Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/6d38cc-c0f6-4018-b929-9b64c25156b9/1/dErqU-9g-KipNF5YKYKppZvBN2c.mft
File:                     dErqU-9g-KipNF5YKYKppZvBN2c.mft (raw, json)
Hash identifier:          Pq0KTsRFhYIh9qo1xu7mKFEyMqaXVIjceIUlj1y0ilY=
Subject key identifier:   89:BF:D1:2E:32:A3:60:4B:82:CC:14:47:1E:CC:63:89:76:12:A8:D9
Authority key identifier: 74:4A:EA:53:EF:60:F8:A8:A9:34:5E:58:29:82:A9:A5:9B:C1:37:67
Certificate issuer:       /CN=744aea53ef60f8a8a9345e582982a9a59bc13767
Certificate serial:       0199FBEB4E5DCCB7BF7A5B4759C9D0B6E539
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dErqU-9g-KipNF5YKYKppZvBN2c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/6d38cc-c0f6-4018-b929-9b64c25156b9/1/dErqU-9g-KipNF5YKYKppZvBN2c.mft
Manifest number:          16E2
Signing time:             Sun 19 Oct 2025 10:02:06 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:06 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:06 +0000
Files and hashes:         1: OcTgY_TxJBbWYUXl-r4CTTXUle0.roa (hash: 1c7PjEo1UgZPDis6XvL/mHlYibhzZZ7MfR0yuK8HcsA=)
                          2: dErqU-9g-KipNF5YKYKppZvBN2c.crl (hash: /w7CmkxlFZfRZBNa5W/IiLs+HR8cKMHi6BqjItI8wVw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/6d38cc-c0f6-4018-b929-9b64c25156b9/1/dErqU-9g-KipNF5YKYKppZvBN2c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/6d38cc-c0f6-4018-b929-9b64c25156b9/1/dErqU-9g-KipNF5YKYKppZvBN2c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dErqU-9g-KipNF5YKYKppZvBN2c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 10:02:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:4e:5d:cc:b7:bf:7a:5b:47:59:c9:d0:b6:e5:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=744aea53ef60f8a8a9345e582982a9a59bc13767
        Validity
            Not Before: Oct 19 10:02:06 2025 GMT
            Not After : Oct 20 10:02:06 2025 GMT
        Subject: CN=89bfd12e32a3604b82cc14471ecc63897612a8d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d3:63:53:1b:d5:bf:c6:a7:52:ae:22:5e:c2:
                    d1:e4:81:b9:a3:f6:a5:9d:ba:fb:1c:68:d3:5e:d7:
                    74:bf:f1:4b:1e:cb:db:29:a5:bb:41:8a:40:d4:0e:
                    4e:f6:00:b7:50:e4:9b:d5:21:ba:6e:63:01:86:f1:
                    45:dc:cd:d8:6c:03:d2:c4:f7:3f:f9:30:fd:7e:92:
                    6f:ec:b3:a1:23:69:0c:cd:1b:99:ef:1b:e5:37:6b:
                    4b:28:00:61:a9:f9:a1:85:33:91:9d:a6:e4:04:e4:
                    f3:4b:a1:21:93:48:ba:f7:da:33:37:fd:12:1b:3d:
                    0b:07:20:41:b5:87:1f:d1:5c:dd:0c:63:7e:50:01:
                    0d:1a:13:0b:51:d8:5e:03:8d:10:a7:36:c5:a6:41:
                    4b:c4:e5:2a:7e:c1:6e:13:dc:ba:e5:5b:c3:47:d3:
                    e4:8d:35:dd:cb:bd:cc:e7:f1:64:7a:9f:aa:ae:ca:
                    44:1e:f9:a0:5d:d3:b0:71:b9:50:08:77:7c:5a:cf:
                    44:5b:37:d3:37:fa:0c:37:50:90:31:f8:04:ce:09:
                    7a:5f:f8:26:ae:09:e8:73:60:19:f2:20:57:79:87:
                    2b:f7:4c:83:12:53:1c:ea:35:9a:84:54:b0:44:c9:
                    4b:54:2c:7f:16:21:59:13:e2:d7:e3:93:23:f8:99:
                    35:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:BF:D1:2E:32:A3:60:4B:82:CC:14:47:1E:CC:63:89:76:12:A8:D9
            X509v3 Authority Key Identifier:
                keyid:74:4A:EA:53:EF:60:F8:A8:A9:34:5E:58:29:82:A9:A5:9B:C1:37:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dErqU-9g-KipNF5YKYKppZvBN2c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6d38cc-c0f6-4018-b929-9b64c25156b9/1/dErqU-9g-KipNF5YKYKppZvBN2c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6d38cc-c0f6-4018-b929-9b64c25156b9/1/dErqU-9g-KipNF5YKYKppZvBN2c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:93:62:50:cb:a7:9f:45:73:48:b5:06:87:f8:07:13:d0:6b:
         8d:a6:6e:b4:c7:db:41:63:5b:b7:84:f3:29:db:c0:09:14:3d:
         26:35:f0:0b:11:3f:c8:9c:2d:49:06:73:16:a8:a0:87:b7:47:
         90:77:56:fd:c2:7c:66:1a:63:6c:79:83:1f:e2:90:10:af:a3:
         ad:53:3b:f8:cb:4c:d4:05:c6:34:ca:2f:2d:de:7a:fc:55:de:
         e8:76:de:a1:4c:59:de:cd:1c:d3:34:6d:cd:c7:8f:da:1e:13:
         d4:34:03:ac:44:ff:7a:f0:eb:0b:12:f1:3a:a4:f0:c4:eb:be:
         6e:33:1b:ec:e5:e1:69:41:41:aa:6a:76:ec:53:3b:8f:c2:1f:
         ce:6a:cb:b0:0e:75:e2:7b:7e:cc:61:bc:c2:de:7a:02:d8:2e:
         b4:ad:2b:72:9e:1c:c2:13:24:b1:4c:89:ed:93:1c:e5:ce:0b:
         99:77:6c:5d:6f:fe:d4:63:45:5d:84:3f:e0:fa:da:60:ed:d1:
         74:b6:ff:12:e4:34:5f:23:6d:97:56:f0:f2:4a:77:bc:91:74:
         45:34:2f:16:8d:8e:a3:b3:84:03:01:b1:fb:cf:ba:0c:ef:73:
         e8:77:ae:1c:97:75:b8:2a:2f:54:e8:07:0d:5b:cd:05:46:8d:
         21:45:2b:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:11:44 2025 by rpki-client