Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/3e9e3e-9416-42c8-a35d-6f4f031eeae2/1/rLICUNTN02Zxm5adb0EjAcE-uQE.mft
File:                     rLICUNTN02Zxm5adb0EjAcE-uQE.mft (raw, json)
Hash identifier:          euLfz9m9YylFpIOSVCmx0YCNJXtZdi6oV/lN4IPy7FI=
Subject key identifier:   E5:0B:83:C0:30:2F:47:A7:1A:24:86:15:FC:C7:53:46:E7:24:60:79
Authority key identifier: AC:B2:02:50:D4:CD:D3:66:71:9B:96:9D:6F:41:23:01:C1:3E:B9:01
Certificate issuer:       /CN=acb20250d4cdd366719b969d6f412301c13eb901
Certificate serial:       0199FBEBB376455CECB7D670AF6D1706FB27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rLICUNTN02Zxm5adb0EjAcE-uQE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/3e9e3e-9416-42c8-a35d-6f4f031eeae2/1/rLICUNTN02Zxm5adb0EjAcE-uQE.mft
Manifest number:          16DF
Signing time:             Sun 19 Oct 2025 10:02:32 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:32 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:32 +0000
Files and hashes:         1: 5n7dgIWemJ_305TpiU3O_0-YbeA.roa (hash: LdWHm24O7+fxQTfSmSb6FS6jzu11KxxrVzOXyxJmUuE=)
                          2: rLICUNTN02Zxm5adb0EjAcE-uQE.crl (hash: JsWZ5e2kdtVFcGVJIutYZAa+bBMk1UUGqIPI7EovaGs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/3e9e3e-9416-42c8-a35d-6f4f031eeae2/1/rLICUNTN02Zxm5adb0EjAcE-uQE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/3e9e3e-9416-42c8-a35d-6f4f031eeae2/1/rLICUNTN02Zxm5adb0EjAcE-uQE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rLICUNTN02Zxm5adb0EjAcE-uQE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:b3:76:45:5c:ec:b7:d6:70:af:6d:17:06:fb:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acb20250d4cdd366719b969d6f412301c13eb901
        Validity
            Not Before: Oct 19 10:02:32 2025 GMT
            Not After : Oct 20 10:02:32 2025 GMT
        Subject: CN=e50b83c0302f47a71a248615fcc75346e7246079
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:68:22:10:54:1d:90:a8:67:d1:23:69:39:a9:
                    5c:5b:40:21:70:82:83:2d:f8:4d:5c:e8:aa:56:53:
                    6a:87:25:9f:dc:f7:03:7d:70:f9:bc:6b:7b:75:7d:
                    5f:39:e4:0b:a0:21:94:49:c1:cf:7c:65:05:1d:93:
                    a3:4f:e6:a5:f4:e4:ab:3a:b2:6d:6e:47:84:f2:69:
                    08:48:79:27:13:e1:09:35:47:e7:5f:25:be:85:b4:
                    d1:12:47:9b:d1:d9:5a:1b:ee:59:d4:30:5c:8d:9f:
                    a1:83:24:86:52:39:56:b0:6b:6d:1c:d7:f1:d8:24:
                    46:7c:1a:3c:a1:ef:09:86:be:d0:4a:cf:9b:46:5f:
                    2b:a2:fb:5a:61:61:32:ff:7e:52:fd:2b:cd:2b:c9:
                    36:0b:2e:c5:68:e9:fa:71:c5:9c:98:7c:fd:ca:65:
                    c3:72:b8:6c:b1:91:8d:58:d9:29:92:e8:aa:72:61:
                    64:6c:38:c3:bc:31:b6:e6:2e:3b:87:5b:a1:ef:17:
                    a9:d5:9d:6c:8b:b2:b2:f0:5d:ba:4b:37:b1:02:d5:
                    d4:5f:51:7b:c1:63:f1:f7:5f:c7:36:d4:1e:43:0d:
                    46:e6:35:22:ed:22:23:20:2e:33:18:b7:4d:00:e8:
                    3b:66:8c:9e:82:ee:b9:e9:a2:b4:0e:49:cf:e2:67:
                    e5:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:0B:83:C0:30:2F:47:A7:1A:24:86:15:FC:C7:53:46:E7:24:60:79
            X509v3 Authority Key Identifier:
                keyid:AC:B2:02:50:D4:CD:D3:66:71:9B:96:9D:6F:41:23:01:C1:3E:B9:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rLICUNTN02Zxm5adb0EjAcE-uQE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/3e9e3e-9416-42c8-a35d-6f4f031eeae2/1/rLICUNTN02Zxm5adb0EjAcE-uQE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/3e9e3e-9416-42c8-a35d-6f4f031eeae2/1/rLICUNTN02Zxm5adb0EjAcE-uQE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:a8:0f:02:ba:b8:22:34:03:21:2b:d8:2b:c8:d4:61:6a:a8:
         4f:7d:ac:ba:eb:15:20:6f:41:eb:ce:70:89:83:e8:8a:ba:01:
         79:ce:5f:bf:1f:0c:30:5c:c9:6d:1b:59:66:46:70:63:df:b6:
         55:12:79:89:b6:30:94:83:8f:f4:2c:52:9b:ef:23:e9:81:ad:
         b0:6b:3f:2b:f3:0d:ad:33:93:cb:86:e6:79:59:6a:b9:66:96:
         13:28:a5:e4:7e:fa:dc:f0:c0:65:e1:f8:e3:e8:78:1b:c2:63:
         9a:33:b1:55:55:c9:35:39:24:77:1d:0b:38:a9:71:13:cb:b7:
         2a:ee:cb:18:ea:c4:a6:75:23:48:f0:5b:f1:d0:40:79:14:93:
         8f:b0:be:79:23:5a:d1:b4:82:5f:f0:2c:fe:13:77:35:a3:eb:
         2d:dc:5d:36:88:14:c0:81:88:b2:fc:b0:6c:57:02:b5:2f:14:
         b6:43:3b:44:dc:3d:6d:52:4a:1d:03:e3:f4:53:89:e4:72:9f:
         84:26:e6:04:83:16:0e:94:a7:d0:11:e9:5a:ac:99:de:bb:fe:
         b4:36:27:ab:4f:c0:81:04:28:de:54:b4:de:90:04:ae:99:b8:
         34:a5:e9:b3:42:5d:ff:ec:f4:ce:ee:a3:c5:7a:0d:d4:b5:cd:
         59:d4:2b:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:28:12 2025 by rpki-client