Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/2ec4b3-e65d-4612-9304-a39303d85066/1/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.mft
File:                     8a-LuY5AVTnqmDOE-vqCsrS3FyQ.mft (raw, json)
Hash identifier:          EA1xPnIrtIOoXNSeUj9E8yA5KSuIUGvu+DtuJm2+f38=
Subject key identifier:   D7:04:F6:5B:16:F3:27:C0:F1:8E:8D:F4:81:72:C9:E2:1F:E7:B6:35
Authority key identifier: F1:AF:8B:B9:8E:40:55:39:EA:98:33:84:FA:FA:82:B2:B4:B7:17:24
Certificate issuer:       /CN=f1af8bb98e405539ea983384fafa82b2b4b71724
Certificate serial:       0199FB45E0CA544ED364D45BE6B1C21EFBFD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/2ec4b3-e65d-4612-9304-a39303d85066/1/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.mft
Manifest number:          16E3
Signing time:             Sun 19 Oct 2025 07:01:24 +0000
Manifest this update:     Sun 19 Oct 2025 07:01:24 +0000
Manifest next update:     Mon 20 Oct 2025 07:01:24 +0000
Files and hashes:         1: 8a-LuY5AVTnqmDOE-vqCsrS3FyQ.crl (hash: 2SF5H+/eeRDbkO5hvr9R+vHX+2ROVFU/zrW0NzviTGs=)
                          2: eGF4PY_wgfKdtXUANezmT92NTGM.roa (hash: 05Pk1BDJWHJV0SJRPVmkmFIh7w5FFlCRro3lX7bPWNQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/2ec4b3-e65d-4612-9304-a39303d85066/1/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/2ec4b3-e65d-4612-9304-a39303d85066/1/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:45:e0:ca:54:4e:d3:64:d4:5b:e6:b1:c2:1e:fb:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1af8bb98e405539ea983384fafa82b2b4b71724
        Validity
            Not Before: Oct 19 07:01:24 2025 GMT
            Not After : Oct 20 07:01:24 2025 GMT
        Subject: CN=d704f65b16f327c0f18e8df48172c9e21fe7b635
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:dc:66:50:38:b3:53:5a:2d:56:ee:67:ce:19:
                    00:7f:7a:c6:ff:8c:94:aa:7e:c8:ed:e0:17:43:a1:
                    32:6e:a1:6b:70:46:86:f1:e0:93:ce:7f:0e:d8:07:
                    63:9a:9e:6c:51:8e:bf:c3:2c:3f:22:58:fb:7f:d2:
                    e0:1d:0b:fa:77:fe:86:31:d0:f0:e4:ce:31:ba:a6:
                    69:d1:88:69:48:0c:20:68:4e:df:ab:11:84:e0:10:
                    cc:69:e7:c3:f3:69:ee:05:c7:0e:cd:97:cc:e7:df:
                    60:3c:8a:a7:55:bd:f8:3f:82:56:96:01:da:39:c6:
                    65:8f:16:94:b5:22:aa:ad:30:da:c4:81:0e:0a:1f:
                    01:1a:b3:57:63:ee:d6:8c:2f:7e:85:6c:b8:6d:19:
                    84:06:8c:ee:cc:22:41:de:96:d5:90:1f:93:8a:b1:
                    0d:f4:4f:d1:72:20:77:d2:8d:09:6c:2b:f6:5b:f7:
                    d1:63:ea:55:19:91:31:70:02:7f:8f:0c:0e:df:c7:
                    d3:5f:9f:79:6b:c6:4c:95:4e:e2:ab:d9:67:b5:6f:
                    5d:a9:96:7a:d7:8c:d9:07:4a:07:df:ab:54:8d:1f:
                    ec:e1:5f:d0:db:65:fa:79:8d:d0:a2:83:4a:21:61:
                    25:48:79:79:0b:4d:24:46:ea:57:80:d3:9b:8a:a7:
                    49:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:04:F6:5B:16:F3:27:C0:F1:8E:8D:F4:81:72:C9:E2:1F:E7:B6:35
            X509v3 Authority Key Identifier:
                keyid:F1:AF:8B:B9:8E:40:55:39:EA:98:33:84:FA:FA:82:B2:B4:B7:17:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2ec4b3-e65d-4612-9304-a39303d85066/1/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2ec4b3-e65d-4612-9304-a39303d85066/1/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:8a:81:04:2f:8c:30:f8:3b:88:94:a8:96:59:f3:fc:f9:ea:
         62:ac:08:7f:f9:a4:9e:54:0b:fa:d3:f7:86:23:c3:35:c5:3e:
         b1:1b:8b:d2:a1:a6:86:7f:7c:79:b2:e5:c8:20:19:80:c0:1e:
         b5:26:5b:af:1c:85:19:77:90:e7:9e:19:2b:c4:3c:6e:26:2b:
         4b:c5:32:f5:c9:62:7e:a1:54:77:de:9c:6d:9d:89:cb:a9:44:
         b1:8c:e5:84:b9:17:ba:e2:ca:e9:30:4c:b7:33:c4:25:35:22:
         42:cb:7a:f2:97:20:34:be:95:fd:11:00:7e:d7:12:8e:43:e9:
         4e:da:23:10:18:d2:7d:87:61:99:9b:bb:5a:bd:27:be:ff:21:
         fa:21:ec:02:e4:be:c2:de:6d:7b:1f:86:bd:8e:2b:70:ce:2e:
         67:92:a0:58:c1:8a:a0:ba:c6:9f:8c:8c:01:c3:90:b2:93:46:
         d9:5a:75:1a:c3:57:36:d8:9a:9e:01:e9:ab:bf:d3:79:c2:45:
         70:7e:f1:ee:a9:46:3a:56:92:bf:96:93:59:f2:fa:8c:ef:eb:
         db:66:8d:28:9d:50:90:2a:5b:83:08:a8:8c:ab:90:41:68:ee:
         2f:b2:c5:37:6a:2a:fb:b2:4d:10:01:3f:6f:9a:1b:89:c3:ea:
         1b:10:20:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:06:10 2025 by rpki-client