Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.mft
File:                     20GLzzGUMXucKIEZMZb-tZj9nu4.mft (raw, json)
Hash identifier:          jwaUTz4YbL0k7BdoGHMNy/JGSosNPHuwfUiwDGazA2o=
Subject key identifier:   1E:1C:EB:BC:E0:CC:63:60:A7:83:1D:B3:41:EC:29:E3:C3:79:F7:6D
Authority key identifier: DB:41:8B:CF:31:94:31:7B:9C:28:81:19:31:96:FE:B5:98:FD:9E:EE
Certificate issuer:       /CN=db418bcf3194317b9c2881193196feb598fd9eee
Certificate serial:       0199FFC86E714A8D744E9010BCCBCF18C6B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/20GLzzGUMXucKIEZMZb-tZj9nu4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.mft
Manifest number:          16E3
Signing time:             Mon 20 Oct 2025 04:02:29 +0000
Manifest this update:     Mon 20 Oct 2025 04:02:29 +0000
Manifest next update:     Tue 21 Oct 2025 04:02:29 +0000
Files and hashes:         1: 20GLzzGUMXucKIEZMZb-tZj9nu4.crl (hash: J9fgNVZkrDv8l8K0AYwr4+7zWBRGXSilL1Iv2gYg2kI=)
                          2: y4Dr14LmLQXVPFrGXXshyx64j84.roa (hash: 1bzHGlABR0e65obFVowAu77APqKznVv88s6eHNbebiQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/20GLzzGUMXucKIEZMZb-tZj9nu4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ff:c8:6e:71:4a:8d:74:4e:90:10:bc:cb:cf:18:c6:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db418bcf3194317b9c2881193196feb598fd9eee
        Validity
            Not Before: Oct 20 04:02:29 2025 GMT
            Not After : Oct 21 04:02:29 2025 GMT
        Subject: CN=1e1cebbce0cc6360a7831db341ec29e3c379f76d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e9:25:45:2a:b2:9f:0e:e0:a2:76:67:52:85:
                    04:8a:8c:16:98:5c:c1:59:f5:6c:ca:6a:97:2c:06:
                    2c:46:13:3e:87:a9:1c:11:9c:24:35:58:a2:a8:6e:
                    47:7b:7b:e4:14:45:d8:12:d1:5e:2d:b1:9f:97:e7:
                    74:f0:9d:eb:b4:d9:83:18:90:11:20:99:83:b7:b1:
                    1f:37:67:f9:cb:2a:00:1c:ab:88:81:7b:86:59:89:
                    3f:32:67:ad:9e:b6:e5:a5:24:27:ed:20:6f:6d:1f:
                    d1:fc:a5:1a:74:7e:22:06:88:73:b7:17:d1:65:57:
                    04:ae:b8:92:b8:49:06:68:5b:e7:95:a1:f0:4c:c3:
                    b7:47:de:61:93:4b:f4:ff:f6:3d:8a:e7:02:fb:7a:
                    29:fb:0b:19:2e:9c:99:0e:ac:5c:50:ec:9d:41:47:
                    0e:0b:61:e8:3f:34:f6:8d:85:90:bf:11:33:61:4b:
                    ba:70:6b:b2:a8:da:5e:5e:10:57:41:f4:01:4b:e9:
                    e2:93:be:39:0e:36:7d:96:a9:bf:36:59:88:06:a5:
                    54:10:27:16:6d:04:a5:e2:76:3c:37:1d:3d:5b:7b:
                    08:9a:66:90:15:97:dd:ac:d4:6d:1f:e1:76:49:8a:
                    82:e3:b5:be:b3:e4:09:54:e2:e4:bd:d9:ef:c5:72:
                    eb:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:1C:EB:BC:E0:CC:63:60:A7:83:1D:B3:41:EC:29:E3:C3:79:F7:6D
            X509v3 Authority Key Identifier:
                keyid:DB:41:8B:CF:31:94:31:7B:9C:28:81:19:31:96:FE:B5:98:FD:9E:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/20GLzzGUMXucKIEZMZb-tZj9nu4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:82:f9:d3:ba:b9:57:f2:9c:db:aa:b6:56:23:2d:f3:34:e1:
         41:3d:87:d5:19:59:1f:f4:32:dc:b0:19:3c:b2:4e:7f:0d:b3:
         37:96:69:e1:7e:fd:1b:ee:c5:04:c0:c2:74:14:df:92:cf:8d:
         ce:fa:1b:1d:ec:24:f5:b4:4c:f8:29:e1:07:f4:e7:a5:1b:e0:
         0a:f9:34:6f:ad:9e:83:2f:46:5b:4b:51:db:f4:68:fa:d8:0f:
         da:e8:f0:67:05:eb:a4:db:fa:f5:76:84:18:af:05:59:50:3b:
         d3:e5:5a:59:5b:f3:e1:1b:35:ff:d5:01:26:e7:c9:d9:50:66:
         83:b3:32:f7:74:08:af:71:52:11:85:b6:18:72:b2:e8:7b:c6:
         90:2a:69:7d:ec:cf:e5:f7:4f:de:cd:99:d5:fc:a0:a4:31:39:
         f8:ea:36:5c:40:2f:7c:06:b7:3c:7a:ae:22:66:18:20:84:b7:
         f0:86:8d:0c:f9:e4:dc:4f:09:bb:8f:5a:aa:13:84:09:53:cc:
         78:3e:b1:a6:6b:83:a1:de:38:68:22:50:94:0f:a1:2f:62:17:
         2c:77:1a:79:4d:77:d3:bf:b6:67:dc:b8:fa:51:e0:be:67:c7:
         e4:61:a6:54:19:c1:26:24:55:8c:a9:ae:34:8f:76:92:04:fa:
         e2:fc:1f:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:17:52 2025 by rpki-client