Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.mft
File:                     M7n5GBbdTYImpB47TDsJx73MZKk.mft (raw, json)
Hash identifier:          o9RXGm0PIy9llFdeZyHxxDCMwciYUyGESFAmF8umGxs=
Subject key identifier:   D3:3A:FC:8C:7E:A5:21:B2:F2:FC:14:49:AE:97:B0:6D:7F:E8:48:CA
Authority key identifier: 33:B9:F9:18:16:DD:4D:82:26:A4:1E:3B:4C:3B:09:C7:BD:CC:64:A9
Certificate issuer:       /CN=33b9f91816dd4d8226a41e3b4c3b09c7bdcc64a9
Certificate serial:       0199FBEA837F0CAC751EFAF2832377028891
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M7n5GBbdTYImpB47TDsJx73MZKk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.mft
Manifest number:          16E3
Signing time:             Sun 19 Oct 2025 10:01:14 +0000
Manifest this update:     Sun 19 Oct 2025 10:01:14 +0000
Manifest next update:     Mon 20 Oct 2025 10:01:14 +0000
Files and hashes:         1: M7n5GBbdTYImpB47TDsJx73MZKk.crl (hash: tCBu6DudwhvmUFxTFPZ6GNIRrecPJ/3XdeK5veqv8mM=)
                          2: r8v_y5CgKRJYVb0efXm40LZehP4.roa (hash: RKFUmKgDYqrRW6TXR7G+/oNe9iSAV+m90qk1jsY/Or0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M7n5GBbdTYImpB47TDsJx73MZKk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 10:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:ea:83:7f:0c:ac:75:1e:fa:f2:83:23:77:02:88:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33b9f91816dd4d8226a41e3b4c3b09c7bdcc64a9
        Validity
            Not Before: Oct 19 10:01:14 2025 GMT
            Not After : Oct 20 10:01:14 2025 GMT
        Subject: CN=d33afc8c7ea521b2f2fc1449ae97b06d7fe848ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:96:2b:88:64:e5:1c:c0:96:4e:9f:ab:15:9a:
                    13:8f:53:c7:fb:b3:8e:15:75:01:2b:f2:82:c3:a1:
                    65:bc:90:68:aa:10:ff:8e:c4:c0:74:42:6d:c1:2d:
                    b3:f8:72:61:90:a5:b4:85:f9:d2:39:6a:eb:df:de:
                    44:cc:9d:85:fe:ba:04:16:c1:1e:8a:df:b7:71:53:
                    93:ef:fe:71:32:65:28:08:dd:48:5b:b1:5e:63:b7:
                    c6:6d:39:bb:b5:02:76:9c:f2:08:87:8e:66:00:97:
                    aa:2a:5b:e6:a2:84:68:74:b2:47:00:38:c7:48:63:
                    11:2b:cc:0a:0d:2f:9f:e8:08:bf:7b:f1:9f:be:97:
                    53:42:47:b4:a6:86:e1:f3:e4:da:bb:f6:eb:60:9a:
                    28:b5:d0:68:18:0a:de:30:a0:5a:89:9d:88:b2:ac:
                    92:9f:fa:b4:f8:81:f6:88:85:51:83:19:05:e9:95:
                    3d:3a:2c:6b:b5:5a:f9:08:d2:ac:54:34:1b:67:23:
                    f1:1a:05:e6:34:d8:8a:7c:c6:0a:d3:28:ea:ca:12:
                    53:a0:7b:cd:51:85:4b:f3:9b:dd:d0:4d:ec:78:02:
                    52:2a:72:69:29:68:06:23:3d:f9:fe:43:3d:c7:d4:
                    dd:6a:da:a8:14:d7:15:00:66:8a:0c:79:b7:2a:8c:
                    80:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:3A:FC:8C:7E:A5:21:B2:F2:FC:14:49:AE:97:B0:6D:7F:E8:48:CA
            X509v3 Authority Key Identifier:
                keyid:33:B9:F9:18:16:DD:4D:82:26:A4:1E:3B:4C:3B:09:C7:BD:CC:64:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7n5GBbdTYImpB47TDsJx73MZKk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/8132f0-702e-4044-b6d6-ca8cf6acfaeb/1/M7n5GBbdTYImpB47TDsJx73MZKk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:2c:e1:78:e3:b1:89:12:53:81:23:95:4f:8f:b7:65:44:a4:
         9c:38:17:81:6f:e1:af:39:a4:cd:1c:4b:0a:87:b1:af:7e:e3:
         7b:b6:43:a7:a8:b4:42:93:b9:9a:ac:9e:cb:59:91:78:d1:48:
         0a:7c:70:46:32:08:4b:fa:85:f9:03:09:f0:46:bb:c6:8a:30:
         6d:2a:fc:93:34:7e:f5:52:51:59:cf:b2:18:bd:0b:9c:71:f3:
         74:a4:8e:85:c3:6e:28:3c:4e:0d:46:0b:da:06:aa:42:84:6e:
         65:95:fc:bf:6c:e4:2e:29:b6:a3:1e:7a:c7:a0:8f:24:ac:a0:
         3e:3a:f9:e2:40:94:d6:7f:5d:33:c6:43:d6:24:62:f6:30:8c:
         01:54:e9:ee:e5:03:5d:37:44:46:7b:2e:fc:2e:e5:e1:d4:9b:
         c9:a9:b2:cf:5c:93:d5:9b:06:a0:72:ae:ad:81:37:b2:97:3a:
         a1:0d:13:d3:f3:d7:ab:e6:a1:b4:b9:84:2a:41:e7:36:ea:7f:
         08:48:94:cd:22:0b:d4:59:e2:51:b2:a1:9b:3c:99:a4:db:3b:
         65:3f:45:69:f3:3f:ec:b5:01:df:4c:63:d6:e8:c7:9e:07:04:
         47:28:b1:e8:02:5c:ff:36:ee:f1:58:bc:2b:1c:73:7d:99:91:
         b3:0e:7c:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:46:00 2025 by rpki-client