Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/1d4b2c-945d-4f39-b233-3e6b7025b65e/1/IeQhptlumdY_fPtJnKcRfIIwTqo.mft
File:                     IeQhptlumdY_fPtJnKcRfIIwTqo.mft (raw, json)
Hash identifier:          HIB9FmQzdxhL3QV48V4PpU9Z3bc5jGgeC3DrCa/PLdQ=
Subject key identifier:   D9:C1:89:06:49:C2:DE:6F:70:40:65:38:66:FE:CB:C0:2A:17:C6:02
Authority key identifier: 21:E4:21:A6:D9:6E:99:D6:3F:7C:FB:49:9C:A7:11:7C:82:30:4E:AA
Certificate issuer:       /CN=21e421a6d96e99d63f7cfb499ca7117c82304eaa
Certificate serial:       0199FD6B690FE84660B0F2D47BF0A44C7020
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IeQhptlumdY_fPtJnKcRfIIwTqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/1d4b2c-945d-4f39-b233-3e6b7025b65e/1/IeQhptlumdY_fPtJnKcRfIIwTqo.mft
Manifest number:          16E1
Signing time:             Sun 19 Oct 2025 17:01:38 +0000
Manifest this update:     Sun 19 Oct 2025 17:01:38 +0000
Manifest next update:     Mon 20 Oct 2025 17:01:38 +0000
Files and hashes:         1: 1-6OkkXT7C4FLfpQRzLeEPIkuUNA.roa (hash: D8MJaVpCwQ0fVODdot0Xw5y5hbPJWv55WnQMX0Z/dxE=)
                          2: IeQhptlumdY_fPtJnKcRfIIwTqo.crl (hash: cY54/QoUVpVtzo4MjPcqnB5vm5XXnGO7YemmqTghkT4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/1d4b2c-945d-4f39-b233-3e6b7025b65e/1/IeQhptlumdY_fPtJnKcRfIIwTqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/1d4b2c-945d-4f39-b233-3e6b7025b65e/1/IeQhptlumdY_fPtJnKcRfIIwTqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IeQhptlumdY_fPtJnKcRfIIwTqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:6b:69:0f:e8:46:60:b0:f2:d4:7b:f0:a4:4c:70:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21e421a6d96e99d63f7cfb499ca7117c82304eaa
        Validity
            Not Before: Oct 19 17:01:38 2025 GMT
            Not After : Oct 20 17:01:38 2025 GMT
        Subject: CN=d9c1890649c2de6f7040653866fecbc02a17c602
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:9e:8b:91:13:f5:39:15:d0:05:5e:d9:ef:5e:
                    ee:1a:35:67:76:1c:94:da:d0:c7:56:35:ea:b2:9d:
                    68:ca:0b:4f:5c:1e:70:f9:36:55:77:95:bb:4d:bb:
                    6e:4c:14:66:72:7f:53:fa:8b:bf:f0:b3:f2:98:6e:
                    6e:5f:60:01:da:15:21:09:d0:27:dc:68:0d:4b:7d:
                    f9:b5:6b:91:e1:7b:2f:aa:5e:7d:d4:15:b8:ae:d4:
                    77:fd:2a:57:81:7a:da:8f:d3:d7:a0:00:3e:96:37:
                    5a:ae:b4:a0:fd:c5:9e:72:ae:e7:51:a5:1a:17:34:
                    f7:9b:d8:95:e8:7e:e9:5a:47:50:21:86:0d:06:87:
                    02:7f:5e:34:26:a9:cd:2e:bc:b1:3a:41:79:d6:4a:
                    9b:24:eb:cc:b8:15:d6:f6:db:1a:fe:59:08:c1:07:
                    ae:03:1e:80:5e:a0:bd:29:60:cc:1d:91:f0:79:91:
                    41:79:1b:ea:12:46:ed:16:c3:21:e3:59:1a:45:8a:
                    91:f3:ec:ad:7f:8a:78:b8:15:df:b0:fe:72:22:35:
                    ed:40:44:39:80:5f:c2:eb:60:69:67:84:1a:59:e4:
                    89:b9:38:5a:95:31:00:50:c5:d6:10:a0:49:20:aa:
                    62:45:2c:8f:da:ff:9a:ff:f8:cb:87:07:36:20:ff:
                    d2:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:C1:89:06:49:C2:DE:6F:70:40:65:38:66:FE:CB:C0:2A:17:C6:02
            X509v3 Authority Key Identifier:
                keyid:21:E4:21:A6:D9:6E:99:D6:3F:7C:FB:49:9C:A7:11:7C:82:30:4E:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IeQhptlumdY_fPtJnKcRfIIwTqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1d4b2c-945d-4f39-b233-3e6b7025b65e/1/IeQhptlumdY_fPtJnKcRfIIwTqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1d4b2c-945d-4f39-b233-3e6b7025b65e/1/IeQhptlumdY_fPtJnKcRfIIwTqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:7b:94:dd:cf:eb:f9:89:82:d0:64:cf:2d:5b:00:16:e9:7e:
         81:23:80:3a:a2:2f:b1:d8:55:28:da:cf:51:72:62:94:af:e8:
         91:fc:38:af:62:9c:47:fc:0f:59:82:40:0b:61:8d:a9:ca:d1:
         97:8f:07:a1:b2:f0:e6:8f:8e:62:ed:f0:68:67:45:d6:f3:bb:
         96:35:4c:8c:46:94:cf:63:95:54:a1:0e:e2:bb:02:38:6a:6a:
         43:d7:aa:f2:50:59:0f:7b:31:3e:7c:0b:b7:ba:30:11:f4:fe:
         cf:60:c5:16:d9:f2:49:8c:1e:e6:5c:0f:bf:65:b0:56:d2:a8:
         db:6b:50:5d:b6:d9:4b:5e:b0:31:cc:97:79:f4:76:2f:2e:e1:
         48:cd:60:8e:99:34:4f:f0:e3:c1:4b:be:07:21:d1:1c:c9:36:
         0b:3e:84:9e:f7:91:55:2d:bb:f5:81:76:8c:45:8a:eb:f2:b8:
         2c:c2:ac:0f:1c:d3:61:e4:e2:cd:89:da:ae:1e:72:d0:59:bc:
         95:08:49:f3:00:a6:6b:17:0b:81:ec:ba:3d:66:a2:97:75:59:
         e1:8b:3f:65:2e:21:f5:1b:6f:45:8e:41:c5:3b:cc:a8:1a:cf:
         6c:ce:34:64:91:a4:98:d8:a7:e0:db:24:8a:5c:10:4b:e6:80:
         a6:9d:3b:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:11:44 2025 by rpki-client