Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.mft
File:                     p23Z2tdYd_fSjRTgjcVbEzC9E7c.mft (raw, json)
Hash identifier:          t5mp3ZiLpN0wo/hDveaslSggLxZAmFXPKNueQOEunXU=
Subject key identifier:   66:E4:1C:6F:61:92:DD:40:D1:FA:07:0C:7C:CC:2C:25:5C:D5:CD:ED
Authority key identifier: A7:6D:D9:DA:D7:58:77:F7:D2:8D:14:E0:8D:C5:5B:13:30:BD:13:B7
Certificate issuer:       /CN=a76dd9dad75877f7d28d14e08dc55b1330bd13b7
Certificate serial:       0199FFFEAF1B7F4428D387ECB5744361B0D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.mft
Manifest number:          16FB
Signing time:             Mon 20 Oct 2025 05:01:44 +0000
Manifest this update:     Mon 20 Oct 2025 05:01:44 +0000
Manifest next update:     Tue 21 Oct 2025 05:01:44 +0000
Files and hashes:         1: QT7D6zXAVoUxNK5Dz_Sr3Ysp0jY.roa (hash: NxSCkfWg+RxkMBPwT+VShHgw3RROnFUgM7kWEk11WTI=)
                          2: XbTeM1PqMKcQqGHBF2Epuf32B9A.roa (hash: hOnMCvxmcOEtS0aimUSMyI+EYwi7WWRIO2fcpaLnTMo=)
                          3: hRG76VocwZXhxkxCAJrESxkkjbY.roa (hash: R6reBqJWi+zQpuGx/72cFGp8W0OEKy5DLaWeb2k91DA=)
                          4: iWHLz7pb0VOnknWH2cLTUErxOZo.roa (hash: jWeDGrOMaI4VEcetBFaHjDSN9dYVfQeBBIRCHkcbqGg=)
                          5: l-wNxi1bPZkNern9TbmWMfg4MJ4.roa (hash: WyFvbV1rJyTWSGqAchaQ6NeEA4bf29r+mAAX5z8uy7I=)
                          6: nKH_sxXM1uxYbMZBzn1lBWWh5Gk.roa (hash: g58milGmDWRWbcSoOduM9RCTlJ8I/zXGlZd0g1v6y6Y=)
                          7: nWpFu-ia2X0bjJCOwDt5OD3QhUU.roa (hash: j+w1oRLaR1UCeH6IJgbFlYRh4McsjrNOg64gWYp7KyE=)
                          8: p23Z2tdYd_fSjRTgjcVbEzC9E7c.crl (hash: pqvlBfkDFt5twzuWO85QlQXKyzvfpW8J5HS5Z4dHYT4=)
                          9: qK4AAnwuTwRwNOb2CLLZs8W9VuI.roa (hash: cqQ7l3QbvSMEr2phGWC5VDW+4MerE13RpRcZdGJsAvw=)
                          10: vIlI_dchwexZNflF7gIM73uLcOg.roa (hash: pny1c3FWYabHzSSLkClEvdiIBKMwq09M8u+AIiKsPlk=)
                          11: ydZkgwYcvYbM7mbYd53RAsEkq3U.roa (hash: qwmH6QR7NKSIBlvN+e3NJdnmXczvm/lNUAul9UFFgLI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ff:fe:af:1b:7f:44:28:d3:87:ec:b5:74:43:61:b0:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a76dd9dad75877f7d28d14e08dc55b1330bd13b7
        Validity
            Not Before: Oct 20 05:01:44 2025 GMT
            Not After : Oct 21 05:01:44 2025 GMT
        Subject: CN=66e41c6f6192dd40d1fa070c7ccc2c255cd5cded
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:79:cb:b4:66:ab:e6:0d:ed:36:ee:b5:e8:50:
                    63:7d:54:6c:b1:12:ba:31:72:a4:dd:ba:53:6f:01:
                    30:4c:b1:0a:f7:27:32:0a:d8:83:d5:d7:18:2c:29:
                    1f:41:cc:06:99:a7:05:79:7e:19:8e:4c:17:ad:9b:
                    b4:04:6e:97:c3:76:87:61:a6:75:57:cb:e9:a6:0f:
                    c3:e2:94:b9:1b:e6:0d:0f:cc:a1:bd:66:63:28:92:
                    20:f4:7b:5b:60:3b:bb:c2:28:a5:ee:4f:89:00:9f:
                    aa:ba:1a:bd:d2:b1:74:a4:d6:c7:33:ac:99:69:b7:
                    0c:7e:a7:a0:3a:87:b8:0e:e8:67:fc:0f:30:49:a6:
                    49:1b:33:8e:8e:55:85:41:71:6f:fc:33:0c:8d:9b:
                    ec:d0:e2:35:db:a9:ed:8f:b5:c2:40:02:e0:f1:56:
                    fd:ec:61:e2:f0:fd:a4:2c:8b:52:32:61:37:b4:45:
                    ac:5f:70:90:09:ee:02:b9:cd:7f:aa:9f:b8:24:85:
                    2f:4d:b6:d7:1f:45:20:10:e8:05:7d:4c:d3:9c:f0:
                    32:be:94:49:b6:ce:d2:b7:d4:7c:e9:59:30:87:af:
                    3b:8b:35:1c:7b:bb:23:13:af:a5:28:a7:d8:ba:27:
                    64:d5:0f:8e:d8:a9:0e:8f:9e:f4:0f:1f:6e:76:6a:
                    1a:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:E4:1C:6F:61:92:DD:40:D1:FA:07:0C:7C:CC:2C:25:5C:D5:CD:ED
            X509v3 Authority Key Identifier:
                keyid:A7:6D:D9:DA:D7:58:77:F7:D2:8D:14:E0:8D:C5:5B:13:30:BD:13:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:3a:aa:18:6f:c6:07:b7:07:d0:0a:52:0d:14:9f:d4:95:cf:
         02:1a:33:91:8d:2a:c0:83:4e:ca:64:d8:70:83:83:dd:83:7b:
         4d:c6:b4:10:59:d6:48:7f:65:61:40:9b:7c:fa:00:51:ab:df:
         b7:49:4d:e9:bd:58:c2:e1:71:06:ef:f8:27:b7:fd:98:fe:4c:
         a9:09:f6:d6:86:2f:86:fd:a7:34:ff:4a:b5:5f:cb:c8:b2:8e:
         ba:4e:7b:7f:b9:a0:d1:a0:48:c5:66:4b:c5:56:38:c2:f6:6b:
         21:b5:9c:ff:ed:15:07:d3:de:73:e6:22:49:00:27:46:88:42:
         4d:69:9c:a0:46:58:de:b5:7c:9a:b8:94:3a:06:fe:f1:8e:ad:
         2f:b0:5b:01:e1:24:45:18:da:e9:04:2a:af:ce:1d:47:3b:d7:
         48:94:0e:35:90:75:2d:52:4e:b6:7b:51:5e:b1:40:9d:98:79:
         da:c4:3e:69:14:52:ec:47:66:1a:29:98:f2:23:a0:83:c0:ea:
         84:44:86:88:08:75:f0:f6:49:bc:d1:fc:4f:a5:ef:19:7e:25:
         c4:14:72:d8:59:29:74:ed:b6:aa:d9:91:a4:6d:63:90:70:12:
         da:c2:1e:a7:23:d0:75:fa:1d:d5:a9:97:ad:a7:ff:d3:0c:30:
         61:ab:29:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:22:51 2025 by rpki-client