Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/rqwbISmrusZTn4DaZVDElyHQqMQ.mft
File:                     rqwbISmrusZTn4DaZVDElyHQqMQ.mft (raw, json)
Hash identifier:          VwHBpjppOo4UpIBoJ+K1tpZSjfZf0zZ8bBZybgnwqZA=
Subject key identifier:   79:85:93:36:41:57:50:D6:B9:D5:7F:15:A8:C3:E9:74:18:0D:05:1D
Authority key identifier: AE:AC:1B:21:29:AB:BA:C6:53:9F:80:DA:65:50:C4:97:21:D0:A8:C4
Certificate issuer:       /CN=aeac1b2129abbac6539f80da6550c49721d0a8c4
Certificate serial:       0199FDD8F9CCFA26B5F388E04447A6D379AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rqwbISmrusZTn4DaZVDElyHQqMQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/rqwbISmrusZTn4DaZVDElyHQqMQ.mft
Manifest number:          16E3
Signing time:             Sun 19 Oct 2025 19:01:19 +0000
Manifest this update:     Sun 19 Oct 2025 19:01:19 +0000
Manifest next update:     Mon 20 Oct 2025 19:01:19 +0000
Files and hashes:         1: G8jEBCJ40YxdeYHhh1JxuOrWu8k.roa (hash: u6YIbtm6mXClFsqPd0bMxYAJYLNOq1ta01JHXpi1Jvg=)
                          2: brfKmaHZgWhn9Y1IgcosJigVegE.roa (hash: hRHZ0HKst4J6nqgNJucpnxIpgDhzIMo76gGJN9N1kSE=)
                          3: rqwbISmrusZTn4DaZVDElyHQqMQ.crl (hash: 67lAztd8H5Fgl0P4uQy1a4ZjrIpHujw2IpJ94J8spYc=)
                          4: tTyobIMETJWMRqGGbvqF3q_JzFs.roa (hash: oRSuTrzckp8V2s4ne2mBwQQ1J529VLuwAhGtgjqw+Go=)
                          5: wd0T2jlDARdpvazu9WfBcqzqFRI.roa (hash: uy8OHigRvAXPuAD5Z6pOXMag0Udux534TcZIu/uohEw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/rqwbISmrusZTn4DaZVDElyHQqMQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/rqwbISmrusZTn4DaZVDElyHQqMQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rqwbISmrusZTn4DaZVDElyHQqMQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 19:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:d8:f9:cc:fa:26:b5:f3:88:e0:44:47:a6:d3:79:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aeac1b2129abbac6539f80da6550c49721d0a8c4
        Validity
            Not Before: Oct 19 19:01:19 2025 GMT
            Not After : Oct 20 19:01:19 2025 GMT
        Subject: CN=79859336415750d6b9d57f15a8c3e974180d051d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:1f:2f:c3:c5:50:80:f9:12:41:46:e6:b1:fd:
                    13:95:53:58:57:6f:13:ee:20:03:43:23:59:97:91:
                    ba:fa:81:ad:ac:33:a4:61:e6:b4:63:fe:59:50:31:
                    d9:df:0a:1c:c4:d0:c1:7b:1d:10:88:4f:72:68:47:
                    08:02:8c:1d:64:9f:31:bf:6a:90:1a:96:1e:6d:cd:
                    02:20:05:43:8f:0a:a4:7b:f4:aa:e0:ac:e5:6c:01:
                    dd:12:42:0d:56:13:24:19:b1:18:04:74:28:97:8c:
                    48:14:bf:19:17:86:a3:79:fe:e6:43:8b:b5:ea:16:
                    ca:62:ee:64:67:82:25:3a:a7:de:55:0e:56:2c:a7:
                    23:67:30:af:69:50:94:6e:ca:27:d8:ac:3b:42:de:
                    18:75:9c:79:c5:9e:53:65:5d:59:86:84:b3:54:e0:
                    e3:be:30:c9:a7:18:31:87:32:35:b1:f1:71:ad:bc:
                    e2:ed:3f:01:6f:92:0a:20:b7:df:98:c9:6b:24:8c:
                    60:80:e1:fe:e1:ca:09:3e:8d:16:ac:a1:b1:db:56:
                    93:69:29:c7:d4:26:b6:ae:eb:1c:f8:c9:2e:f6:bb:
                    01:64:03:b1:a7:e7:47:d4:91:cb:e3:c2:dd:9f:a5:
                    2d:8e:65:8a:17:b0:a1:ae:f9:b4:22:ea:56:cf:3d:
                    a2:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:85:93:36:41:57:50:D6:B9:D5:7F:15:A8:C3:E9:74:18:0D:05:1D
            X509v3 Authority Key Identifier:
                keyid:AE:AC:1B:21:29:AB:BA:C6:53:9F:80:DA:65:50:C4:97:21:D0:A8:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rqwbISmrusZTn4DaZVDElyHQqMQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/rqwbISmrusZTn4DaZVDElyHQqMQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/b9bb7f-166d-41af-a1db-866b2b021fc5/1/rqwbISmrusZTn4DaZVDElyHQqMQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:6c:72:f9:fb:b0:60:e8:ec:5f:fe:92:80:ac:0c:80:e7:1c:
         6b:c7:4a:9b:11:79:57:d0:e1:79:8c:63:20:e9:58:ed:48:74:
         02:2f:58:ce:a4:9d:52:b5:f8:e1:03:ec:ee:fa:66:53:51:72:
         cc:92:57:d0:53:82:0f:9d:48:e2:05:ba:de:ac:05:43:68:68:
         83:df:91:e8:2d:7b:c0:b0:36:ce:2b:51:78:3c:10:d4:f6:22:
         fe:05:b8:4b:b4:fd:96:40:25:7c:27:35:6c:f6:b0:79:5d:6f:
         cf:94:5c:2b:85:0a:1d:a7:e4:a8:35:90:08:e2:7b:40:6f:6f:
         c8:fe:58:58:95:98:f7:f2:2b:6a:4d:3c:05:ca:b8:f1:83:89:
         92:5c:12:d3:e2:02:84:26:ad:c4:d6:98:44:73:c2:f4:fc:61:
         f4:72:60:4d:61:58:da:90:69:93:cd:09:ad:29:00:ea:11:73:
         10:af:f7:90:2b:5e:40:ae:05:c0:0f:16:1b:93:eb:5f:18:92:
         ce:04:b9:59:0a:6d:2c:10:40:8a:4d:4f:24:72:42:b5:50:d2:
         81:c1:ac:d4:b9:7e:61:56:b9:99:36:9a:9a:28:6b:dc:d0:7f:
         26:cd:a8:6e:e2:79:91:55:49:42:3c:8e:54:0d:77:d9:9b:6e:
         68:0d:85:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:29:18 2025 by rpki-client