Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/b90060-5aaa-43ea-bceb-5e749f4341a4/1/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.mft
File:                     FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.mft (raw, json)
Hash identifier:          d7xRvdsJI7Tqmkn4KwnG80w31w0joGWGcB66YD/DeUM=
Subject key identifier:   4D:FB:0C:FB:C7:67:16:F0:91:F7:32:89:30:88:77:B6:11:77:D5:49
Authority key identifier: 16:24:1D:D8:3D:8A:C0:80:B6:65:04:BF:93:74:59:FF:CE:C4:CC:C4
Certificate issuer:       /CN=16241dd83d8ac080b66504bf937459ffcec4ccc4
Certificate serial:       0199FC8F471050C1EAF7F6B8D6299DEC8A72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/b90060-5aaa-43ea-bceb-5e749f4341a4/1/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.mft
Manifest number:          16F3
Signing time:             Sun 19 Oct 2025 13:01:12 +0000
Manifest this update:     Sun 19 Oct 2025 13:01:12 +0000
Manifest next update:     Mon 20 Oct 2025 13:01:12 +0000
Files and hashes:         1: FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.crl (hash: FfiIFHTWZF2uIh1o69X4He9VFmQWQr0pkxkZqtABCUU=)
                          2: nS2kJA0lLglIc5uOUfZiV3eL6YA.roa (hash: K783Zb7wLmRXQmApgLlixVva89VTJc2nsPVxHEGUGTo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/b90060-5aaa-43ea-bceb-5e749f4341a4/1/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/b90060-5aaa-43ea-bceb-5e749f4341a4/1/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:8f:47:10:50:c1:ea:f7:f6:b8:d6:29:9d:ec:8a:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16241dd83d8ac080b66504bf937459ffcec4ccc4
        Validity
            Not Before: Oct 19 13:01:12 2025 GMT
            Not After : Oct 20 13:01:12 2025 GMT
        Subject: CN=4dfb0cfbc76716f091f73289308877b61177d549
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:9c:c8:a1:d8:49:f7:92:32:9b:20:8e:e7:e2:
                    8a:35:d9:a3:01:4c:fd:08:c1:c7:e0:47:ad:fb:a2:
                    95:ce:b5:08:a5:81:b4:5f:32:6a:0d:ff:70:85:ed:
                    09:44:b9:90:5b:80:3e:f2:0c:59:3a:2e:47:fa:4d:
                    69:64:55:2d:62:46:ff:e2:a0:ae:37:e5:b2:11:6e:
                    25:d0:ef:27:80:3c:b8:04:66:7e:52:62:9e:cd:8a:
                    f2:e2:d0:9c:70:a6:eb:fb:9e:3d:84:10:cf:62:78:
                    35:b8:e2:35:5f:3a:59:c1:cc:df:89:df:cb:aa:cc:
                    db:37:f6:75:7c:2a:56:59:11:cf:e8:14:fd:44:bf:
                    5e:f5:00:73:9b:82:00:7d:f4:43:71:1e:18:4a:41:
                    de:f2:78:73:31:22:18:7c:3e:2d:9b:34:dd:17:f0:
                    03:90:6f:3a:e0:c0:23:f2:6c:f4:49:5e:5a:49:51:
                    fd:33:ab:86:33:73:9f:44:8e:d2:3d:26:9b:bf:65:
                    80:9c:d9:b2:84:b5:b7:90:a1:db:c5:c0:f0:af:c7:
                    5f:8b:cc:76:5d:44:0b:4d:27:0d:2d:06:bf:56:87:
                    8f:53:ee:92:7a:5c:58:10:ea:67:c9:ff:58:4d:75:
                    77:71:17:a8:12:2b:11:a3:06:9e:21:b3:22:6f:ae:
                    70:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:FB:0C:FB:C7:67:16:F0:91:F7:32:89:30:88:77:B6:11:77:D5:49
            X509v3 Authority Key Identifier:
                keyid:16:24:1D:D8:3D:8A:C0:80:B6:65:04:BF:93:74:59:FF:CE:C4:CC:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b90060-5aaa-43ea-bceb-5e749f4341a4/1/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b90060-5aaa-43ea-bceb-5e749f4341a4/1/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:2b:0e:f1:65:d0:bf:25:99:43:d7:9a:18:97:c7:b2:08:1f:
         d2:ab:22:21:4a:03:41:2b:08:c2:33:27:19:31:1e:9c:f3:f1:
         46:a8:12:66:ee:ab:81:69:8c:97:aa:dc:16:14:61:c9:76:81:
         43:61:da:4d:b9:25:cc:1b:58:62:00:f9:4c:e0:9b:de:a7:a0:
         83:51:7e:fe:33:62:0c:fd:4d:2b:ee:88:91:62:2f:da:1e:c5:
         a7:b2:7e:42:26:17:79:88:c9:a0:02:8e:42:75:a8:da:c8:02:
         2e:84:e9:8f:22:19:ba:31:46:f6:3c:33:dd:3f:56:5c:a4:22:
         3c:1c:67:09:af:1b:7c:5b:28:4f:4d:14:16:0c:45:f9:b5:77:
         a6:c5:52:df:7b:13:14:88:98:ed:3b:cf:ca:84:e8:73:34:2e:
         5e:89:2a:25:60:c3:7c:28:53:09:aa:64:51:b7:7c:e1:a2:f1:
         0e:dd:bf:67:49:ce:6b:b1:a2:00:1a:f7:8c:6c:b8:c1:a5:fd:
         fe:6c:c9:29:30:33:f0:ae:6b:db:f7:4b:15:cd:75:98:96:bd:
         cf:85:48:78:61:3c:dc:4c:d0:f0:c9:ab:6e:fc:30:14:42:db:
         53:a2:6d:63:c8:7e:0d:c7:c1:92:7c:97:ae:2a:88:d2:1d:c4:
         49:d2:de:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:40:55 2025 by rpki-client