Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/416aaf-8602-4196-b51d-41d087b3828b/1/MsAnS8F_nHXNP8EPi1gloZOCq08.mft
File:                     MsAnS8F_nHXNP8EPi1gloZOCq08.mft (raw, json)
Hash identifier:          5f/cnU7u2YaVNb8P9P59j/O6ghYRyZXpFOCOI8MorFE=
Subject key identifier:   76:C0:9D:6A:9D:22:A6:BF:09:FF:D1:EE:67:BF:43:3D:6D:5A:2C:6F
Authority key identifier: 32:C0:27:4B:C1:7F:9C:75:CD:3F:C1:0F:8B:58:25:A1:93:82:AB:4F
Certificate issuer:       /CN=32c0274bc17f9c75cd3fc10f8b5825a19382ab4f
Certificate serial:       019A0148118D85136565CDB1BAB93A3F7D63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MsAnS8F_nHXNP8EPi1gloZOCq08.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/416aaf-8602-4196-b51d-41d087b3828b/1/MsAnS8F_nHXNP8EPi1gloZOCq08.mft
Manifest number:          16E3
Signing time:             Mon 20 Oct 2025 11:01:31 +0000
Manifest this update:     Mon 20 Oct 2025 11:01:31 +0000
Manifest next update:     Tue 21 Oct 2025 11:01:31 +0000
Files and hashes:         1: MsAnS8F_nHXNP8EPi1gloZOCq08.crl (hash: ktD9OEwlvAMoI5ulI1Q15zK7GUNXLvgc4dol5pmzA5Q=)
                          2: TOIzNWX91Fklg3hNSjJLHCHMbgY.roa (hash: vI/ydx27fqpwXcKYk7mipA2wZEP7zEBHHuwYkt7nRa0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/416aaf-8602-4196-b51d-41d087b3828b/1/MsAnS8F_nHXNP8EPi1gloZOCq08.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/416aaf-8602-4196-b51d-41d087b3828b/1/MsAnS8F_nHXNP8EPi1gloZOCq08.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MsAnS8F_nHXNP8EPi1gloZOCq08.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 11:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:01:48:11:8d:85:13:65:65:cd:b1:ba:b9:3a:3f:7d:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32c0274bc17f9c75cd3fc10f8b5825a19382ab4f
        Validity
            Not Before: Oct 20 11:01:31 2025 GMT
            Not After : Oct 21 11:01:31 2025 GMT
        Subject: CN=76c09d6a9d22a6bf09ffd1ee67bf433d6d5a2c6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:06:66:34:7c:77:90:75:3b:8d:cb:3d:23:09:
                    85:05:25:59:1f:bb:07:e6:0e:7b:d7:5f:24:67:fe:
                    47:bb:2c:67:da:0a:ca:01:83:a1:62:85:4c:35:07:
                    33:ef:f7:22:2c:ea:33:47:ed:03:12:d4:c7:ab:b4:
                    6a:06:40:c8:b6:dd:e0:78:06:4b:9b:a0:88:bc:53:
                    83:d4:36:75:ea:af:cf:38:4a:91:68:b3:a6:3e:ef:
                    c0:fb:2a:bb:17:69:10:46:55:ee:14:41:95:26:6c:
                    63:8b:ba:3b:65:50:89:1d:28:27:d4:3f:28:99:ec:
                    ad:a9:ba:75:1d:cb:a4:a8:21:25:a9:31:86:4d:46:
                    1a:a5:a7:a6:c0:a2:53:2a:aa:5e:25:10:fd:14:4a:
                    4d:16:99:98:85:f0:43:7d:ad:96:cd:b1:c7:f5:98:
                    a3:8b:03:72:ab:19:e8:45:83:dc:79:12:94:c8:cc:
                    98:13:ab:27:dc:0a:15:e4:8d:a2:60:79:87:19:94:
                    de:8b:76:bc:99:eb:54:64:b1:1e:27:28:eb:ad:13:
                    19:5a:45:60:0f:51:43:90:90:c3:8b:01:c9:1e:a4:
                    79:17:ea:f6:f0:e5:7d:21:99:1f:72:39:a4:dd:ea:
                    49:7e:35:29:96:fb:80:59:67:3b:3d:96:c2:13:3a:
                    3f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:C0:9D:6A:9D:22:A6:BF:09:FF:D1:EE:67:BF:43:3D:6D:5A:2C:6F
            X509v3 Authority Key Identifier:
                keyid:32:C0:27:4B:C1:7F:9C:75:CD:3F:C1:0F:8B:58:25:A1:93:82:AB:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MsAnS8F_nHXNP8EPi1gloZOCq08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/416aaf-8602-4196-b51d-41d087b3828b/1/MsAnS8F_nHXNP8EPi1gloZOCq08.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/416aaf-8602-4196-b51d-41d087b3828b/1/MsAnS8F_nHXNP8EPi1gloZOCq08.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:80:67:a2:91:ff:3d:6e:db:94:ba:8e:c7:b6:75:3e:2f:4e:
         ca:89:6d:df:f2:c0:8d:97:15:bc:eb:56:6a:e6:00:86:17:d5:
         4c:3a:23:f6:ad:e5:14:b2:eb:84:01:c8:5c:50:f1:0d:35:5c:
         0d:65:4f:26:5b:55:e4:c7:3f:95:ab:dd:c9:9c:55:d8:45:0f:
         23:4a:16:61:3d:75:eb:4f:a6:81:ea:d6:6c:51:8e:08:24:aa:
         19:75:87:c1:6c:38:a2:26:21:87:28:58:bb:5d:1d:c0:8a:28:
         15:1c:bf:7e:77:25:d4:1a:ac:d0:86:db:f7:07:f0:96:9f:96:
         53:8b:bd:66:76:90:88:e5:97:77:dd:db:b2:f9:a0:77:9a:bc:
         2c:5c:98:91:e0:0b:65:7f:ca:9b:cc:70:68:ba:96:45:ac:43:
         54:75:a6:e6:0f:a3:b2:7b:aa:53:49:95:76:6b:db:71:eb:3e:
         52:99:4d:5c:1b:64:b5:ff:e9:d5:96:0a:47:72:d2:24:aa:5d:
         6e:ee:8b:e6:92:61:d2:00:07:97:fd:3b:f6:73:ed:f3:cd:cb:
         29:f6:03:95:3c:8e:62:df:94:a4:85:8f:83:88:68:62:a9:cc:
         2d:44:a7:23:59:31:2e:df:c9:2f:dc:f3:df:28:ea:b3:3c:d0:
         4f:4b:95:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:43:56 2025 by rpki-client