Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/1b9185-40b5-490b-9af8-55c140c9f54f/1/qCybwtLaz9bxMNhahP7eq_F5pWc.mft
File:                     qCybwtLaz9bxMNhahP7eq_F5pWc.mft (raw, json)
Hash identifier:          +xXRu5qQUBORgDNcEw3whtd1RTBMPe6dB8pX+tda3PQ=
Subject key identifier:   3E:C8:E2:D8:75:BE:FD:14:B8:BE:E7:94:10:64:AD:03:CD:EE:96:B9
Authority key identifier: A8:2C:9B:C2:D2:DA:CF:D6:F1:30:D8:5A:84:FE:DE:AB:F1:79:A5:67
Certificate issuer:       /CN=a82c9bc2d2dacfd6f130d85a84fedeabf179a567
Certificate serial:       0199FC21603FA1DA7076567A11749F086CC5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qCybwtLaz9bxMNhahP7eq_F5pWc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/1b9185-40b5-490b-9af8-55c140c9f54f/1/qCybwtLaz9bxMNhahP7eq_F5pWc.mft
Manifest number:          16E2
Signing time:             Sun 19 Oct 2025 11:01:09 +0000
Manifest this update:     Sun 19 Oct 2025 11:01:09 +0000
Manifest next update:     Mon 20 Oct 2025 11:01:09 +0000
Files and hashes:         1: 0uRkVKY7XXnyDogUgS2r5XX9qoA.roa (hash: lp1oaMmoBZ+ARuOSInljJOVgC+Q+LtTeEykGOBERqsQ=)
                          2: 5fFeuCnP9c1oOEHTnXBZZ5BnM8w.roa (hash: yDLDGysDDqgqhb6WLikdy1EXoOl26sXWpiZCWG5MyOM=)
                          3: 9ER-EjHWCFxdiSxC-0UfxuWwEs8.roa (hash: HTr5ZfIPZkqpqy/GK7yq56zlAtqGayEHGuKpS3IdPQI=)
                          4: DaFgw0iNa5nSkbNJv-PnmACTGEE.roa (hash: 8633rdskCHMREKXJdJgcLU/YxRAFrByGjKiInCfQwbs=)
                          5: R5bViWXBO3ouBouRqDAFF7DEDMg.roa (hash: 1qmWPpwQKC0p19qQrIunGPBkKyWE5b9Vy7KJVtEO+pk=)
                          6: qCybwtLaz9bxMNhahP7eq_F5pWc.crl (hash: Dz7J5nrdzotLyIwW/S5h5LyFsc9oqqpEyAx2YM5mP5M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/1b9185-40b5-490b-9af8-55c140c9f54f/1/qCybwtLaz9bxMNhahP7eq_F5pWc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/1b9185-40b5-490b-9af8-55c140c9f54f/1/qCybwtLaz9bxMNhahP7eq_F5pWc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qCybwtLaz9bxMNhahP7eq_F5pWc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:21:60:3f:a1:da:70:76:56:7a:11:74:9f:08:6c:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a82c9bc2d2dacfd6f130d85a84fedeabf179a567
        Validity
            Not Before: Oct 19 11:01:09 2025 GMT
            Not After : Oct 20 11:01:09 2025 GMT
        Subject: CN=3ec8e2d875befd14b8bee7941064ad03cdee96b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:98:3f:40:5a:25:46:64:af:bd:f1:ba:3b:74:
                    0d:5b:7a:89:f3:ee:c1:79:0d:aa:9f:84:2c:89:b9:
                    d2:ea:d0:f1:8b:6f:fd:84:df:3d:0b:7a:a6:23:48:
                    8d:f4:ef:1a:17:07:ba:05:6a:0e:fd:cd:01:d0:86:
                    34:72:2e:ad:0e:64:60:fa:d4:f6:65:6f:aa:23:2d:
                    20:7f:f0:64:8c:39:db:78:d0:b8:db:12:49:98:eb:
                    94:86:56:d1:e1:22:1c:a5:df:a7:60:1f:40:a5:51:
                    38:54:3f:a2:c6:6e:d4:d8:80:0b:a8:7e:5e:c9:03:
                    d3:d0:06:ed:4e:70:d6:8a:78:ee:27:2b:08:0c:5f:
                    96:74:43:b9:93:e5:c8:2f:ea:5c:5b:1a:99:87:bb:
                    b4:5e:8c:6c:f4:e7:8c:98:b9:e0:70:b9:b2:d2:92:
                    74:e7:dd:91:58:25:54:a9:23:3c:62:35:35:71:27:
                    35:46:d9:c6:7f:b2:eb:e9:17:c0:6a:fe:41:40:fa:
                    f8:3a:95:2b:cc:0d:29:9a:e5:3a:69:a1:72:e5:0a:
                    40:4b:4e:7c:ca:83:5c:fa:10:de:22:e5:97:3d:33:
                    62:44:7a:97:70:b9:e1:41:7d:bf:25:c9:ff:e0:0a:
                    f0:c4:c9:f1:97:fc:dc:59:6a:b4:25:b2:f9:ea:02:
                    a5:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:C8:E2:D8:75:BE:FD:14:B8:BE:E7:94:10:64:AD:03:CD:EE:96:B9
            X509v3 Authority Key Identifier:
                keyid:A8:2C:9B:C2:D2:DA:CF:D6:F1:30:D8:5A:84:FE:DE:AB:F1:79:A5:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qCybwtLaz9bxMNhahP7eq_F5pWc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1b9185-40b5-490b-9af8-55c140c9f54f/1/qCybwtLaz9bxMNhahP7eq_F5pWc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1b9185-40b5-490b-9af8-55c140c9f54f/1/qCybwtLaz9bxMNhahP7eq_F5pWc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:3a:31:6f:ed:0f:92:a4:55:df:2a:7b:a3:c6:74:b1:7a:1b:
         ea:e0:79:a3:6e:d6:2d:30:2c:09:da:74:75:c1:c7:6e:b0:d8:
         e5:10:3b:13:c5:3c:8f:89:76:a4:df:e8:1f:7f:ac:a7:41:53:
         05:94:03:87:f7:51:04:f1:79:a3:e4:ee:23:d0:ea:de:ae:81:
         ea:1e:62:f1:8d:5e:55:2e:88:d4:3e:17:16:23:ca:4a:79:af:
         ca:b3:56:d0:f7:ad:75:ac:ea:ca:13:72:61:47:51:10:61:53:
         20:98:4b:4b:23:9d:21:1b:10:f8:4b:98:57:40:93:45:08:d8:
         12:65:8d:fe:f6:a7:f0:c3:cf:f5:a3:55:96:0c:79:71:75:54:
         44:73:9b:1c:6c:f0:d7:fe:e1:0a:e5:cb:2e:d2:8a:88:22:7d:
         7f:53:c7:11:9a:c8:13:66:4f:d4:28:72:76:0c:42:82:47:52:
         99:29:ff:61:37:ca:2d:6a:ae:f2:e1:ae:45:f1:37:ee:d7:d5:
         22:44:95:29:84:a5:19:50:fc:51:b5:b4:f4:b1:75:c2:46:dd:
         05:d9:1e:af:10:83:f4:b2:e5:08:ca:5e:f8:2b:f6:c0:9a:4a:
         38:8f:fa:07:a1:79:b0:e5:79:b0:ac:31:ed:94:57:22:a0:2f:
         a2:5c:b0:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:24:05 2025 by rpki-client