Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/GQNkfvskNmLlfmHU7EW0olo36sg.mft
File:                     GQNkfvskNmLlfmHU7EW0olo36sg.mft (raw, json)
Hash identifier:          sp2XNifEWJ1MsamwSUUJll+mCSBXSIcigqqRuv6A1tM=
Subject key identifier:   6E:B5:01:A3:CA:8E:EA:D5:A8:D8:D5:C2:1A:03:03:BE:64:B5:E1:80
Authority key identifier: 19:03:64:7E:FB:24:36:62:E5:7E:61:D4:EC:45:B4:A2:5A:37:EA:C8
Certificate issuer:       /CN=1903647efb243662e57e61d4ec45b4a25a37eac8
Certificate serial:       0199FC5834B7FFE362DD6674A913A0FD960A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GQNkfvskNmLlfmHU7EW0olo36sg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/GQNkfvskNmLlfmHU7EW0olo36sg.mft
Manifest number:          16E1
Signing time:             Sun 19 Oct 2025 12:01:03 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:03 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:03 +0000
Files and hashes:         1: 7mu7dSdOdivtbUb5Ar1MUUCeTYk.roa (hash: q+lzjmvfQiLwsG4m5ztsli480LBdARkn+qQlJRAHsqg=)
                          2: GQNkfvskNmLlfmHU7EW0olo36sg.crl (hash: Ht7fkt4bmLhcPB2Z4lXfiINtF+5xW5PKW/kcKOUbl8k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/GQNkfvskNmLlfmHU7EW0olo36sg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/GQNkfvskNmLlfmHU7EW0olo36sg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GQNkfvskNmLlfmHU7EW0olo36sg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:58:34:b7:ff:e3:62:dd:66:74:a9:13:a0:fd:96:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1903647efb243662e57e61d4ec45b4a25a37eac8
        Validity
            Not Before: Oct 19 12:01:03 2025 GMT
            Not After : Oct 20 12:01:03 2025 GMT
        Subject: CN=6eb501a3ca8eead5a8d8d5c21a0303be64b5e180
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ff:02:72:40:23:ef:cc:e8:62:2d:f3:32:47:
                    75:1f:f0:bd:8d:9c:a9:45:85:59:ff:5b:c1:dd:25:
                    e9:3e:1e:02:ae:5d:25:61:2e:d3:47:0b:26:c6:97:
                    a4:5e:bf:a0:ee:2a:0d:2a:6c:ed:dc:47:56:b8:11:
                    ad:73:65:ac:0b:dc:74:b7:04:d1:47:d0:a0:d4:6c:
                    a9:b7:8f:63:15:47:92:e6:a4:81:67:d0:03:9c:ce:
                    26:8b:55:38:f7:b1:e7:78:40:64:92:78:c7:5e:c6:
                    2d:4e:8a:47:99:7e:c2:7d:fa:6d:db:ab:d9:ab:3d:
                    82:64:0e:29:3f:b3:33:d7:7b:45:d0:b7:60:d3:47:
                    c9:61:e3:d7:5c:3c:c6:a7:06:b6:ad:95:6d:4b:41:
                    f2:28:b1:20:d1:81:1c:18:92:22:2c:fd:73:bd:69:
                    f3:99:62:9d:a8:13:4e:6e:c7:8b:17:39:59:2c:ac:
                    10:f1:ec:e7:48:1a:15:ce:f8:c8:35:22:a4:a1:e3:
                    6f:d7:5e:0f:cf:0f:55:24:94:ae:7d:b3:4a:3e:e9:
                    9f:3f:36:9d:31:64:c6:45:fa:30:8f:02:28:00:96:
                    8b:03:1b:9a:3a:f6:07:91:8f:f9:d0:a6:f6:7c:7b:
                    ad:a7:5f:8e:44:53:71:64:d0:c4:33:4d:30:e3:45:
                    64:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:B5:01:A3:CA:8E:EA:D5:A8:D8:D5:C2:1A:03:03:BE:64:B5:E1:80
            X509v3 Authority Key Identifier:
                keyid:19:03:64:7E:FB:24:36:62:E5:7E:61:D4:EC:45:B4:A2:5A:37:EA:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQNkfvskNmLlfmHU7EW0olo36sg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/GQNkfvskNmLlfmHU7EW0olo36sg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/GQNkfvskNmLlfmHU7EW0olo36sg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:e4:ba:9a:9c:69:08:1c:17:7d:7f:49:d4:82:db:a3:cd:0a:
         6f:2d:fc:bb:e4:e3:a2:78:0a:59:f3:5e:93:0e:0a:49:29:fa:
         d2:4b:bd:41:ab:56:20:c7:26:7a:59:53:8f:99:19:7c:f9:02:
         9f:ae:4c:66:e2:20:1a:d6:3e:78:72:59:69:04:38:d0:35:dd:
         ad:e4:ee:b4:33:8f:4d:59:0a:9b:88:6e:30:fe:5e:57:54:5d:
         79:5e:cf:8f:1f:18:13:20:3e:c4:5b:c6:42:ff:47:7f:0a:59:
         1b:ca:37:6c:db:c0:aa:a6:45:36:81:62:37:bd:25:68:76:d5:
         f4:37:5c:8a:cd:f9:af:9c:ab:c1:42:51:73:af:8e:6c:0e:eb:
         1f:18:b7:21:e8:54:88:fd:7f:df:3f:c9:c0:07:12:1e:55:44:
         5d:77:2e:f8:19:3e:8d:3c:79:00:52:d0:d5:b3:71:08:d0:aa:
         fc:d9:a4:68:a4:9d:51:87:d9:47:09:4b:c7:5a:59:60:92:86:
         4a:df:bb:c0:53:23:33:2f:7c:59:5b:83:b5:d5:3a:33:10:93:
         5e:72:75:1e:3c:26:69:09:38:2b:b8:80:e8:4e:48:29:e4:cd:
         02:de:aa:77:04:5f:cb:62:60:d5:15:76:06:ad:1f:cd:b2:1c:
         40:0d:78:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:19:07 2025 by rpki-client