Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/e85a41-b3ff-4fcd-80b2-4aabec0d30a3/1/n7edKYEQtvsxkwHrwivxgOcFR5Y.mft
File:                     n7edKYEQtvsxkwHrwivxgOcFR5Y.mft (raw, json)
Hash identifier:          3AHtmjzBZlz1Kp7+7/efQ2Cqni81KM0SAbKAabyFeLw=
Subject key identifier:   D1:27:CC:62:31:DF:90:30:DD:C9:5A:FF:4F:7D:C2:C3:38:45:93:B5
Authority key identifier: 9F:B7:9D:29:81:10:B6:FB:31:93:01:EB:C2:2B:F1:80:E7:05:47:96
Certificate issuer:       /CN=9fb79d298110b6fb319301ebc22bf180e7054796
Certificate serial:       0199FC21925A1AD5355415F4E6C732D89195
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n7edKYEQtvsxkwHrwivxgOcFR5Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/e85a41-b3ff-4fcd-80b2-4aabec0d30a3/1/n7edKYEQtvsxkwHrwivxgOcFR5Y.mft
Manifest number:          16E2
Signing time:             Sun 19 Oct 2025 11:01:22 +0000
Manifest this update:     Sun 19 Oct 2025 11:01:22 +0000
Manifest next update:     Mon 20 Oct 2025 11:01:22 +0000
Files and hashes:         1: 2zu7oCjT-KVZRR2HzaLDOvNTLj0.roa (hash: D7mApAX4YmoA8emuHbADon4rwd+qyVDHh/ZdGBtTqIs=)
                          2: n7edKYEQtvsxkwHrwivxgOcFR5Y.crl (hash: Dx2x+ENrQpABqJnRbtAvVlNlWD15XHI8x1k2PG/LIgE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/e85a41-b3ff-4fcd-80b2-4aabec0d30a3/1/n7edKYEQtvsxkwHrwivxgOcFR5Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/e85a41-b3ff-4fcd-80b2-4aabec0d30a3/1/n7edKYEQtvsxkwHrwivxgOcFR5Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n7edKYEQtvsxkwHrwivxgOcFR5Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:21:92:5a:1a:d5:35:54:15:f4:e6:c7:32:d8:91:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fb79d298110b6fb319301ebc22bf180e7054796
        Validity
            Not Before: Oct 19 11:01:22 2025 GMT
            Not After : Oct 20 11:01:22 2025 GMT
        Subject: CN=d127cc6231df9030ddc95aff4f7dc2c3384593b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:70:2c:31:6a:b5:d5:f4:61:dd:2e:a1:55:c6:
                    86:47:ea:0a:30:57:62:bd:ec:1e:04:6e:03:5b:c2:
                    e2:b1:8e:1c:73:12:10:58:00:02:2f:c6:bd:38:b3:
                    f0:9f:08:29:e6:9d:3b:27:7b:95:6d:ec:72:bd:6f:
                    a8:a5:fb:46:63:49:ec:86:60:33:ce:c5:9a:6f:65:
                    2b:ba:aa:89:a7:92:29:8c:73:1f:cb:68:39:3b:73:
                    c7:78:c9:37:c5:f0:76:96:3f:02:0b:4c:6d:e6:67:
                    b4:12:1d:d5:5d:d6:fe:64:18:c4:1b:62:f5:56:5b:
                    df:2b:36:7f:1e:db:50:56:f8:cb:b2:bf:a5:ad:89:
                    9d:15:25:e7:07:6c:45:3c:86:9d:0f:77:a3:04:81:
                    8a:fa:fa:db:4a:db:d3:67:35:03:c7:45:19:4f:4b:
                    c6:f3:b8:38:a2:f4:f7:c7:08:c2:1b:59:12:28:ec:
                    30:3d:66:5b:20:ae:90:d1:b0:09:0e:89:98:c8:2e:
                    2c:51:a9:b5:2e:b1:8f:d3:94:fd:0f:e6:12:ec:ac:
                    5f:a1:6c:bd:7b:d8:06:3c:de:c8:b0:b1:ac:0b:da:
                    22:0e:62:2b:44:6c:92:69:bd:92:5b:7c:1a:18:38:
                    79:2c:e3:20:52:d9:2d:d5:d8:26:c6:51:48:c1:3e:
                    a9:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:27:CC:62:31:DF:90:30:DD:C9:5A:FF:4F:7D:C2:C3:38:45:93:B5
            X509v3 Authority Key Identifier:
                keyid:9F:B7:9D:29:81:10:B6:FB:31:93:01:EB:C2:2B:F1:80:E7:05:47:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n7edKYEQtvsxkwHrwivxgOcFR5Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e85a41-b3ff-4fcd-80b2-4aabec0d30a3/1/n7edKYEQtvsxkwHrwivxgOcFR5Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e85a41-b3ff-4fcd-80b2-4aabec0d30a3/1/n7edKYEQtvsxkwHrwivxgOcFR5Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:3b:9b:14:3e:f7:0b:0d:be:28:77:63:f2:f7:3f:78:92:49:
         94:e4:bc:60:4d:15:66:85:47:04:fd:59:0f:05:95:e7:a7:35:
         e7:8f:cb:d1:e3:f0:fe:42:9d:61:a6:c9:2e:31:05:01:54:b4:
         25:b6:4e:38:da:28:f5:e4:1d:a6:2e:6f:8e:ce:6d:e3:31:06:
         4e:04:1c:5a:b8:fb:5f:e3:e5:63:8c:65:90:f6:c8:69:75:79:
         b7:4b:13:d7:89:41:f9:2e:48:e6:5a:da:6b:73:11:c0:7f:ad:
         ec:3f:ec:c6:62:13:02:6c:5b:6b:14:2e:07:c9:84:47:f8:10:
         32:ef:46:8f:f2:5c:33:3e:ae:57:f0:4e:ec:63:e4:f0:1c:9f:
         d6:a8:e9:08:0f:fd:43:2c:69:e9:ca:f5:56:eb:de:cd:01:18:
         66:47:0b:b5:95:4f:52:0c:ed:61:69:87:57:41:db:bf:43:c3:
         25:84:f3:84:1b:af:32:be:74:d8:35:2b:98:02:a5:e9:e6:4b:
         6c:14:ac:ef:aa:69:8c:c6:ac:30:34:5b:e9:f8:48:4f:5a:da:
         a0:32:7d:cc:79:88:14:47:25:45:4e:4f:91:09:07:ad:fb:e0:
         79:83:e0:5b:dd:48:fc:39:49:37:c9:b9:43:58:50:89:bb:bc:
         bf:55:03:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:49:54 2025 by rpki-client