Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.mft
File:                     _2mO6y5J_LX5xlqZhXrynOBmQdk.mft (raw, json)
Hash identifier:          j2gukcFK2a3NLe/kAxfPmDhCM5uRrLpTPk+/3zMVVSc=
Subject key identifier:   B9:49:C0:30:2A:8E:B8:44:A6:05:05:67:AA:49:FD:52:6C:BC:75:26
Authority key identifier: FF:69:8E:EB:2E:49:FC:B5:F9:C6:5A:99:85:7A:F2:9C:E0:66:41:D9
Certificate issuer:       /CN=ff698eeb2e49fcb5f9c65a99857af29ce06641d9
Certificate serial:       0199FCC6800ABCAA4110DFB15044DC8381C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.mft
Manifest number:          16ED
Signing time:             Sun 19 Oct 2025 14:01:31 +0000
Manifest this update:     Sun 19 Oct 2025 14:01:31 +0000
Manifest next update:     Mon 20 Oct 2025 14:01:31 +0000
Files and hashes:         1: 0nspkNZBD4AF3c6BuZHawbNEn4s.roa (hash: uIJdsMvT5D3zL8bAjl80cE2Pwz5BnxnpyFyZ11QSq50=)
                          2: 54-UEvGfxV4WPcy4WxLxIFxxE-U.roa (hash: ojna0RnGjI7OjDPWs+roB1Amf6WKyl5pMZi5IPEPWP8=)
                          3: 5Tf-mqxbzy7qofAM2dNl7l1t3mU.roa (hash: 6mVr252OaOJiHsmGk/+j0aXnhIUGcpjMKQ+02iLXgcA=)
                          4: HIpztZT__B_f9n2gN6auamR5pIU.roa (hash: rJY52okWB1TeezbKU/iuTbv7tjIWb1W5p6bbeWIcdzo=)
                          5: LuyH1oX8EXWypVZ7iAaDpvRYVVc.roa (hash: PwqXxZGK4PUOy9TXRGdRnGJ0Q9f2SZmolPNVfAk0WgM=)
                          6: NkdsfBqVz48X5H2Y1WQJSu8vlt4.roa (hash: tuiwHFcQQ4SB/tCeR0sJ8nBN9XREzDRoO1cXDj6kEqo=)
                          7: UjPxDMGW7lYqCuTCh7JHOA6hizY.roa (hash: ANkRdXMj6bkHEGkvb/XWLCpMoxX6nYg0dbetuBTbz8U=)
                          8: _2mO6y5J_LX5xlqZhXrynOBmQdk.crl (hash: 7bi6K3ukn+WxXU3zPsxWh+3UO6+HdLzldOLXRiNv9ug=)
                          9: jqfbqOe3Dnj2fXOhZ9LOHypCFAI.roa (hash: /x0Hcf4qFuhf8+J5QzDuB3C52+I2nDMc1dbR/JkR1Cw=)
                          10: meQ5SBMnqJBkFHe-JOcEGhCsKFY.roa (hash: TMc5toGudrJJLzHO6dJLOGc8MvIeTEaZ3Nzvom9Ftsw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:c6:80:0a:bc:aa:41:10:df:b1:50:44:dc:83:81:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff698eeb2e49fcb5f9c65a99857af29ce06641d9
        Validity
            Not Before: Oct 19 14:01:31 2025 GMT
            Not After : Oct 20 14:01:31 2025 GMT
        Subject: CN=b949c0302a8eb844a6050567aa49fd526cbc7526
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:6b:5a:97:8e:6e:30:31:af:75:bc:63:d2:87:
                    b0:13:22:c3:fc:c8:88:1a:46:fe:25:af:bc:63:6f:
                    3f:73:89:57:99:37:a6:6c:94:31:13:69:33:f4:ff:
                    cf:9e:e0:39:df:c1:f2:b2:f5:d5:b1:2b:d0:bf:d3:
                    32:b1:a3:2a:dc:22:7b:1e:42:4a:74:c6:ac:99:01:
                    e4:d2:ee:f8:cf:7b:6e:59:d5:30:1d:f8:c8:a9:50:
                    f0:5f:52:2c:a5:4a:6e:92:0e:84:30:d5:af:5c:8e:
                    c0:c6:b6:a5:c1:d9:5c:7e:4a:97:9f:e3:e3:7b:25:
                    28:6e:9c:cc:3f:be:6d:86:d6:c8:29:ad:c9:d3:70:
                    42:cf:e5:16:c6:f1:d4:c3:4a:d0:f6:bc:df:33:4e:
                    fd:0d:16:ba:d7:96:b1:2a:38:e9:3b:6b:c8:44:a7:
                    3f:45:d8:e3:2b:a0:ad:e3:a1:22:f1:6e:00:8a:1c:
                    8d:c4:e5:17:67:a0:1d:cc:53:59:95:25:41:f2:00:
                    dc:1c:73:7b:12:df:36:2f:48:b7:74:39:d2:53:9e:
                    85:71:0f:cd:54:0a:17:7a:60:58:1b:d1:c2:40:57:
                    04:88:30:fb:cf:4f:69:7b:88:3b:e9:79:50:13:a5:
                    bb:8a:c1:fa:70:63:97:20:49:0b:fa:5e:2a:84:e0:
                    3e:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:49:C0:30:2A:8E:B8:44:A6:05:05:67:AA:49:FD:52:6C:BC:75:26
            X509v3 Authority Key Identifier:
                keyid:FF:69:8E:EB:2E:49:FC:B5:F9:C6:5A:99:85:7A:F2:9C:E0:66:41:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:3b:0e:0c:42:c6:35:4c:6a:25:97:99:83:b7:6a:ea:6e:cf:
         76:79:6e:fb:c6:24:6c:10:1a:07:35:ce:05:e4:c2:d1:ba:de:
         e5:8f:72:a4:3d:a4:d9:bf:5b:4d:4c:58:b2:c7:88:4b:4c:88:
         5e:38:e7:b7:3e:ac:09:c0:03:4d:ab:d8:7a:eb:dd:ed:ee:2a:
         56:af:c1:44:62:87:27:b8:de:26:4d:bc:13:9d:73:45:5f:48:
         75:7e:2a:8e:49:12:8e:fc:d7:93:b6:5f:ff:cf:db:31:02:77:
         85:43:04:dd:75:ae:0b:d2:35:d0:be:83:f9:b3:22:67:78:66:
         19:2f:a3:9e:bc:f2:c8:39:bf:22:75:ba:38:09:3e:5b:ae:61:
         d5:53:e5:79:54:49:84:90:8b:e5:f1:58:4e:11:fa:1c:2a:d1:
         8b:c0:a8:d1:9e:0b:f2:cd:fd:76:c7:c3:59:a2:60:e4:a6:70:
         2d:ac:f2:f9:ea:76:9a:3b:a6:a9:ce:c9:e1:55:46:58:8c:db:
         8d:25:60:6d:d7:3d:2f:77:c4:53:38:63:b8:5d:1e:76:f6:74:
         6d:9c:e8:1b:92:e8:3f:13:65:79:b6:87:63:17:e5:dd:b0:63:
         16:58:b3:71:71:00:b0:c6:6d:7a:83:69:9f:72:36:16:15:e4:
         c9:a8:06:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:30:31 2025 by rpki-client