Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/aa4c3d-f272-47f6-a9cf-84a233369386/1/L6jmV-6uB4PaFKPaLKdN3sFd0wg.mft
File:                     L6jmV-6uB4PaFKPaLKdN3sFd0wg.mft (raw, json)
Hash identifier:          1zKzVCPAaYHyYX74LJ30gd4HQXkHPqIcGz+nJISNfFg=
Subject key identifier:   59:97:CA:F7:EF:1F:7F:D1:6B:F9:79:A9:22:26:5A:0A:61:4F:20:6E
Authority key identifier: 2F:A8:E6:57:EE:AE:07:83:DA:14:A3:DA:2C:A7:4D:DE:C1:5D:D3:08
Certificate issuer:       /CN=2fa8e657eeae0783da14a3da2ca74ddec15dd308
Certificate serial:       0199FE104A40A32CA3C0EC29EFD94D928CE6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L6jmV-6uB4PaFKPaLKdN3sFd0wg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/aa4c3d-f272-47f6-a9cf-84a233369386/1/L6jmV-6uB4PaFKPaLKdN3sFd0wg.mft
Manifest number:          16E3
Signing time:             Sun 19 Oct 2025 20:01:44 +0000
Manifest this update:     Sun 19 Oct 2025 20:01:44 +0000
Manifest next update:     Mon 20 Oct 2025 20:01:44 +0000
Files and hashes:         1: L6jmV-6uB4PaFKPaLKdN3sFd0wg.crl (hash: TCcmPVIjAdg4PcK5QOV9fp7aOXQr0XxCOsquZx+FcsI=)
                          2: O4pL8bOkm7k8Dc5goVDu8nvKS30.roa (hash: gSjW+R9kyQFRuzzqYc+aNmr8UDNGwt1WHFY4+D72xpk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/aa4c3d-f272-47f6-a9cf-84a233369386/1/L6jmV-6uB4PaFKPaLKdN3sFd0wg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/aa4c3d-f272-47f6-a9cf-84a233369386/1/L6jmV-6uB4PaFKPaLKdN3sFd0wg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L6jmV-6uB4PaFKPaLKdN3sFd0wg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:10:4a:40:a3:2c:a3:c0:ec:29:ef:d9:4d:92:8c:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fa8e657eeae0783da14a3da2ca74ddec15dd308
        Validity
            Not Before: Oct 19 20:01:44 2025 GMT
            Not After : Oct 20 20:01:44 2025 GMT
        Subject: CN=5997caf7ef1f7fd16bf979a922265a0a614f206e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:7b:1a:14:44:72:4d:79:fb:29:ab:23:48:56:
                    ea:2f:fd:89:01:54:45:ef:0e:8c:6e:c9:92:30:1a:
                    ab:a2:48:9b:f9:32:25:7d:98:ae:3e:cb:94:48:46:
                    09:7c:a7:8a:7d:66:fb:d6:11:17:01:a6:bc:4a:47:
                    b2:fb:04:4a:65:cf:a2:e0:26:64:f0:b0:b4:ae:23:
                    f9:03:7e:81:ed:3a:5e:6f:d9:eb:c6:5c:f9:21:e0:
                    46:e6:54:63:de:fb:cd:fb:46:8d:78:e0:40:2b:c0:
                    ea:45:c5:1b:df:2f:a0:b6:73:72:f3:2c:5a:91:35:
                    df:63:1a:76:95:b0:c6:6b:fc:21:4d:8d:f0:0e:90:
                    02:be:b3:20:8a:27:5f:a4:bb:73:c5:84:68:86:6d:
                    75:f8:d8:bd:f9:d5:24:6b:bc:c3:d4:b7:64:9f:e1:
                    dc:5c:50:0e:52:b0:d3:79:71:07:83:d4:4a:89:35:
                    ae:f7:0a:7e:9f:32:54:c5:63:97:b6:69:34:aa:4e:
                    24:a0:82:9d:e0:da:52:c4:3c:11:f9:fb:08:ad:bb:
                    ad:e3:6e:8e:72:5d:89:6e:97:7c:ca:14:fa:d8:d6:
                    9a:66:9f:c6:ec:1d:f4:cf:d1:ee:0c:a7:8e:9e:09:
                    4b:3a:ac:dd:ec:2d:bb:cc:a9:a4:3b:a6:99:ec:9a:
                    aa:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:97:CA:F7:EF:1F:7F:D1:6B:F9:79:A9:22:26:5A:0A:61:4F:20:6E
            X509v3 Authority Key Identifier:
                keyid:2F:A8:E6:57:EE:AE:07:83:DA:14:A3:DA:2C:A7:4D:DE:C1:5D:D3:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6jmV-6uB4PaFKPaLKdN3sFd0wg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/aa4c3d-f272-47f6-a9cf-84a233369386/1/L6jmV-6uB4PaFKPaLKdN3sFd0wg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/aa4c3d-f272-47f6-a9cf-84a233369386/1/L6jmV-6uB4PaFKPaLKdN3sFd0wg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:f6:ac:b9:d7:cd:51:3c:73:ff:82:c6:bc:54:9a:d2:90:d7:
         7b:45:90:aa:bc:74:4b:23:ea:4f:23:76:a9:fa:dc:08:43:fb:
         60:fb:15:9b:54:91:3d:ed:70:d3:1b:16:56:7f:5a:d2:87:5a:
         46:82:f0:29:65:0d:13:41:74:e0:6b:81:d4:26:0a:42:2e:12:
         2c:ba:38:b3:92:61:c4:6d:d1:a0:b9:85:be:ce:9f:64:aa:5a:
         e3:ad:6e:38:bd:c8:8a:ec:52:71:90:77:7f:22:6f:23:0f:21:
         61:4f:91:db:6d:7e:5f:58:cd:65:ad:97:56:9a:08:ea:1d:b6:
         b2:25:01:01:0c:d2:0d:eb:0d:f9:8d:d3:17:2b:b6:ec:ec:95:
         22:50:92:ac:45:81:9c:de:db:27:d1:de:ec:d0:f6:7a:1f:f4:
         25:a6:71:01:b4:22:26:2f:7d:97:0b:50:d2:7e:1d:63:13:e1:
         d3:74:7e:c6:80:80:fc:8b:20:a1:de:d2:fe:d6:43:a3:2e:13:
         3f:7e:42:5d:09:d2:c6:a0:ac:a0:52:cd:66:ff:56:68:40:40:
         db:99:52:22:43:71:7c:84:fc:b8:7d:55:7a:4d:a2:50:7a:30:
         db:e2:eb:f6:37:71:46:f0:71:bc:7e:18:13:a2:e7:01:fa:c8:
         48:81:e3:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:22:04 2025 by rpki-client