Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/3f95d5-ae69-43bb-b531-4184ed331b75/1/7O5HC_UQmXaTT1Hn6u8hB3mixN4.mft
File:                     7O5HC_UQmXaTT1Hn6u8hB3mixN4.mft (raw, json)
Hash identifier:          yrHh6BlHBRoqE0yR0ZCfx5V9Wq6qQfY/ncfuLtE9Wwg=
Subject key identifier:   5A:72:A7:0C:A6:C9:7C:45:7A:3B:5F:57:38:9D:A2:1F:8C:61:51:A5
Authority key identifier: EC:EE:47:0B:F5:10:99:76:93:4F:51:E7:EA:EF:21:07:79:A2:C4:DE
Certificate issuer:       /CN=ecee470bf5109976934f51e7eaef210779a2c4de
Certificate serial:       0199FCC6145E0845CDFAEE99FB6518BBAB5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7O5HC_UQmXaTT1Hn6u8hB3mixN4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/3f95d5-ae69-43bb-b531-4184ed331b75/1/7O5HC_UQmXaTT1Hn6u8hB3mixN4.mft
Manifest number:          16E3
Signing time:             Sun 19 Oct 2025 14:01:03 +0000
Manifest this update:     Sun 19 Oct 2025 14:01:03 +0000
Manifest next update:     Mon 20 Oct 2025 14:01:03 +0000
Files and hashes:         1: 7O5HC_UQmXaTT1Hn6u8hB3mixN4.crl (hash: 2YsOlkVN8CDh3axeh6CrH1QPgbTyQ2u9EHSr3ITPuzM=)
                          2: GOWs0802FOjDjhvj5VByRZ93Ms4.roa (hash: 0E/ca5KwIY555u3Bh3vtXM1rkOkEak6A4cwcKp+8kRA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/3f95d5-ae69-43bb-b531-4184ed331b75/1/7O5HC_UQmXaTT1Hn6u8hB3mixN4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/3f95d5-ae69-43bb-b531-4184ed331b75/1/7O5HC_UQmXaTT1Hn6u8hB3mixN4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7O5HC_UQmXaTT1Hn6u8hB3mixN4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:c6:14:5e:08:45:cd:fa:ee:99:fb:65:18:bb:ab:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecee470bf5109976934f51e7eaef210779a2c4de
        Validity
            Not Before: Oct 19 14:01:03 2025 GMT
            Not After : Oct 20 14:01:03 2025 GMT
        Subject: CN=5a72a70ca6c97c457a3b5f57389da21f8c6151a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b3:9a:6e:31:cc:12:bc:99:c5:c9:2b:ac:18:
                    48:9e:a4:53:2a:70:67:79:69:6f:10:7a:0d:76:38:
                    cd:a3:68:9f:ac:94:62:a8:9c:43:67:78:87:a9:a5:
                    3e:91:88:d7:45:a0:86:0f:26:f0:5d:9c:12:fa:cb:
                    01:58:22:96:ff:35:9a:fb:e0:89:1f:a7:2d:3c:2c:
                    50:23:75:82:df:55:64:f2:6b:32:73:58:19:64:d2:
                    91:9f:4a:bc:d2:9e:9f:55:b8:c0:23:ff:7f:fb:fc:
                    04:b9:a0:b0:1c:be:cd:14:ce:42:19:68:f8:a0:c9:
                    72:05:f2:25:1d:06:0c:fd:87:6d:7c:f1:0d:2f:e4:
                    26:51:8b:5f:5d:32:21:ec:e2:5a:a1:40:3f:cc:7b:
                    e6:3f:36:84:1f:10:b5:1c:5e:13:8c:59:38:fb:55:
                    7c:d1:db:2e:93:99:b1:6c:60:f6:d2:9c:43:29:82:
                    a5:30:de:da:5b:10:4c:4f:07:1a:49:6e:f4:ec:25:
                    1d:23:56:dd:fc:49:23:65:8c:95:ed:19:f9:95:3e:
                    c8:70:b3:5b:55:d9:c3:15:78:36:b7:0f:92:51:12:
                    bd:d1:8d:69:b3:df:fe:46:9c:d1:98:d0:f4:d9:40:
                    a6:00:16:54:3e:89:68:77:bc:7b:5a:a5:e7:13:16:
                    8a:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:72:A7:0C:A6:C9:7C:45:7A:3B:5F:57:38:9D:A2:1F:8C:61:51:A5
            X509v3 Authority Key Identifier:
                keyid:EC:EE:47:0B:F5:10:99:76:93:4F:51:E7:EA:EF:21:07:79:A2:C4:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7O5HC_UQmXaTT1Hn6u8hB3mixN4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3f95d5-ae69-43bb-b531-4184ed331b75/1/7O5HC_UQmXaTT1Hn6u8hB3mixN4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3f95d5-ae69-43bb-b531-4184ed331b75/1/7O5HC_UQmXaTT1Hn6u8hB3mixN4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:2c:50:23:80:9c:85:b8:15:29:12:72:4d:90:43:1a:2e:3d:
         d8:09:d4:8e:ec:ca:3e:5d:9e:c7:da:bd:af:6f:3f:c0:2b:87:
         40:bc:a7:9a:4d:c2:de:15:62:7e:90:b2:fd:bb:da:e7:be:21:
         8c:f1:36:37:ca:f8:b1:01:93:5e:33:3c:d7:45:9c:f1:2c:e2:
         6e:a3:0f:f8:4e:80:b6:91:6e:c6:3d:5b:7d:08:e7:9d:92:48:
         7b:2d:c4:d1:1c:e4:fe:b8:ff:d8:22:a3:9a:99:27:31:82:3b:
         03:49:53:0c:29:06:68:a9:df:da:c2:ca:e4:73:66:f7:39:97:
         cb:ec:ce:54:f1:03:84:30:0f:63:72:82:49:69:6c:51:ef:ca:
         1f:34:08:c4:50:b3:db:41:18:3b:20:db:77:82:e3:f3:ac:d4:
         19:41:b2:fe:a9:0c:57:ec:34:fb:40:c4:40:02:b6:7f:f0:d3:
         6a:b7:02:44:79:8f:c1:c8:4c:1e:b3:bf:cb:14:31:09:2f:b9:
         9a:7f:4f:f1:f6:75:6d:dc:ed:01:33:23:ac:dc:59:8d:e3:bf:
         4d:a9:27:13:87:8b:0b:88:8b:45:52:2f:f0:e2:0f:e0:15:f0:
         e4:4a:6e:7d:c5:fb:73:09:60:8c:3e:ec:fd:e1:f1:55:1c:64:
         ba:da:04:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:40:16 2025 by rpki-client