Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/61d86b-6095-48f2-ab1e-9b953f2333f1/1/L6aSUEx3C6T4QLir7sSFttEPpOo.mft
File:                     L6aSUEx3C6T4QLir7sSFttEPpOo.mft (raw, json)
Hash identifier:          h3kvFquDFdoUss7zF/hLgNM0dulY81835HasVhygkDk=
Subject key identifier:   8E:30:61:85:77:EC:B8:B7:FE:2B:6C:16:78:84:A0:E1:EF:1C:45:DA
Authority key identifier: 2F:A6:92:50:4C:77:0B:A4:F8:40:B8:AB:EE:C4:85:B6:D1:0F:A4:EA
Certificate issuer:       /CN=2fa692504c770ba4f840b8abeec485b6d10fa4ea
Certificate serial:       0199FB0F46635DC8031538F8BACB30C00967
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L6aSUEx3C6T4QLir7sSFttEPpOo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/61d86b-6095-48f2-ab1e-9b953f2333f1/1/L6aSUEx3C6T4QLir7sSFttEPpOo.mft
Manifest number:          16E1
Signing time:             Sun 19 Oct 2025 06:01:46 +0000
Manifest this update:     Sun 19 Oct 2025 06:01:46 +0000
Manifest next update:     Mon 20 Oct 2025 06:01:46 +0000
Files and hashes:         1: Fezrzno06jPF9kifbXHX27nmWc8.roa (hash: dGafPOOH6YcUYjyk23t5nAFA7BiY0x8JbwBsczL6J28=)
                          2: L6aSUEx3C6T4QLir7sSFttEPpOo.crl (hash: NpKLpt9WFidyklx1RZkTZ/5juvyyyn7Ap7yCTJyAm/Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/61d86b-6095-48f2-ab1e-9b953f2333f1/1/L6aSUEx3C6T4QLir7sSFttEPpOo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/61d86b-6095-48f2-ab1e-9b953f2333f1/1/L6aSUEx3C6T4QLir7sSFttEPpOo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L6aSUEx3C6T4QLir7sSFttEPpOo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:0f:46:63:5d:c8:03:15:38:f8:ba:cb:30:c0:09:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fa692504c770ba4f840b8abeec485b6d10fa4ea
        Validity
            Not Before: Oct 19 06:01:46 2025 GMT
            Not After : Oct 20 06:01:46 2025 GMT
        Subject: CN=8e30618577ecb8b7fe2b6c167884a0e1ef1c45da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:db:21:29:81:38:a1:ac:a0:f2:2d:7b:90:6c:
                    46:3d:a7:44:65:9b:9c:e6:41:1b:c4:4d:18:b5:68:
                    fb:9f:b2:fc:8c:55:20:00:72:bc:df:0a:d8:f1:7d:
                    e2:ba:f9:17:d1:cd:6c:f1:73:6f:71:07:31:82:c9:
                    7c:89:91:3c:27:0f:c3:ef:d6:07:ef:9f:79:ae:0e:
                    7e:e1:5a:e4:79:4a:25:cb:70:dc:2e:25:4f:b2:4d:
                    c1:0c:ef:16:ac:0d:c2:11:2b:5b:32:ca:7b:13:6e:
                    78:e2:14:91:89:ea:8f:a2:e4:7b:81:a5:18:97:f3:
                    58:fe:c9:34:51:36:8a:64:87:ad:80:13:00:fe:f5:
                    d6:00:4d:dc:b1:87:6f:c4:d5:52:1b:d5:60:97:08:
                    03:cf:25:be:62:22:10:3f:41:ff:bf:2c:4d:55:b0:
                    4d:0a:5f:0e:50:9d:39:3f:79:f2:ab:d3:2b:23:b8:
                    51:c3:a8:18:7b:19:f4:45:6c:1e:d2:97:e8:47:a2:
                    89:97:53:c8:16:54:0a:40:ea:df:17:a9:67:4c:4a:
                    69:f2:df:b4:e7:0b:35:cf:6d:f1:67:d4:87:6e:c9:
                    24:3e:f4:44:3c:c5:d5:4d:c6:a3:1b:6f:73:43:26:
                    33:27:14:cc:d3:3f:a7:ed:c8:e3:76:da:d3:6c:be:
                    1c:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:30:61:85:77:EC:B8:B7:FE:2B:6C:16:78:84:A0:E1:EF:1C:45:DA
            X509v3 Authority Key Identifier:
                keyid:2F:A6:92:50:4C:77:0B:A4:F8:40:B8:AB:EE:C4:85:B6:D1:0F:A4:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6aSUEx3C6T4QLir7sSFttEPpOo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/61d86b-6095-48f2-ab1e-9b953f2333f1/1/L6aSUEx3C6T4QLir7sSFttEPpOo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/61d86b-6095-48f2-ab1e-9b953f2333f1/1/L6aSUEx3C6T4QLir7sSFttEPpOo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:ff:e0:1d:f0:f2:25:8f:db:c5:a5:42:31:04:f3:c5:97:f0:
         f9:34:75:6e:cd:9d:df:16:67:bd:c0:ed:53:d8:07:bd:2c:eb:
         b4:d0:a4:34:f7:90:fc:cf:6d:d3:9c:94:60:71:22:be:e2:8c:
         17:67:4c:24:07:4b:0c:e7:4a:96:4b:7f:76:0d:4e:f9:50:72:
         5b:4e:69:02:79:86:d3:b6:7c:79:45:bd:15:ae:5c:e6:64:96:
         f7:cd:27:f7:95:92:78:85:7c:5d:9c:22:dd:97:64:4a:2f:a3:
         53:47:20:c7:9e:36:c6:5f:d2:73:13:47:17:a1:e7:29:82:9a:
         cf:41:b8:e6:cf:4c:17:98:10:2c:13:bb:fa:be:2d:f8:94:bc:
         3a:a3:a5:1b:98:9c:b1:91:bc:6e:38:29:bd:ac:b1:31:5e:08:
         34:e9:6f:72:68:24:b5:b1:76:21:84:14:6b:6f:37:bf:46:96:
         f6:0f:7a:e3:58:ce:3c:d2:2f:c7:9a:00:8b:35:44:1d:d0:2d:
         38:bc:97:37:c0:b7:c2:cd:13:bd:37:54:f8:1d:07:d2:83:84:
         82:a6:a9:ab:49:67:a2:37:23:0e:33:b5:c8:ef:5e:45:40:eb:
         85:b3:fd:eb:59:49:61:f6:5f:17:5a:cc:a6:4d:c3:cf:a4:51:
         6f:a9:aa:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:50 2025 by rpki-client