Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/f7453d-96ec-4d4e-9f3e-0e8bc8e812ee/1/cZLyKnioBxsCo2Ko2zPo8_ct00g.mft
File:                     cZLyKnioBxsCo2Ko2zPo8_ct00g.mft (raw, json)
Hash identifier:          mT7+CdQBR42snuE+JRkujQwBRZPT+QK8w2pT5H+DOC0=
Subject key identifier:   83:EC:F6:6B:64:48:27:BF:56:DC:CC:EC:92:B9:54:A7:2C:93:4E:CF
Authority key identifier: 71:92:F2:2A:78:A8:07:1B:02:A3:62:A8:DB:33:E8:F3:F7:2D:D3:48
Certificate issuer:       /CN=7192f22a78a8071b02a362a8db33e8f3f72dd348
Certificate serial:       0199FE105A69CDB871FE382A089EF1335F7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cZLyKnioBxsCo2Ko2zPo8_ct00g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/f7453d-96ec-4d4e-9f3e-0e8bc8e812ee/1/cZLyKnioBxsCo2Ko2zPo8_ct00g.mft
Manifest number:          16E1
Signing time:             Sun 19 Oct 2025 20:01:48 +0000
Manifest this update:     Sun 19 Oct 2025 20:01:48 +0000
Manifest next update:     Mon 20 Oct 2025 20:01:48 +0000
Files and hashes:         1: cZLyKnioBxsCo2Ko2zPo8_ct00g.crl (hash: TkLY3CxfYl6JovgO+jnHovYgsNRKKHQPMamxfPrdy+0=)
                          2: iySxd4tMbCEPkoMPKxUDu_5FR6M.roa (hash: aI0T28ewsgkic6wSWjP7Zq6jLamL49Y0wJiPkH5nxZQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/f7453d-96ec-4d4e-9f3e-0e8bc8e812ee/1/cZLyKnioBxsCo2Ko2zPo8_ct00g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/f7453d-96ec-4d4e-9f3e-0e8bc8e812ee/1/cZLyKnioBxsCo2Ko2zPo8_ct00g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cZLyKnioBxsCo2Ko2zPo8_ct00g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:10:5a:69:cd:b8:71:fe:38:2a:08:9e:f1:33:5f:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7192f22a78a8071b02a362a8db33e8f3f72dd348
        Validity
            Not Before: Oct 19 20:01:48 2025 GMT
            Not After : Oct 20 20:01:48 2025 GMT
        Subject: CN=83ecf66b644827bf56dcccec92b954a72c934ecf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:90:3e:06:6c:8e:b0:d3:1e:ba:77:c7:90:45:
                    30:12:b4:a8:78:23:3b:44:66:e0:c6:fe:da:4f:bb:
                    b6:c3:72:d5:fa:f8:10:4b:9e:12:48:a4:88:5c:60:
                    e1:84:19:be:08:39:34:28:d1:03:66:3b:b4:71:7f:
                    fb:ee:1a:09:9c:2e:d9:b6:41:27:39:93:c2:64:e9:
                    2d:75:1b:5e:1a:dd:80:07:60:18:42:40:86:da:12:
                    6e:fc:28:41:2c:48:7c:53:82:cd:3c:0a:8c:49:d4:
                    53:ae:3f:ad:ae:17:3c:e3:3e:d2:6b:2e:56:33:ef:
                    f3:5d:24:d5:c8:13:e7:19:83:85:29:b1:7a:78:ca:
                    fc:31:39:6a:98:89:75:7b:0c:fc:68:82:72:df:93:
                    7e:41:ea:d4:6c:72:18:f8:7a:5d:da:0f:3b:3d:62:
                    34:47:8e:dd:0c:9b:41:9e:3c:cd:e0:cd:4d:cb:bc:
                    a9:a4:ce:5e:bd:d2:65:32:ab:49:14:85:3d:dd:02:
                    e9:a1:a9:52:78:ae:c2:61:1c:18:11:cf:f3:b1:d7:
                    8f:3f:e4:b9:1a:95:23:33:66:45:ca:8d:c7:72:2c:
                    04:a6:c8:da:81:8c:7b:1b:0c:58:80:91:04:13:66:
                    11:d5:bd:72:33:e3:13:c4:0c:70:a2:e6:1f:9c:52:
                    c2:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:EC:F6:6B:64:48:27:BF:56:DC:CC:EC:92:B9:54:A7:2C:93:4E:CF
            X509v3 Authority Key Identifier:
                keyid:71:92:F2:2A:78:A8:07:1B:02:A3:62:A8:DB:33:E8:F3:F7:2D:D3:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cZLyKnioBxsCo2Ko2zPo8_ct00g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f7453d-96ec-4d4e-9f3e-0e8bc8e812ee/1/cZLyKnioBxsCo2Ko2zPo8_ct00g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f7453d-96ec-4d4e-9f3e-0e8bc8e812ee/1/cZLyKnioBxsCo2Ko2zPo8_ct00g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:47:91:47:c0:c3:e6:a6:2f:4c:33:2e:d9:53:84:bc:d9:c4:
         f1:04:a1:2c:fd:86:25:46:a2:c2:05:6d:a4:7f:48:12:6b:06:
         98:c3:5c:45:9b:7f:9d:e9:d9:3e:06:a9:6b:3c:7f:cb:dc:2d:
         26:70:7f:50:b1:b9:45:5b:a5:5a:7a:c3:6b:2f:b4:68:98:7b:
         05:dc:db:b9:92:01:8b:81:4f:73:21:78:64:65:72:f2:c0:0b:
         49:a6:2c:01:47:8e:91:2f:48:e1:b0:54:62:38:63:c5:10:f9:
         7c:ea:24:f6:45:d9:7b:07:8c:20:e8:df:dd:1d:96:fb:4b:9f:
         de:4f:cc:42:cb:86:73:30:17:2d:6e:52:37:36:00:39:3d:06:
         7a:ff:a0:4f:95:90:3b:91:62:8f:4b:f0:bd:54:a6:66:e0:85:
         17:4a:37:b7:87:05:c1:f4:25:2f:14:46:4c:74:49:b4:ad:b4:
         6f:77:6c:4c:dd:f1:84:7a:86:a4:a8:4d:bc:64:02:a5:55:f3:
         4b:0d:28:bc:bb:ae:79:7d:eb:fa:4b:4c:8a:19:ac:26:d8:b0:
         c4:18:ac:23:dd:94:64:d2:16:23:2a:99:e9:af:d4:e4:17:91:
         1c:34:0e:65:94:d0:51:82:79:9b:2d:c0:8f:5d:51:fd:dc:2d:
         49:ce:c5:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:30:25 2025 by rpki-client