Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.mft
File:                     iBeq_sYcOmsCS2qfVP-3ZMo9-SI.mft (raw, json)
Hash identifier:          ewrDY06PqqnJD/shzXvLW23JyrUohgsrxSUco9/H6J4=
Subject key identifier:   AD:50:46:B5:B9:5F:47:6B:7D:95:34:79:54:82:FB:66:3E:B7:F6:7B
Authority key identifier: 88:17:AA:FE:C6:1C:3A:6B:02:4B:6A:9F:54:FF:B7:64:CA:3D:F9:22
Certificate issuer:       /CN=8817aafec61c3a6b024b6a9f54ffb764ca3df922
Certificate serial:       0199FEB47C4862411D1CA92F3159AC2042A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.mft
Manifest number:          16F2
Signing time:             Sun 19 Oct 2025 23:01:05 +0000
Manifest this update:     Sun 19 Oct 2025 23:01:05 +0000
Manifest next update:     Mon 20 Oct 2025 23:01:05 +0000
Files and hashes:         1: 1hGfq7Np-lC5zqkd-UT0koXInYM.roa (hash: IolKuhXpkJOZaKvUYrnuFzhweh0wUA9JjzSA29FK4X0=)
                          2: OKSpYrLatEWj0ajOMlnkl0RP5oU.roa (hash: A3Q0jZ1iyPESI+l4cyY/4KEw8Naq+QWll8F7NuPp7jY=)
                          3: PLd2rwZg3BIFbLdVMuwtqawwJvA.roa (hash: gUsiRiMGcsZ6xvt9E4RkFX3vwnGKGG3T/EDvqaLktLs=)
                          4: TNbxUiFA_umQvykwt3Iu_LF7CJg.roa (hash: NXX5izWtwfV8obTckhCDRFJla3tNI4Ymq5sn2Ta0SdQ=)
                          5: Te2XnOHoF3kxEXlzUZBzf1wEQAw.roa (hash: MqV2PMMmoiIdPWIHn+RrSp4UgSOKiV5NzoDXudREYfo=)
                          6: UYdwUM3DfeHmFmZCeWtOn3yoNG4.roa (hash: BZ3e9G1LFxjJ3lhwzouEb+QxxMJLc2utfmKL1mbzfmY=)
                          7: iBeq_sYcOmsCS2qfVP-3ZMo9-SI.crl (hash: lh4U3qlD8rAqfDl8ytYleQ2l2P3Y1Frrp6mRZgSBPTk=)
                          8: qDeEtGfZREAKrCYzj77GIoMaflI.roa (hash: jq7FvsHAOWp3lpc3C+AgAEp5Bh6v65uQo2orXopz1i8=)
                          9: rjPYT3hASUgJ6V6pMv8rczg7wDI.roa (hash: gjugzVDut3tOkBALsAOUch2hCi+rlYTeCTT5ZsnsEbg=)
                          10: w4BFMIHTNaFjHcRjMoBiDbI7zmk.roa (hash: vJoeMgJNOYp1THBJib5QAyACrsySmDjtx1d5b0MPo9k=)
                          11: xgdaw_rveHEK5d7Lv8gByebbpYM.roa (hash: EozZHq6IPOfxAVYv3DQOy1kcFkmojoflMd4HHwmO24Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 23:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:b4:7c:48:62:41:1d:1c:a9:2f:31:59:ac:20:42:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8817aafec61c3a6b024b6a9f54ffb764ca3df922
        Validity
            Not Before: Oct 19 23:01:05 2025 GMT
            Not After : Oct 20 23:01:05 2025 GMT
        Subject: CN=ad5046b5b95f476b7d9534795482fb663eb7f67b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:94:45:20:c2:8e:5f:61:1c:93:37:97:e8:2e:
                    db:0c:12:92:20:8a:ec:57:b3:b5:48:43:19:6d:62:
                    79:2c:8f:90:7c:00:d5:66:dd:05:35:b1:bc:e2:18:
                    3b:b1:95:ee:0e:27:f1:fe:91:6e:58:0f:08:d4:51:
                    e5:47:eb:69:92:cf:ae:2b:78:e7:f6:bd:a1:67:5d:
                    14:e0:35:5d:cf:2d:84:68:94:80:17:d2:d3:30:8b:
                    5a:b1:f0:61:59:5c:f1:4d:bc:ff:33:0a:46:19:00:
                    dc:37:6b:a0:d9:35:d0:73:e9:47:dd:42:a5:d1:71:
                    ad:ea:c7:80:b9:0c:f6:d6:88:e0:78:48:4f:2f:a4:
                    e1:10:f3:4a:44:7d:66:a3:62:5b:cc:45:ee:5e:3d:
                    28:c3:25:ad:61:37:80:b3:13:9f:04:cf:5d:78:f2:
                    9b:59:73:70:cb:bb:f7:10:00:7c:15:e9:e1:da:8e:
                    b3:4b:73:38:15:8f:52:f1:5c:63:6a:b4:c0:4b:a2:
                    e7:d0:f4:d8:41:b4:a1:51:f1:bc:16:3a:cc:5b:66:
                    be:03:d5:62:69:4d:61:65:8b:44:d3:f5:e7:b1:6c:
                    4f:20:40:0d:82:a5:24:2e:16:e3:b0:ea:65:80:81:
                    7a:c6:b2:08:54:9c:40:63:cd:1e:bf:10:56:59:1a:
                    f7:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:50:46:B5:B9:5F:47:6B:7D:95:34:79:54:82:FB:66:3E:B7:F6:7B
            X509v3 Authority Key Identifier:
                keyid:88:17:AA:FE:C6:1C:3A:6B:02:4B:6A:9F:54:FF:B7:64:CA:3D:F9:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:37:8f:68:92:5a:be:4d:4a:c2:ec:d6:88:06:32:dc:ac:25:
         27:d3:75:8a:a1:27:a6:1c:78:29:ce:51:3d:5e:52:9a:4d:a3:
         38:09:82:58:41:b3:ce:2f:0c:4c:c4:b1:d2:72:e3:b6:b0:52:
         58:7e:fd:10:c5:79:92:d9:8c:d3:6e:4c:7c:52:9a:1a:f6:a5:
         49:2e:ec:75:37:a0:f6:dd:9b:13:bf:96:8f:8f:3f:63:b6:a6:
         45:3b:b6:91:86:47:72:fe:c7:c0:1b:25:d2:73:88:43:d8:09:
         a7:ba:de:de:10:71:b1:1d:67:6a:08:64:28:ad:b1:38:c6:b2:
         81:1a:3c:e6:bb:7f:4d:06:b1:19:71:96:f4:80:3f:6e:ff:ee:
         7d:b4:62:17:61:8f:73:5b:6c:eb:0f:a5:9d:df:e0:da:3e:36:
         30:01:df:89:c5:50:21:e2:9e:bb:03:51:e5:4a:2d:6a:38:56:
         b0:c0:93:c8:8a:18:c5:ea:63:b5:5e:a5:16:18:95:e3:f8:79:
         2e:e8:1c:e7:c9:69:b7:0b:27:24:73:a5:f4:23:4a:90:7b:98:
         dc:d3:9d:73:c0:f2:33:8b:bf:95:68:95:c9:98:bd:ae:16:3a:
         9f:d7:f2:a1:b1:26:72:f5:00:3b:65:d8:89:d4:fe:ed:1a:fb:
         33:e4:43:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:49:50 2025 by rpki-client