Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e2df0e-7bfe-44a9-bf86-f9ef97420764/1/FumqrOUCeVhbXFpdjuhWEGhsJsA.mft
File:                     FumqrOUCeVhbXFpdjuhWEGhsJsA.mft (raw, json)
Hash identifier:          dSQ6mjsTbe8hn5QNCFjY1Mp0WrbiN8FeEeumL2wXs1Q=
Subject key identifier:   0C:1E:8E:6E:41:DF:0D:CD:A1:EE:D8:9A:0D:3C:32:96:FA:EB:DE:3B
Authority key identifier: 16:E9:AA:AC:E5:02:79:58:5B:5C:5A:5D:8E:E8:56:10:68:6C:26:C0
Certificate issuer:       /CN=16e9aaace50279585b5c5a5d8ee85610686c26c0
Certificate serial:       0199FE7DB790ADD3B86CAFA74DA806FB357A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FumqrOUCeVhbXFpdjuhWEGhsJsA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/e2df0e-7bfe-44a9-bf86-f9ef97420764/1/FumqrOUCeVhbXFpdjuhWEGhsJsA.mft
Manifest number:          16E2
Signing time:             Sun 19 Oct 2025 22:01:15 +0000
Manifest this update:     Sun 19 Oct 2025 22:01:15 +0000
Manifest next update:     Mon 20 Oct 2025 22:01:15 +0000
Files and hashes:         1: FumqrOUCeVhbXFpdjuhWEGhsJsA.crl (hash: lhpYhde0ZG7JClv0u61+/3UMJdzSkULyLrgyXPckDnY=)
                          2: XHC_hDAqYlIYXrUHwPjCSmuap-w.roa (hash: QCdmiPzQ+fM9D3JEIMjhnM6hVdihEFRjXxcysEmoq04=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/e2df0e-7bfe-44a9-bf86-f9ef97420764/1/FumqrOUCeVhbXFpdjuhWEGhsJsA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/e2df0e-7bfe-44a9-bf86-f9ef97420764/1/FumqrOUCeVhbXFpdjuhWEGhsJsA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FumqrOUCeVhbXFpdjuhWEGhsJsA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:7d:b7:90:ad:d3:b8:6c:af:a7:4d:a8:06:fb:35:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16e9aaace50279585b5c5a5d8ee85610686c26c0
        Validity
            Not Before: Oct 19 22:01:15 2025 GMT
            Not After : Oct 20 22:01:15 2025 GMT
        Subject: CN=0c1e8e6e41df0dcda1eed89a0d3c3296faebde3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:b1:5c:a5:5c:a7:9e:50:c3:7a:80:13:89:31:
                    37:14:de:f5:8c:78:f2:18:e9:08:ec:13:a8:f3:d0:
                    13:28:db:17:23:61:8f:d3:0b:ee:d3:d0:16:87:05:
                    86:38:31:7f:c6:3e:13:b6:78:99:ac:ac:0b:2b:13:
                    30:97:f6:48:cc:23:98:6d:e9:97:0e:67:b4:4b:43:
                    60:18:27:3e:b7:d6:ae:fc:18:3c:b9:ad:87:00:48:
                    81:8e:0b:a1:3f:be:5b:bd:e5:19:7f:e6:b2:9d:28:
                    e8:9a:21:84:b3:cc:04:14:43:af:6d:95:2d:c7:bb:
                    d5:4f:7c:12:57:c6:b8:a2:34:72:2a:15:a5:d9:98:
                    40:a0:73:be:7f:3a:4d:fc:19:e5:5e:a3:7f:82:6c:
                    f9:27:33:c3:c2:17:04:ab:c5:1d:23:77:ef:9f:b9:
                    b6:43:99:5c:03:c4:52:ff:0f:d3:4b:9a:bf:a7:80:
                    f1:dc:16:0a:0c:67:ef:2b:7d:29:00:74:e3:68:59:
                    2f:66:b2:4c:d3:36:6a:a8:a8:de:40:b6:d9:ff:ff:
                    14:6a:24:e9:27:b2:b0:01:86:d1:0f:c2:ed:d6:91:
                    fa:55:18:ee:2f:74:cb:ab:3f:84:9d:ec:66:19:68:
                    6f:12:88:fb:70:0c:7e:2b:c9:83:c0:27:93:87:2d:
                    36:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:1E:8E:6E:41:DF:0D:CD:A1:EE:D8:9A:0D:3C:32:96:FA:EB:DE:3B
            X509v3 Authority Key Identifier:
                keyid:16:E9:AA:AC:E5:02:79:58:5B:5C:5A:5D:8E:E8:56:10:68:6C:26:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FumqrOUCeVhbXFpdjuhWEGhsJsA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e2df0e-7bfe-44a9-bf86-f9ef97420764/1/FumqrOUCeVhbXFpdjuhWEGhsJsA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e2df0e-7bfe-44a9-bf86-f9ef97420764/1/FumqrOUCeVhbXFpdjuhWEGhsJsA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:ea:50:6e:d9:5c:10:35:20:8a:bf:04:5d:b0:0d:be:47:e7:
         f6:df:d4:5e:a7:10:06:a7:a1:26:e6:89:f8:6c:c8:72:27:37:
         d7:33:13:73:2b:29:bf:0a:ed:bf:e6:48:f7:cb:40:b7:e6:6a:
         b3:08:76:ea:c5:60:26:39:11:30:e8:2a:4b:63:71:f1:3e:8b:
         e9:f9:8d:ea:00:5c:f6:4f:ea:fa:f4:15:33:4a:d5:e4:18:f0:
         fc:b9:d8:94:db:8f:2f:9d:8d:34:54:b9:d2:67:d0:f4:70:a8:
         e5:f1:b6:b4:26:d6:1a:23:a6:b5:90:4a:2b:57:5c:4b:3c:ec:
         88:a0:a8:d9:2b:25:ef:4c:7e:80:73:29:79:3b:e3:eb:52:19:
         0e:3d:c3:07:f1:af:5e:cb:3e:a4:8e:62:4a:f2:b2:88:a3:07:
         8f:3a:8c:d1:e6:e4:be:94:0c:59:b2:c8:04:8d:31:43:8f:86:
         16:50:46:a7:de:f3:e4:df:b5:fa:3e:43:4f:b0:62:a7:dc:90:
         e9:df:ba:59:08:e2:d6:38:ac:cb:7b:d2:73:0c:9c:c4:49:09:
         02:79:0f:ca:d3:f6:c3:17:72:67:2f:52:a2:20:a8:0d:d7:b2:
         c9:cc:d9:60:8e:dd:65:1e:16:d1:34:9c:16:9d:30:69:ca:d6:
         20:5b:51:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:32:53 2025 by rpki-client