Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/9e5259-3d31-402d-b390-4c8fae529936/1/6J8ihXf6kbJwnnC4Gf9GnEzC6pE.mft
File:                     6J8ihXf6kbJwnnC4Gf9GnEzC6pE.mft (raw, json)
Hash identifier:          uf6ICut+RnsyMiQwMm5mtZM7618PEYDlxr/kq4SMSgM=
Subject key identifier:   07:8D:26:B5:B4:6C:7B:D5:EE:49:AB:FE:0F:3F:0D:C3:7A:E3:25:46
Authority key identifier: E8:9F:22:85:77:FA:91:B2:70:9E:70:B8:19:FF:46:9C:4C:C2:EA:91
Certificate issuer:       /CN=e89f228577fa91b2709e70b819ff469c4cc2ea91
Certificate serial:       0199FC591654D57983F21FF63C2278556547
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6J8ihXf6kbJwnnC4Gf9GnEzC6pE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/9e5259-3d31-402d-b390-4c8fae529936/1/6J8ihXf6kbJwnnC4Gf9GnEzC6pE.mft
Manifest number:          16E5
Signing time:             Sun 19 Oct 2025 12:02:00 +0000
Manifest this update:     Sun 19 Oct 2025 12:02:00 +0000
Manifest next update:     Mon 20 Oct 2025 12:02:00 +0000
Files and hashes:         1: 6J8ihXf6kbJwnnC4Gf9GnEzC6pE.crl (hash: 6X0tCf3q2jd7M1E44NF2nqQcSE2RIo0tyYd6SfbVkro=)
                          2: FI0vaC_-wS4Ctp40wQ6DLlcQC5Q.roa (hash: /18Wg9WgOUF/QfCmOwGmGVq/qijiG5C2ckmZROjPcZk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/9e5259-3d31-402d-b390-4c8fae529936/1/6J8ihXf6kbJwnnC4Gf9GnEzC6pE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/9e5259-3d31-402d-b390-4c8fae529936/1/6J8ihXf6kbJwnnC4Gf9GnEzC6pE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6J8ihXf6kbJwnnC4Gf9GnEzC6pE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:59:16:54:d5:79:83:f2:1f:f6:3c:22:78:55:65:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e89f228577fa91b2709e70b819ff469c4cc2ea91
        Validity
            Not Before: Oct 19 12:02:00 2025 GMT
            Not After : Oct 20 12:02:00 2025 GMT
        Subject: CN=078d26b5b46c7bd5ee49abfe0f3f0dc37ae32546
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:31:6b:53:2a:3c:65:4b:02:6a:7a:f4:79:a5:
                    da:55:45:98:9a:92:d9:31:dd:4a:df:42:ef:a3:0a:
                    49:5c:39:42:b6:29:90:e5:ee:10:24:32:23:8f:5b:
                    d9:c5:c2:ee:bd:6b:04:10:7a:cf:df:6a:e5:bb:b4:
                    2e:53:79:1e:7d:d7:0f:9b:e7:a1:53:02:bb:d0:69:
                    2c:d3:ea:f8:a8:ce:eb:34:88:1f:7a:29:86:75:45:
                    df:2e:e3:c3:06:dc:41:b5:d9:fe:b3:a2:19:9b:d6:
                    7d:be:f1:7b:a4:09:83:00:17:98:02:c9:fd:83:fb:
                    12:86:8a:f5:55:01:ff:39:fd:eb:1c:93:9a:35:f6:
                    c9:6f:1d:56:c5:2e:08:52:45:ab:5c:7e:99:77:f7:
                    65:0e:78:bb:b1:2c:df:16:66:7d:3d:8a:99:d7:fc:
                    14:ca:e7:3c:ce:f3:8a:c8:af:da:5b:0c:f7:1f:6a:
                    bc:04:12:2a:7c:8c:1f:4d:fc:d8:a0:0b:27:22:bf:
                    a1:f9:1e:b2:94:1a:ee:27:b6:22:ac:9e:85:ad:e1:
                    d9:41:15:b4:2d:8a:65:b7:b9:15:21:e3:c4:db:b7:
                    6b:60:67:7f:79:7f:f4:71:18:56:ff:f1:d8:b7:27:
                    3b:e6:be:82:6f:74:13:68:76:35:3c:14:a4:cc:69:
                    d3:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:8D:26:B5:B4:6C:7B:D5:EE:49:AB:FE:0F:3F:0D:C3:7A:E3:25:46
            X509v3 Authority Key Identifier:
                keyid:E8:9F:22:85:77:FA:91:B2:70:9E:70:B8:19:FF:46:9C:4C:C2:EA:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6J8ihXf6kbJwnnC4Gf9GnEzC6pE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/9e5259-3d31-402d-b390-4c8fae529936/1/6J8ihXf6kbJwnnC4Gf9GnEzC6pE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/9e5259-3d31-402d-b390-4c8fae529936/1/6J8ihXf6kbJwnnC4Gf9GnEzC6pE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:75:99:db:e8:83:f6:f5:ec:e8:6a:1c:f4:d2:a8:75:d8:28:
         07:a1:f2:da:6c:ad:2c:58:95:dd:e2:c9:ca:61:ff:8a:48:f2:
         58:95:04:f2:60:28:d8:d0:53:9f:cd:91:78:5d:f1:03:97:0e:
         09:2c:63:59:07:c1:ee:d9:9b:0c:3b:d6:5a:50:40:4c:8d:4d:
         47:72:ef:01:5a:ca:60:62:9d:e0:41:3d:3a:4b:96:c5:ab:75:
         49:0a:e9:36:54:df:08:7f:41:10:04:bf:52:27:0f:fb:62:16:
         de:ed:f1:93:72:fa:27:09:17:ba:af:fe:57:3b:b5:51:7d:81:
         3b:be:f1:90:f6:62:5c:10:1d:23:ca:2b:03:4d:bf:4d:e4:27:
         5a:58:05:84:a9:69:6f:fa:d2:cb:04:fa:22:5f:d3:d7:85:5b:
         39:fc:2b:11:a3:71:13:74:1d:47:02:f2:23:c7:e6:8b:48:4f:
         ed:47:41:5b:05:6b:9f:10:7f:03:4a:23:4e:2b:24:af:e0:46:
         5e:84:a7:7f:bd:86:a8:66:b0:bc:88:aa:4e:f2:52:92:9f:43:
         54:09:40:bb:4e:49:1c:f9:c3:4f:28:96:32:62:5f:40:e9:bc:
         27:61:87:2a:1f:af:d6:8c:0b:a1:41:25:00:be:d1:19:5c:8a:
         15:9a:81:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:24:03 2025 by rpki-client