Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.mft
File:                     koAW21XmZLpyHhmumrQxbBDZZwg.mft (raw, json)
Hash identifier:          LwYNcE0DmUjQVKtEtrXkgDYVxMhJGKffo/oSI6ZbTNY=
Subject key identifier:   BD:A1:26:AD:ED:06:F9:33:81:F6:13:F0:7C:09:09:02:AC:5A:37:9D
Authority key identifier: 92:80:16:DB:55:E6:64:BA:72:1E:19:AE:9A:B4:31:6C:10:D9:67:08
Certificate issuer:       /CN=928016db55e664ba721e19ae9ab4316c10d96708
Certificate serial:       0199FA69D29FCDD47717656470367BF85435
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/koAW21XmZLpyHhmumrQxbBDZZwg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.mft
Manifest number:          16E3
Signing time:             Sun 19 Oct 2025 03:01:03 +0000
Manifest this update:     Sun 19 Oct 2025 03:01:03 +0000
Manifest next update:     Mon 20 Oct 2025 03:01:03 +0000
Files and hashes:         1: koAW21XmZLpyHhmumrQxbBDZZwg.crl (hash: LbkgzmupxjPGMTgoIFa8x3wTUHFS/HRBhJF8IhZwgHU=)
                          2: wzuPiDmhnP7Nv_Dp2QI7h5h3O-g.roa (hash: 1/0ldOLBPILSR69hThfIMtpZUKnlBM4vs1kLEHBC5Mw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/koAW21XmZLpyHhmumrQxbBDZZwg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 03:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:69:d2:9f:cd:d4:77:17:65:64:70:36:7b:f8:54:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=928016db55e664ba721e19ae9ab4316c10d96708
        Validity
            Not Before: Oct 19 03:01:03 2025 GMT
            Not After : Oct 20 03:01:03 2025 GMT
        Subject: CN=bda126aded06f93381f613f07c090902ac5a379d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:6d:34:ca:10:ce:54:53:42:9b:84:1d:00:50:
                    03:0f:68:af:8a:dc:43:7e:00:a3:38:16:0b:24:75:
                    51:5f:af:de:36:8a:e4:22:3c:a9:d9:2d:d2:89:ca:
                    9f:cc:63:d2:93:17:0e:75:ec:b8:14:1f:d1:ce:cd:
                    b4:a0:f6:17:e8:5c:a9:9a:7c:2e:f2:d5:1c:a9:54:
                    16:3c:a3:77:78:5a:2f:68:e2:52:b6:07:67:96:5f:
                    53:ee:32:2f:f9:94:6e:f4:ad:16:cf:30:c2:e9:ce:
                    f8:68:68:d9:89:26:ad:65:30:d1:b7:4f:21:bc:ca:
                    c6:82:a3:25:52:74:0d:4e:14:66:8f:e7:ca:7e:3b:
                    75:4b:f0:e6:16:82:d0:8c:c4:91:c1:5f:c1:96:be:
                    4d:cc:9b:33:b1:8f:65:58:7c:a1:ba:f2:9d:d7:3a:
                    04:01:87:24:c8:3e:ac:55:0b:fc:13:fa:25:06:db:
                    56:b9:3a:1f:5d:18:78:10:02:56:33:6f:de:06:31:
                    b5:9a:0c:62:36:3f:f2:a4:cc:92:89:05:46:7e:59:
                    ad:53:a8:e7:29:1d:fe:3a:06:27:26:1f:df:3d:1e:
                    c2:d6:74:12:20:dc:80:a1:ce:50:a8:bc:d6:18:34:
                    de:41:13:63:5b:c0:a2:a5:e5:37:bd:74:a6:d1:75:
                    a8:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:A1:26:AD:ED:06:F9:33:81:F6:13:F0:7C:09:09:02:AC:5A:37:9D
            X509v3 Authority Key Identifier:
                keyid:92:80:16:DB:55:E6:64:BA:72:1E:19:AE:9A:B4:31:6C:10:D9:67:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/koAW21XmZLpyHhmumrQxbBDZZwg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:63:6d:7d:be:b9:99:81:7f:5d:ab:4e:71:01:fd:07:5b:30:
         88:6e:bd:b0:b5:4a:8a:8a:14:d6:5e:22:b3:d7:64:a7:58:6b:
         c3:86:66:eb:35:d7:43:4e:e4:4f:55:c5:6e:74:35:24:c3:7c:
         4d:b6:c6:c4:0e:56:61:e4:51:c4:4c:65:34:91:45:83:5c:44:
         ac:68:9e:dc:bf:52:7e:8b:98:f1:84:9b:a3:16:65:c5:29:52:
         b7:d7:6a:12:5f:e6:c0:00:31:3c:48:09:a6:0b:8d:a8:90:ae:
         5f:92:75:6e:75:0e:48:a8:98:14:ac:19:ed:81:a6:50:be:74:
         cb:43:80:05:2b:16:b7:99:e2:80:7e:07:4c:b5:b6:3d:c2:08:
         d2:8e:e5:28:1c:10:35:b5:94:15:0d:b8:c2:82:bb:7b:4d:7f:
         cc:96:85:c6:14:26:d3:51:bb:eb:fa:ab:c9:ae:04:8b:06:82:
         32:be:96:6a:92:4e:80:78:5a:83:1a:ac:16:97:e8:7b:79:e5:
         14:32:c4:56:59:1f:03:ca:b5:33:7e:b3:1b:e4:25:e3:d0:29:
         23:08:fa:22:b2:37:53:c7:bc:9b:7d:a4:03:a7:fd:8a:f9:aa:
         51:60:9f:5f:6b:e3:18:df:55:2d:83:ea:7c:c5:3c:38:76:33:
         45:ce:7b:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:06:36 2025 by rpki-client