Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.mft
File:                     r5OFA9cpMWJty40elGsq4Gpz0C4.mft (raw, json)
Hash identifier:          kOsQaoqMxWASXVTKd9OcT7fVtRvXH9eRuqWb3UC8VKs=
Subject key identifier:   B3:DD:96:4B:AA:94:BF:FF:5E:DF:0F:C3:D4:3B:73:E2:FD:ED:9F:D5
Authority key identifier: AF:93:85:03:D7:29:31:62:6D:CB:8D:1E:94:6B:2A:E0:6A:73:D0:2E
Certificate issuer:       /CN=af938503d72931626dcb8d1e946b2ae06a73d02e
Certificate serial:       0199FC8F2055B4D2E16D3990920DEC18346F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r5OFA9cpMWJty40elGsq4Gpz0C4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.mft
Manifest number:          16EC
Signing time:             Sun 19 Oct 2025 13:01:02 +0000
Manifest this update:     Sun 19 Oct 2025 13:01:02 +0000
Manifest next update:     Mon 20 Oct 2025 13:01:02 +0000
Files and hashes:         1: 0f9dETPwri123VDJt9dOfuGVKTM.roa (hash: 8xyCGMaaQiKJUJRjOY5GEWjGS9pjoAFfD6Zrsv7nWZs=)
                          2: 1F7uxkd5CHW5Nl3RYcymdv41PuQ.roa (hash: CcbwxJuJRF3/aA4m69pX7txPfcLVx2hNzHSkmTtnNVg=)
                          3: lwWk6gYDfPgTiw1I1FH-cpoHm-4.roa (hash: yGaK09dhA4d1XHm7tuZO0sTpyctbGTSJ/ciNb0ty54Q=)
                          4: myG4Sawx0LfJTRmA5fYEdv4-s1g.roa (hash: YBdxt4BRgQWeWo/h8hkYVlVlmJP13HxJ2W8fQJqxi34=)
                          5: q3PjiJcA5Wmvu-x4hS5Ctn6vg7k.roa (hash: aR28mDR0AXgw+ne2p9IcwrnOZCQ+luqP2WRf/HY4Z7Q=)
                          6: r5OFA9cpMWJty40elGsq4Gpz0C4.crl (hash: l9h7Gos9sP0NUlelW06CydBB4M2MUxWceIFk8ACIN30=)
                          7: vn8OwjKW13Vvv7-w646PZQwlT1g.roa (hash: SQoW5zSKhm7XP9vCmJ5BfcEIft5q/8KQA6dRhI8YlXQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r5OFA9cpMWJty40elGsq4Gpz0C4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:8f:20:55:b4:d2:e1:6d:39:90:92:0d:ec:18:34:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af938503d72931626dcb8d1e946b2ae06a73d02e
        Validity
            Not Before: Oct 19 13:01:02 2025 GMT
            Not After : Oct 20 13:01:02 2025 GMT
        Subject: CN=b3dd964baa94bfff5edf0fc3d43b73e2fded9fd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f3:06:e1:84:0f:d1:6e:60:61:49:88:e9:f5:
                    7c:db:4f:80:f7:e5:62:fd:6a:ca:a0:c6:d4:b2:69:
                    3a:b1:e2:63:7d:f3:9a:0b:af:dc:b8:6b:06:e8:78:
                    ff:bc:c6:1e:a7:51:b8:09:cf:4b:7e:0c:11:d2:76:
                    85:63:19:43:8d:d4:e4:83:cd:e3:5b:82:4d:32:8d:
                    19:56:83:87:6d:fa:0f:01:8d:ed:71:7a:c1:ff:29:
                    a8:db:5f:96:26:0d:40:51:f4:c9:e3:08:a4:93:d3:
                    f5:4c:8a:ca:c5:61:62:a1:90:58:d6:8b:1a:88:7d:
                    5a:9a:a3:0b:34:4d:f3:da:7f:04:5c:79:98:89:68:
                    d7:5f:0b:b6:60:1e:33:66:a5:d8:78:84:80:75:d4:
                    8c:59:79:8e:db:4c:ff:95:6a:7c:34:b9:f6:2a:f1:
                    c1:e3:08:5f:73:d9:f5:11:af:db:30:be:a3:54:9a:
                    5c:c6:94:62:69:f2:5e:8b:a5:fb:af:88:33:15:94:
                    a8:d5:36:84:e3:3e:4b:ee:02:3d:bd:70:c8:61:76:
                    ec:95:61:88:56:e6:6f:c9:b4:17:19:d3:46:b1:89:
                    94:8d:4f:37:ea:d6:c6:4f:48:4f:50:e0:38:28:e8:
                    ce:41:c8:fe:7b:98:8c:f9:d8:52:76:51:04:b2:58:
                    d4:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:DD:96:4B:AA:94:BF:FF:5E:DF:0F:C3:D4:3B:73:E2:FD:ED:9F:D5
            X509v3 Authority Key Identifier:
                keyid:AF:93:85:03:D7:29:31:62:6D:CB:8D:1E:94:6B:2A:E0:6A:73:D0:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r5OFA9cpMWJty40elGsq4Gpz0C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:80:fb:22:14:24:9c:4a:d7:bd:20:48:85:aa:47:61:eb:07:
         fb:32:86:f5:42:40:31:1f:36:10:c7:7a:3d:fc:00:ba:2b:85:
         49:0c:2a:16:f7:d9:69:a4:0b:6b:11:44:a9:30:62:6d:a0:6d:
         64:b0:4f:9e:a8:5a:de:d9:ca:d4:77:90:2f:02:41:3d:58:64:
         fc:c6:f0:a0:67:68:c5:56:fc:6f:b8:ed:ad:1f:ca:21:22:f1:
         2c:61:c2:d6:0b:82:d8:37:2e:70:b6:5f:4a:a5:7d:33:c5:c0:
         a0:19:6c:c3:8f:bc:d2:f6:8b:57:79:56:2d:01:0b:b8:3d:28:
         a6:0b:bb:72:a5:71:8b:72:d8:83:1e:17:0c:68:a8:c2:d2:12:
         28:44:b4:b3:38:a2:15:83:1d:cb:1b:9f:97:8f:d0:22:2f:83:
         b4:91:22:ef:91:0d:1d:fa:54:b7:e2:e4:06:b8:30:91:b7:e8:
         5c:e5:4e:9e:2a:c1:e6:d9:da:a7:47:ed:76:7d:ed:99:73:e8:
         1a:c0:1b:1d:13:48:c5:b0:92:5f:96:38:45:de:f0:92:d4:0a:
         72:8d:20:65:5d:a0:51:96:b1:72:34:a8:a5:a1:d0:fa:34:79:
         60:57:ae:63:28:ad:91:70:1b:ed:e9:8b:93:3c:0e:b2:26:9b:
         76:ea:6f:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:18:47 2025 by rpki-client