Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/rPkQ82KRw8Ik3bWW2VZUMZfxY94.mft
File:                     rPkQ82KRw8Ik3bWW2VZUMZfxY94.mft (raw, json)
Hash identifier:          vlfFi2tzw4DEv9Q8MpD0NKFkDhWHgmBbkqPnmiWgHi0=
Subject key identifier:   E7:62:87:A5:C2:26:F5:AE:C8:FE:0A:F2:FC:C9:B6:23:F4:AC:A5:05
Authority key identifier: AC:F9:10:F3:62:91:C3:C2:24:DD:B5:96:D9:56:54:31:97:F1:63:DE
Certificate issuer:       /CN=acf910f36291c3c224ddb596d956543197f163de
Certificate serial:       0199FBEBC2FE91EE09F863EDB3F1E4CAC823
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rPkQ82KRw8Ik3bWW2VZUMZfxY94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/rPkQ82KRw8Ik3bWW2VZUMZfxY94.mft
Manifest number:          16A3
Signing time:             Sun 19 Oct 2025 10:02:36 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:36 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:36 +0000
Files and hashes:         1: 8eCmueBEOSsAwO1CHji1gE-_3LI.roa (hash: l5xAz+doohGBqrtfOFmej8JqC0mnQVYKQDeIBm1ToAM=)
                          2: DtvFUItZKqyAuC0qVO7xK12HQO0.roa (hash: z+RXHMTUA/r+jPrvwbj//4T8rVTRPjeJiPQfneeOdNs=)
                          3: J5Nzje0wm67y5K6t3cH8za4h1d0.roa (hash: qpAZrfLDKqU9NwWz286x02NAvGgP6kk6hcqmLvVKz8c=)
                          4: klr8zXHLn6mli5IxFQr4R9FyMV0.roa (hash: I+JofOB+oo9ML4ISV8ODtPvO84Ef+x27qR0wwlNvvJ8=)
                          5: q0Eds_oIDCgE88gdpI6r4kp33h8.roa (hash: sqISDzfU6JYm1UcY8Gcz5wDK5BeEeTVU67gC4Pg+KUk=)
                          6: rPkQ82KRw8Ik3bWW2VZUMZfxY94.crl (hash: fDKBGKV9lDic9TcCYELVgVE2UsP4ZSy7eN8fou3xdX4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/rPkQ82KRw8Ik3bWW2VZUMZfxY94.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/rPkQ82KRw8Ik3bWW2VZUMZfxY94.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rPkQ82KRw8Ik3bWW2VZUMZfxY94.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:c2:fe:91:ee:09:f8:63:ed:b3:f1:e4:ca:c8:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acf910f36291c3c224ddb596d956543197f163de
        Validity
            Not Before: Oct 19 10:02:36 2025 GMT
            Not After : Oct 20 10:02:36 2025 GMT
        Subject: CN=e76287a5c226f5aec8fe0af2fcc9b623f4aca505
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:79:cd:5e:e7:6c:c7:c7:60:6c:84:b0:a7:ac:
                    4a:e8:d0:2b:53:dc:40:62:8a:74:5b:06:13:43:74:
                    ea:75:c1:ef:4a:ef:46:fc:7d:bb:7b:44:7d:dd:ee:
                    b6:09:ad:51:e5:d3:10:fb:b5:c8:be:3a:86:a1:12:
                    53:14:05:26:3b:cf:e3:b5:83:54:65:cd:90:1b:9e:
                    e1:fe:cb:ae:da:2a:f5:85:92:6a:30:3c:05:60:d6:
                    11:79:9c:bd:8b:7c:d2:d6:fb:be:23:05:96:9d:4c:
                    86:18:54:1c:8d:46:7d:5d:a0:e5:d1:fc:82:7c:36:
                    dc:ac:b4:a3:c2:2b:74:b3:eb:9d:43:96:66:30:fc:
                    7e:55:11:5d:e2:a4:e0:0f:e0:e0:b4:e6:dd:bc:2e:
                    b0:bc:d9:c6:01:4c:fb:99:fd:37:74:6b:e5:f1:a8:
                    d2:f3:f0:83:bc:48:68:4c:29:b6:42:d4:2a:9d:81:
                    b0:a3:d7:a5:3a:5a:b2:97:54:d3:ab:07:77:ee:c9:
                    af:d5:bd:c2:f0:23:48:04:35:8b:b0:cc:6e:17:85:
                    34:3b:6d:57:d6:18:28:29:9d:9c:25:30:21:54:43:
                    ee:7f:50:eb:bc:42:3c:2f:5e:15:4b:78:ed:fe:2c:
                    67:8d:56:f4:ac:34:0d:78:ea:16:ad:ec:ae:ff:1d:
                    0d:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:62:87:A5:C2:26:F5:AE:C8:FE:0A:F2:FC:C9:B6:23:F4:AC:A5:05
            X509v3 Authority Key Identifier:
                keyid:AC:F9:10:F3:62:91:C3:C2:24:DD:B5:96:D9:56:54:31:97:F1:63:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rPkQ82KRw8Ik3bWW2VZUMZfxY94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/rPkQ82KRw8Ik3bWW2VZUMZfxY94.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/rPkQ82KRw8Ik3bWW2VZUMZfxY94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:55:4d:de:3e:0f:78:ea:17:75:13:9d:14:52:23:7d:37:dc:
         3b:af:3b:3b:ed:16:73:f3:be:df:7f:45:68:70:99:3c:b3:4c:
         7e:23:a8:8c:0c:16:cd:6b:ce:95:ae:81:fc:a5:c9:be:10:3d:
         3f:a1:d6:7a:5c:d9:8f:ef:27:b3:32:44:02:46:34:ae:87:af:
         2a:da:1e:b8:f4:9c:6e:21:d1:50:2e:d7:b5:da:d5:3d:db:7b:
         37:6c:9c:7a:0a:af:da:a2:18:ff:55:c7:70:4a:5f:c5:f9:91:
         1b:81:49:83:5b:38:d7:29:0d:5b:bb:8d:49:20:50:da:8f:40:
         75:1e:06:ec:67:42:36:65:78:be:c6:9c:bb:02:d3:bb:f5:7f:
         1f:64:3a:c9:e7:c7:ce:9b:34:3b:17:02:ca:53:a0:3b:f9:ca:
         12:b3:54:d6:f7:56:07:fc:8d:91:79:24:ec:d1:c7:55:6e:81:
         a6:d0:d4:d0:d4:32:25:a6:fb:6d:49:bb:f5:5a:3d:f7:27:f2:
         a3:f4:de:20:60:d4:92:64:93:2a:09:92:cf:ad:fb:23:cc:1d:
         8f:28:3e:7b:2a:36:45:84:5b:ed:82:1c:f3:20:5e:34:b8:d6:
         28:9f:cf:bd:cd:ce:18:25:87:f2:fc:31:57:73:fd:e9:df:aa:
         75:f4:21:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:51 2025 by rpki-client