Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/59a032-c384-43df-8c9d-ef0b82189444/1/4ygMY1Kgv7t50knIh17RhuzOioY.mft
File:                     4ygMY1Kgv7t50knIh17RhuzOioY.mft (raw, json)
Hash identifier:          F0L7xsflWWU8DxaPNQ1m5bU6Uz0Yfvz3imkCZd4dLWc=
Subject key identifier:   EB:6F:43:38:E3:F7:C4:C7:B7:87:05:E0:61:30:6E:6F:C3:91:18:A1
Authority key identifier: E3:28:0C:63:52:A0:BF:BB:79:D2:49:C8:87:5E:D1:86:EC:CE:8A:86
Certificate issuer:       /CN=e3280c6352a0bfbb79d249c8875ed186ecce8a86
Certificate serial:       0199FB4593608C6C4D7941E8D634CFEA9F48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4ygMY1Kgv7t50knIh17RhuzOioY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/59a032-c384-43df-8c9d-ef0b82189444/1/4ygMY1Kgv7t50knIh17RhuzOioY.mft
Manifest number:          16E8
Signing time:             Sun 19 Oct 2025 07:01:04 +0000
Manifest this update:     Sun 19 Oct 2025 07:01:04 +0000
Manifest next update:     Mon 20 Oct 2025 07:01:04 +0000
Files and hashes:         1: 4ygMY1Kgv7t50knIh17RhuzOioY.crl (hash: PZmmph8X8u02/nJS++XS8LW9Vjt+8iligBAeNQifxkE=)
                          2: LKQwgiepoVu5_u8taIAcRutuJ-s.roa (hash: g/2UuKpKO1KSqMbVUrFxetjbdTbJKbXQ9uje0qgEhYw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/59a032-c384-43df-8c9d-ef0b82189444/1/4ygMY1Kgv7t50knIh17RhuzOioY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/59a032-c384-43df-8c9d-ef0b82189444/1/4ygMY1Kgv7t50knIh17RhuzOioY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4ygMY1Kgv7t50knIh17RhuzOioY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:45:93:60:8c:6c:4d:79:41:e8:d6:34:cf:ea:9f:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3280c6352a0bfbb79d249c8875ed186ecce8a86
        Validity
            Not Before: Oct 19 07:01:04 2025 GMT
            Not After : Oct 20 07:01:04 2025 GMT
        Subject: CN=eb6f4338e3f7c4c7b78705e061306e6fc39118a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:ef:bc:12:64:62:ea:d8:cf:16:5a:f6:8a:df:
                    37:aa:b2:0e:2a:11:a7:78:05:ec:89:91:47:09:d0:
                    c8:56:de:38:ab:87:f6:32:8a:bc:f7:10:a1:ad:74:
                    d0:75:e7:da:4a:f9:4b:ff:59:af:bd:5a:4f:63:ba:
                    95:df:8c:97:71:72:6c:39:bd:4d:f5:15:47:7e:d4:
                    d2:0d:d9:28:64:50:0b:a8:1a:6b:79:54:3e:b7:c9:
                    c4:61:8e:35:d1:4b:38:e0:2b:a1:25:4c:f8:11:18:
                    cc:45:6d:60:e5:da:44:4b:0d:f2:a0:ce:f2:e5:02:
                    03:e3:49:7d:6e:4a:38:e4:2d:5a:ea:0d:b4:54:ea:
                    20:09:e4:99:4c:1c:93:4d:28:7a:9e:fe:88:62:b2:
                    3c:68:b7:c5:e5:c2:6c:20:45:64:b4:08:ab:1f:56:
                    32:bd:ac:91:31:6f:e7:dc:70:07:04:c1:ef:41:cd:
                    a9:a6:f1:d4:e9:e0:d5:d2:5b:be:0f:a1:f0:15:2d:
                    fe:a2:7e:c2:a2:c5:d7:2c:1c:1b:25:44:43:5f:10:
                    17:5b:ac:bb:f9:2b:e4:6b:31:4f:6a:33:5b:75:bd:
                    cd:a9:f2:05:03:d8:26:a6:01:0c:8a:f8:b2:8d:d5:
                    c0:0c:63:23:30:c2:99:37:c8:68:15:34:7b:05:4c:
                    a1:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:6F:43:38:E3:F7:C4:C7:B7:87:05:E0:61:30:6E:6F:C3:91:18:A1
            X509v3 Authority Key Identifier:
                keyid:E3:28:0C:63:52:A0:BF:BB:79:D2:49:C8:87:5E:D1:86:EC:CE:8A:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ygMY1Kgv7t50knIh17RhuzOioY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/59a032-c384-43df-8c9d-ef0b82189444/1/4ygMY1Kgv7t50knIh17RhuzOioY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/59a032-c384-43df-8c9d-ef0b82189444/1/4ygMY1Kgv7t50knIh17RhuzOioY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:65:85:41:90:31:fe:d5:d8:32:d8:7e:6e:7d:da:42:2b:1e:
         c1:46:18:7c:1b:fc:62:50:6b:df:6d:ef:8c:23:f0:47:e6:52:
         15:60:82:2c:a0:81:ff:5b:91:32:be:01:27:48:8e:f1:43:c3:
         85:10:9e:b7:d7:85:70:22:ea:3f:0e:ff:74:81:34:d9:db:09:
         e5:f5:e3:10:ba:0d:1c:6a:ef:9e:7c:94:5e:2e:31:b8:6d:c7:
         ba:1e:67:12:af:fd:b8:81:85:cb:94:62:57:86:a6:32:94:02:
         38:46:1d:fe:4d:33:97:7a:f7:be:88:54:56:e6:a1:a1:ce:96:
         07:97:9d:e1:87:d2:84:41:0d:1b:f9:7c:c2:e4:90:38:ff:4e:
         8d:b3:b0:b7:9a:4f:2a:f8:f0:d1:dc:c5:70:50:ac:46:e6:0e:
         ed:19:cc:19:69:05:3f:2e:60:9c:a7:93:60:18:3e:43:4b:cd:
         bf:4d:6c:ad:a6:a3:e4:c9:19:b2:31:19:6d:cc:4e:95:92:1c:
         fa:49:2b:24:9a:b3:20:1b:a2:0b:6c:42:e0:8a:0d:96:2d:e5:
         cc:a2:2f:81:41:d3:12:b0:9e:6a:68:a4:ee:ac:09:da:81:2a:
         71:2c:2f:b7:37:a6:1b:32:75:e6:c2:0b:3e:a8:ea:c5:5e:79:
         69:43:c8:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:43:50 2025 by rpki-client