Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.mft
File:                     t5IgqAXkN4VH5Duscxzob-ARRcc.mft (raw, json)
Hash identifier:          2kn9l/XynS/U6TXzqoEQKSPEJwzCL1Sma4aFlonDE2k=
Subject key identifier:   5D:A5:24:97:1E:2A:8A:B5:0F:D3:51:68:50:2A:9F:56:82:8F:C9:5D
Authority key identifier: B7:92:20:A8:05:E4:37:85:47:E4:3B:AC:73:1C:E8:6F:E0:11:45:C7
Certificate issuer:       /CN=b79220a805e4378547e43bac731ce86fe01145c7
Certificate serial:       0199FB0F515C5C9C783EC9ACE084DF8B7BB4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t5IgqAXkN4VH5Duscxzob-ARRcc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.mft
Manifest number:          16FB
Signing time:             Sun 19 Oct 2025 06:01:49 +0000
Manifest this update:     Sun 19 Oct 2025 06:01:49 +0000
Manifest next update:     Mon 20 Oct 2025 06:01:49 +0000
Files and hashes:         1: E1LywobBcmK6AnOJwTgaLZby7Ro.roa (hash: n5sH5ypDKZX50nW+CdvdagJLuCKGRa+qpkP+9kKp1iw=)
                          2: JsHUF9nO0Ubmx66NjwjSoa2db5s.roa (hash: 5Bntxxf/DOq1AqaoIFJIGiKuLbRTvnWBZ2d4WFO6pPY=)
                          3: MbqoSUw94G_kpX-xAxVWXxjX0io.roa (hash: R1upzBkGFuu3S6c70j9aIqWiLLfM3rhDbfCwHwN7UrE=)
                          4: dxIfYzd-HHl4lIaAqTEGfA9c7sQ.roa (hash: 1wNUGeXyusk9X3ieKOx2o0ugjj6lBznwR37kiJNdRxw=)
                          5: qBWUDdq6JGEqcxPlF6Ytcy33dJA.roa (hash: 00VI12BlUP26JR+mPLQ+RfjLscfTifDKz5JZWGxyZBQ=)
                          6: rAdBLvyRbVu9ByeGD622HSDJlBU.roa (hash: CZZqdpQQG94RuUVqGtWwcTYbY/5K07OCSVEcHRuO4vA=)
                          7: t5IgqAXkN4VH5Duscxzob-ARRcc.crl (hash: mqiLXQXpH7RwZyoxVvzRqnIS+F6f9ccu+iZrSRD89eo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t5IgqAXkN4VH5Duscxzob-ARRcc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:0f:51:5c:5c:9c:78:3e:c9:ac:e0:84:df:8b:7b:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b79220a805e4378547e43bac731ce86fe01145c7
        Validity
            Not Before: Oct 19 06:01:49 2025 GMT
            Not After : Oct 20 06:01:49 2025 GMT
        Subject: CN=5da524971e2a8ab50fd35168502a9f56828fc95d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:17:df:d6:89:6f:78:07:ec:6d:f4:57:de:43:
                    98:4e:8b:74:7c:2a:e0:8e:0b:aa:93:12:1f:de:ef:
                    24:4d:32:ba:de:ef:76:a2:13:28:8f:73:28:2e:bf:
                    b9:66:65:d0:7f:bb:0b:51:b0:36:06:f7:c9:f2:59:
                    b9:50:7b:39:c3:63:f3:ab:26:c5:82:19:a7:79:81:
                    f4:ab:67:77:86:33:03:9d:5c:74:00:be:05:c7:a4:
                    32:cc:c1:b0:0e:48:a4:21:62:13:0d:14:2a:36:c5:
                    ee:99:4e:6e:c0:30:19:b0:69:b5:ad:33:ab:d1:56:
                    6e:9a:23:66:1f:ef:87:a4:e0:38:f9:d5:7d:d8:5f:
                    f4:b8:80:5a:b0:34:f5:af:3c:a4:b8:75:0d:24:db:
                    5e:ba:23:ba:b4:ae:83:4c:22:b5:29:cb:a8:1c:9b:
                    38:c5:ef:98:30:16:8c:a1:5e:65:da:c5:49:6d:df:
                    1e:b4:23:1b:69:e6:3a:d5:43:99:7b:eb:83:c0:37:
                    43:e4:be:fd:e4:d9:78:63:be:08:53:73:c7:08:27:
                    cc:66:fe:be:56:47:02:c1:c7:4d:21:f3:32:b4:c3:
                    19:25:ff:d6:a8:65:38:24:37:48:91:13:52:f5:c0:
                    d2:e7:1f:a1:7c:ee:d5:e9:40:83:e4:3e:85:6e:3c:
                    dd:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:A5:24:97:1E:2A:8A:B5:0F:D3:51:68:50:2A:9F:56:82:8F:C9:5D
            X509v3 Authority Key Identifier:
                keyid:B7:92:20:A8:05:E4:37:85:47:E4:3B:AC:73:1C:E8:6F:E0:11:45:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5IgqAXkN4VH5Duscxzob-ARRcc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:bd:97:13:f0:78:55:54:d9:02:c0:af:d5:f3:f6:c8:f8:6a:
         5b:62:24:8a:f4:20:42:7a:12:7e:22:5d:28:b8:22:a9:2b:e9:
         f7:09:a8:08:94:91:95:fc:80:4f:7e:18:51:c1:0c:3b:27:0e:
         a7:e9:4c:06:76:40:27:06:f6:91:37:18:ab:06:1e:1b:77:05:
         90:c2:2c:c8:17:4b:f4:85:ed:5a:65:b3:83:ac:9b:cd:74:db:
         36:b7:de:29:9f:68:8f:14:4b:1d:0d:44:f7:af:1d:32:35:70:
         97:bd:11:52:be:8a:61:83:66:06:ce:67:81:67:4a:59:da:78:
         0c:6a:2e:5b:3f:9b:1a:a6:47:dd:73:ba:de:db:a4:10:7a:37:
         af:d3:d3:75:fd:44:c2:82:84:5b:31:d6:43:15:8d:06:8a:09:
         79:cf:d7:5f:63:92:cd:76:64:40:a4:43:1f:ae:ca:b5:0e:69:
         aa:8a:59:26:e3:a9:c5:3c:5d:df:45:ac:1f:b9:13:3f:14:a0:
         c5:c9:7e:ce:5f:b8:1e:a6:d6:4d:8f:51:16:77:76:78:cc:45:
         9c:b4:5d:81:e2:3c:14:bc:5f:ca:dc:b9:14:dd:3f:08:8d:c1:
         5e:ad:d6:ca:cd:ce:fc:45:2c:4d:3b:95:76:80:d6:f3:f7:ac:
         1e:bf:6e:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:07:33 2025 by rpki-client