Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/1beaa4-ac9c-4a89-9272-1c2267ebf5d5/1/48xYm5m6SULK3twXiTiWQpY8SK4.mft
File:                     48xYm5m6SULK3twXiTiWQpY8SK4.mft (raw, json)
Hash identifier:          CYQqJoCTlpDyZfvcRl9q9IWia0g0QDUTuQmKDKbdqtU=
Subject key identifier:   18:7E:E8:E8:5A:3D:BB:9E:55:85:D9:5B:D7:F9:FD:10:01:4F:AC:F3
Authority key identifier: E3:CC:58:9B:99:BA:49:42:CA:DE:DC:17:89:38:96:42:96:3C:48:AE
Certificate issuer:       /CN=e3cc589b99ba4942cadedc1789389642963c48ae
Certificate serial:       0199FFC776689E145ED65458DD1DB811AC06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/48xYm5m6SULK3twXiTiWQpY8SK4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/1beaa4-ac9c-4a89-9272-1c2267ebf5d5/1/48xYm5m6SULK3twXiTiWQpY8SK4.mft
Manifest number:          16E5
Signing time:             Mon 20 Oct 2025 04:01:25 +0000
Manifest this update:     Mon 20 Oct 2025 04:01:25 +0000
Manifest next update:     Tue 21 Oct 2025 04:01:25 +0000
Files and hashes:         1: 48xYm5m6SULK3twXiTiWQpY8SK4.crl (hash: JQp78PRuEpp2gqT7+SESAredBYnWJ/7i/d0F1MH0g1g=)
                          2: e-VeG7nyUEzNV5sAt3JU-7pUXPM.roa (hash: +VPNQ16MVhJiwbxpGaUiyY+7EYW+EvR2+xy1H+6qMTo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/1beaa4-ac9c-4a89-9272-1c2267ebf5d5/1/48xYm5m6SULK3twXiTiWQpY8SK4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/1beaa4-ac9c-4a89-9272-1c2267ebf5d5/1/48xYm5m6SULK3twXiTiWQpY8SK4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/48xYm5m6SULK3twXiTiWQpY8SK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ff:c7:76:68:9e:14:5e:d6:54:58:dd:1d:b8:11:ac:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3cc589b99ba4942cadedc1789389642963c48ae
        Validity
            Not Before: Oct 20 04:01:25 2025 GMT
            Not After : Oct 21 04:01:25 2025 GMT
        Subject: CN=187ee8e85a3dbb9e5585d95bd7f9fd10014facf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a3:3b:f1:ba:a9:1b:38:9f:a3:3f:31:36:29:
                    de:86:43:66:4b:64:59:70:19:b6:b1:25:78:4a:3b:
                    eb:cb:d1:43:29:b9:9b:97:2a:29:7b:ed:57:14:15:
                    90:af:14:9b:69:af:d2:6a:8f:61:72:aa:42:5a:cd:
                    c3:aa:f3:3f:db:9f:c6:88:1a:53:07:ac:1c:5f:7d:
                    4e:50:48:ca:0f:40:e6:ee:f1:31:d9:fe:e7:d2:2f:
                    d8:c5:f7:c9:cc:eb:29:34:40:67:a1:d3:ab:81:dc:
                    b3:ad:bf:ab:40:57:75:d8:4f:12:18:c5:fe:8e:59:
                    e4:0e:8e:67:6b:a2:3a:5d:7e:75:f1:54:8f:92:81:
                    39:72:34:a1:c8:4e:60:9c:18:d4:b7:ef:44:c0:75:
                    9d:2a:d4:72:6b:96:fd:33:f1:b0:b4:40:60:bc:b1:
                    b2:23:4b:ef:cf:52:25:ac:71:61:8c:11:fd:b1:b5:
                    51:b0:c7:2b:61:ef:39:27:cd:c1:c4:da:2e:f0:ca:
                    4a:93:c3:41:83:7e:fd:37:97:88:d4:67:99:52:0c:
                    87:6e:97:67:3a:b2:c5:5c:2a:76:7a:12:b4:78:7c:
                    a7:75:c8:61:1c:05:ff:88:ca:76:33:ad:ee:1e:1d:
                    55:1e:63:ce:97:68:0f:e0:4e:10:9a:49:1d:80:05:
                    ea:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:7E:E8:E8:5A:3D:BB:9E:55:85:D9:5B:D7:F9:FD:10:01:4F:AC:F3
            X509v3 Authority Key Identifier:
                keyid:E3:CC:58:9B:99:BA:49:42:CA:DE:DC:17:89:38:96:42:96:3C:48:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/48xYm5m6SULK3twXiTiWQpY8SK4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1beaa4-ac9c-4a89-9272-1c2267ebf5d5/1/48xYm5m6SULK3twXiTiWQpY8SK4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1beaa4-ac9c-4a89-9272-1c2267ebf5d5/1/48xYm5m6SULK3twXiTiWQpY8SK4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:26:fb:e8:92:ca:cb:bb:3d:1b:f7:67:f5:db:99:cc:d1:98:
         6a:69:39:5b:aa:3f:e5:86:74:52:02:e6:57:69:8e:67:a6:1e:
         26:c6:c7:1f:af:02:47:f7:96:09:f9:79:d6:a7:05:50:4e:7f:
         01:29:81:aa:b4:37:88:6c:d8:e4:aa:f8:8e:be:6a:fa:49:af:
         07:14:61:b7:c9:81:1a:3e:a0:09:26:c9:7e:e4:a7:96:bb:01:
         0c:bd:2e:af:58:c9:1d:9f:0e:69:af:67:70:3f:92:6f:28:7a:
         91:4f:7d:37:3f:02:48:97:0f:f0:2f:e4:11:aa:10:f0:d3:45:
         98:d3:6a:f4:a6:01:82:fc:e5:b5:81:1f:e7:f2:e9:dc:fd:8a:
         98:1f:6f:84:c7:e7:f1:22:7c:c8:e5:ac:d9:75:48:42:33:d4:
         c2:f1:4e:71:5f:b0:38:63:cb:7c:8d:f0:64:3f:71:89:18:9e:
         3b:62:66:97:18:4b:47:de:36:2b:fc:fd:7c:07:4f:21:a3:db:
         04:ad:76:3e:00:53:97:0c:5a:37:19:7a:62:94:9f:e5:b3:aa:
         13:0f:89:f3:c4:a5:85:28:e6:08:64:32:44:bc:fb:4c:cb:ec:
         f8:eb:8c:38:3e:9c:11:f4:01:4b:1b:76:2d:d6:ab:7d:47:1e:
         fd:2d:d3:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:47:02 2025 by rpki-client