Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/d58ed6-0460-4631-a063-a0ce5bd83715/1/tp2yeJuox_8Yi3nd5ChqpuHwN-4.mft
File:                     tp2yeJuox_8Yi3nd5ChqpuHwN-4.mft (raw, json)
Hash identifier:          pekBDnUtG8UaJ3CqOOJ1FaNv9Hhg14wPjez19mldJJQ=
Subject key identifier:   C3:4F:99:D8:E0:52:76:E7:0A:93:98:DF:9E:E9:95:0C:FA:55:13:4A
Authority key identifier: B6:9D:B2:78:9B:A8:C7:FF:18:8B:79:DD:E4:28:6A:A6:E1:F0:37:EE
Certificate issuer:       /CN=b69db2789ba8c7ff188b79dde4286aa6e1f037ee
Certificate serial:       0199FE7DF806C89564E9CA2966D876177402
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tp2yeJuox_8Yi3nd5ChqpuHwN-4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/d58ed6-0460-4631-a063-a0ce5bd83715/1/tp2yeJuox_8Yi3nd5ChqpuHwN-4.mft
Manifest number:          16E5
Signing time:             Sun 19 Oct 2025 22:01:32 +0000
Manifest this update:     Sun 19 Oct 2025 22:01:32 +0000
Manifest next update:     Mon 20 Oct 2025 22:01:32 +0000
Files and hashes:         1: 6vMVm2zjHnS6jWGvj_JPBPoIejQ.roa (hash: WRnwpfl8kuTVj7apaEiYFn6tm3l6ZkpWo7ENQmbJBXw=)
                          2: tp2yeJuox_8Yi3nd5ChqpuHwN-4.crl (hash: yTolsVz9nVbIVL52UXoMllSLnkL229R69zoX69tjDyA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/d58ed6-0460-4631-a063-a0ce5bd83715/1/tp2yeJuox_8Yi3nd5ChqpuHwN-4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/d58ed6-0460-4631-a063-a0ce5bd83715/1/tp2yeJuox_8Yi3nd5ChqpuHwN-4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tp2yeJuox_8Yi3nd5ChqpuHwN-4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:7d:f8:06:c8:95:64:e9:ca:29:66:d8:76:17:74:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b69db2789ba8c7ff188b79dde4286aa6e1f037ee
        Validity
            Not Before: Oct 19 22:01:32 2025 GMT
            Not After : Oct 20 22:01:32 2025 GMT
        Subject: CN=c34f99d8e05276e70a9398df9ee9950cfa55134a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c8:b6:e3:d0:13:49:8e:a7:27:b6:6d:51:96:
                    a4:9f:01:ae:a9:52:16:57:e3:e8:f5:1d:ab:c4:2a:
                    f4:b2:f9:c7:8c:3f:3b:03:80:15:fa:62:a9:34:03:
                    35:a6:30:68:c6:35:b9:dd:b5:77:ac:73:5e:c8:81:
                    11:a8:06:74:90:b3:59:2b:f1:c3:5f:b3:8b:b9:32:
                    05:50:b5:70:12:fc:26:50:34:b2:9b:2c:30:a2:94:
                    f2:6e:93:72:7b:e8:a3:1e:d1:d3:f6:a3:30:48:40:
                    7d:3a:62:df:0c:c3:22:7c:a3:de:e3:c4:3c:82:44:
                    26:18:aa:e6:bf:75:12:d1:cf:e0:9c:cf:91:bc:91:
                    58:8b:e7:19:f2:6e:60:40:65:f7:bd:7c:71:b3:7d:
                    e0:d6:2a:de:06:f5:ef:f4:e4:a3:72:30:40:24:58:
                    01:c1:19:cf:33:9e:2f:65:68:c3:ae:81:27:3d:13:
                    ad:bd:d0:cf:0e:0e:30:1a:b0:14:c5:0f:8b:91:da:
                    0c:3d:97:f8:03:9e:91:1e:af:b6:3f:3b:79:57:0a:
                    6c:39:96:3c:71:6f:ff:4f:91:49:13:bc:ab:3b:97:
                    7a:a3:01:b0:d4:08:16:89:95:83:40:f4:48:88:47:
                    2c:6b:0c:d6:7b:69:c2:fb:30:41:fd:3d:c9:d3:b5:
                    fb:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:4F:99:D8:E0:52:76:E7:0A:93:98:DF:9E:E9:95:0C:FA:55:13:4A
            X509v3 Authority Key Identifier:
                keyid:B6:9D:B2:78:9B:A8:C7:FF:18:8B:79:DD:E4:28:6A:A6:E1:F0:37:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tp2yeJuox_8Yi3nd5ChqpuHwN-4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/d58ed6-0460-4631-a063-a0ce5bd83715/1/tp2yeJuox_8Yi3nd5ChqpuHwN-4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/d58ed6-0460-4631-a063-a0ce5bd83715/1/tp2yeJuox_8Yi3nd5ChqpuHwN-4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:95:6a:4e:35:04:38:41:01:bf:e9:f2:61:4e:55:dd:ba:2e:
         ad:dc:d1:35:6b:1e:6b:42:ce:9d:7a:dc:4e:d5:99:1f:4b:3b:
         8b:88:f7:54:2b:4b:bd:da:d7:92:af:c0:cb:88:c6:ea:a0:ab:
         2d:bf:68:e4:1b:ec:e9:c3:4a:2e:47:8d:ee:25:c0:e8:e0:f3:
         55:c7:1d:cd:ec:60:55:33:f4:23:8d:79:cc:8b:9f:d8:99:ba:
         21:8a:11:0f:bd:e7:c5:6a:2e:5b:ef:5b:2e:45:99:1f:2b:dd:
         4c:b8:c8:a3:d2:08:cb:7a:70:ec:2e:5d:55:44:60:04:0e:0c:
         fc:09:e0:41:1c:09:d0:df:b2:e3:40:00:39:5d:39:26:1b:0c:
         2b:98:9b:10:cc:96:53:e4:b5:a9:51:03:96:40:20:77:d8:cd:
         2b:69:62:61:84:d6:48:5c:a8:60:09:db:94:f5:4e:8c:4e:72:
         42:1f:95:10:43:dd:99:6a:1d:44:45:de:73:32:75:41:ba:c3:
         02:15:df:3a:d3:e5:67:0a:6c:89:4b:1e:ff:f6:fd:5b:6e:57:
         3b:16:ed:9f:a7:ec:8d:2a:6d:61:a1:b7:9b:21:09:99:bb:15:
         3f:22:34:c4:95:c5:8d:64:56:0f:95:f7:d0:a0:ac:f0:9f:a2:
         67:29:69:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:53:43 2025 by rpki-client