Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/acZ5acPJ2Prbyac-P_VjYdAgO3E.mft
File:                     acZ5acPJ2Prbyac-P_VjYdAgO3E.mft (raw, json)
Hash identifier:          VTKYpR51/49gx7KONupp899sJcZzgOlRCsIu+FKvPpk=
Subject key identifier:   67:AD:82:AE:3A:EC:BF:FD:D6:73:09:E8:1D:96:73:1D:A0:B1:CC:44
Authority key identifier: 69:C6:79:69:C3:C9:D8:FA:DB:C9:A7:3E:3F:F5:63:61:D0:20:3B:71
Certificate issuer:       /CN=69c67969c3c9d8fadbc9a73e3ff56361d0203b71
Certificate serial:       0199FBEBD08B352C512DB44F0DF1748BEFA1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/acZ5acPJ2Prbyac-P_VjYdAgO3E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/acZ5acPJ2Prbyac-P_VjYdAgO3E.mft
Manifest number:          16E7
Signing time:             Sun 19 Oct 2025 10:02:39 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:39 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:39 +0000
Files and hashes:         1: 5juFOi12IlXtCkf2DtKHvFjQ7Jk.roa (hash: ww1Ap6yHRZv0yJoUDsvGuz2Z305tTs+DxDhKtXDBfFg=)
                          2: IKiqkrmFyojfs3_xOt7fZHFSlPM.roa (hash: A7gXKJoNQ0QRvI+SScjx1MnLDAh3sHJvpIH2WHgULw8=)
                          3: PtfamAIKc-wbnus8-5afpUvZHGU.roa (hash: h8WtMUiUF98qcvLvFpadosq7yztYyhy7KWS+4nBxrlg=)
                          4: U4yjQ1ijOYxRWOmhUG5jb5FaBQ4.roa (hash: c6bEmKe9x58NR/VbAT8OhvrCDKKUEqAOtV7EWWPUmrc=)
                          5: acZ5acPJ2Prbyac-P_VjYdAgO3E.crl (hash: apq1kHpdZ1tz/qe1FVUJRf25aQwuOe1Jh0yzcak5ZuI=)
                          6: rS6BwZvo3GfqDYx4UHFP382Hars.roa (hash: SFt6Clcvm0ncW0QPfJN10WZH+aRfPVixy7ab3a3BU/w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/acZ5acPJ2Prbyac-P_VjYdAgO3E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/acZ5acPJ2Prbyac-P_VjYdAgO3E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/acZ5acPJ2Prbyac-P_VjYdAgO3E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 10:02:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:d0:8b:35:2c:51:2d:b4:4f:0d:f1:74:8b:ef:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69c67969c3c9d8fadbc9a73e3ff56361d0203b71
        Validity
            Not Before: Oct 19 10:02:39 2025 GMT
            Not After : Oct 20 10:02:39 2025 GMT
        Subject: CN=67ad82ae3aecbffdd67309e81d96731da0b1cc44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:22:be:d4:fe:79:5f:eb:0b:1b:02:3e:96:6a:
                    f5:c3:72:6f:30:15:8c:dc:46:9a:2e:f9:7a:8b:5f:
                    c4:07:a2:60:37:70:d5:fe:41:e4:ea:5f:12:cd:1d:
                    af:c7:61:eb:46:15:31:50:f8:0b:c9:43:26:00:0e:
                    6d:ca:7d:b3:60:a9:5c:68:29:ff:c6:15:9f:82:8a:
                    2e:71:6b:6c:81:03:c8:d9:a5:61:43:9e:58:a8:55:
                    06:00:f3:c8:e9:cf:1d:e9:53:dc:be:74:ad:1c:b3:
                    d9:e3:ff:7e:f6:3f:66:ff:f2:6e:08:8a:ef:a7:c6:
                    d8:d6:d5:31:89:a9:26:27:22:c0:8b:35:00:71:1b:
                    65:b6:b1:d8:63:bb:d7:05:14:f6:8e:7e:d2:f8:4c:
                    1c:0f:e9:56:60:c9:73:eb:f4:8d:3b:15:b9:8f:9c:
                    72:7d:09:14:38:46:af:ff:16:30:14:62:d0:c3:2f:
                    63:0d:7a:ef:ae:00:17:f5:88:e6:25:d2:3f:69:10:
                    9a:6e:19:42:16:cf:1b:fd:32:22:1a:c4:63:1d:89:
                    7a:16:9c:c4:54:fb:e8:67:a1:6a:9e:83:b7:31:ff:
                    94:66:5a:cb:0c:74:76:d6:20:2a:cf:1b:19:5a:2d:
                    6e:93:23:9d:98:12:63:af:ac:6e:3d:ac:41:57:6b:
                    ba:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:AD:82:AE:3A:EC:BF:FD:D6:73:09:E8:1D:96:73:1D:A0:B1:CC:44
            X509v3 Authority Key Identifier:
                keyid:69:C6:79:69:C3:C9:D8:FA:DB:C9:A7:3E:3F:F5:63:61:D0:20:3B:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/acZ5acPJ2Prbyac-P_VjYdAgO3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/acZ5acPJ2Prbyac-P_VjYdAgO3E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/acZ5acPJ2Prbyac-P_VjYdAgO3E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:0e:57:d1:99:07:b8:99:c2:0e:0a:4b:6e:45:cc:76:f5:52:
         35:b1:22:18:a1:47:8a:b7:91:f8:9e:fe:75:1b:67:17:5f:3c:
         76:95:02:bd:bc:1c:ab:f6:19:14:ef:19:00:4f:ee:06:be:56:
         1f:bd:48:c9:48:53:77:25:8f:18:0e:b7:65:44:82:71:62:4d:
         80:26:df:9e:b3:ce:bc:47:47:e7:8a:d8:bd:95:f4:82:c8:41:
         c1:f8:fd:5e:65:9d:50:4c:40:4b:8c:e6:11:50:e9:f1:fd:b2:
         fc:ab:e5:3e:0c:b6:26:12:e7:bb:97:a0:91:22:fa:7e:d0:4b:
         15:6f:ce:ad:64:9b:93:c8:27:48:8a:c6:97:82:4b:cf:f1:04:
         4e:2f:42:39:63:eb:83:29:d7:a3:6d:97:39:1c:30:17:45:16:
         35:96:c4:ad:b3:c6:46:ba:91:44:51:24:e7:33:2e:83:92:20:
         16:78:4d:d4:f7:91:fc:96:2e:f3:3d:85:d1:2a:47:a9:d0:59:
         a6:e2:0b:c0:0e:88:3d:a6:cd:dd:72:8a:ff:bf:49:67:96:5b:
         4c:74:48:a2:02:4d:9e:72:cb:5e:74:7e:ce:63:e5:29:f7:3d:
         3a:3b:58:b6:ab:b3:8f:01:6a:58:ab:55:ee:dc:e0:71:2c:76:
         2d:db:35:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:26:01 2025 by rpki-client