Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/9fd57c-90ef-44b0-93e4-fe5aed59a7d9/1/MTzbxLTeVJXuYTF9LnN8LD9_g7o.mft
File:                     MTzbxLTeVJXuYTF9LnN8LD9_g7o.mft (raw, json)
Hash identifier:          QXOXHFA7ddIqmxXQmNWVBEwJs0A3qEB/4DIBvLe7++s=
Subject key identifier:   AF:B6:BA:48:E7:D6:1F:0F:23:96:0C:5C:4C:CA:1C:78:95:D9:3E:EE
Authority key identifier: 31:3C:DB:C4:B4:DE:54:95:EE:61:31:7D:2E:73:7C:2C:3F:7F:83:BA
Certificate issuer:       /CN=313cdbc4b4de5495ee61317d2e737c2c3f7f83ba
Certificate serial:       0199FEB490EE2EFAC9D09B27215A01D7DB82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MTzbxLTeVJXuYTF9LnN8LD9_g7o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/9fd57c-90ef-44b0-93e4-fe5aed59a7d9/1/MTzbxLTeVJXuYTF9LnN8LD9_g7o.mft
Manifest number:          16E6
Signing time:             Sun 19 Oct 2025 23:01:10 +0000
Manifest this update:     Sun 19 Oct 2025 23:01:10 +0000
Manifest next update:     Mon 20 Oct 2025 23:01:10 +0000
Files and hashes:         1: MTzbxLTeVJXuYTF9LnN8LD9_g7o.crl (hash: mOtVMuh6Gmhr8hZFHUD7fnybZrYQNt34bYf+GP7FrTk=)
                          2: obw4nOA7tbdHTmeG8UDdlnqVl2Y.roa (hash: irTwgjfFzy8NnkY/EBFl3pB1GcEZSVUg+iwZc/3vTSw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/9fd57c-90ef-44b0-93e4-fe5aed59a7d9/1/MTzbxLTeVJXuYTF9LnN8LD9_g7o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/9fd57c-90ef-44b0-93e4-fe5aed59a7d9/1/MTzbxLTeVJXuYTF9LnN8LD9_g7o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MTzbxLTeVJXuYTF9LnN8LD9_g7o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 23:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:b4:90:ee:2e:fa:c9:d0:9b:27:21:5a:01:d7:db:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=313cdbc4b4de5495ee61317d2e737c2c3f7f83ba
        Validity
            Not Before: Oct 19 23:01:10 2025 GMT
            Not After : Oct 20 23:01:10 2025 GMT
        Subject: CN=afb6ba48e7d61f0f23960c5c4cca1c7895d93eee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:3e:d5:fc:4a:3e:51:00:5e:cf:7d:98:96:b2:
                    e0:96:c9:5c:87:ce:53:8b:91:6e:ec:4b:c5:b0:fe:
                    34:0b:50:af:84:ec:1a:65:f8:ed:ad:63:73:82:44:
                    a6:0a:bf:bc:9a:b7:f0:25:d8:8d:23:3e:f6:24:6f:
                    00:09:40:24:3c:88:bc:ab:4b:ca:7a:8d:ca:fe:13:
                    1d:c5:51:a6:b9:c0:20:2f:20:0f:68:e4:24:a1:92:
                    8f:b1:df:dd:2a:f8:c0:20:38:c5:bc:e3:7b:d8:3e:
                    6d:16:39:8c:d6:38:aa:59:57:66:fb:38:b1:80:8c:
                    32:49:70:8e:2a:49:f5:a9:a3:b6:82:20:32:89:89:
                    66:f6:26:59:3c:48:57:fe:90:90:9d:00:82:0d:eb:
                    11:1f:2a:2e:49:0d:11:c3:4e:a7:a8:e1:be:47:3e:
                    65:4d:2f:44:7a:99:20:0c:15:10:17:2a:e8:53:83:
                    9b:ef:52:fa:d8:72:db:c7:dc:93:68:d9:ab:02:77:
                    5a:21:8b:55:27:6d:e5:d7:cd:d2:f6:17:46:4f:08:
                    fb:ea:34:9f:db:7b:62:a4:3c:84:8e:79:aa:c0:87:
                    f9:e6:7f:04:3d:95:3b:91:b2:e0:30:42:f5:9f:ca:
                    36:b5:71:bd:b8:b6:8a:21:a1:4c:cb:7d:62:87:4f:
                    76:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:B6:BA:48:E7:D6:1F:0F:23:96:0C:5C:4C:CA:1C:78:95:D9:3E:EE
            X509v3 Authority Key Identifier:
                keyid:31:3C:DB:C4:B4:DE:54:95:EE:61:31:7D:2E:73:7C:2C:3F:7F:83:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MTzbxLTeVJXuYTF9LnN8LD9_g7o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/9fd57c-90ef-44b0-93e4-fe5aed59a7d9/1/MTzbxLTeVJXuYTF9LnN8LD9_g7o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/9fd57c-90ef-44b0-93e4-fe5aed59a7d9/1/MTzbxLTeVJXuYTF9LnN8LD9_g7o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:e4:2b:22:e3:d1:74:a4:88:4e:6e:3a:da:6b:f3:f0:02:99:
         9e:d2:6b:ff:15:4d:6e:fb:9e:e4:c7:7d:24:a0:1b:b5:5f:2c:
         30:4a:7f:d1:0f:86:da:ec:47:45:bc:c8:e8:35:8e:be:56:20:
         c4:ae:f5:48:86:36:24:9b:70:ba:bc:1a:3f:34:39:0e:ed:4b:
         32:c0:91:84:ce:79:50:c2:4f:a7:ba:e4:11:98:1f:a8:90:0f:
         83:c8:30:8f:7c:11:9f:01:2d:30:4a:44:b4:09:60:73:43:f4:
         87:51:15:3b:bc:6d:f2:73:ba:f7:24:1b:16:5f:85:0a:13:13:
         f5:75:46:fb:bd:b2:43:8e:46:c4:76:2a:c2:9a:c7:91:8d:22:
         8c:18:c2:6f:76:7d:3e:37:5d:52:31:7c:74:da:58:b2:4c:a2:
         d5:2f:58:b8:e8:d6:b4:83:ae:b5:04:e0:64:fd:d8:25:47:f3:
         ac:a4:1c:61:66:cf:da:15:19:fe:e1:78:18:fd:44:02:95:59:
         c5:ee:64:a9:a9:2e:17:f9:a7:21:ff:62:5e:a7:dc:76:07:20:
         c3:30:db:aa:99:1f:c6:a7:55:24:ab:5f:e7:00:41:a6:b8:65:
         e0:31:85:6c:7b:79:13:66:1b:e4:68:da:08:c9:bb:45:80:48:
         12:17:23:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:48:04 2025 by rpki-client