Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/6977cd-4343-4b4c-8cea-bd35c048b930/1/Dm2P132t49P5bLSZMZSMJymtoN4.mft
File:                     Dm2P132t49P5bLSZMZSMJymtoN4.mft (raw, json)
Hash identifier:          fT3w16aOmfURLqJ+6qkeEYqkTUtJ1uRI3rTpcaAd1r4=
Subject key identifier:   D8:F1:38:2C:6C:C2:9A:55:27:DB:39:26:54:5F:BD:DF:BA:41:9E:38
Authority key identifier: 0E:6D:8F:D7:7D:AD:E3:D3:F9:6C:B4:99:31:94:8C:27:29:AD:A0:DE
Certificate issuer:       /CN=0e6d8fd77dade3d3f96cb49931948c2729ada0de
Certificate serial:       0199FDD8AF52E64FDBB383FCFD11642C44D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dm2P132t49P5bLSZMZSMJymtoN4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/6977cd-4343-4b4c-8cea-bd35c048b930/1/Dm2P132t49P5bLSZMZSMJymtoN4.mft
Manifest number:          16E5
Signing time:             Sun 19 Oct 2025 19:01:00 +0000
Manifest this update:     Sun 19 Oct 2025 19:01:00 +0000
Manifest next update:     Mon 20 Oct 2025 19:01:00 +0000
Files and hashes:         1: 7agd0xXHCJCEBXtCCNxD5ubRKuY.roa (hash: oQw/mKm0E4AJl8kl0WckRZJlnbPoPgaZD+9rJpy3frY=)
                          2: Dm2P132t49P5bLSZMZSMJymtoN4.crl (hash: 1h92SD07yEVz2K5iHd8r1nRBqe2K8wpDyYYM5CrThSs=)
                          3: LT-9VM8v74LKR6mHQpnPgQmq0Pc.roa (hash: DjF9+jZlXLi3uEoLKBvDZoW0dJ/H/LAI1EAde2tMt5g=)
                          4: wKqbNOLsqrVFYWVrfyYGqu1Sues.roa (hash: /xyx+mYRyXQ5PVlQrZvBX8K5l17ZBxWHv6YVrNpVAuU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/6977cd-4343-4b4c-8cea-bd35c048b930/1/Dm2P132t49P5bLSZMZSMJymtoN4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/6977cd-4343-4b4c-8cea-bd35c048b930/1/Dm2P132t49P5bLSZMZSMJymtoN4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Dm2P132t49P5bLSZMZSMJymtoN4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 19:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:d8:af:52:e6:4f:db:b3:83:fc:fd:11:64:2c:44:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e6d8fd77dade3d3f96cb49931948c2729ada0de
        Validity
            Not Before: Oct 19 19:01:00 2025 GMT
            Not After : Oct 20 19:01:00 2025 GMT
        Subject: CN=d8f1382c6cc29a5527db3926545fbddfba419e38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:2c:5f:39:f7:06:29:2f:3b:79:bc:82:f2:59:
                    98:bf:e8:e9:81:79:f7:8e:56:57:00:0e:22:22:f6:
                    67:16:3a:6d:93:3c:5b:3e:8f:15:ef:83:12:c2:78:
                    ff:76:12:b9:36:c8:43:20:5f:65:3f:00:0e:bb:ed:
                    c8:b4:90:c2:cb:e1:31:2a:2b:fd:54:6b:8c:8b:5b:
                    2c:bd:2f:2e:22:df:cc:95:4c:84:6b:7d:c0:00:8a:
                    c5:58:9b:d6:cc:9a:c3:c0:51:04:bf:aa:45:ae:0e:
                    9c:ac:ca:0b:af:bd:31:e6:a0:df:5d:a1:e3:2b:e7:
                    7f:e4:f6:e3:7c:77:f3:5c:9b:78:cd:60:fc:58:2f:
                    df:9c:8e:40:18:95:3b:0f:2c:34:6b:0a:48:a5:3d:
                    1f:04:fb:e9:4f:c8:37:a4:35:09:09:73:73:f8:e2:
                    29:39:fa:75:9e:e1:c7:8c:39:43:4b:18:ab:55:d5:
                    57:59:32:33:d8:aa:1b:15:9a:e8:ca:eb:12:15:4b:
                    62:b0:41:8f:92:a2:cb:fc:10:ea:2a:d6:b6:93:dd:
                    c9:55:12:63:d9:03:2a:a9:5f:d1:0c:52:16:31:db:
                    ab:21:86:1a:27:f3:39:f5:b3:97:a4:ce:b6:58:8a:
                    f5:e4:c3:fb:e1:5c:1f:b2:16:c2:e9:b9:d6:c2:0f:
                    17:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:F1:38:2C:6C:C2:9A:55:27:DB:39:26:54:5F:BD:DF:BA:41:9E:38
            X509v3 Authority Key Identifier:
                keyid:0E:6D:8F:D7:7D:AD:E3:D3:F9:6C:B4:99:31:94:8C:27:29:AD:A0:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dm2P132t49P5bLSZMZSMJymtoN4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/6977cd-4343-4b4c-8cea-bd35c048b930/1/Dm2P132t49P5bLSZMZSMJymtoN4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/6977cd-4343-4b4c-8cea-bd35c048b930/1/Dm2P132t49P5bLSZMZSMJymtoN4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:bf:94:aa:a2:06:21:47:5d:88:ea:04:9a:36:6b:66:36:8d:
         1b:96:e5:4c:70:1d:71:05:a4:b7:ff:80:42:ec:19:97:fd:ba:
         f8:46:f9:ad:2d:b6:d9:cf:c4:c4:f9:e4:be:e0:cb:e2:f8:33:
         f3:5f:25:a9:38:8c:aa:d4:be:f5:9e:da:84:4b:05:27:aa:30:
         8e:cb:9a:f3:ca:a3:04:64:00:4f:70:51:73:33:fd:98:73:19:
         ce:8a:66:a1:a5:79:29:b7:1b:86:8d:3c:23:68:ad:94:86:e9:
         95:02:d3:ef:74:0b:bb:51:f7:00:d6:81:bb:7b:0c:bc:ff:8e:
         98:a5:b0:c5:83:88:5a:a5:6d:f9:47:4e:70:b9:73:07:44:57:
         db:0b:5b:c2:8d:fe:07:24:ad:c5:a7:e1:51:13:5a:ba:aa:86:
         b6:38:29:c8:1c:f2:af:79:1f:f9:72:89:c2:02:f6:70:0a:6a:
         30:fd:83:51:9d:07:27:41:e2:76:fd:17:57:78:dd:e9:2d:0f:
         5d:c1:b5:c6:4f:d6:27:9f:7c:38:14:5a:47:a5:5d:1e:70:7d:
         af:d2:a3:6a:42:40:eb:55:05:fa:55:94:f5:51:74:33:eb:aa:
         7d:5c:73:c0:5f:dc:b5:c8:c5:65:09:4d:23:c9:ee:d9:cf:cf:
         d9:71:5c:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----