Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/485ebc-7ee4-4270-bdc8-97fa80c0df41/1/azeN8nvZJgx-sVJz6ZPjawmF2hA.mft
File:                     azeN8nvZJgx-sVJz6ZPjawmF2hA.mft (raw, json)
Hash identifier:          Wbxm2k8zcTXM6ojEQigQacDyRJAdIQZfxVTCISun9Ys=
Subject key identifier:   35:F7:ED:F8:E1:AD:55:A4:78:B4:96:E7:EF:7F:68:50:B9:73:4B:DA
Authority key identifier: 6B:37:8D:F2:7B:D9:26:0C:7E:B1:52:73:E9:93:E3:6B:09:85:DA:10
Certificate issuer:       /CN=6b378df27bd9260c7eb15273e993e36b0985da10
Certificate serial:       0199FBEB0118E29E2DDD9F65B6A76C292797
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/azeN8nvZJgx-sVJz6ZPjawmF2hA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/485ebc-7ee4-4270-bdc8-97fa80c0df41/1/azeN8nvZJgx-sVJz6ZPjawmF2hA.mft
Manifest number:          16E8
Signing time:             Sun 19 Oct 2025 10:01:46 +0000
Manifest this update:     Sun 19 Oct 2025 10:01:46 +0000
Manifest next update:     Mon 20 Oct 2025 10:01:46 +0000
Files and hashes:         1: SWKxeLe_GGuPotQH4HKhFwr-_-A.roa (hash: nzRbtMsfHtfSOMu7Pb2PpTkqYw2TVYbIXEMhQXP/4G0=)
                          2: azeN8nvZJgx-sVJz6ZPjawmF2hA.crl (hash: 9CDxXzasPIpIuasvAzfrxK3AmDTI/5oe3qgHqXy5l8k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/485ebc-7ee4-4270-bdc8-97fa80c0df41/1/azeN8nvZJgx-sVJz6ZPjawmF2hA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/485ebc-7ee4-4270-bdc8-97fa80c0df41/1/azeN8nvZJgx-sVJz6ZPjawmF2hA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/azeN8nvZJgx-sVJz6ZPjawmF2hA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 10:01:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:01:18:e2:9e:2d:dd:9f:65:b6:a7:6c:29:27:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b378df27bd9260c7eb15273e993e36b0985da10
        Validity
            Not Before: Oct 19 10:01:46 2025 GMT
            Not After : Oct 20 10:01:46 2025 GMT
        Subject: CN=35f7edf8e1ad55a478b496e7ef7f6850b9734bda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b7:e3:df:59:b1:a5:c9:8b:37:0a:f3:99:91:
                    11:f6:e0:73:e4:d8:b0:61:54:a8:64:42:41:ca:04:
                    0a:fd:e8:39:b8:63:77:82:d4:6f:c8:d2:7b:52:02:
                    2f:fe:19:c0:72:a3:2a:1d:e5:71:69:ee:3f:b0:61:
                    d5:71:e4:53:7a:4b:6c:84:5f:06:38:5e:42:49:ba:
                    d9:12:26:92:ec:59:23:85:f4:66:ec:08:fd:02:60:
                    eb:c8:ba:3a:d2:e9:cd:2b:60:30:55:77:90:63:b6:
                    b6:3c:ce:e9:20:6a:c6:cf:e5:d6:e1:df:43:c3:04:
                    4c:a9:22:03:68:a2:a3:7a:58:c4:32:e1:64:65:07:
                    51:fc:36:c6:9b:0e:ca:cb:19:bb:8a:5a:e9:4b:2b:
                    ae:26:10:5e:77:e2:2f:fe:73:ed:c9:17:cb:02:3a:
                    12:00:bb:5f:76:af:ad:37:66:a1:87:39:06:c8:f0:
                    2a:fd:d0:81:96:37:5e:b9:c1:65:53:9b:68:7e:1e:
                    a9:47:e0:f2:4a:51:9d:f6:ed:83:8a:29:bd:22:fb:
                    37:05:15:b9:1d:f9:46:12:da:be:37:0a:f8:39:a0:
                    18:31:ed:6b:0f:4c:e5:09:f8:f2:30:56:7b:09:e7:
                    6e:63:63:a9:2a:01:d8:39:81:d2:dd:69:52:d7:e4:
                    78:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:F7:ED:F8:E1:AD:55:A4:78:B4:96:E7:EF:7F:68:50:B9:73:4B:DA
            X509v3 Authority Key Identifier:
                keyid:6B:37:8D:F2:7B:D9:26:0C:7E:B1:52:73:E9:93:E3:6B:09:85:DA:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/azeN8nvZJgx-sVJz6ZPjawmF2hA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/485ebc-7ee4-4270-bdc8-97fa80c0df41/1/azeN8nvZJgx-sVJz6ZPjawmF2hA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/485ebc-7ee4-4270-bdc8-97fa80c0df41/1/azeN8nvZJgx-sVJz6ZPjawmF2hA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:06:ab:8f:d8:52:e6:15:f6:28:ac:4c:6f:4a:7c:2e:c6:ce:
         6f:0e:8b:e5:f1:8b:f9:03:9d:94:78:5b:87:1d:46:66:1f:b6:
         b9:ea:20:c7:f3:22:e9:54:2e:0e:20:d3:7d:b4:7f:09:8c:3c:
         de:07:62:07:b4:2f:5b:96:fc:b4:92:25:3c:23:7f:b4:82:fd:
         5e:f3:d5:4d:a9:3d:a8:72:10:17:1a:f3:5f:f3:cb:5f:0c:b5:
         41:e9:f0:82:08:57:69:b7:49:d7:2d:7f:54:c1:86:54:1d:67:
         d6:d8:17:d3:16:d5:35:1a:0b:85:fe:ca:ae:21:36:02:48:26:
         42:6e:b1:9c:9b:1c:4b:6f:a5:3a:d5:04:6b:79:48:e7:14:57:
         e3:da:f1:6e:8e:a0:16:fb:8a:dc:df:c5:3e:c3:3d:7d:d5:ac:
         b6:39:61:34:a5:d1:d9:7b:0c:d9:42:ab:fe:30:bd:b7:6d:c2:
         05:5f:a6:20:f6:ee:ae:89:ab:65:c2:bd:e0:1c:4d:80:61:b2:
         19:e2:08:87:55:5d:cc:0c:5a:29:e5:53:82:3c:75:9d:e0:5f:
         39:52:d3:53:6a:8b:2b:3e:ee:d2:d0:ae:3a:bf:7a:42:36:bb:
         30:d9:aa:09:b8:39:bd:b3:07:0b:d1:47:80:8b:03:51:36:5c:
         36:f1:91:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:33:14 2025 by rpki-client