Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/4cea79-2a09-4ae7-a50c-f8a836f01b21/1/il2GqrTAl08MJ_Q9lo30JvU99dI.mft
File:                     il2GqrTAl08MJ_Q9lo30JvU99dI.mft (raw, json)
Hash identifier:          Y6BOGFTucvbXO5oUA52AqXILB1gSgcLe/OZ394JgIZ8=
Subject key identifier:   07:F3:20:DE:E9:B9:9E:BC:DB:73:BD:04:A7:47:B7:04:36:61:B4:22
Authority key identifier: 8A:5D:86:AA:B4:C0:97:4F:0C:27:F4:3D:96:8D:F4:26:F5:3D:F5:D2
Certificate issuer:       /CN=8a5d86aab4c0974f0c27f43d968df426f53df5d2
Certificate serial:       0199FB46154AE9145288BD5F52E8B6146BD7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/il2GqrTAl08MJ_Q9lo30JvU99dI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/4cea79-2a09-4ae7-a50c-f8a836f01b21/1/il2GqrTAl08MJ_Q9lo30JvU99dI.mft
Manifest number:          16E3
Signing time:             Sun 19 Oct 2025 07:01:38 +0000
Manifest this update:     Sun 19 Oct 2025 07:01:38 +0000
Manifest next update:     Mon 20 Oct 2025 07:01:38 +0000
Files and hashes:         1: M3KJXsjqIPVIXxYev2SfgVojrU4.roa (hash: Gvsx8H9toLZ4v4VpdY9JPnhwGvrW2p7tLKUQ/kP8+Nc=)
                          2: il2GqrTAl08MJ_Q9lo30JvU99dI.crl (hash: AHH6tXk8Sb6knVDBlDaggLMNITqJVXif/xrcu8qZzz0=)
                          3: lyju-WcsfjKzHsY-MgdKzzZhTIw.roa (hash: EiV9Q5uHzoj0xoTRtMoDguUYz6ko8D3bkiYvM3cYUXQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/4cea79-2a09-4ae7-a50c-f8a836f01b21/1/il2GqrTAl08MJ_Q9lo30JvU99dI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/4cea79-2a09-4ae7-a50c-f8a836f01b21/1/il2GqrTAl08MJ_Q9lo30JvU99dI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/il2GqrTAl08MJ_Q9lo30JvU99dI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:46:15:4a:e9:14:52:88:bd:5f:52:e8:b6:14:6b:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5d86aab4c0974f0c27f43d968df426f53df5d2
        Validity
            Not Before: Oct 19 07:01:38 2025 GMT
            Not After : Oct 20 07:01:38 2025 GMT
        Subject: CN=07f320dee9b99ebcdb73bd04a747b7043661b422
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:25:11:8e:e0:c0:2d:f7:65:72:4c:3d:c2:b3:
                    b1:ee:1f:09:fd:f3:87:d8:d3:c1:5c:0c:2d:e7:ba:
                    50:5c:08:bc:f3:af:37:ec:6b:a4:92:f4:56:03:71:
                    24:8e:5e:3b:31:8e:ca:2e:3c:65:65:4f:9e:35:73:
                    41:91:47:d1:a6:6f:ac:43:76:52:fa:a8:67:da:db:
                    0b:52:22:01:58:7d:2d:a6:d4:c0:01:cd:55:04:08:
                    ae:70:5e:4d:e4:12:13:b4:78:ab:62:40:1c:7e:66:
                    d4:5e:1b:a6:35:e6:47:47:4f:0a:19:e6:f4:d4:0e:
                    35:80:0f:eb:86:77:88:86:be:5d:57:30:8e:72:1d:
                    0b:81:0f:32:78:3f:cf:2e:90:10:f9:24:a8:fe:de:
                    88:81:df:50:7d:87:35:c9:83:80:71:ec:65:cc:c3:
                    50:29:28:af:b4:64:08:46:d4:89:c6:49:07:84:65:
                    e2:6a:de:4d:89:88:a9:e9:ad:d0:5a:54:88:3a:21:
                    2c:0f:70:0c:cd:6b:a9:ec:33:c9:49:6b:3c:c0:ac:
                    57:dc:4d:8a:2c:c1:35:54:1f:ee:6b:1d:64:1a:d2:
                    55:44:93:87:17:33:d6:37:9e:8c:36:d5:85:f5:7b:
                    d6:20:b5:fa:6b:07:e8:39:19:f6:48:28:c1:a6:85:
                    2d:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:F3:20:DE:E9:B9:9E:BC:DB:73:BD:04:A7:47:B7:04:36:61:B4:22
            X509v3 Authority Key Identifier:
                keyid:8A:5D:86:AA:B4:C0:97:4F:0C:27:F4:3D:96:8D:F4:26:F5:3D:F5:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/il2GqrTAl08MJ_Q9lo30JvU99dI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/4cea79-2a09-4ae7-a50c-f8a836f01b21/1/il2GqrTAl08MJ_Q9lo30JvU99dI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/4cea79-2a09-4ae7-a50c-f8a836f01b21/1/il2GqrTAl08MJ_Q9lo30JvU99dI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:9a:d1:d2:86:6d:c7:1b:31:80:2f:b0:80:8f:75:2d:d5:fd:
         d5:b6:2f:69:06:58:89:2f:fe:f1:90:8d:52:04:08:4c:c4:0f:
         0a:13:c4:f1:08:e5:1e:4e:a7:e3:14:83:f5:f0:ae:ab:80:68:
         b9:41:11:cc:6c:88:c3:3f:f9:92:3e:93:44:eb:30:9b:5f:f0:
         00:f0:2c:da:02:f4:ea:c2:f7:e1:50:a3:29:e7:9b:e3:99:98:
         a4:52:23:ba:e1:34:61:52:aa:13:1a:cd:34:e6:63:ef:17:26:
         7e:d8:fb:91:ef:24:15:07:a2:31:85:c0:f1:c1:e3:80:a5:84:
         9e:72:1e:73:4a:ad:86:40:f0:e3:fe:d9:04:d1:ec:d7:dc:de:
         65:ce:8f:4f:8e:a1:c8:22:48:bf:4e:d2:67:fd:a6:74:26:01:
         34:1c:6a:c2:17:6b:66:49:69:44:9d:38:3c:00:28:1d:eb:33:
         8e:01:8c:6f:6a:47:3d:77:f6:ea:5d:f4:64:78:ff:bf:d5:b2:
         ed:78:34:87:f2:6b:96:c2:26:cc:15:08:dd:9a:d2:c4:29:1a:
         e3:56:a3:7b:a7:f1:d2:b1:6c:73:da:1a:db:b4:ec:21:46:3c:
         02:5d:ad:54:c6:de:d1:2e:8d:56:75:73:cf:e7:46:26:54:48:
         cd:2c:cb:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:05:25 2025 by rpki-client