Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c7ea1f-aa27-4ac8-8ca7-0ae0f1accda4/1/rtbvF-b5UYGJDlTQAKKsj_LSSZs.mft
File:                     rtbvF-b5UYGJDlTQAKKsj_LSSZs.mft (raw, json)
Hash identifier:          UHXobg2A2EWN8JBg7b1jvawCNC9ltfC703Nw6uH+km4=
Subject key identifier:   65:74:03:D7:D8:66:A6:F7:45:70:BF:85:CA:ED:68:28:66:04:40:3E
Authority key identifier: AE:D6:EF:17:E6:F9:51:81:89:0E:54:D0:00:A2:AC:8F:F2:D2:49:9B
Certificate issuer:       /CN=aed6ef17e6f95181890e54d000a2ac8ff2d2499b
Certificate serial:       019A01B50BC64DB2197E87AE1F20076C647D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rtbvF-b5UYGJDlTQAKKsj_LSSZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/c7ea1f-aa27-4ac8-8ca7-0ae0f1accda4/1/rtbvF-b5UYGJDlTQAKKsj_LSSZs.mft
Manifest number:          16E5
Signing time:             Mon 20 Oct 2025 13:00:32 +0000
Manifest this update:     Mon 20 Oct 2025 13:00:32 +0000
Manifest next update:     Tue 21 Oct 2025 13:00:32 +0000
Files and hashes:         1: T4ejI0o1-ZTfFiV7QKtB9D7UcpE.roa (hash: GaQ0ytKrYJcgBIWcbLoASBPxVTSW9++rXI3zKEi5m5Q=)
                          2: rtbvF-b5UYGJDlTQAKKsj_LSSZs.crl (hash: oqbKBhYpUVZHpK9D5B/1hNVzqL03oCb6+jp215s3tkM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/c7ea1f-aa27-4ac8-8ca7-0ae0f1accda4/1/rtbvF-b5UYGJDlTQAKKsj_LSSZs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/c7ea1f-aa27-4ac8-8ca7-0ae0f1accda4/1/rtbvF-b5UYGJDlTQAKKsj_LSSZs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rtbvF-b5UYGJDlTQAKKsj_LSSZs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:01:b5:0b:c6:4d:b2:19:7e:87:ae:1f:20:07:6c:64:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aed6ef17e6f95181890e54d000a2ac8ff2d2499b
        Validity
            Not Before: Oct 20 13:00:32 2025 GMT
            Not After : Oct 21 13:00:32 2025 GMT
        Subject: CN=657403d7d866a6f74570bf85caed68286604403e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:c4:09:22:88:94:c1:8d:b5:ea:26:28:34:a5:
                    f8:d4:dd:29:92:1f:e4:5c:c6:85:c7:3c:d4:32:31:
                    cb:df:01:63:f2:80:db:49:8b:ab:b4:f5:2a:1a:a8:
                    03:37:58:5a:b6:99:b1:35:7e:0b:95:c1:fa:c6:ba:
                    79:47:f4:af:e1:76:2c:d4:86:48:5f:a5:50:da:de:
                    90:4b:e5:13:e7:9c:c1:af:9d:4d:4a:74:76:de:c7:
                    76:6b:1e:8d:7c:5a:e5:de:e7:7c:34:0b:ff:6c:a0:
                    64:b1:a5:40:b2:f7:29:b2:9f:a4:d9:48:53:54:ad:
                    08:70:59:9f:a9:bd:4b:5c:23:a8:68:2f:fb:14:bc:
                    24:a6:32:ff:56:4b:0e:9d:b0:d2:bd:da:f8:1d:45:
                    cf:7b:9c:ca:ae:e5:c0:1d:bf:d5:fa:93:43:39:f1:
                    f4:e2:ee:85:2f:a4:72:db:87:d4:e3:1a:c3:3a:ac:
                    89:03:bf:b9:20:27:2c:0d:79:88:aa:65:a1:a9:80:
                    04:4f:b9:98:52:20:44:5a:0d:b7:c2:7c:e4:4f:05:
                    b3:34:98:ab:8e:c0:34:0a:ff:93:4d:8f:d4:ed:8f:
                    40:7c:e1:d7:57:a5:45:84:0c:9d:6e:a9:71:db:63:
                    fb:c3:ea:81:88:5c:99:2e:ef:8a:74:d3:e2:cc:9c:
                    97:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:74:03:D7:D8:66:A6:F7:45:70:BF:85:CA:ED:68:28:66:04:40:3E
            X509v3 Authority Key Identifier:
                keyid:AE:D6:EF:17:E6:F9:51:81:89:0E:54:D0:00:A2:AC:8F:F2:D2:49:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rtbvF-b5UYGJDlTQAKKsj_LSSZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c7ea1f-aa27-4ac8-8ca7-0ae0f1accda4/1/rtbvF-b5UYGJDlTQAKKsj_LSSZs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c7ea1f-aa27-4ac8-8ca7-0ae0f1accda4/1/rtbvF-b5UYGJDlTQAKKsj_LSSZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:8c:ce:0a:3e:7b:74:12:20:56:5c:9e:a1:db:cf:c4:6c:ed:
         45:95:ff:a4:b0:04:81:40:f2:fc:b9:2a:e5:6e:53:0c:f2:e4:
         e4:3e:45:ba:a6:3f:76:ee:10:0b:d1:7f:cb:57:5e:1d:e8:40:
         0b:5f:f7:32:7e:03:26:08:7e:c4:9d:c5:66:67:e0:9d:c0:59:
         e1:14:24:62:a0:16:0e:49:90:69:e1:4f:c4:a6:ea:c2:62:44:
         40:57:a5:3c:b7:3d:29:42:49:03:3e:33:63:5b:6c:09:b5:19:
         39:1d:e2:8f:e1:70:d3:85:cd:04:22:09:f3:f0:1d:91:c1:ac:
         fb:59:7e:36:22:18:ab:16:3e:c6:1b:cb:28:0f:4b:16:8d:18:
         85:c3:f5:ae:81:ea:50:dc:bb:78:af:5a:26:65:18:ea:06:21:
         6c:ac:87:ff:9c:df:4d:77:24:79:2d:0d:26:81:0a:88:d7:20:
         69:4d:f3:8b:0a:24:87:8a:b9:00:94:a4:f0:83:81:11:7a:8f:
         d7:39:35:e3:45:fd:8d:5a:77:8f:a6:65:98:e1:d5:a4:a9:30:
         e8:69:2d:82:36:1e:35:41:ce:6c:79:39:96:ff:0b:99:92:c1:
         8a:59:ec:b6:13:ae:4b:b5:8b:4c:e6:dc:bb:b5:23:db:65:cc:
         23:89:f7:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:42:39 2025 by rpki-client