Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/4498aa-cc27-4316-ae87-d472d9afe134/1/uRWvWdJPWaYNl8HIirl5oUxYD_Q.mft
File:                     uRWvWdJPWaYNl8HIirl5oUxYD_Q.mft (raw, json)
Hash identifier:          ywcwc68lca2oA0FCprrht3zdsxjHOpQJyJ+hMhxhDQE=
Subject key identifier:   AC:61:DD:15:61:BD:67:F2:60:A2:38:9C:F1:CD:2C:70:F4:FD:64:6E
Authority key identifier: B9:15:AF:59:D2:4F:59:A6:0D:97:C1:C8:8A:B9:79:A1:4C:58:0F:F4
Certificate issuer:       /CN=b915af59d24f59a60d97c1c88ab979a14c580ff4
Certificate serial:       0199FB7C8CFEE2482402D93DD8C785936600
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uRWvWdJPWaYNl8HIirl5oUxYD_Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/4498aa-cc27-4316-ae87-d472d9afe134/1/uRWvWdJPWaYNl8HIirl5oUxYD_Q.mft
Manifest number:          16E2
Signing time:             Sun 19 Oct 2025 08:01:07 +0000
Manifest this update:     Sun 19 Oct 2025 08:01:07 +0000
Manifest next update:     Mon 20 Oct 2025 08:01:07 +0000
Files and hashes:         1: hbB_a3Y8U324LaNC-0q5xvctY3o.roa (hash: nXIgFtsgC878hqr3xc7aa+lfCX4icrBjNT+2kWgSc+Q=)
                          2: uRWvWdJPWaYNl8HIirl5oUxYD_Q.crl (hash: B0WwoGRBtRf5Say3Ls8ZmcisvEXSiceNx83cvgFwTh8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/4498aa-cc27-4316-ae87-d472d9afe134/1/uRWvWdJPWaYNl8HIirl5oUxYD_Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/4498aa-cc27-4316-ae87-d472d9afe134/1/uRWvWdJPWaYNl8HIirl5oUxYD_Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uRWvWdJPWaYNl8HIirl5oUxYD_Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 08:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:7c:8c:fe:e2:48:24:02:d9:3d:d8:c7:85:93:66:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b915af59d24f59a60d97c1c88ab979a14c580ff4
        Validity
            Not Before: Oct 19 08:01:07 2025 GMT
            Not After : Oct 20 08:01:07 2025 GMT
        Subject: CN=ac61dd1561bd67f260a2389cf1cd2c70f4fd646e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:0e:5d:0d:65:c0:9e:3d:24:3f:7d:0e:8e:60:
                    c0:ae:cd:ee:66:af:f7:c9:b6:a4:f9:35:ff:a0:a3:
                    f3:96:39:38:21:ba:4d:35:32:3e:a4:a9:6f:81:ec:
                    5c:41:bd:57:56:18:5c:50:cf:12:03:a8:0e:9b:88:
                    3e:6c:2a:51:21:c9:46:1c:a9:43:d5:d1:80:89:3d:
                    b9:e5:d8:95:50:11:67:1c:cc:f3:29:39:6f:9f:66:
                    24:ab:0c:ee:e7:d9:0e:cf:86:15:20:54:5e:33:0d:
                    d3:6e:9d:d9:2b:48:98:ea:e5:e3:2f:8e:50:2b:fa:
                    1e:6d:be:ef:f5:04:20:a3:a3:53:eb:cc:ee:a7:82:
                    75:17:0e:4e:1e:69:a4:9a:b8:64:37:04:15:03:2d:
                    c6:29:a1:be:c3:b2:4a:ae:61:71:ec:d6:9f:06:ad:
                    2c:0b:f1:a1:18:0c:1b:9e:80:d3:f1:23:2f:e6:4a:
                    29:d1:e3:6c:a5:b2:65:25:b8:14:f6:f0:cb:a2:be:
                    c4:25:19:c9:7c:57:ea:b1:d0:ae:20:b5:16:5d:af:
                    c5:3f:f2:31:5b:03:6b:c3:25:07:4c:73:04:ce:03:
                    2b:93:8d:ef:53:4d:94:1c:d8:01:c2:5e:c7:80:86:
                    a2:4c:71:f2:63:62:2d:64:1c:de:62:1b:87:57:92:
                    3f:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:61:DD:15:61:BD:67:F2:60:A2:38:9C:F1:CD:2C:70:F4:FD:64:6E
            X509v3 Authority Key Identifier:
                keyid:B9:15:AF:59:D2:4F:59:A6:0D:97:C1:C8:8A:B9:79:A1:4C:58:0F:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRWvWdJPWaYNl8HIirl5oUxYD_Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/4498aa-cc27-4316-ae87-d472d9afe134/1/uRWvWdJPWaYNl8HIirl5oUxYD_Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/4498aa-cc27-4316-ae87-d472d9afe134/1/uRWvWdJPWaYNl8HIirl5oUxYD_Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:d2:62:05:42:1f:18:4e:a5:d5:c1:6c:ff:40:a5:9d:3b:62:
         36:6c:07:97:71:52:56:1e:46:3a:82:13:17:59:70:98:05:83:
         3e:8c:b8:d3:32:7d:fc:b4:4a:d5:cb:ce:14:06:8e:36:12:92:
         78:a3:e2:49:d5:66:ef:5c:d5:04:4a:0f:1f:f4:f9:b6:31:2a:
         2e:9a:f1:31:6b:32:89:f8:59:22:6f:3d:f3:93:ed:ad:07:6e:
         09:6b:1d:f1:11:d2:85:e2:54:ad:35:88:42:80:eb:b4:4c:51:
         51:41:64:99:de:70:b4:23:37:38:5d:32:44:9b:53:6a:28:77:
         28:23:1d:87:4a:1e:3f:62:39:f4:7e:b5:af:ff:f8:de:3a:b3:
         cc:19:08:b1:2b:98:55:1c:62:6b:c1:c4:fd:6b:11:41:95:d1:
         37:a4:e5:af:58:63:e3:3a:1c:fe:43:c6:f3:f5:ad:89:1d:f3:
         70:62:ec:96:29:24:32:b5:12:10:e9:c5:57:4c:2a:86:0c:ce:
         72:0f:c1:5e:8e:c9:73:b8:2c:b7:2c:7a:6e:19:f6:02:db:18:
         fc:8d:a4:1b:d2:12:cb:f5:6f:da:29:a6:ed:63:0b:bb:0f:95:
         7f:50:24:37:22:31:a5:bf:09:60:a1:5a:f0:04:57:bb:0e:7d:
         7c:ad:3f:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:24:16 2025 by rpki-client