Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/4xq6PC9WKDzlx0vOQFhEwVkbq_w.mft
File:                     4xq6PC9WKDzlx0vOQFhEwVkbq_w.mft (raw, json)
Hash identifier:          gbffsf7xfu0pMfsm9ApcIX7ct1JG0NedjH7ACoroLrY=
Subject key identifier:   51:39:A4:81:79:F9:2F:FA:1F:A8:EA:D9:3D:CC:D2:D1:05:A1:1F:F2
Authority key identifier: E3:1A:BA:3C:2F:56:28:3C:E5:C7:4B:CE:40:58:44:C1:59:1B:AB:FC
Certificate issuer:       /CN=e31aba3c2f56283ce5c74bce405844c1591babfc
Certificate serial:       0199FB7C79CA86019612A60FA1FB7A4F4184
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4xq6PC9WKDzlx0vOQFhEwVkbq_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/4xq6PC9WKDzlx0vOQFhEwVkbq_w.mft
Manifest number:          16E0
Signing time:             Sun 19 Oct 2025 08:01:02 +0000
Manifest this update:     Sun 19 Oct 2025 08:01:02 +0000
Manifest next update:     Mon 20 Oct 2025 08:01:02 +0000
Files and hashes:         1: 4xq6PC9WKDzlx0vOQFhEwVkbq_w.crl (hash: 9HhVlv3ccyOcR5vHw8WmAfZxePjrrvtqfElPaK8UWO8=)
                          2: PmKzLROtlSNpGVP9Gabn59_vPcQ.roa (hash: 4+SnbeNGMFNkaQG14haNRuuikDneIrgDVYY+Z1QI1eI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/4xq6PC9WKDzlx0vOQFhEwVkbq_w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/4xq6PC9WKDzlx0vOQFhEwVkbq_w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4xq6PC9WKDzlx0vOQFhEwVkbq_w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:7c:79:ca:86:01:96:12:a6:0f:a1:fb:7a:4f:41:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e31aba3c2f56283ce5c74bce405844c1591babfc
        Validity
            Not Before: Oct 19 08:01:02 2025 GMT
            Not After : Oct 20 08:01:02 2025 GMT
        Subject: CN=5139a48179f92ffa1fa8ead93dccd2d105a11ff2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:50:1e:0d:74:4f:c7:b2:e8:05:e3:12:56:a3:
                    41:13:bc:36:1e:db:9e:4a:35:9d:c7:73:9b:a8:df:
                    3d:d1:8a:a7:b7:42:40:73:10:8f:07:2c:b6:44:f1:
                    90:79:c1:0e:02:26:7c:7f:cf:0f:19:6a:00:78:91:
                    6f:dd:ea:f9:16:4f:d4:10:58:03:1f:27:f9:a0:6f:
                    08:49:dc:fb:f0:b6:b7:92:0b:b2:82:a2:f1:05:3e:
                    2c:2d:c3:64:2f:45:76:3a:33:a3:45:52:b0:04:7c:
                    1f:7b:30:aa:43:3d:73:24:69:7a:0c:38:98:f8:70:
                    6f:ab:ee:48:2c:d8:0c:e3:fc:60:2d:79:1f:80:c5:
                    7a:e2:0f:44:3a:fb:e6:c6:62:8f:9d:b7:10:05:df:
                    7a:22:ff:30:83:83:a8:91:f1:85:32:06:3a:ee:c8:
                    12:3e:d2:b8:f6:a2:5c:ad:b2:a0:3c:a3:e6:f3:2d:
                    78:f2:ba:90:d0:f6:cd:19:28:55:6f:6a:bd:7c:0c:
                    5b:3f:0f:5d:a2:fd:fa:e9:6b:f6:cf:94:cc:68:b7:
                    0b:a2:51:bb:a1:68:e7:82:7d:d4:25:8f:cb:b9:7d:
                    eb:08:5a:fd:ba:c2:45:9c:cd:6c:2d:8f:87:b7:8f:
                    6a:e4:18:44:73:59:c5:a1:c0:da:2e:2e:bf:c1:7a:
                    10:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:39:A4:81:79:F9:2F:FA:1F:A8:EA:D9:3D:CC:D2:D1:05:A1:1F:F2
            X509v3 Authority Key Identifier:
                keyid:E3:1A:BA:3C:2F:56:28:3C:E5:C7:4B:CE:40:58:44:C1:59:1B:AB:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xq6PC9WKDzlx0vOQFhEwVkbq_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/4xq6PC9WKDzlx0vOQFhEwVkbq_w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/4xq6PC9WKDzlx0vOQFhEwVkbq_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:89:74:fd:47:b9:db:34:7e:7b:44:f7:83:7b:a5:20:b4:9e:
         48:8c:15:98:8a:7d:3c:e1:6f:c2:fc:fc:a5:b8:42:98:37:f8:
         67:c7:06:27:1e:7b:9e:72:f1:5a:1e:7b:5a:5c:e6:1d:64:a9:
         48:76:1d:b7:11:48:3d:7e:50:9d:3b:ac:42:de:84:f0:ce:89:
         47:87:bf:31:99:14:1f:b6:60:e1:9d:09:aa:26:4b:ff:2e:3d:
         02:c8:eb:dd:ff:87:10:ff:6b:03:4e:f8:f5:24:5f:67:78:ec:
         0f:94:eb:04:f8:04:a5:8e:0d:99:71:46:03:04:75:b8:16:ce:
         41:45:f5:63:e1:4e:8f:c9:42:dd:e9:b4:c3:98:0a:a5:24:ff:
         f6:55:37:09:e9:7b:bf:3b:ca:da:74:ad:18:fa:5a:fc:d2:1f:
         d2:f5:ed:e8:66:ae:1e:4c:b8:b9:ee:e9:de:c9:74:a9:d7:c1:
         72:ce:45:17:cb:36:d0:17:4d:7f:6c:a0:03:1c:dd:a1:8b:aa:
         b8:4d:fd:f0:1f:c6:49:f8:d3:ec:59:d9:c7:84:ce:9f:c7:2c:
         03:ff:a8:cf:e8:b9:94:68:ba:ff:97:71:f3:9e:fe:a2:3f:99:
         c4:36:70:65:91:45:84:68:69:c8:22:9f:1b:c6:cc:0b:df:cf:
         4f:8f:5c:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:45 2025 by rpki-client