Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/T5nk6uSKAceB-q0R9tgakeozvf8.mft
File:                     T5nk6uSKAceB-q0R9tgakeozvf8.mft (raw, json)
Hash identifier:          /XL4Ne0JiYwPEtdlsHxwJZ/UZQHIe8IuNF5odglEl5w=
Subject key identifier:   BD:80:9E:1A:97:00:54:91:08:75:5F:64:1A:7C:68:6E:06:BC:B6:6F
Authority key identifier: 4F:99:E4:EA:E4:8A:01:C7:81:FA:AD:11:F6:D8:1A:91:EA:33:BD:FF
Certificate issuer:       /CN=4f99e4eae48a01c781faad11f6d81a91ea33bdff
Certificate serial:       0199FDD8AFDBFEFF8A2E055200B1A16A7F50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T5nk6uSKAceB-q0R9tgakeozvf8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/T5nk6uSKAceB-q0R9tgakeozvf8.mft
Manifest number:          16E9
Signing time:             Sun 19 Oct 2025 19:01:00 +0000
Manifest this update:     Sun 19 Oct 2025 19:01:00 +0000
Manifest next update:     Mon 20 Oct 2025 19:01:00 +0000
Files and hashes:         1: 1rrQNZWItDgfdECFOf22Jh7vi4k.roa (hash: oHl9vepG9gEfJ6vCHFkAvnbQr+mxDKJlGHdGdAeE9CA=)
                          2: 3RF21_ECpL5M_wnxKo1LaLxJwIk.roa (hash: DwVXHnFiU49l5hw1O5O7YFwPLdE2x6EWi17vCjDfMV4=)
                          3: OfliSFK47yOA2Tkix0wrkAH4x2c.roa (hash: B0Voqn9uU+7JqaJFZrNcBBKpjX2nZFFKEZ39gYCt+es=)
                          4: T5nk6uSKAceB-q0R9tgakeozvf8.crl (hash: w3HMpMXqFGcgRpqD1I4X5T3PUK4OmMA7SH8M6M0gPQ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/T5nk6uSKAceB-q0R9tgakeozvf8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/T5nk6uSKAceB-q0R9tgakeozvf8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T5nk6uSKAceB-q0R9tgakeozvf8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:d8:af:db:fe:ff:8a:2e:05:52:00:b1:a1:6a:7f:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f99e4eae48a01c781faad11f6d81a91ea33bdff
        Validity
            Not Before: Oct 19 19:01:00 2025 GMT
            Not After : Oct 20 19:01:00 2025 GMT
        Subject: CN=bd809e1a9700549108755f641a7c686e06bcb66f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d6:da:5e:60:3b:fb:ff:c2:38:49:b4:5a:8d:
                    fe:43:8d:b7:65:1b:a9:cf:d5:65:8b:62:b5:e6:bc:
                    58:97:3c:d3:a0:93:bb:6d:02:66:35:ca:99:ea:d8:
                    b7:f2:3d:b4:b0:6f:f3:71:99:87:3a:9f:e1:7f:1f:
                    6a:30:08:ee:b0:15:00:d1:01:4a:ef:a0:37:14:a6:
                    3c:5e:f7:89:84:79:dc:37:69:c0:0e:dd:b0:a8:93:
                    c4:9d:bb:a6:d2:79:fc:85:40:7c:5a:20:1b:13:6f:
                    a1:31:f1:83:a0:b5:ee:31:5f:4e:d4:86:a0:19:6e:
                    ed:f0:8c:b0:bb:fc:10:e4:a0:96:c5:d2:63:b7:1f:
                    52:c4:52:e3:72:9f:a9:04:12:f8:d1:99:cd:61:4d:
                    f5:1d:a0:48:15:5d:17:b2:5a:66:09:dc:fd:08:40:
                    8c:e6:e2:4f:9f:0f:95:02:c4:e9:ed:65:f7:08:7f:
                    7d:97:7f:10:b9:9f:81:4e:03:6a:7b:e6:e6:a8:25:
                    cd:c5:93:cc:e0:fc:57:ec:bd:93:f0:8c:57:09:b5:
                    ca:2c:83:19:ff:d3:64:1f:90:4f:2f:cf:8f:ac:53:
                    81:46:79:08:f8:de:36:00:4b:b6:ee:26:b5:c3:d8:
                    07:b8:77:2b:1a:bc:c0:2f:51:76:e5:90:a2:89:19:
                    6e:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:80:9E:1A:97:00:54:91:08:75:5F:64:1A:7C:68:6E:06:BC:B6:6F
            X509v3 Authority Key Identifier:
                keyid:4F:99:E4:EA:E4:8A:01:C7:81:FA:AD:11:F6:D8:1A:91:EA:33:BD:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5nk6uSKAceB-q0R9tgakeozvf8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/T5nk6uSKAceB-q0R9tgakeozvf8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/T5nk6uSKAceB-q0R9tgakeozvf8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:ba:ee:07:be:32:1c:14:d5:70:d9:fb:cf:95:43:55:b8:61:
         17:d5:5c:c7:a1:79:09:04:72:48:e5:d0:80:2b:79:83:20:cd:
         ca:69:f7:52:0e:0a:dc:be:77:65:45:38:96:bb:ea:b1:a7:9e:
         75:fa:f0:07:ca:67:86:0d:f8:e4:1b:c5:e5:3b:e6:a2:30:aa:
         cf:42:71:bc:5f:17:b6:21:5e:d1:f0:b2:4f:9b:bf:65:c1:29:
         55:e8:29:4e:a0:f2:34:37:e2:20:f7:9c:3d:c5:e3:ea:08:93:
         cc:fe:e6:94:93:b4:90:44:49:44:f2:6f:af:57:62:25:35:9c:
         05:b7:37:d8:75:36:3d:b0:16:b1:8a:7d:1d:ff:f7:1f:4e:bd:
         c4:c9:cf:b7:b8:d1:c1:80:fb:18:47:d2:55:85:57:c9:bf:fa:
         45:3b:aa:c2:15:0b:1b:9d:d3:55:7d:6c:63:74:e3:fe:5c:3d:
         f9:f1:0a:63:f8:27:c9:56:72:1f:46:cb:31:44:40:62:42:d8:
         a9:cd:02:4a:13:ac:cb:9e:9d:ba:72:d7:a8:88:bc:06:96:50:
         20:33:01:e5:9e:13:ad:a2:db:af:93:fb:0a:e7:08:86:de:a1:
         a4:45:26:27:e3:0a:51:6f:57:7e:37:2f:38:e4:22:46:33:48:
         b7:87:ac:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:00:11 2025 by rpki-client