Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/LxF62jy5UVptim3MFfKwsafZvh0.mft
File:                     LxF62jy5UVptim3MFfKwsafZvh0.mft (raw, json)
Hash identifier:          /wE4+miYZPxZMWPxReo8xiz3mQBVciqmK6cRyTR85Fs=
Subject key identifier:   6D:9D:50:5A:C8:C9:EC:8A:B4:D5:31:2D:D3:E3:54:E3:2B:63:9B:2B
Authority key identifier: 2F:11:7A:DA:3C:B9:51:5A:6D:8A:6D:CC:15:F2:B0:B1:A7:D9:BE:1D
Certificate issuer:       /CN=2f117ada3cb9515a6d8a6dcc15f2b0b1a7d9be1d
Certificate serial:       0199FFC8C1CEC3D9EBD0697B98A698E09F1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LxF62jy5UVptim3MFfKwsafZvh0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/LxF62jy5UVptim3MFfKwsafZvh0.mft
Manifest number:          16EC
Signing time:             Mon 20 Oct 2025 04:02:50 +0000
Manifest this update:     Mon 20 Oct 2025 04:02:50 +0000
Manifest next update:     Tue 21 Oct 2025 04:02:50 +0000
Files and hashes:         1: 4y-HwXvA0OxK3vVdPd5A33rGg9Q.roa (hash: gzORbcgXYU+qNBe8rAH5Phv3POsitSIbAnxxOJbLq5U=)
                          2: LxF62jy5UVptim3MFfKwsafZvh0.crl (hash: osPtT69tztAmADOb97pxp121CPFuEBWcfqqViG9RVZ0=)
                          3: OcMN4PGYYl4NIh--L2pu14Kv2wI.roa (hash: y5JZ+EK3MrQ+Hieebg8h6lpRv7jQFoUhr5uq84o9xb4=)
                          4: cur4FXdft_oIrPB-e2wMuxoxg0k.roa (hash: EMpY5uYjW4BdaSy23lSxIa0kd9ZyYy6IZCRIGCLLNgg=)
                          5: sGMmHuejSMxnvYle1EwKk7ibCFs.roa (hash: 3X9v/hOxIl5oX9TSgmXZwDSxu4qkLlAZp1GYV/4bw7U=)
                          6: ztb5nfGZ41OyyLKu0WyjRkGWEqs.roa (hash: D+kp5S3EtYZJrj3NV0J9bAjz4ni5Vdza3meqOp3xMyA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/LxF62jy5UVptim3MFfKwsafZvh0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/LxF62jy5UVptim3MFfKwsafZvh0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LxF62jy5UVptim3MFfKwsafZvh0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ff:c8:c1:ce:c3:d9:eb:d0:69:7b:98:a6:98:e0:9f:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f117ada3cb9515a6d8a6dcc15f2b0b1a7d9be1d
        Validity
            Not Before: Oct 20 04:02:50 2025 GMT
            Not After : Oct 21 04:02:50 2025 GMT
        Subject: CN=6d9d505ac8c9ec8ab4d5312dd3e354e32b639b2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:0a:a6:d4:88:06:03:89:ca:f2:bb:0c:31:8e:
                    e2:55:e5:bb:89:33:fc:0e:d3:7b:b8:95:88:8a:b7:
                    4f:04:dc:4e:a7:59:79:68:09:e9:59:60:a4:6d:8d:
                    87:64:bb:ea:5d:45:08:b2:f4:28:ba:ea:53:04:16:
                    44:4e:dc:2e:31:ea:44:6b:24:f4:3f:4a:28:44:90:
                    2e:8b:0e:58:de:d3:21:42:2a:7e:8c:a1:03:97:c3:
                    1a:5b:6b:ed:31:aa:c8:eb:aa:72:a5:bc:cb:75:5f:
                    12:b9:e8:ea:48:c5:a8:a2:ce:f1:12:fa:7f:ea:fd:
                    4a:d0:50:4d:70:f6:43:76:87:00:47:e5:ab:f5:13:
                    ba:c2:98:d8:cd:e6:1b:53:49:bf:44:7a:6a:d0:4a:
                    67:0c:97:57:d5:c6:73:aa:8c:57:09:4f:53:03:46:
                    20:58:ad:2e:b2:da:73:60:83:6d:fe:ef:6b:fd:6a:
                    7d:f9:2d:fe:33:78:99:bc:20:9c:2c:78:46:39:78:
                    5b:c9:a6:67:91:ee:34:69:b5:5e:d5:80:48:7a:07:
                    7a:12:2d:ff:2e:2e:07:74:54:7a:80:48:8d:a9:b3:
                    41:a2:f4:5f:6c:18:99:78:1f:54:25:f9:55:45:7e:
                    3c:95:e3:32:cc:ae:7e:c9:1a:11:60:49:02:55:94:
                    42:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:9D:50:5A:C8:C9:EC:8A:B4:D5:31:2D:D3:E3:54:E3:2B:63:9B:2B
            X509v3 Authority Key Identifier:
                keyid:2F:11:7A:DA:3C:B9:51:5A:6D:8A:6D:CC:15:F2:B0:B1:A7:D9:BE:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxF62jy5UVptim3MFfKwsafZvh0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/LxF62jy5UVptim3MFfKwsafZvh0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/LxF62jy5UVptim3MFfKwsafZvh0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:e2:4a:c6:37:2c:b0:50:f1:05:f2:10:4e:e0:d8:20:9a:70:
         b0:cf:0c:f3:05:ef:5d:1b:2e:18:a1:49:b7:5d:67:e9:af:48:
         a3:31:f5:72:cc:c9:f7:9f:d4:e1:f1:71:96:3e:0b:d7:85:b9:
         f9:bf:51:89:51:6d:cf:e6:39:eb:af:c1:74:e6:43:81:b7:58:
         88:2b:cd:17:0f:19:04:b6:9d:68:ca:3e:dd:18:fb:1e:aa:fa:
         07:53:4c:8c:32:1d:0e:ae:17:37:5d:03:00:86:dc:a4:e0:99:
         89:81:35:74:e8:e1:e4:bc:eb:75:74:25:4f:29:e9:85:eb:fc:
         22:50:36:8a:27:85:7a:96:a6:0d:9b:db:37:26:11:8d:34:ed:
         28:01:54:84:f2:ee:d2:0b:5a:9b:9f:77:de:23:3d:c2:48:5c:
         3f:ea:65:68:81:95:e8:03:c4:9d:90:8f:0f:7c:aa:5a:71:f0:
         46:d7:07:3a:ea:21:0b:51:be:3c:cb:7d:41:62:7b:52:7d:e1:
         3c:5f:3d:7a:af:26:3f:cf:fe:64:71:85:01:f1:f9:15:ba:3b:
         60:3a:34:3c:69:44:8a:cf:cb:15:04:14:20:5b:94:3a:1b:c0:
         1e:0c:39:34:b6:96:25:83:ff:5b:0f:11:c1:5e:21:4f:1e:d1:
         29:f4:87:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:45:53 2025 by rpki-client