Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/671ee4-ad81-454f-965f-62a4e675eaeb/1/1-d-A98aS6G081rdV0Gz3zpwTf_I.mft
File:                     1-d-A98aS6G081rdV0Gz3zpwTf_I.mft (raw, json)
Hash identifier:          VCLJkXjPOayz2yqGxr/uarMiOnG5rv+HLuyFOdKHm8U=
Subject key identifier:   A6:3B:3C:5B:83:1D:EA:17:98:7D:A2:C5:AB:00:02:B8:0F:AE:CE:81
Authority key identifier: F9:DF:80:F7:C6:92:E8:6D:3C:D6:B7:55:D0:6C:F7:CE:9C:13:7F:F2
Certificate issuer:       /CN=f9df80f7c692e86d3cd6b755d06cf7ce9c137ff2
Certificate serial:       0199FBEB3B618F11351C4F5CF6EE20C89F31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-d-A98aS6G081rdV0Gz3zpwTf_I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/671ee4-ad81-454f-965f-62a4e675eaeb/1/1-d-A98aS6G081rdV0Gz3zpwTf_I.mft
Manifest number:          16E2
Signing time:             Sun 19 Oct 2025 10:02:01 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:01 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:01 +0000
Files and hashes:         1: 1-d-A98aS6G081rdV0Gz3zpwTf_I.crl (hash: 3hWTIG9rhBdOdRM3+CT8h/detx1Dsyv7aNG+9uuy2bs=)
                          2: GM9qrO2uL8x1ZY0DdW6CbnXZWBw.roa (hash: +PS0Zeo/h7j5Rz8hACgz8q1qwFa7bESNHkPZUu+sEMw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/671ee4-ad81-454f-965f-62a4e675eaeb/1/1-d-A98aS6G081rdV0Gz3zpwTf_I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/671ee4-ad81-454f-965f-62a4e675eaeb/1/1-d-A98aS6G081rdV0Gz3zpwTf_I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-d-A98aS6G081rdV0Gz3zpwTf_I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:3b:61:8f:11:35:1c:4f:5c:f6:ee:20:c8:9f:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9df80f7c692e86d3cd6b755d06cf7ce9c137ff2
        Validity
            Not Before: Oct 19 10:02:01 2025 GMT
            Not After : Oct 20 10:02:01 2025 GMT
        Subject: CN=a63b3c5b831dea17987da2c5ab0002b80faece81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:cf:66:c8:30:4b:fb:3a:a9:69:b6:06:af:ac:
                    58:c0:8a:0b:67:f3:c1:5a:1c:ef:7d:fd:c8:19:19:
                    b4:9e:c0:85:15:9d:92:0d:03:9a:a8:cc:9c:f2:d9:
                    40:86:fa:01:c1:81:3e:47:d5:24:fb:e3:4c:7f:29:
                    b1:ad:46:0c:a7:1b:19:28:39:4c:02:c9:3c:95:d3:
                    2c:18:be:99:63:75:18:bb:d0:e1:34:c8:a8:c6:fb:
                    ab:2c:5d:87:86:61:0c:02:a5:ee:ff:5c:3d:11:26:
                    cb:cf:93:96:a0:d3:0d:a5:67:9c:1f:aa:ab:78:be:
                    de:5b:8f:63:50:ae:71:cd:39:b9:58:08:65:97:a7:
                    f4:09:83:11:6b:0c:2a:26:48:74:cd:19:98:3b:91:
                    5b:54:5c:3d:6a:5d:67:72:c0:d2:0c:d4:8c:6f:8d:
                    6e:ea:56:67:df:21:9b:d1:24:ec:8f:03:c3:be:29:
                    87:66:8c:33:66:cc:03:d0:14:b7:15:0a:7f:02:03:
                    f3:18:2a:a2:03:cb:fe:5b:e6:ea:9e:91:7e:15:e1:
                    62:9b:63:8a:d5:8e:bc:0d:f5:eb:61:51:65:8e:de:
                    bb:54:5b:4a:04:7a:b0:81:e6:34:c9:9f:f6:8b:19:
                    3e:73:35:4e:59:ed:16:a2:aa:f7:f5:65:c9:a6:51:
                    97:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:3B:3C:5B:83:1D:EA:17:98:7D:A2:C5:AB:00:02:B8:0F:AE:CE:81
            X509v3 Authority Key Identifier:
                keyid:F9:DF:80:F7:C6:92:E8:6D:3C:D6:B7:55:D0:6C:F7:CE:9C:13:7F:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-d-A98aS6G081rdV0Gz3zpwTf_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/671ee4-ad81-454f-965f-62a4e675eaeb/1/1-d-A98aS6G081rdV0Gz3zpwTf_I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/671ee4-ad81-454f-965f-62a4e675eaeb/1/1-d-A98aS6G081rdV0Gz3zpwTf_I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:83:b1:56:59:3f:52:38:b8:bd:cc:02:00:52:8d:2d:d0:2e:
         29:0f:a0:33:88:9f:b0:43:9e:fc:88:da:a1:d9:36:16:3a:b6:
         b2:5e:19:d8:3f:dc:c1:1e:47:c3:53:9a:85:2f:62:18:86:42:
         a0:a7:db:83:3a:96:d2:d6:95:f5:0a:da:cb:d2:05:73:de:29:
         0b:2d:79:42:66:c7:2b:8f:fe:30:eb:7d:d0:c6:e0:12:1b:2f:
         57:2e:dc:f3:ff:54:a9:f2:d1:fc:28:b6:ec:46:36:72:a1:2b:
         9b:25:76:12:de:61:fb:27:85:a8:8a:bc:1b:49:75:1b:de:60:
         d8:42:94:aa:e0:1a:b3:86:ac:17:3d:91:1c:22:34:e6:aa:a9:
         9a:4c:b9:75:49:b6:ec:06:ca:07:be:d8:ac:d3:59:ab:2f:77:
         8e:f5:db:3b:73:fa:d1:bf:00:73:0d:23:ac:60:92:2d:ae:d9:
         97:73:60:8b:c8:07:8d:eb:20:85:31:00:ef:ff:d6:a1:a5:54:
         57:11:2a:cb:f5:d9:93:bd:53:31:f2:44:78:ba:45:5d:93:22:
         c5:b6:fb:1b:1d:f2:7f:de:f0:95:21:88:93:7d:18:58:96:82:
         a8:37:e8:00:33:26:fd:bc:30:fa:33:26:40:05:27:b9:88:3d:
         a1:65:3c:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:19 2025 by rpki-client