Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/556ad5-2e6b-4d51-856c-61c9c29c275d/1/SGbUAn3jwn6JfXKtsshth6t-WsI.mft
File:                     SGbUAn3jwn6JfXKtsshth6t-WsI.mft (raw, json)
Hash identifier:          rw4TZAgfXv4BgBGBkAs3JRP4mEPXDQKMTG2/qHfiwkc=
Subject key identifier:   41:18:29:56:1D:DE:CC:5F:A1:CC:AE:99:BB:25:DA:AD:62:A6:D4:D5
Authority key identifier: 48:66:D4:02:7D:E3:C2:7E:89:7D:72:AD:B2:C8:6D:87:AB:7E:5A:C2
Certificate issuer:       /CN=4866d4027de3c27e897d72adb2c86d87ab7e5ac2
Certificate serial:       0199FBEB0B89784333DC46BE8CD19CD2D73C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SGbUAn3jwn6JfXKtsshth6t-WsI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/556ad5-2e6b-4d51-856c-61c9c29c275d/1/SGbUAn3jwn6JfXKtsshth6t-WsI.mft
Manifest number:          16E9
Signing time:             Sun 19 Oct 2025 10:01:49 +0000
Manifest this update:     Sun 19 Oct 2025 10:01:49 +0000
Manifest next update:     Mon 20 Oct 2025 10:01:49 +0000
Files and hashes:         1: MXST_7VxoAANhfz5HopBnTAfZfE.roa (hash: WwAleikgSWf+4k301L6Hz+MXSbtdCoBSAXsJKdsGXBk=)
                          2: SGbUAn3jwn6JfXKtsshth6t-WsI.crl (hash: y5Rg7+K/ayMaWzJtyLXkpVLPoGMeAkheR8buTxTjrYE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/556ad5-2e6b-4d51-856c-61c9c29c275d/1/SGbUAn3jwn6JfXKtsshth6t-WsI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/556ad5-2e6b-4d51-856c-61c9c29c275d/1/SGbUAn3jwn6JfXKtsshth6t-WsI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SGbUAn3jwn6JfXKtsshth6t-WsI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:0b:89:78:43:33:dc:46:be:8c:d1:9c:d2:d7:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4866d4027de3c27e897d72adb2c86d87ab7e5ac2
        Validity
            Not Before: Oct 19 10:01:49 2025 GMT
            Not After : Oct 20 10:01:49 2025 GMT
        Subject: CN=411829561ddecc5fa1ccae99bb25daad62a6d4d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:72:25:2d:5e:97:2b:94:68:91:c8:e1:a9:e9:
                    8c:71:59:b7:92:0b:02:65:d4:17:f2:4b:22:07:74:
                    c2:61:dd:99:38:57:c8:5a:c4:a7:d9:81:9e:70:2c:
                    6d:c7:05:bc:0c:7c:c6:54:13:21:48:6f:13:ef:d1:
                    31:71:86:9e:74:65:05:4e:b5:3a:4a:6d:18:09:38:
                    c3:2f:a6:aa:ad:c2:51:b4:fb:4d:c7:7e:be:4d:96:
                    89:6f:3f:2c:16:5d:54:f3:29:af:81:15:0f:5d:00:
                    e7:62:e8:fa:56:f4:e5:97:aa:f4:da:f7:c0:6f:f9:
                    e7:30:9a:d9:06:c0:9e:66:94:e4:05:21:67:71:8a:
                    0f:0e:dc:73:31:4d:4c:be:ce:5d:f8:0c:e0:86:1e:
                    f8:a7:ef:1d:8b:42:55:b0:82:be:c4:05:99:91:a5:
                    9b:ef:aa:74:5a:c0:4a:ec:7a:ea:4d:c3:49:06:3e:
                    bd:34:db:9d:fa:4a:ee:39:31:83:9b:82:55:75:03:
                    57:44:b5:fd:b4:14:7e:c1:a5:42:be:5b:9e:86:5c:
                    a8:e7:77:48:a2:6b:dc:d9:75:a8:25:be:ec:d3:81:
                    13:6b:be:b1:5b:cc:70:2f:4e:d5:d2:ec:e4:93:bc:
                    6d:e1:29:18:1d:9a:b4:24:97:a9:85:be:3e:99:4b:
                    6b:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:18:29:56:1D:DE:CC:5F:A1:CC:AE:99:BB:25:DA:AD:62:A6:D4:D5
            X509v3 Authority Key Identifier:
                keyid:48:66:D4:02:7D:E3:C2:7E:89:7D:72:AD:B2:C8:6D:87:AB:7E:5A:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SGbUAn3jwn6JfXKtsshth6t-WsI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/556ad5-2e6b-4d51-856c-61c9c29c275d/1/SGbUAn3jwn6JfXKtsshth6t-WsI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/556ad5-2e6b-4d51-856c-61c9c29c275d/1/SGbUAn3jwn6JfXKtsshth6t-WsI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:80:bf:e3:4f:97:e6:38:85:34:17:45:19:51:b0:5f:08:d6:
         02:dd:32:10:45:e9:93:7f:8f:35:71:25:53:e9:1c:1b:3b:4c:
         ec:b4:3f:53:30:06:95:5a:49:be:b3:23:0b:2c:95:90:47:af:
         30:d2:e1:f4:2b:5c:27:2c:8a:31:fb:2d:f9:9c:c3:8b:c2:9a:
         0c:1f:e3:76:a9:7a:ca:a5:7c:6b:27:b2:59:57:f4:cf:5f:c3:
         06:b8:04:c6:de:6e:73:25:a9:d5:2e:76:90:c4:65:f0:c1:ac:
         e5:43:4e:59:25:56:55:4e:cb:59:9a:82:49:b7:40:79:dd:31:
         b3:fd:3a:5b:62:52:d9:4b:2d:9d:96:72:99:74:8f:d1:da:bd:
         a7:30:ab:5d:25:b8:c1:c0:46:ee:a0:41:31:77:70:e4:16:5d:
         b1:b6:d9:df:4c:96:d8:2b:2a:99:54:6a:27:00:58:9a:a3:85:
         eb:bd:2f:b1:23:b6:19:a8:65:d1:ac:e5:f8:c4:5d:7d:0b:fb:
         b6:e3:bf:89:60:68:e0:4a:d6:38:e2:62:59:0c:e7:64:71:fe:
         36:a6:33:06:0f:f5:61:d3:4f:ca:d6:ac:6a:9a:0d:98:df:48:
         8d:4b:1a:4c:1a:23:bf:cc:8b:3d:35:2f:8d:50:b9:b5:47:70:
         1a:66:58:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:07:01 2025 by rpki-client