Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/df21cb-08ac-4e5c-b854-e3ab9087d403/1/mzKi6Py-7mMCC6k9qrkHbDe8mZE.mft
File:                     mzKi6Py-7mMCC6k9qrkHbDe8mZE.mft (raw, json)
Hash identifier:          wqgiUHcmVYT6npYSASozLyOhaq4mWSKjE5YDcPPrgf4=
Subject key identifier:   15:12:2B:B7:AB:97:A5:3B:C6:B0:3B:8D:5C:61:AA:B2:8E:A6:D1:ED
Authority key identifier: 9B:32:A2:E8:FC:BE:EE:63:02:0B:A9:3D:AA:B9:07:6C:37:BC:99:91
Certificate issuer:       /CN=9b32a2e8fcbeee63020ba93daab9076c37bc9991
Certificate serial:       0199FDD9772D4402DC16F0396A5584FC7FB8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mzKi6Py-7mMCC6k9qrkHbDe8mZE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/df21cb-08ac-4e5c-b854-e3ab9087d403/1/mzKi6Py-7mMCC6k9qrkHbDe8mZE.mft
Manifest number:          16E5
Signing time:             Sun 19 Oct 2025 19:01:51 +0000
Manifest this update:     Sun 19 Oct 2025 19:01:51 +0000
Manifest next update:     Mon 20 Oct 2025 19:01:51 +0000
Files and hashes:         1: 7TyGUQq5_upn7OI_8rMQkinORFg.roa (hash: KGYsAjI6sTjQq+H3tQWHe4y4uTdeAqiVMRj2OW3ueCg=)
                          2: QF7mDdkQZAR8P9EKqBVgpI8Nnc4.roa (hash: 6EIF8gdiFiVoDV+fXsyr7pASiWNgwImN+SYlSYA+adg=)
                          3: U6Qxy1oNmDM-lMlcIuV-tkZ5i3M.roa (hash: HGuuwSy4hXJni083ZaeJiwdIjM8A91FA5TQ0qlaoCh4=)
                          4: mzKi6Py-7mMCC6k9qrkHbDe8mZE.crl (hash: tRFmNdwB2hhbnWs8G0KudPkIATDx7QQq0a1sIrkk6q4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/df21cb-08ac-4e5c-b854-e3ab9087d403/1/mzKi6Py-7mMCC6k9qrkHbDe8mZE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/df21cb-08ac-4e5c-b854-e3ab9087d403/1/mzKi6Py-7mMCC6k9qrkHbDe8mZE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mzKi6Py-7mMCC6k9qrkHbDe8mZE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 19:01:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:d9:77:2d:44:02:dc:16:f0:39:6a:55:84:fc:7f:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b32a2e8fcbeee63020ba93daab9076c37bc9991
        Validity
            Not Before: Oct 19 19:01:51 2025 GMT
            Not After : Oct 20 19:01:51 2025 GMT
        Subject: CN=15122bb7ab97a53bc6b03b8d5c61aab28ea6d1ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:51:cc:21:e4:b6:fc:37:c2:33:40:d7:7e:40:
                    4c:d6:28:d1:a3:e7:42:cf:26:e1:9b:a7:eb:37:0b:
                    91:b7:1c:c4:0c:68:e3:60:df:88:05:27:c1:2c:28:
                    c1:62:73:fb:3e:23:bc:ee:d2:ec:13:60:9c:a1:91:
                    7f:d8:58:7a:86:aa:73:9d:d5:05:fc:e9:a1:b0:76:
                    d3:71:58:2c:b9:0c:9e:06:92:c7:df:9b:5e:42:8b:
                    9b:36:47:a9:f4:68:10:d1:0b:47:63:ef:ee:b5:93:
                    e9:9c:ae:67:3a:a1:30:8b:69:03:c2:4c:89:e6:98:
                    76:9e:ef:1d:0a:f3:1b:aa:15:c8:5d:81:f8:70:41:
                    a6:d1:ac:4b:30:c5:c8:25:cb:b1:52:ff:e4:87:87:
                    e1:63:75:8c:33:35:89:cf:fd:b2:ba:be:49:d3:ba:
                    48:54:82:94:76:e0:f2:43:82:29:32:4c:e8:00:8c:
                    53:fe:aa:8b:01:f5:63:a7:66:91:21:61:ef:73:77:
                    ac:d7:e1:55:25:9d:17:a8:c3:81:1a:4d:7e:fb:48:
                    e8:77:33:eb:61:81:15:e2:3c:42:90:95:d9:52:e5:
                    1c:64:23:5c:d4:1f:c9:9e:7d:2a:30:01:fd:da:48:
                    f3:44:f3:05:dd:2d:c3:ea:5f:84:ab:d3:6d:98:70:
                    55:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:12:2B:B7:AB:97:A5:3B:C6:B0:3B:8D:5C:61:AA:B2:8E:A6:D1:ED
            X509v3 Authority Key Identifier:
                keyid:9B:32:A2:E8:FC:BE:EE:63:02:0B:A9:3D:AA:B9:07:6C:37:BC:99:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mzKi6Py-7mMCC6k9qrkHbDe8mZE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/df21cb-08ac-4e5c-b854-e3ab9087d403/1/mzKi6Py-7mMCC6k9qrkHbDe8mZE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/df21cb-08ac-4e5c-b854-e3ab9087d403/1/mzKi6Py-7mMCC6k9qrkHbDe8mZE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:be:4a:ef:be:2d:0f:b7:21:4d:4d:d7:14:4c:d3:1e:23:b4:
         06:10:b0:96:50:98:f6:73:97:38:ba:2e:f9:0c:b5:ac:c0:99:
         07:d4:09:ad:65:ef:03:65:75:9b:69:31:e7:11:d5:c7:48:d0:
         60:f0:ee:67:a6:4c:76:c1:3c:72:68:49:8c:9a:b9:7a:c5:9c:
         69:9d:43:c5:91:45:e1:67:15:e7:d0:48:e8:e6:1d:3f:6d:8c:
         29:60:22:68:4f:ba:7b:a5:f0:e7:6c:49:9e:da:68:38:7a:42:
         92:61:14:b8:9c:29:c4:4c:48:d4:42:4a:f4:b8:70:69:46:51:
         34:e6:65:e0:d8:bb:08:d5:c2:0d:6a:62:f1:69:52:a8:e7:fc:
         c5:f7:af:38:0d:60:18:00:cf:5f:e0:d9:8f:c9:b9:e2:de:52:
         eb:2a:cc:6d:fa:0d:d2:9e:55:fb:49:9d:2e:ed:25:42:db:54:
         19:d3:3c:65:d6:d1:ae:0d:e0:7f:6b:34:9c:8a:91:a0:d5:3c:
         97:19:77:29:ae:ea:db:6b:76:07:66:5c:31:37:4c:ab:9b:8b:
         90:d0:6b:90:e7:a1:8d:31:dd:2f:5d:c2:58:4e:8c:91:31:1b:
         9e:3c:d0:1d:4f:89:1b:4e:0b:34:ab:23:ae:a6:39:dd:84:68:
         12:38:4b:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:41:12 2025 by rpki-client