Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/0b252d-db4c-4256-ab06-06d14cf0a46b/1/68hsjC1JXJ6-QmZaFRPeaam_ZVM.mft
File:                     68hsjC1JXJ6-QmZaFRPeaam_ZVM.mft (raw, json)
Hash identifier:          ccCcqvwJswgukEkM65jdiEnhWOv5TnTqJZdGkJ/cvmI=
Subject key identifier:   1E:3C:92:6F:53:94:37:69:EA:78:3D:14:30:CD:30:BB:C9:3D:63:72
Authority key identifier: EB:C8:6C:8C:2D:49:5C:9E:BE:42:66:5A:15:13:DE:69:A9:BF:65:53
Certificate issuer:       /CN=ebc86c8c2d495c9ebe42665a1513de69a9bf6553
Certificate serial:       0199FB7CE7957C9A52503B1CDB7842C76E9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/68hsjC1JXJ6-QmZaFRPeaam_ZVM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/0b252d-db4c-4256-ab06-06d14cf0a46b/1/68hsjC1JXJ6-QmZaFRPeaam_ZVM.mft
Manifest number:          16E1
Signing time:             Sun 19 Oct 2025 08:01:30 +0000
Manifest this update:     Sun 19 Oct 2025 08:01:30 +0000
Manifest next update:     Mon 20 Oct 2025 08:01:30 +0000
Files and hashes:         1: 68hsjC1JXJ6-QmZaFRPeaam_ZVM.crl (hash: CkxrrDKoXWwngDamrO4oc7meXSvjqVMYWBevKt2603s=)
                          2: fGQ3YVDh2zkecLRGo_WA_JJKmDU.roa (hash: mv8AdpdjP5/diFcicEaZODtxwOkiTIPwxcyY8ZLf9hw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/0b252d-db4c-4256-ab06-06d14cf0a46b/1/68hsjC1JXJ6-QmZaFRPeaam_ZVM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/0b252d-db4c-4256-ab06-06d14cf0a46b/1/68hsjC1JXJ6-QmZaFRPeaam_ZVM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/68hsjC1JXJ6-QmZaFRPeaam_ZVM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 08:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:7c:e7:95:7c:9a:52:50:3b:1c:db:78:42:c7:6e:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebc86c8c2d495c9ebe42665a1513de69a9bf6553
        Validity
            Not Before: Oct 19 08:01:30 2025 GMT
            Not After : Oct 20 08:01:30 2025 GMT
        Subject: CN=1e3c926f53943769ea783d1430cd30bbc93d6372
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:78:b3:10:24:4b:7a:0f:f7:f7:20:13:12:44:
                    99:09:76:7f:05:05:51:18:01:3a:9f:11:2e:62:52:
                    1d:7d:1d:19:0e:73:d7:11:b9:47:02:06:cf:94:3f:
                    03:e5:5f:82:45:8b:73:05:9a:97:4c:c2:5b:f1:0f:
                    07:d8:db:0c:a0:0c:67:b1:57:9f:87:1f:6b:af:d1:
                    aa:00:13:8b:3a:e3:82:64:46:42:ea:84:2b:63:6c:
                    e4:8e:a3:47:86:32:05:a5:64:f5:a9:c2:d3:06:55:
                    24:81:46:94:cc:37:c3:d6:6f:06:0c:c3:35:33:b2:
                    5d:bd:3c:d1:e4:50:ac:2b:7e:bc:64:3c:ec:02:bb:
                    ee:21:dd:3d:70:d3:86:83:50:f3:4a:c8:4b:d2:64:
                    05:f9:98:92:94:2a:44:5b:3e:e7:f2:0f:5e:07:d1:
                    d4:7f:ae:a1:8d:9b:68:98:40:b7:82:32:7a:2f:cd:
                    e7:c9:7c:83:30:89:f0:7b:47:9e:a6:a6:20:14:33:
                    ef:40:61:2c:8e:af:a3:95:69:a7:5b:fd:d9:49:1d:
                    b8:f4:80:06:dd:a5:9d:f9:3a:ea:2a:f8:cd:7f:47:
                    11:0e:6c:64:c9:66:86:f0:75:ab:b0:c6:a6:8c:47:
                    d3:ec:fc:0a:3d:40:f8:b1:a0:fe:38:b7:0e:71:be:
                    ad:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:3C:92:6F:53:94:37:69:EA:78:3D:14:30:CD:30:BB:C9:3D:63:72
            X509v3 Authority Key Identifier:
                keyid:EB:C8:6C:8C:2D:49:5C:9E:BE:42:66:5A:15:13:DE:69:A9:BF:65:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/68hsjC1JXJ6-QmZaFRPeaam_ZVM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0b252d-db4c-4256-ab06-06d14cf0a46b/1/68hsjC1JXJ6-QmZaFRPeaam_ZVM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0b252d-db4c-4256-ab06-06d14cf0a46b/1/68hsjC1JXJ6-QmZaFRPeaam_ZVM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:3f:b3:71:c2:7b:ff:65:ab:01:c5:ad:44:df:d8:67:4e:46:
         65:dc:47:1e:82:8e:4d:64:f9:6c:1c:f5:c9:50:c4:e5:7a:d0:
         25:7c:87:bd:ca:1d:8f:04:79:5f:e4:e5:8b:26:f3:b4:f8:98:
         15:fa:75:80:52:f1:16:b6:85:92:ae:1f:31:73:25:51:47:4f:
         49:17:91:f8:4b:08:58:45:2b:c3:66:1a:71:65:2a:3a:af:92:
         4d:bf:8f:1a:c4:42:6b:13:10:82:0d:62:cb:2b:d3:10:d0:c7:
         1b:cc:43:40:d3:60:04:2b:f1:f1:d5:01:21:56:2d:86:1a:8b:
         7d:b5:f0:5a:cc:3b:c5:b9:fe:cb:38:e9:05:d3:96:bf:c8:a7:
         e4:a2:77:e9:cd:c8:a7:90:5f:ec:18:30:d5:c2:3e:ba:d9:75:
         c8:a4:8a:25:61:fc:12:12:79:1e:e0:f5:3c:c6:81:46:33:0f:
         0b:16:4d:bf:e0:09:e8:7e:80:71:72:05:df:f3:5c:e6:b3:80:
         81:52:31:d5:1a:b2:a4:df:c1:0b:2e:ba:9b:50:7a:63:7f:b6:
         5c:6d:ea:a6:7a:e6:6c:a2:75:a7:be:f9:9b:7d:f8:05:91:06:
         26:17:bc:5b:12:aa:94:af:39:8f:d5:98:72:d7:4e:7e:01:24:
         08:a9:7d:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:48:06 2025 by rpki-client