Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/33jsawuWmqIijxJe2qQZus278ls.mft
File:                     33jsawuWmqIijxJe2qQZus278ls.mft (raw, json)
Hash identifier:          1qsz3wt+LBn+jV2dBbi61jTbSCfRmtb6zjiwXnkAgeg=
Subject key identifier:   AC:BB:3E:99:13:44:E6:EB:BE:B1:1C:CC:0E:2F:84:47:88:DB:A8:75
Authority key identifier: DF:78:EC:6B:0B:96:9A:A2:22:8F:12:5E:DA:A4:19:BA:CD:BB:F2:5B
Certificate issuer:       /CN=df78ec6b0b969aa2228f125edaa419bacdbbf25b
Certificate serial:       0199FBEB08020E93ECA48E280059ECF8F529
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/33jsawuWmqIijxJe2qQZus278ls.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/33jsawuWmqIijxJe2qQZus278ls.mft
Manifest number:          16E4
Signing time:             Sun 19 Oct 2025 10:01:48 +0000
Manifest this update:     Sun 19 Oct 2025 10:01:48 +0000
Manifest next update:     Mon 20 Oct 2025 10:01:48 +0000
Files and hashes:         1: 33jsawuWmqIijxJe2qQZus278ls.crl (hash: 6Y/rl1+XBmjLJdyhzNwFz35WozupmSk/U9jmBuqhTN0=)
                          2: 3fEpeO8KRpblUKytupeE9QmRO10.roa (hash: J/sgD9Gkv93PRSGDC5y1FBEaffbfuEvNlwwRc1f17bc=)
                          3: IaFtNttSKZaCyjtsIDwe2puFZb8.roa (hash: 1NfM53YlIhgQ+Nv6uT/TNmq/fXmn5FfwUXrSWjD1Rm8=)
                          4: ynxlTzW2Z7OOg39MYnktecMbQ34.roa (hash: /1enFWpBnhSEiy75MLooqHcnc9RoQMKxSSL0rlifuAg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/33jsawuWmqIijxJe2qQZus278ls.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/33jsawuWmqIijxJe2qQZus278ls.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/33jsawuWmqIijxJe2qQZus278ls.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:08:02:0e:93:ec:a4:8e:28:00:59:ec:f8:f5:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df78ec6b0b969aa2228f125edaa419bacdbbf25b
        Validity
            Not Before: Oct 19 10:01:48 2025 GMT
            Not After : Oct 20 10:01:48 2025 GMT
        Subject: CN=acbb3e991344e6ebbeb11ccc0e2f844788dba875
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:5b:55:f5:2e:77:bd:43:69:b9:5a:b8:d5:d0:
                    8f:6d:79:fa:f6:31:6d:d3:7e:8d:d3:a9:61:9c:c9:
                    e3:cb:e0:5e:20:46:f3:6d:12:1e:f8:2c:ea:22:5c:
                    d7:3b:ad:50:6e:0d:3e:92:e9:db:a4:d2:98:53:92:
                    da:e7:1f:24:ac:88:36:77:88:02:6b:3b:86:d0:d5:
                    5f:4e:49:d5:62:b7:7e:53:b8:a8:ee:bc:7b:79:8a:
                    4b:0f:af:4f:f8:fb:ae:a6:11:34:c8:d9:90:8c:dd:
                    bf:ab:13:97:1f:fb:56:5f:e7:a1:28:58:9d:9d:af:
                    54:5e:48:7e:be:9a:70:15:da:4f:31:ab:71:2a:ec:
                    18:e4:29:03:c4:16:fd:3b:6e:99:3e:cf:69:36:7f:
                    a9:4c:ba:97:44:fa:a8:96:0e:48:dd:ce:21:b0:4c:
                    39:c5:55:96:60:b3:f7:eb:26:68:9c:f2:4a:58:fa:
                    38:1c:13:f4:b6:8d:04:3d:aa:e0:1a:78:a8:0d:39:
                    3e:10:2c:c4:20:f5:00:24:a3:75:14:53:1d:51:02:
                    85:42:6a:bf:a1:a7:d6:61:2b:c1:be:5b:be:a9:d6:
                    a2:8e:63:3e:61:98:77:37:ac:ef:e8:8a:8c:f0:0f:
                    d9:ee:e3:7d:c9:5a:d7:95:d9:55:0f:30:87:12:86:
                    22:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:BB:3E:99:13:44:E6:EB:BE:B1:1C:CC:0E:2F:84:47:88:DB:A8:75
            X509v3 Authority Key Identifier:
                keyid:DF:78:EC:6B:0B:96:9A:A2:22:8F:12:5E:DA:A4:19:BA:CD:BB:F2:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33jsawuWmqIijxJe2qQZus278ls.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/33jsawuWmqIijxJe2qQZus278ls.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/33jsawuWmqIijxJe2qQZus278ls.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:2a:68:ec:be:16:f6:a1:66:51:fd:cd:ed:bc:26:30:5a:6a:
         7b:b2:9b:38:99:b5:17:1d:bb:2d:c0:46:ee:3d:53:7f:da:b6:
         51:87:b8:b1:92:1d:6d:f6:a8:aa:42:ee:9f:cf:fc:a0:eb:03:
         e8:40:89:c8:f8:a6:9f:8a:31:6d:75:00:a8:fd:b5:a3:0e:fe:
         98:4c:03:c2:7a:31:e2:49:b2:07:af:93:06:df:04:83:83:b1:
         b4:5f:7e:93:c4:ad:ed:a5:f2:5a:59:76:2c:0b:59:b8:0f:27:
         98:a0:cb:a0:17:4b:58:c6:18:db:6d:c2:be:6a:7e:1e:7b:b1:
         31:29:74:0f:25:e8:4c:e3:9e:f3:e2:73:89:78:64:85:21:b3:
         df:27:11:c4:6f:1e:26:2f:50:d1:bc:26:f0:ee:66:ee:aa:f6:
         ed:f4:9b:6e:a2:21:7d:02:6e:cc:5c:1a:da:ce:a6:47:f7:44:
         28:26:d4:33:e9:2f:9f:a2:95:ff:50:ae:b4:b8:4a:1a:77:d9:
         8b:e6:c7:a3:ac:eb:7a:54:ba:05:a7:9f:e6:1d:e1:36:57:a3:
         e3:cd:19:3b:e2:4e:ea:3b:54:95:70:6a:49:4f:dd:e4:93:20:
         98:14:79:97:be:d0:b6:5c:be:23:21:79:0e:76:b4:d0:01:af:
         2c:1d:6b:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:20 2025 by rpki-client