Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/694d9b-0e1c-43ad-ac98-02aac8b596dc/1/ZZq64rDK6GxBlrAgdluCOiAyB_w.mft
File:                     ZZq64rDK6GxBlrAgdluCOiAyB_w.mft (raw, json)
Hash identifier:          rlnkLPe15WjlE0c6/+vfVP2ghiHOkr49PQ5/XeoMlhM=
Subject key identifier:   47:38:4A:BB:BA:C0:7D:63:02:C0:6C:35:F6:91:B5:66:08:6F:F2:10
Authority key identifier: 65:9A:BA:E2:B0:CA:E8:6C:41:96:B0:20:76:5B:82:3A:20:32:07:FC
Certificate issuer:       /CN=659abae2b0cae86c4196b020765b823a203207fc
Certificate serial:       0199FC8F36237A633775480F82E2EDB46E18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZZq64rDK6GxBlrAgdluCOiAyB_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/694d9b-0e1c-43ad-ac98-02aac8b596dc/1/ZZq64rDK6GxBlrAgdluCOiAyB_w.mft
Manifest number:          16E2
Signing time:             Sun 19 Oct 2025 13:01:07 +0000
Manifest this update:     Sun 19 Oct 2025 13:01:07 +0000
Manifest next update:     Mon 20 Oct 2025 13:01:07 +0000
Files and hashes:         1: O5xBU8VL53qxjYE82WOYcODpGTk.roa (hash: T0jCYlMlaGotp+vjckUxtBiuT4d14wsO10or/VNnLsU=)
                          2: ZZq64rDK6GxBlrAgdluCOiAyB_w.crl (hash: pqZ3bBuNKeRwk28vSlEbEZPUKK9+86bfPCS52GSffXg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/694d9b-0e1c-43ad-ac98-02aac8b596dc/1/ZZq64rDK6GxBlrAgdluCOiAyB_w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/694d9b-0e1c-43ad-ac98-02aac8b596dc/1/ZZq64rDK6GxBlrAgdluCOiAyB_w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZZq64rDK6GxBlrAgdluCOiAyB_w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:8f:36:23:7a:63:37:75:48:0f:82:e2:ed:b4:6e:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=659abae2b0cae86c4196b020765b823a203207fc
        Validity
            Not Before: Oct 19 13:01:07 2025 GMT
            Not After : Oct 20 13:01:07 2025 GMT
        Subject: CN=47384abbbac07d6302c06c35f691b566086ff210
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f5:af:cd:9e:40:14:72:8c:db:ad:50:46:e1:
                    78:6a:b7:19:c2:e5:da:a3:72:e2:16:33:8d:7b:08:
                    4b:b6:85:0c:09:5f:fc:94:8f:2f:06:34:6f:b4:11:
                    8d:86:52:c2:77:1e:6b:55:b1:c9:35:b8:cb:0d:57:
                    c4:e4:7c:4a:cc:2d:d2:6f:1a:79:db:00:ae:0b:7c:
                    a2:e4:37:d3:77:2f:8c:f2:2f:72:44:7c:26:c3:25:
                    db:bb:30:e6:e0:01:26:d8:94:99:ff:63:9c:90:60:
                    ee:48:e3:bc:7a:50:e0:aa:97:05:92:11:ba:87:27:
                    c2:71:46:36:25:e9:e6:49:d4:95:b6:34:17:fe:7c:
                    a3:cf:9c:49:f1:8f:6b:0a:ee:dd:60:5f:91:05:ed:
                    1f:46:61:35:45:2a:91:28:91:99:2e:bc:86:63:15:
                    19:23:cc:92:4b:ec:e8:8c:b9:66:0a:ce:60:37:44:
                    c7:7b:dc:9b:5c:e3:38:94:6d:97:d8:74:9c:ee:73:
                    d4:98:a0:e5:61:7a:a5:11:5c:fd:36:8a:3b:8c:7c:
                    ed:d7:02:ef:c3:34:2e:d2:00:a5:41:de:ac:d5:e6:
                    ae:97:91:cd:83:58:04:58:30:f3:0f:b9:fc:b5:7c:
                    26:75:d9:8e:2d:da:3d:18:18:36:22:8d:bb:ab:45:
                    02:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:38:4A:BB:BA:C0:7D:63:02:C0:6C:35:F6:91:B5:66:08:6F:F2:10
            X509v3 Authority Key Identifier:
                keyid:65:9A:BA:E2:B0:CA:E8:6C:41:96:B0:20:76:5B:82:3A:20:32:07:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZq64rDK6GxBlrAgdluCOiAyB_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/694d9b-0e1c-43ad-ac98-02aac8b596dc/1/ZZq64rDK6GxBlrAgdluCOiAyB_w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/694d9b-0e1c-43ad-ac98-02aac8b596dc/1/ZZq64rDK6GxBlrAgdluCOiAyB_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:37:2f:b5:d2:df:e2:83:c3:fe:69:c9:41:03:f6:66:2e:d2:
         e3:99:2c:4b:88:8e:36:b4:4a:98:d4:a3:52:a1:b8:6a:79:15:
         3e:82:1e:08:f1:56:a2:1c:9d:59:33:22:95:ad:1d:e0:7f:26:
         76:16:0d:c7:b8:62:26:01:6f:47:21:fc:8b:70:fe:22:df:85:
         f6:aa:c0:0f:58:31:1d:85:fb:b7:f2:d0:22:c4:14:e5:53:0e:
         2c:8d:65:6b:a7:a0:5b:d2:f9:52:d1:44:72:d3:c9:be:97:40:
         b2:5d:45:01:84:d8:6f:5f:83:d4:c2:3e:5e:35:5b:d2:17:cd:
         17:d9:a4:b5:22:2f:51:16:06:af:b8:31:84:da:db:1d:ed:2e:
         7f:af:39:d5:0a:e9:bc:e3:b3:ab:b8:46:af:25:5f:a8:73:7f:
         bf:6b:5f:d6:a3:0a:eb:6f:1b:82:d1:fd:bd:db:0b:02:46:cb:
         a0:53:08:7f:07:40:fb:06:24:ea:56:3a:bf:7c:26:3a:df:6a:
         c3:68:49:a1:d4:32:ce:94:51:6a:34:08:45:11:de:c7:fc:bf:
         76:0e:c2:58:c4:1c:ec:c9:7b:a3:c8:ab:20:6e:5c:4b:e0:86:
         1b:f3:f3:85:71:24:1c:d3:fa:5d:d7:44:4d:27:6f:e0:d6:4a:
         b1:54:ff:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:40:52 2025 by rpki-client