Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/_Laxe9Ll8UvTdaDA5p38d9lwL0o.mft
File:                     _Laxe9Ll8UvTdaDA5p38d9lwL0o.mft (raw, json)
Hash identifier:          qfNguccvd+0ZqSM/vG820SXCnCoXdEFWEbYdPLO2w/Q=
Subject key identifier:   72:00:BE:47:43:B9:E5:38:2F:A4:EA:FC:ED:A9:C0:53:5E:BD:5D:F8
Authority key identifier: FC:B6:B1:7B:D2:E5:F1:4B:D3:75:A0:C0:E6:9D:FC:77:D9:70:2F:4A
Certificate issuer:       /CN=fcb6b17bd2e5f14bd375a0c0e69dfc77d9702f4a
Certificate serial:       0199FC8F792178C2F2FDCCED156A1821F5F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_Laxe9Ll8UvTdaDA5p38d9lwL0o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/_Laxe9Ll8UvTdaDA5p38d9lwL0o.mft
Manifest number:          16E4
Signing time:             Sun 19 Oct 2025 13:01:24 +0000
Manifest this update:     Sun 19 Oct 2025 13:01:24 +0000
Manifest next update:     Mon 20 Oct 2025 13:01:24 +0000
Files and hashes:         1: 2Kbuhnz-qjWj_6C7taO8b5i9WUc.roa (hash: xkYUP8LGb2IQtLXiN3kttUneWx7+9bzhnl1hbIWGO78=)
                          2: GtNraMQppy3EFfJr2WpwYRpuyqw.roa (hash: ZOPCzFa3rkstS0Tm6mKcSn5upo7zWRj6OtOmolhU5Ck=)
                          3: LYJwh6ElqgRcMmDkROXUMdfnX08.roa (hash: 5CCy01/m/JVFdloiBPHwYEjVH4315VNuXsXpZ6kYkuc=)
                          4: _Laxe9Ll8UvTdaDA5p38d9lwL0o.crl (hash: wKH0ORf3O4oq1gzElfNBEfMT2QvmRwarcdbWetf9bXQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/_Laxe9Ll8UvTdaDA5p38d9lwL0o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/_Laxe9Ll8UvTdaDA5p38d9lwL0o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_Laxe9Ll8UvTdaDA5p38d9lwL0o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:8f:79:21:78:c2:f2:fd:cc:ed:15:6a:18:21:f5:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb6b17bd2e5f14bd375a0c0e69dfc77d9702f4a
        Validity
            Not Before: Oct 19 13:01:24 2025 GMT
            Not After : Oct 20 13:01:24 2025 GMT
        Subject: CN=7200be4743b9e5382fa4eafceda9c0535ebd5df8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b5:aa:4a:a8:42:14:36:d6:8c:01:69:41:37:
                    ad:26:30:9e:ad:e0:1d:d8:5d:46:7d:d1:91:bf:b4:
                    01:73:37:fa:9d:aa:07:b7:4b:b0:07:cb:bd:0e:25:
                    56:ec:6a:0b:5d:44:bb:f0:3b:79:d3:15:ed:89:4a:
                    19:23:78:00:66:25:a3:c0:83:cb:a5:d7:53:b0:6b:
                    70:21:9b:8e:95:7b:ea:61:fb:99:3c:ce:36:e8:4f:
                    60:fe:f3:71:3c:57:3b:87:36:3a:e9:a8:b9:bb:c1:
                    76:2e:a8:9a:be:5f:68:51:ae:15:87:26:e1:20:3a:
                    61:b8:94:dd:22:a2:33:bb:b1:1c:db:83:90:08:41:
                    9e:7b:1a:43:29:24:5c:48:19:cf:d4:5c:9c:e8:fe:
                    ce:2c:9f:c9:dd:db:19:2c:36:f7:da:ec:10:4d:fb:
                    1e:ad:49:46:58:a1:c9:1a:04:92:02:c7:6f:5c:f0:
                    08:13:68:89:40:dd:77:6c:b1:ac:c9:fb:de:b6:a0:
                    db:e4:f4:52:97:6f:1f:7c:94:0a:be:e0:60:70:75:
                    30:ab:70:d8:84:8a:c6:06:28:1b:db:e2:45:5f:91:
                    32:20:02:35:fa:12:8f:01:ce:c4:6d:46:7c:d9:9e:
                    66:40:e6:7e:b4:41:11:cf:62:1f:eb:dd:c6:0c:b0:
                    47:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:00:BE:47:43:B9:E5:38:2F:A4:EA:FC:ED:A9:C0:53:5E:BD:5D:F8
            X509v3 Authority Key Identifier:
                keyid:FC:B6:B1:7B:D2:E5:F1:4B:D3:75:A0:C0:E6:9D:FC:77:D9:70:2F:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Laxe9Ll8UvTdaDA5p38d9lwL0o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/_Laxe9Ll8UvTdaDA5p38d9lwL0o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/_Laxe9Ll8UvTdaDA5p38d9lwL0o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:93:40:94:d5:1f:a7:92:40:c0:19:8b:2f:85:97:55:a4:3a:
         d1:f1:a5:10:9a:bc:07:4a:6e:8d:bc:f3:fc:d1:dc:94:b4:95:
         f6:f8:c6:b0:f2:c3:5b:1d:8b:fd:03:f1:1d:4d:9f:36:37:34:
         86:4d:18:4d:1d:1e:b5:e0:4b:78:5e:74:ee:d6:8d:6d:b3:c0:
         4c:b1:18:5e:2d:a2:a2:eb:41:4b:bf:e9:c4:7f:cb:04:c2:90:
         24:d2:75:6c:02:1f:1c:d9:2c:d5:25:c6:12:3b:26:97:c9:e5:
         05:2a:a7:c7:fd:20:8b:2b:9c:ac:c4:b1:c1:1f:11:e4:96:13:
         4e:d5:d9:88:90:b2:6e:4e:d8:c4:01:d0:07:82:c6:4c:3f:73:
         2c:0e:c3:56:22:c7:4e:36:bf:22:db:0e:c9:05:74:c1:ee:e3:
         83:9b:ef:9c:02:fa:31:92:3b:8c:c7:17:b6:79:68:89:32:d2:
         2e:a0:14:f7:78:ea:13:39:ac:81:64:91:a6:90:65:65:11:73:
         ff:69:65:34:f7:55:5e:84:5d:73:ab:46:0c:ed:bf:58:1f:08:
         3d:97:ab:97:da:04:53:8d:18:12:bd:8f:89:fb:2d:82:16:3d:
         3c:95:3b:4e:02:d6:07:c1:67:3e:f1:ff:c2:b6:8a:16:ec:bf:
         62:74:6b:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:55:24 2025 by rpki-client