Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/c9f33b-2f1b-4a11-a21d-9a6bd011f8f6/1/rvHu-qdX046xBPpMuk2WK3LlK1I.mft
File:                     rvHu-qdX046xBPpMuk2WK3LlK1I.mft (raw, json)
Hash identifier:          5SYbs8C12wN+kmiztj6l8qH4ukHbL9x42uR0Sd7mx4A=
Subject key identifier:   44:F0:21:A5:F8:3D:22:D6:B5:62:7C:61:C7:A1:F5:9B:2A:1E:D0:64
Authority key identifier: AE:F1:EE:FA:A7:57:D3:8E:B1:04:FA:4C:BA:4D:96:2B:72:E5:2B:52
Certificate issuer:       /CN=aef1eefaa757d38eb104fa4cba4d962b72e52b52
Certificate serial:       0199FDD968B36BC5EDB3122A64D2A86EDED8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rvHu-qdX046xBPpMuk2WK3LlK1I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/c9f33b-2f1b-4a11-a21d-9a6bd011f8f6/1/rvHu-qdX046xBPpMuk2WK3LlK1I.mft
Manifest number:          16E9
Signing time:             Sun 19 Oct 2025 19:01:47 +0000
Manifest this update:     Sun 19 Oct 2025 19:01:47 +0000
Manifest next update:     Mon 20 Oct 2025 19:01:47 +0000
Files and hashes:         1: jtrE-ZquFgpFsUyQd2ruDZJ4V1Y.roa (hash: DLSZmdArA6I562nrgAPaSvfYMqezrmvR6p+K4KjZ8d8=)
                          2: rvHu-qdX046xBPpMuk2WK3LlK1I.crl (hash: Akuv0sCSBm0wXwz1zSsBlpaSP55qXN3C8NDlSo4yTck=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/c9f33b-2f1b-4a11-a21d-9a6bd011f8f6/1/rvHu-qdX046xBPpMuk2WK3LlK1I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/c9f33b-2f1b-4a11-a21d-9a6bd011f8f6/1/rvHu-qdX046xBPpMuk2WK3LlK1I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rvHu-qdX046xBPpMuk2WK3LlK1I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:d9:68:b3:6b:c5:ed:b3:12:2a:64:d2:a8:6e:de:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aef1eefaa757d38eb104fa4cba4d962b72e52b52
        Validity
            Not Before: Oct 19 19:01:47 2025 GMT
            Not After : Oct 20 19:01:47 2025 GMT
        Subject: CN=44f021a5f83d22d6b5627c61c7a1f59b2a1ed064
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:dd:aa:fe:fd:16:29:ff:0f:5f:68:06:2a:f3:
                    67:03:a5:81:82:c3:b8:e4:2c:66:08:21:a6:25:b1:
                    12:03:fb:e9:9d:dd:38:46:68:3e:61:5e:e9:29:ce:
                    e1:02:d7:51:ae:9c:a9:ba:8e:f2:6e:70:cd:6d:49:
                    c9:fb:03:3a:34:dd:9b:98:9b:6c:97:84:02:5f:e0:
                    23:ac:d3:90:fa:ee:fe:05:f4:a7:73:16:c3:1a:d1:
                    e2:d7:86:bb:7a:99:9d:b5:d1:09:b8:d6:7e:55:59:
                    93:e1:f1:a8:0d:19:b8:63:d7:7e:5a:65:e1:fb:f6:
                    b3:cf:08:6f:de:21:69:da:61:ac:b2:88:0d:19:3f:
                    96:33:73:59:4e:c1:59:b3:ee:b7:e8:82:4b:fb:ea:
                    ea:38:db:13:2a:29:19:e9:79:94:17:f9:d5:bb:22:
                    df:92:d8:59:f2:f8:6b:e6:b0:2d:26:a9:55:4f:20:
                    01:3f:53:4a:28:0b:ea:ba:30:3e:06:53:14:4f:f5:
                    54:e8:23:ba:48:00:74:8a:5d:65:32:2f:6d:05:5f:
                    e8:75:61:14:54:e3:68:0f:ae:24:ac:1f:b0:91:cd:
                    cd:94:0a:a8:e5:fc:2b:a3:e6:2c:b7:8b:da:68:05:
                    2f:84:3a:e3:29:2c:5e:bf:a1:7a:43:88:64:f6:60:
                    08:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:F0:21:A5:F8:3D:22:D6:B5:62:7C:61:C7:A1:F5:9B:2A:1E:D0:64
            X509v3 Authority Key Identifier:
                keyid:AE:F1:EE:FA:A7:57:D3:8E:B1:04:FA:4C:BA:4D:96:2B:72:E5:2B:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rvHu-qdX046xBPpMuk2WK3LlK1I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c9f33b-2f1b-4a11-a21d-9a6bd011f8f6/1/rvHu-qdX046xBPpMuk2WK3LlK1I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c9f33b-2f1b-4a11-a21d-9a6bd011f8f6/1/rvHu-qdX046xBPpMuk2WK3LlK1I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:85:4f:ba:ea:e6:fa:a8:56:af:a6:29:0a:44:31:50:b5:4a:
         92:72:76:cc:b1:97:8b:11:53:90:0d:1e:b7:97:20:cd:37:a2:
         2d:79:e5:50:0c:84:05:7c:d0:71:f4:6a:14:d8:21:6c:39:9b:
         0c:73:a4:ba:f6:96:bb:60:1c:40:cb:8c:e6:0e:c4:ec:0f:d3:
         89:a8:5c:09:b3:ac:2c:66:84:41:68:83:21:48:fd:80:36:6a:
         b4:ea:ac:22:aa:12:48:94:a7:b0:df:2c:cf:9a:40:3d:f9:43:
         cf:40:56:91:4d:6d:01:d4:74:6d:60:60:2d:6f:7f:92:23:64:
         9c:cc:27:c0:46:69:d5:53:86:f5:74:ff:7e:3f:e9:cd:db:29:
         17:6b:91:ec:53:1b:18:92:77:70:cc:1b:a9:b8:06:28:ad:38:
         5c:ac:d1:2e:49:d2:72:1e:1f:37:55:52:f7:7c:8c:06:f6:67:
         19:61:e6:e4:53:35:c1:5b:7b:8f:78:81:06:94:be:3b:6f:e6:
         d1:21:a9:3d:e0:34:69:0d:26:cd:21:73:7f:d9:5d:f6:8c:96:
         2e:ba:e0:e1:e8:a7:9e:30:d2:0f:f0:e0:7c:02:ed:ea:2c:0f:
         54:15:94:8a:31:f2:44:46:b4:91:6a:2d:03:36:7c:c8:61:80:
         95:46:bb:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:07:03 2025 by rpki-client