:d0:cc:
                    b8:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:0C:2A:9E:F9:53:18:B8:72:43:08:40:CC:6D:22:76:C3:FA:A8:70
            X509v3 Authority Key Identifier:
                keyid:F1:B8:BB:B1:E1:86:A5:99:D4:CC:05:8C:AB:F4:DF:0E:25:2F:31:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8bi7seGGpZnUzAWMq_TfDiUvMfo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/8bi7seGGpZnUzAWMq_TfDiUvMfo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/8bi7seGGpZnUzAWMq_TfDiUvMfo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:83:d5:11:1f:ce:04:7b:57:1a:5b:f0:ef:74:03:4b:c8:07:
         cc:10:b8:97:fa:df:79:7e:98:18:86:ec:4c:76:a6:ad:0f:26:
         8e:3e:78:6d:f0:47:93:bd:62:d6:3c:5e:3a:9a:bb:1d:56:0e:
         ea:af:5d:11:0b:8b:d0:12:dd:d5:e1:10:e0:56:1a:81:ae:f5:
         35:cd:52:1f:5a:44:99:e0:78:be:88:6e:8f:20:3f:e2:2a:e6:
         0f:1e:60:65:5a:90:bf:8c:f7:c8:92:23:9e:68:49:1c:ed:81:
         28:e8:25:04:f8:87:9e:df:7e:9d:80:3a:d4:1d:a7:6d:73:d0:
         de:94:06:3a:5b:6f:3f:b8:97:7d:c4:a2:13:d6:33:7b:dd:ce:
         0b:cb:d2:df:85:69:be:4a:5b:59:b9:aa:09:c4:f3:f4:42:ed:
         2e:af:1f:7f:6e:79:8f:13:a2:4a:24:7c:8b:d6:3b:18:3a:9c:
         4e:da:dd:32:d4:37:e7:32:99:5b:09:4e:fc:7a:83:73:2d:75:
         15:16:a7:35:f8:8d:ad:af:f6:35:16:a6:87:23:07:46:70:f1:
         57:c9:85:60:d1:17:29:92:b3:e7:fb:f3:12:67:38:3e:eb:ab:
         ed:6c:ee:57:7b:52:2f:71:58:47:1b:aa:28:f0:73:41:0d:27:
         f0:f0:6e:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:05:32 2025 by rpki-client