Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/18e0f5-4e14-431a-b793-1217729af1c8/1/SglzwfRD7EqDh6rXrKddB7b6qdo.mft
File:                     SglzwfRD7EqDh6rXrKddB7b6qdo.mft (raw, json)
Hash identifier:          kc1Mfrkh790rUmhpD+Iqdmww6ugeX6ZJWVy+uY8CS1E=
Subject key identifier:   4E:D7:3D:BD:4B:4F:CE:A1:69:9B:AE:49:F2:AA:D8:6D:6D:5E:14:17
Authority key identifier: 4A:09:73:C1:F4:43:EC:4A:83:87:AA:D7:AC:A7:5D:07:B6:FA:A9:DA
Certificate issuer:       /CN=4a0973c1f443ec4a8387aad7aca75d07b6faa9da
Certificate serial:       0199FD3400EE6A144E841C38A5B33B2F9FF8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SglzwfRD7EqDh6rXrKddB7b6qdo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/18e0f5-4e14-431a-b793-1217729af1c8/1/SglzwfRD7EqDh6rXrKddB7b6qdo.mft
Manifest number:          16E5
Signing time:             Sun 19 Oct 2025 16:01:07 +0000
Manifest this update:     Sun 19 Oct 2025 16:01:07 +0000
Manifest next update:     Mon 20 Oct 2025 16:01:07 +0000
Files and hashes:         1: SglzwfRD7EqDh6rXrKddB7b6qdo.crl (hash: 5rXaRlDPHEKzUAUbAG1VP+4sV9axU3b590R2W2Xv92E=)
                          2: orU4EbmlFeqLBWCBQ_VGHpY6cYs.roa (hash: TAeP8ncHqHpmG4cmrL2aNQakXI/xX50W/LkzF00pVS4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/18e0f5-4e14-431a-b793-1217729af1c8/1/SglzwfRD7EqDh6rXrKddB7b6qdo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/18e0f5-4e14-431a-b793-1217729af1c8/1/SglzwfRD7EqDh6rXrKddB7b6qdo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SglzwfRD7EqDh6rXrKddB7b6qdo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:34:00:ee:6a:14:4e:84:1c:38:a5:b3:3b:2f:9f:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a0973c1f443ec4a8387aad7aca75d07b6faa9da
        Validity
            Not Before: Oct 19 16:01:07 2025 GMT
            Not After : Oct 20 16:01:07 2025 GMT
        Subject: CN=4ed73dbd4b4fcea1699bae49f2aad86d6d5e1417
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:01:b2:ec:c2:b7:29:3d:f5:53:bb:c7:e9:a9:
                    9d:7d:84:19:8d:30:46:08:78:6b:fd:8e:e3:4c:22:
                    51:0c:d7:b0:e4:f9:10:d0:de:1a:c1:38:ca:9a:e5:
                    a2:44:72:1d:c3:ee:6b:2a:58:31:4c:69:f3:4d:b7:
                    27:ea:90:01:f3:52:cf:88:bc:31:4e:0c:57:83:87:
                    db:29:61:bc:c7:c1:59:83:a1:4e:8b:d8:b9:f3:59:
                    07:16:e2:c0:d8:45:44:27:b9:cc:28:05:8a:db:53:
                    81:11:4a:1f:80:56:15:73:6f:97:63:d4:a5:9a:a4:
                    24:49:1a:93:fd:9b:20:71:b9:2d:6e:80:5b:ec:e1:
                    0e:6c:1d:cb:94:35:1f:e1:3e:54:d0:da:ed:dd:2b:
                    9e:29:6f:80:b4:7d:a0:1f:0e:cb:ad:a3:a5:3b:69:
                    f7:b0:1f:0f:47:8f:c6:77:58:18:f1:24:7a:d1:1b:
                    0a:bb:b7:16:1f:e9:d0:45:1a:74:16:d8:6b:80:2e:
                    32:bb:21:08:90:df:8c:ef:6e:95:a8:cc:e9:9f:24:
                    8a:a1:f0:45:a8:2a:72:ee:5a:c9:3f:f0:02:c2:57:
                    12:7b:b8:20:62:ea:09:6a:91:24:f6:3d:92:43:92:
                    f5:9a:7b:86:24:f1:1f:a3:ff:60:fd:9f:1e:98:86:
                    28:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:D7:3D:BD:4B:4F:CE:A1:69:9B:AE:49:F2:AA:D8:6D:6D:5E:14:17
            X509v3 Authority Key Identifier:
                keyid:4A:09:73:C1:F4:43:EC:4A:83:87:AA:D7:AC:A7:5D:07:B6:FA:A9:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SglzwfRD7EqDh6rXrKddB7b6qdo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/18e0f5-4e14-431a-b793-1217729af1c8/1/SglzwfRD7EqDh6rXrKddB7b6qdo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/18e0f5-4e14-431a-b793-1217729af1c8/1/SglzwfRD7EqDh6rXrKddB7b6qdo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:f9:f5:37:0c:79:09:6c:65:b3:a4:36:c1:96:1a:af:e0:18:
         22:d6:55:56:f6:65:2c:cb:27:9f:cf:84:22:c0:61:49:ce:bd:
         69:37:16:fb:83:cf:24:79:6c:c5:6e:bd:b4:45:b2:4e:bb:7c:
         3b:20:fb:c8:22:5a:d6:4f:75:77:cd:a7:64:ac:5a:d6:2b:07:
         42:c7:df:c1:11:ef:0a:38:73:4d:13:ab:3e:00:22:2d:ff:48:
         03:ce:5d:b3:ff:16:78:3f:03:07:5b:79:0a:48:60:b4:e4:30:
         b2:c1:77:7b:a6:cf:b1:b1:b9:2f:97:54:33:67:ac:d8:a7:5d:
         3d:e3:34:0a:40:71:35:e6:38:84:f2:67:49:4c:67:ba:c9:15:
         25:36:c8:b0:69:a5:04:f3:19:a3:ed:f9:45:76:99:05:0c:ca:
         51:1d:14:7f:1d:3f:15:2f:78:08:17:12:6f:89:d0:18:7e:8b:
         6a:d4:9e:ba:ab:fb:cd:f7:c7:6b:e2:b8:ad:de:5e:d3:4b:1e:
         91:27:74:1c:5d:83:4c:6b:d7:a9:9d:44:0a:96:02:3b:9d:dc:
         3e:86:39:9a:eb:fc:15:9a:d7:47:df:c9:36:53:11:53:0d:19:
         2b:48:77:6f:d1:c6:c4:bf:81:94:b2:2a:0b:4d:56:15:c2:0a:
         37:44:36:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:59:32 2025 by rpki-client