Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/ed80de-1361-423f-91af-5d0e620f525d/1/qycpZC0uNTfZq3xFxR_ibepGi4I.mft
File:                     qycpZC0uNTfZq3xFxR_ibepGi4I.mft (raw, json)
Hash identifier:          iyWzwemE214+1UrdeE7Cfs7mQqKGCeQ/m9ZlOmNGgok=
Subject key identifier:   A8:4D:61:5F:2F:CC:B2:E2:B5:AB:39:B2:84:62:D7:B3:70:77:E2:06
Authority key identifier: AB:27:29:64:2D:2E:35:37:D9:AB:7C:45:C5:1F:E2:6D:EA:46:8B:82
Certificate issuer:       /CN=ab2729642d2e3537d9ab7c45c51fe26dea468b82
Certificate serial:       0199FF5968653E19CFE96D81D26A8E2C476F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qycpZC0uNTfZq3xFxR_ibepGi4I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/ed80de-1361-423f-91af-5d0e620f525d/1/qycpZC0uNTfZq3xFxR_ibepGi4I.mft
Manifest number:          16E2
Signing time:             Mon 20 Oct 2025 02:01:13 +0000
Manifest this update:     Mon 20 Oct 2025 02:01:13 +0000
Manifest next update:     Tue 21 Oct 2025 02:01:13 +0000
Files and hashes:         1: DjJbJVK4ViblB5hs7VL09DEef2k.roa (hash: cqb7/wQBvYXWlhU0RsJ/gn+FwdkM5gkB/GQuwkcLWgs=)
                          2: qycpZC0uNTfZq3xFxR_ibepGi4I.crl (hash: rxoaFplt+yuK+eEBGRa5v+PMUSRNAlp8rWUuMYqOI8A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/ed80de-1361-423f-91af-5d0e620f525d/1/qycpZC0uNTfZq3xFxR_ibepGi4I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/ed80de-1361-423f-91af-5d0e620f525d/1/qycpZC0uNTfZq3xFxR_ibepGi4I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qycpZC0uNTfZq3xFxR_ibepGi4I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ff:59:68:65:3e:19:cf:e9:6d:81:d2:6a:8e:2c:47:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab2729642d2e3537d9ab7c45c51fe26dea468b82
        Validity
            Not Before: Oct 20 02:01:13 2025 GMT
            Not After : Oct 21 02:01:13 2025 GMT
        Subject: CN=a84d615f2fccb2e2b5ab39b28462d7b37077e206
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e9:51:60:81:77:bb:b3:52:28:51:9c:54:49:
                    9c:fa:05:16:01:e5:51:62:c8:18:15:9e:e4:8e:76:
                    e4:a7:67:01:a2:87:b5:af:63:6b:d4:0a:69:19:35:
                    7a:b5:2e:8f:97:be:81:c7:26:7a:fa:81:40:3f:20:
                    aa:62:c7:e1:9b:22:09:4e:23:2a:5d:5b:70:a2:b2:
                    20:19:8d:f4:76:56:fc:68:db:e3:04:38:44:37:5b:
                    ee:f2:dd:3a:4f:b7:99:ce:8d:10:63:0d:83:d4:e4:
                    9b:fe:cc:77:8d:c2:fe:a7:ef:67:e6:ab:a8:61:68:
                    ac:5f:b6:7a:a0:74:64:5b:bc:d9:a2:0b:bd:c4:3e:
                    ea:85:13:b9:2d:f4:91:ae:b7:ec:3b:a7:f1:0c:cd:
                    5b:1d:94:37:78:ac:a9:3a:34:77:5a:dd:b0:0b:59:
                    28:23:34:e7:54:7c:d8:3e:e3:70:fc:91:50:d6:18:
                    25:b8:22:1b:cb:97:df:e5:bd:12:1d:48:3e:10:84:
                    bc:5a:64:ad:d8:52:3c:5d:74:d0:35:4b:d2:f5:17:
                    2f:5f:97:06:6b:9d:11:56:3a:4f:b5:6b:5e:c3:18:
                    6e:8a:71:54:2a:81:3a:32:0b:d9:77:8e:e8:2f:8e:
                    75:e4:a7:66:a4:08:4b:83:e1:ff:ef:bb:dd:a7:0a:
                    54:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:4D:61:5F:2F:CC:B2:E2:B5:AB:39:B2:84:62:D7:B3:70:77:E2:06
            X509v3 Authority Key Identifier:
                keyid:AB:27:29:64:2D:2E:35:37:D9:AB:7C:45:C5:1F:E2:6D:EA:46:8B:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qycpZC0uNTfZq3xFxR_ibepGi4I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/ed80de-1361-423f-91af-5d0e620f525d/1/qycpZC0uNTfZq3xFxR_ibepGi4I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/ed80de-1361-423f-91af-5d0e620f525d/1/qycpZC0uNTfZq3xFxR_ibepGi4I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:4e:d4:c2:06:8d:ff:39:0d:99:d3:85:e8:48:43:9d:29:9d:
         78:dd:29:a2:93:b5:be:88:19:71:b5:73:41:d6:5b:b9:d9:0a:
         46:be:24:30:5f:67:b8:ea:cf:f6:ab:32:22:b6:ab:ce:e9:8b:
         f0:27:4d:e3:5f:11:83:56:17:43:7a:56:ba:e4:bd:47:d9:50:
         06:3d:b8:bb:64:e9:e6:c3:2d:1f:39:3b:d9:bf:d0:9d:c7:43:
         60:af:b2:5f:94:3a:d0:48:85:69:78:e1:f2:de:31:84:59:13:
         35:18:84:cf:28:03:cd:83:10:09:b1:8a:22:97:73:a0:95:c1:
         6d:36:76:91:9f:6e:a3:8d:63:dc:ea:68:e2:16:8b:61:8d:30:
         86:fd:52:59:eb:7e:2d:78:8d:a0:8a:89:a9:c2:4b:85:fd:7c:
         07:03:78:b5:91:7f:8e:c9:d3:7c:da:51:0a:a9:cf:2e:fe:b2:
         dd:2a:88:66:77:6b:4b:f0:4d:c0:64:dd:1c:40:da:d6:27:5f:
         d8:bb:20:b9:4d:c1:8b:83:99:64:4b:85:e8:e1:19:82:67:52:
         c7:45:15:8d:56:40:69:92:d2:85:33:65:c5:2e:d4:6a:a5:76:
         ff:d2:f0:7f:b7:63:0f:39:f2:54:5a:98:07:32:d5:b0:0c:21:
         26:fc:99:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:16:09 2025 by rpki-client