Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/ecde3e-1fcf-4531-b0f9-24e7e6ada1e2/1/xEGuJhLSUnFnyD96_Bb15nTYiw8.mft
File:                     xEGuJhLSUnFnyD96_Bb15nTYiw8.mft (raw, json)
Hash identifier:          iuoWALwvY2UmJjO4Hy/43kZ2HdqrPRr54+IwAyTemKQ=
Subject key identifier:   70:E9:B5:B1:C1:C4:14:19:87:7C:75:B9:1B:4A:2F:97:F8:E2:BC:B4
Authority key identifier: C4:41:AE:26:12:D2:52:71:67:C8:3F:7A:FC:16:F5:E6:74:D8:8B:0F
Certificate issuer:       /CN=c441ae2612d2527167c83f7afc16f5e674d88b0f
Certificate serial:       0199FCC6725F4E3D0C26AC301ADC584B7DA4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xEGuJhLSUnFnyD96_Bb15nTYiw8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/ecde3e-1fcf-4531-b0f9-24e7e6ada1e2/1/xEGuJhLSUnFnyD96_Bb15nTYiw8.mft
Manifest number:          16E5
Signing time:             Sun 19 Oct 2025 14:01:27 +0000
Manifest this update:     Sun 19 Oct 2025 14:01:27 +0000
Manifest next update:     Mon 20 Oct 2025 14:01:27 +0000
Files and hashes:         1: Z27odeAw_NXJehyB-fy3FNRc6to.roa (hash: AQOZKpMALx7C9oCtz366eVXQquGIlXipPb9ncWEUe5g=)
                          2: xEGuJhLSUnFnyD96_Bb15nTYiw8.crl (hash: bYFmjS8sIYzUaGKT/FZUREGvk6kE6nZrF8NLSeUrVEs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/ecde3e-1fcf-4531-b0f9-24e7e6ada1e2/1/xEGuJhLSUnFnyD96_Bb15nTYiw8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/ecde3e-1fcf-4531-b0f9-24e7e6ada1e2/1/xEGuJhLSUnFnyD96_Bb15nTYiw8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xEGuJhLSUnFnyD96_Bb15nTYiw8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:c6:72:5f:4e:3d:0c:26:ac:30:1a:dc:58:4b:7d:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c441ae2612d2527167c83f7afc16f5e674d88b0f
        Validity
            Not Before: Oct 19 14:01:27 2025 GMT
            Not After : Oct 20 14:01:27 2025 GMT
        Subject: CN=70e9b5b1c1c41419877c75b91b4a2f97f8e2bcb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:c0:3e:90:c7:39:a4:61:f5:b5:36:af:4e:8a:
                    3f:e3:2c:8f:6c:3d:d2:25:3e:60:10:8b:44:49:2f:
                    25:89:f9:b9:d2:3b:81:31:f6:be:58:82:2b:42:19:
                    8f:ba:5d:b6:93:20:a8:14:fb:17:bc:7b:ea:a8:c7:
                    0d:71:d8:d0:2b:24:77:6f:c2:ab:fa:d0:6c:1b:70:
                    4e:f0:f0:69:64:a3:9e:be:82:6a:97:8d:db:8b:82:
                    19:a6:4f:5e:4f:04:1a:aa:a3:92:be:9b:dc:db:0c:
                    7c:25:f1:83:cb:bd:c7:90:30:08:ce:3d:b1:3e:ce:
                    bb:0e:fc:96:5b:1c:60:e6:e0:32:6b:ce:2a:02:10:
                    84:09:d7:24:31:78:c6:3d:12:49:f3:d4:e9:05:93:
                    3f:6b:3c:23:27:12:01:48:27:6f:06:7d:7a:e3:90:
                    8c:e9:6d:d4:63:2e:02:c8:44:61:3f:6d:66:74:b7:
                    ce:34:76:e0:34:30:9a:f8:dd:e9:63:88:ff:d1:e4:
                    61:79:b6:a6:c3:5f:6a:c1:20:4a:04:e0:76:04:39:
                    1c:5a:e1:5d:01:12:cb:93:cc:d9:d3:07:cd:e5:57:
                    50:97:ee:60:fc:6b:2d:c1:47:57:25:87:f1:69:0a:
                    35:23:11:44:fe:28:aa:10:7d:9f:b8:ec:0a:cb:49:
                    ef:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:E9:B5:B1:C1:C4:14:19:87:7C:75:B9:1B:4A:2F:97:F8:E2:BC:B4
            X509v3 Authority Key Identifier:
                keyid:C4:41:AE:26:12:D2:52:71:67:C8:3F:7A:FC:16:F5:E6:74:D8:8B:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xEGuJhLSUnFnyD96_Bb15nTYiw8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ecde3e-1fcf-4531-b0f9-24e7e6ada1e2/1/xEGuJhLSUnFnyD96_Bb15nTYiw8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ecde3e-1fcf-4531-b0f9-24e7e6ada1e2/1/xEGuJhLSUnFnyD96_Bb15nTYiw8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:ab:20:10:bc:da:62:e3:a8:62:2a:a7:81:e1:c7:ea:72:f4:
         cf:99:11:49:75:4c:2f:4b:c3:2c:3c:98:e8:02:6c:f6:41:bf:
         96:a6:b2:b8:74:da:d9:22:c3:77:55:bc:cf:a3:a5:66:7d:c6:
         43:2e:49:ed:49:38:9b:31:9e:0b:6d:3f:a3:61:4d:9a:d4:bf:
         df:3f:34:48:82:36:44:75:67:1d:14:1f:80:ce:3d:67:77:66:
         0d:ef:76:5b:54:db:d6:22:f8:3a:f4:c8:65:45:a8:bd:aa:f3:
         e2:84:de:22:75:72:c1:38:8b:a2:91:33:23:25:7b:74:fd:65:
         f6:ab:bd:0c:e1:e8:e9:50:da:bc:7f:9b:e0:2c:45:87:d6:84:
         a8:87:d7:3d:c0:4e:d5:d8:b5:99:c7:94:a9:dd:c9:49:1f:03:
         c4:2d:93:29:30:84:00:55:87:55:0a:16:31:91:1b:19:6e:7a:
         6b:39:a6:d1:91:cb:d5:33:dc:3e:93:63:cf:e6:8b:c9:79:33:
         ef:69:57:ed:35:ad:07:07:12:5f:6a:6d:d6:ce:9f:ba:cf:50:
         0c:87:3b:08:1a:3f:5f:b8:1f:63:13:8e:f1:2b:e8:9e:d1:15:
         74:71:6f:b7:58:c5:15:16:a0:40:38:a3:92:dc:1a:fe:60:33:
         b0:d9:65:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:07:03 2025 by rpki-client