Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/3m7QV5w_0lNZfsgvCTkRG6nYyI0.mft
File:                     3m7QV5w_0lNZfsgvCTkRG6nYyI0.mft (raw, json)
Hash identifier:          +NBaEnQacFX/ujZEze9rnkwwLpDnS9kZIpuitrM3AKY=
Subject key identifier:   3C:42:44:64:52:8A:F3:EE:69:43:5D:23:50:87:18:79:2F:A8:97:F2
Authority key identifier: DE:6E:D0:57:9C:3F:D2:53:59:7E:C8:2F:09:39:11:1B:A9:D8:C8:8D
Certificate issuer:       /CN=de6ed0579c3fd253597ec82f0939111ba9d8c88d
Certificate serial:       0199FBEAC3EFB4F47C31DD0403822644CB4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3m7QV5w_0lNZfsgvCTkRG6nYyI0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/3m7QV5w_0lNZfsgvCTkRG6nYyI0.mft
Manifest number:          16E5
Signing time:             Sun 19 Oct 2025 10:01:30 +0000
Manifest this update:     Sun 19 Oct 2025 10:01:30 +0000
Manifest next update:     Mon 20 Oct 2025 10:01:30 +0000
Files and hashes:         1: 3m7QV5w_0lNZfsgvCTkRG6nYyI0.crl (hash: OdB8JXbyJoZT5WTjNIkYk7YaTkEaLcCTr8Dxe97U4Ew=)
                          2: G7UCO8Vqg1runszmtQBQmkn8DqY.roa (hash: 5UbSXfgLxbMjgxcmGz7miCGa9V5+dL7nrdVkUhcTIyw=)
                          3: Naw5SESv6F-7xw8AlzszEkwan9U.roa (hash: Mbo3Jub5v2CNI5HfXQyreqoCmBqpJFtpKsAqTMduHgY=)
                          4: ZIeftz8g6-61T0mBa0ClKG58PyI.roa (hash: bAh6A9SIv0Nw80HjsuLV5ZZhtF7rRyou/1nJ2bbqVfk=)
                          5: d_85lmU1RpGhphRgrIhRhEl6fKg.roa (hash: VpMz8KT7GjSVAfis0Pkct4zgkIxNQjh2YesKqba5huE=)
                          6: i0b6D-rT2FVTM19LqLSh15LYCRI.roa (hash: eAyg6w88G2QnqmNNJFWUnwDhKYl0dByuSLnfnUOvCnA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/3m7QV5w_0lNZfsgvCTkRG6nYyI0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/3m7QV5w_0lNZfsgvCTkRG6nYyI0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3m7QV5w_0lNZfsgvCTkRG6nYyI0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 10:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:ea:c3:ef:b4:f4:7c:31:dd:04:03:82:26:44:cb:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de6ed0579c3fd253597ec82f0939111ba9d8c88d
        Validity
            Not Before: Oct 19 10:01:30 2025 GMT
            Not After : Oct 20 10:01:30 2025 GMT
        Subject: CN=3c424464528af3ee69435d23508718792fa897f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1c:03:11:7e:c3:97:a9:29:f3:fd:36:c6:75:
                    ba:b2:e2:12:0e:29:0c:db:b3:59:34:68:06:a3:6e:
                    62:86:5b:91:40:37:e8:56:8b:54:29:26:1e:d6:6b:
                    08:a7:b8:e4:72:6a:95:8c:a4:64:72:34:df:54:3e:
                    e9:f4:64:37:80:53:b6:ab:5f:40:4c:c2:b1:79:45:
                    c5:20:f2:74:90:d4:f2:72:6d:32:8a:31:cd:7c:d0:
                    fd:ab:f1:43:d4:d2:1a:b5:50:6e:6d:5e:8d:dd:12:
                    76:c5:81:8b:28:11:24:81:fd:25:e5:c9:bb:91:6a:
                    8c:10:a0:73:52:13:29:83:e2:a2:df:e6:ca:5f:92:
                    af:55:d2:b0:76:f3:b4:41:ce:14:3b:79:88:05:b3:
                    d4:1f:27:16:1a:4b:04:bf:22:ee:9c:2a:54:85:85:
                    56:34:d8:af:f2:ec:ae:9f:24:5b:6e:10:6c:61:30:
                    4f:78:b7:49:d4:ff:41:1d:89:a0:27:b2:a5:b6:a4:
                    df:3d:ba:ac:4c:c9:26:e6:eb:23:03:28:93:68:18:
                    d2:fa:6c:4d:53:36:4e:21:3f:6e:79:b0:f5:52:a8:
                    e1:e6:32:c3:aa:13:a5:4f:ac:c5:bc:ac:bd:12:74:
                    ff:f0:47:c6:55:6a:da:8d:ba:b8:73:24:04:5c:80:
                    ee:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:42:44:64:52:8A:F3:EE:69:43:5D:23:50:87:18:79:2F:A8:97:F2
            X509v3 Authority Key Identifier:
                keyid:DE:6E:D0:57:9C:3F:D2:53:59:7E:C8:2F:09:39:11:1B:A9:D8:C8:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3m7QV5w_0lNZfsgvCTkRG6nYyI0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/3m7QV5w_0lNZfsgvCTkRG6nYyI0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/3m7QV5w_0lNZfsgvCTkRG6nYyI0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:08:87:33:4d:22:38:b4:d7:0a:1b:2f:26:18:7c:70:4d:2b:
         3b:1f:e2:fc:79:81:13:26:36:07:c4:33:75:ea:53:8b:87:34:
         24:b8:4a:ac:22:b5:64:2d:14:26:54:26:79:c6:3c:c3:8e:aa:
         70:54:b2:be:b1:df:7e:4d:f4:a6:70:ca:32:95:c7:81:d1:72:
         70:7e:36:81:26:90:7e:e0:19:3f:c6:d8:92:03:98:2b:4d:dc:
         04:e9:af:1b:1a:5d:14:0e:18:dc:11:10:11:2d:48:ca:c9:f6:
         7e:02:1d:65:f3:98:ed:10:af:88:c5:ba:95:e6:57:f9:e8:29:
         e0:db:b0:54:99:b9:53:9a:e9:27:68:07:f0:91:c7:e5:10:5e:
         94:e6:5e:f3:19:e1:34:f7:09:7d:fc:da:f0:7b:2b:09:d0:76:
         de:3a:c0:ae:53:17:f2:94:f4:80:73:15:88:06:07:a6:e8:c6:
         87:1d:eb:f6:ce:ec:c8:e0:12:8a:2c:09:7f:1e:2e:4c:7f:fe:
         f1:09:63:cf:9c:af:09:a3:c7:72:a1:62:4d:71:ce:57:c5:5c:
         01:ff:92:ac:9d:58:c4:a1:26:3b:61:f9:d9:e2:bd:5c:3b:e5:
         68:cc:b6:f0:60:11:c6:d6:25:e0:b6:05:46:a5:68:2a:68:71:
         72:62:47:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:06:33 2025 by rpki-client