Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/ef9f0d-d840-4371-adc4-75840661eaf5/1/I0eqqyIGwIEo9UNzAGShRaPv-hQ.mft
File:                     I0eqqyIGwIEo9UNzAGShRaPv-hQ.mft (raw, json)
Hash identifier:          k7RvCsMBuVewQu64YubktJ82HrTKoJ5QCf78qE6Snh4=
Subject key identifier:   CC:CD:1C:F1:D8:17:37:6A:B2:8F:BC:D1:9C:A9:D2:01:5F:C6:43:43
Authority key identifier: 23:47:AA:AB:22:06:C0:81:28:F5:43:73:00:64:A1:45:A3:EF:FA:14
Certificate issuer:       /CN=2347aaab2206c08128f543730064a145a3effa14
Certificate serial:       0199FBEBF8DB7299AB5CFDBA09D10643E5F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I0eqqyIGwIEo9UNzAGShRaPv-hQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/ef9f0d-d840-4371-adc4-75840661eaf5/1/I0eqqyIGwIEo9UNzAGShRaPv-hQ.mft
Manifest number:          16F5
Signing time:             Sun 19 Oct 2025 10:02:49 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:49 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:49 +0000
Files and hashes:         1: GdDoydsiseWesyFp8nfXLAwY-Ss.roa (hash: ZX3EqP0ya1H5H5fx2BO7+jv6fp5rUfEUzpZL5ygfDiA=)
                          2: I0eqqyIGwIEo9UNzAGShRaPv-hQ.crl (hash: gbALb3W6zxzBPUDATw3MY6Xk1Xq7cYgdZk8Kn2hEgio=)
                          3: VNOgNSigRRAb70bKyLVuHiqWqcg.roa (hash: 0V+O6nfILt11f/kT8RnWqxjr5DCANmAANaaUT4hQ8EI=)
                          4: yujM9boXq2owCDALS6fBRuV-QS4.roa (hash: uBWZxd0MuVhnf/a/H4XCYeoko2cyqYwJN4ZzBnbQh88=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/ef9f0d-d840-4371-adc4-75840661eaf5/1/I0eqqyIGwIEo9UNzAGShRaPv-hQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/ef9f0d-d840-4371-adc4-75840661eaf5/1/I0eqqyIGwIEo9UNzAGShRaPv-hQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I0eqqyIGwIEo9UNzAGShRaPv-hQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 10:02:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:f8:db:72:99:ab:5c:fd:ba:09:d1:06:43:e5:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2347aaab2206c08128f543730064a145a3effa14
        Validity
            Not Before: Oct 19 10:02:49 2025 GMT
            Not After : Oct 20 10:02:49 2025 GMT
        Subject: CN=cccd1cf1d817376ab28fbcd19ca9d2015fc64343
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:6f:7f:32:47:42:49:c3:c3:b1:d2:37:50:13:
                    f8:6f:9e:7b:f9:51:1d:e0:d9:67:12:00:42:80:a1:
                    61:4b:83:aa:a1:89:de:3d:e3:74:c9:15:ab:4c:37:
                    5b:82:f7:1a:62:35:fc:99:c8:d7:a6:65:d2:1b:2c:
                    6f:7d:30:e0:3a:b4:ab:0b:28:2c:e0:51:a3:81:62:
                    54:cd:31:f7:30:31:e8:38:5b:a7:51:d4:d9:4a:a0:
                    42:3f:c2:4b:30:9b:63:02:33:a4:93:1d:89:c5:df:
                    ac:aa:b9:56:ca:a5:94:24:4c:be:a6:68:4d:5f:54:
                    41:86:30:99:37:8f:55:25:ba:26:76:bc:c1:f8:d1:
                    db:14:10:85:4b:b1:9b:c7:a5:31:c0:86:7e:d0:cd:
                    99:99:b0:db:28:d4:bc:6f:f0:a7:0f:a3:7b:6c:d8:
                    1d:c2:0c:e2:0f:c8:87:78:8b:05:35:a5:94:50:20:
                    01:85:42:5b:e4:95:15:3b:b9:2d:94:b4:9b:0a:d5:
                    8c:b9:28:f7:84:91:14:01:42:76:29:61:f8:03:a1:
                    a9:ca:d7:2b:4d:c9:d4:a3:35:e4:1c:9d:b4:8b:eb:
                    22:43:23:19:1e:b3:a0:5c:7f:c6:a2:57:fe:cc:38:
                    08:6a:33:4c:db:60:7d:3f:2b:30:7c:2a:f2:67:d8:
                    f3:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:CD:1C:F1:D8:17:37:6A:B2:8F:BC:D1:9C:A9:D2:01:5F:C6:43:43
            X509v3 Authority Key Identifier:
                keyid:23:47:AA:AB:22:06:C0:81:28:F5:43:73:00:64:A1:45:A3:EF:FA:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0eqqyIGwIEo9UNzAGShRaPv-hQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ef9f0d-d840-4371-adc4-75840661eaf5/1/I0eqqyIGwIEo9UNzAGShRaPv-hQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ef9f0d-d840-4371-adc4-75840661eaf5/1/I0eqqyIGwIEo9UNzAGShRaPv-hQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:aa:d7:bb:47:8d:b8:b5:0c:3b:13:41:f4:f8:2b:da:49:b0:
         18:26:b8:92:d4:47:91:07:ad:9f:99:99:14:6c:80:6a:ef:01:
         33:28:d0:2b:d1:dc:de:cd:35:ae:fe:e8:e3:02:9b:bf:28:ab:
         c0:ad:e6:08:c3:ba:af:17:5f:b1:a6:6d:be:cc:7e:7b:a9:7c:
         cf:b4:53:2b:e5:ed:b4:63:99:6e:d1:e5:f8:2b:63:44:49:18:
         6a:8f:23:d5:1a:f5:55:e5:7e:6f:10:e3:05:b6:b3:a1:fd:cc:
         45:74:3a:92:a5:09:ac:7c:e3:20:ac:c0:8c:18:6e:95:5d:25:
         4d:47:e5:e3:e2:26:31:d7:78:66:20:16:bd:52:b8:60:df:10:
         5b:74:71:63:62:9a:69:e2:93:be:1a:fc:1a:10:a3:53:ae:72:
         e2:2e:e8:96:76:05:19:d0:3e:3a:38:82:b4:85:fb:a2:95:30:
         d7:f4:02:98:81:d2:3d:27:49:4d:c9:5d:a5:74:4c:c4:46:f6:
         c4:a1:82:e6:7a:70:86:c5:71:b6:29:49:c1:b3:26:85:57:ed:
         98:8a:bf:03:21:f5:d6:6a:cc:89:0a:dd:5c:b1:67:9b:43:4a:
         29:88:19:83:e8:5d:a8:68:2e:7a:23:03:e1:54:59:83:8d:f3:
         bd:38:84:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:41:54 2025 by rpki-client