Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/250423-fa91-4a22-b83a-83e47580b3ec/1/g4xPgQ16IKeDpPqxwDRGe4JQUbk.mft
File:                     g4xPgQ16IKeDpPqxwDRGe4JQUbk.mft (raw, json)
Hash identifier:          UQLwCwPV6+HYRcjJgJgqlnRPYW71LZHgxjn6CXS/NgY=
Subject key identifier:   06:B1:C2:5D:C3:65:5E:73:12:9B:2A:46:B6:23:58:90:0A:07:6C:AD
Authority key identifier: 83:8C:4F:81:0D:7A:20:A7:83:A4:FA:B1:C0:34:46:7B:82:50:51:B9
Certificate issuer:       /CN=838c4f810d7a20a783a4fab1c034467b825051b9
Certificate serial:       0199FAD7B416CCD7BF85C8956C5A11A7BB8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g4xPgQ16IKeDpPqxwDRGe4JQUbk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/250423-fa91-4a22-b83a-83e47580b3ec/1/g4xPgQ16IKeDpPqxwDRGe4JQUbk.mft
Manifest number:          16E0
Signing time:             Sun 19 Oct 2025 05:01:04 +0000
Manifest this update:     Sun 19 Oct 2025 05:01:04 +0000
Manifest next update:     Mon 20 Oct 2025 05:01:04 +0000
Files and hashes:         1: JRNBLXBQWgTuBg1-jZxrM7iYCuQ.roa (hash: A/80zWYF3RYk10mzwst52/4Qz1yzT35DfBM28lDeN+s=)
                          2: g4xPgQ16IKeDpPqxwDRGe4JQUbk.crl (hash: kJRTC6lBvb5Rjbu9/Is1QxVpyGZEcvBezNY7sRW2YEY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/250423-fa91-4a22-b83a-83e47580b3ec/1/g4xPgQ16IKeDpPqxwDRGe4JQUbk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/250423-fa91-4a22-b83a-83e47580b3ec/1/g4xPgQ16IKeDpPqxwDRGe4JQUbk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g4xPgQ16IKeDpPqxwDRGe4JQUbk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 05:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:d7:b4:16:cc:d7:bf:85:c8:95:6c:5a:11:a7:bb:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=838c4f810d7a20a783a4fab1c034467b825051b9
        Validity
            Not Before: Oct 19 05:01:04 2025 GMT
            Not After : Oct 20 05:01:04 2025 GMT
        Subject: CN=06b1c25dc3655e73129b2a46b62358900a076cad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:7e:29:1c:73:f7:72:54:cc:d3:fa:cb:7f:50:
                    4a:78:eb:f9:cb:da:20:f8:19:ae:00:c8:39:79:4b:
                    ea:66:ea:d5:74:29:f2:c6:c1:41:b9:c0:38:25:4b:
                    be:15:fc:71:f1:fc:33:0b:d9:67:1d:8d:57:b6:45:
                    6c:9b:97:ef:25:ab:e1:cb:e5:44:6e:ad:4a:ad:25:
                    13:05:ad:08:75:d6:96:af:ad:8e:04:ae:a0:93:cf:
                    19:9a:49:56:b2:f2:c3:e4:7f:78:7f:16:90:3e:aa:
                    cd:2a:d5:23:ca:eb:b7:f1:e6:48:f1:98:ac:2b:27:
                    35:a6:16:7c:ef:4f:24:f2:f2:1f:57:84:f7:12:52:
                    a4:a8:f3:f3:12:00:cf:92:fb:7f:8f:70:87:d7:c6:
                    07:dc:c0:eb:91:fc:cd:90:13:33:ad:29:da:cb:cc:
                    f2:e0:6d:9d:ad:58:1b:51:fa:0c:d7:46:97:22:8e:
                    06:91:0e:52:55:7c:0c:5b:01:69:78:14:a3:b5:92:
                    87:6c:c0:1e:4f:b1:b8:ca:d3:1e:c2:25:27:1b:2d:
                    19:1c:2c:40:8e:88:08:6a:47:9c:ab:11:a5:4b:71:
                    6c:b0:b2:db:56:b0:7c:a5:0d:71:9a:ae:cb:6d:a2:
                    f5:ce:90:20:fa:9e:26:31:41:c0:ec:ac:2e:34:9d:
                    ae:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:B1:C2:5D:C3:65:5E:73:12:9B:2A:46:B6:23:58:90:0A:07:6C:AD
            X509v3 Authority Key Identifier:
                keyid:83:8C:4F:81:0D:7A:20:A7:83:A4:FA:B1:C0:34:46:7B:82:50:51:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g4xPgQ16IKeDpPqxwDRGe4JQUbk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/250423-fa91-4a22-b83a-83e47580b3ec/1/g4xPgQ16IKeDpPqxwDRGe4JQUbk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/250423-fa91-4a22-b83a-83e47580b3ec/1/g4xPgQ16IKeDpPqxwDRGe4JQUbk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:93:7b:ec:83:0b:0e:02:51:22:e7:e3:2c:45:00:96:ef:21:
         0d:29:47:03:fc:87:51:ab:2c:bb:b1:39:67:6b:30:b6:0f:6a:
         4f:ea:1d:95:95:32:38:6d:e4:58:6a:20:11:29:00:1e:f4:53:
         4a:d0:6c:4f:f2:b7:9b:0a:46:e0:8d:8e:6d:59:f3:e2:06:df:
         db:92:43:84:9f:10:e5:b8:60:20:72:39:4c:04:ce:7b:7b:a1:
         c6:35:f3:81:8a:09:82:f8:f5:73:93:7c:1b:f3:b9:58:c6:8c:
         1b:eb:4a:b5:a1:1d:8b:50:d4:25:17:88:2e:bf:87:52:b6:c3:
         18:1f:d5:d3:1e:26:16:ab:34:a3:aa:eb:2e:36:00:84:c6:8e:
         13:d5:03:76:91:1d:7a:cb:c1:77:da:eb:6d:fa:88:98:46:ee:
         84:f6:66:8c:8c:01:13:64:3b:75:01:cf:2a:dd:f2:d1:56:d0:
         19:31:51:a1:40:33:67:ae:7b:59:d5:21:e0:0f:20:31:ac:7d:
         8b:3d:a9:93:1f:cc:53:92:71:ba:e0:58:51:5a:07:87:40:38:
         41:52:e3:64:0e:fe:f6:fa:11:33:1d:48:53:5a:d6:af:02:b8:
         66:79:69:94:e7:03:f3:90:da:c7:e0:be:9c:2e:e8:9c:b9:eb:
         da:f1:61:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:21:59 2025 by rpki-client