Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/a38693-cfa0-43e8-a51b-11e9e9f01343/1/Mw_pcbPjaxapK-hfWZhb5FlouGQ.mft
File:                     Mw_pcbPjaxapK-hfWZhb5FlouGQ.mft (raw, json)
Hash identifier:          UlrRY6p5U/oteRFOIl1rFvH+nODXywBR0+OirJlu2Og=
Subject key identifier:   C0:09:66:9A:C1:04:2D:CF:24:5A:85:77:3F:10:38:9F:19:1C:01:5E
Authority key identifier: 33:0F:E9:71:B3:E3:6B:16:A9:2B:E8:5F:59:98:5B:E4:59:68:B8:64
Certificate issuer:       /CN=330fe971b3e36b16a92be85f59985be45968b864
Certificate serial:       0199FE7D84BD4E4E7B48EF122B7E36F62E29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mw_pcbPjaxapK-hfWZhb5FlouGQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/a38693-cfa0-43e8-a51b-11e9e9f01343/1/Mw_pcbPjaxapK-hfWZhb5FlouGQ.mft
Manifest number:          16E7
Signing time:             Sun 19 Oct 2025 22:01:02 +0000
Manifest this update:     Sun 19 Oct 2025 22:01:02 +0000
Manifest next update:     Mon 20 Oct 2025 22:01:02 +0000
Files and hashes:         1: Axhuv-vSYllpuU-14IugpstzqWE.roa (hash: /Ord+e8QnPH5LGTzpUgmYsFuHyPV/bxgYVJqRNe2PIA=)
                          2: Dpiiya2z2mifdNhqVaRKmAzL95Y.roa (hash: sqFLPY2vXH7g4+A/b285ZHpA7GX89rIisaqW4K6po8o=)
                          3: INSqWlHflpOidRP2Z0zkE0RFoZM.roa (hash: UYyBIx3hFm38d0qCAb7SJuuzgZHuKn0sxA5Yj+GvQrY=)
                          4: KlHNG1wkVyOFx-j7DYZVfmh5bYE.roa (hash: L5JYU64abXKhXkIrpf3gdfvIS55/epAy6+ULSIZ/xw8=)
                          5: Mw_pcbPjaxapK-hfWZhb5FlouGQ.crl (hash: 33ggxPEpETD8XhAS0j1503rCRhnjUZ74NZMEUACOwvg=)
                          6: XBUDByF8di0OovXdvsIAPmD8oI8.roa (hash: QKkt6zof2ioYKcO5/osSYc20Y4gabGbrulwMZuT72/Y=)
                          7: eAIf5pwwtS5DMcRXjingbijYa6I.roa (hash: 5x7C4C2DIQEq7YkrMXUAQXNBSZ9Y9MaJGusjLg+DCEM=)
                          8: q6CD9OHloXnbJ4quKnzMfMA8Aio.roa (hash: 1FAJq7k9JZNXXgBXTfHO8QVEmHccCC1/W+DHOFmecBI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/a38693-cfa0-43e8-a51b-11e9e9f01343/1/Mw_pcbPjaxapK-hfWZhb5FlouGQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/a38693-cfa0-43e8-a51b-11e9e9f01343/1/Mw_pcbPjaxapK-hfWZhb5FlouGQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mw_pcbPjaxapK-hfWZhb5FlouGQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:7d:84:bd:4e:4e:7b:48:ef:12:2b:7e:36:f6:2e:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=330fe971b3e36b16a92be85f59985be45968b864
        Validity
            Not Before: Oct 19 22:01:02 2025 GMT
            Not After : Oct 20 22:01:02 2025 GMT
        Subject: CN=c009669ac1042dcf245a85773f10389f191c015e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:a4:e0:93:e9:54:51:e0:e3:a5:7d:aa:4a:5c:
                    1c:44:8a:64:c0:cf:32:80:ea:04:d4:08:c9:a2:f8:
                    da:a8:f8:2c:0b:99:6d:c4:b6:e9:ce:00:79:88:69:
                    17:33:0b:71:92:c3:4e:22:77:c9:fa:2b:56:8d:cf:
                    8d:ca:04:ac:ff:73:55:c3:f1:71:86:e6:27:11:02:
                    f5:a8:ee:56:bd:d5:41:36:20:da:40:2c:c6:08:3b:
                    17:69:72:c0:21:a5:54:38:8c:1a:13:98:75:fd:77:
                    08:be:8e:1e:3c:75:cb:bb:ba:9e:c8:10:2d:6c:2d:
                    db:ab:12:be:4f:4f:fd:0c:cb:36:71:4a:5a:69:8e:
                    80:0d:32:dc:a5:7b:d9:3d:19:33:cc:8a:cd:79:8d:
                    f5:eb:b7:93:ab:10:03:5e:ce:88:2a:07:34:80:08:
                    e1:f6:a1:4a:2a:fa:06:0f:ba:98:c9:d0:1a:f1:c6:
                    6b:0e:1a:61:e3:c0:96:d8:2e:9e:c5:85:c6:2a:f1:
                    b3:05:84:33:81:28:04:39:ea:20:56:6f:96:f0:88:
                    aa:68:a1:ed:0e:b8:ea:ba:0e:40:f3:59:d5:77:85:
                    a3:89:c7:e4:33:c6:cf:15:b4:c6:0f:28:d7:2c:2e:
                    0d:fa:16:80:9f:17:03:7e:9c:4d:7a:af:6f:b5:9d:
                    3f:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:09:66:9A:C1:04:2D:CF:24:5A:85:77:3F:10:38:9F:19:1C:01:5E
            X509v3 Authority Key Identifier:
                keyid:33:0F:E9:71:B3:E3:6B:16:A9:2B:E8:5F:59:98:5B:E4:59:68:B8:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mw_pcbPjaxapK-hfWZhb5FlouGQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/a38693-cfa0-43e8-a51b-11e9e9f01343/1/Mw_pcbPjaxapK-hfWZhb5FlouGQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/a38693-cfa0-43e8-a51b-11e9e9f01343/1/Mw_pcbPjaxapK-hfWZhb5FlouGQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:06:7e:c4:32:a5:df:67:30:6c:40:bd:6b:e2:58:16:e7:25:
         d0:f5:6e:c5:5e:74:d1:fc:7d:51:e7:19:6c:33:4a:37:55:4b:
         03:00:b5:08:0a:18:81:cc:92:90:ad:9c:27:f2:79:e2:69:67:
         08:8b:90:d8:72:91:19:56:cc:17:f7:48:13:fc:87:14:09:fc:
         62:8f:d1:19:b5:ad:97:42:15:80:5b:69:7d:e8:db:dc:a9:3f:
         4a:2b:1f:fc:78:43:1b:ec:14:46:3d:eb:3e:25:6c:d1:53:6c:
         ef:01:29:d8:d3:55:f1:b1:5e:63:8c:54:fd:98:38:92:ce:0e:
         af:92:21:09:3c:4b:56:d7:9a:8a:e4:c7:1f:1f:df:b1:17:cc:
         5b:ec:e9:7d:c3:72:3e:e0:0d:51:49:25:03:9c:5c:e2:04:f9:
         d6:42:13:07:2d:80:3d:ae:07:55:6b:23:54:04:72:84:f8:1c:
         0a:7d:12:86:8c:08:4d:9b:4e:8d:7b:04:aa:22:eb:3f:44:e8:
         ff:e4:1a:f2:0d:ce:4a:06:2b:c0:0e:02:53:91:d2:f1:07:f4:
         8c:f9:ac:c1:12:8c:19:c6:ad:4a:77:ad:f2:8f:49:37:9d:81:
         25:dd:70:d4:4e:c7:29:f6:4b:a4:78:38:9c:37:cf:16:4f:a3:
         e7:1d:42:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:27:19 2025 by rpki-client