Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.mft
File:                     rMGajH8XQRRJx9SP-TCNJIMulSs.mft (raw, json)
Hash identifier:          mhpuHeZWoz64zj1NZ4YrrGrhGvU/tfmFIU2d9lY3VIQ=
Subject key identifier:   A0:94:8E:1B:97:9C:9E:A1:03:61:4C:05:EC:4F:29:1C:EF:7A:E5:D6
Authority key identifier: AC:C1:9A:8C:7F:17:41:14:49:C7:D4:8F:F9:30:8D:24:83:2E:95:2B
Certificate issuer:       /CN=acc19a8c7f17411449c7d48ff9308d24832e952b
Certificate serial:       0199FBEA9EA3D2498B007E627A49BE8EE695
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rMGajH8XQRRJx9SP-TCNJIMulSs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.mft
Manifest number:          16E3
Signing time:             Sun 19 Oct 2025 10:01:21 +0000
Manifest this update:     Sun 19 Oct 2025 10:01:21 +0000
Manifest next update:     Mon 20 Oct 2025 10:01:21 +0000
Files and hashes:         1: Qwfm7iyTFcUFA4cP-BGJUr6nVGo.roa (hash: cGT3x4JJQpP+f+7JmlJEaoJ5r1uUvYJMBAOOSckaWRE=)
                          2: rMGajH8XQRRJx9SP-TCNJIMulSs.crl (hash: B2dKGPOZZvAWEdwpYP/YbJupKTwPDC7lKPi4bSobzQo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rMGajH8XQRRJx9SP-TCNJIMulSs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:ea:9e:a3:d2:49:8b:00:7e:62:7a:49:be:8e:e6:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acc19a8c7f17411449c7d48ff9308d24832e952b
        Validity
            Not Before: Oct 19 10:01:21 2025 GMT
            Not After : Oct 20 10:01:21 2025 GMT
        Subject: CN=a0948e1b979c9ea103614c05ec4f291cef7ae5d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:33:e5:b4:a3:7c:ab:90:67:84:50:62:16:34:
                    10:cc:74:54:00:7d:e7:9d:47:90:8e:0d:b3:7e:80:
                    c5:8b:84:72:41:8c:d6:8a:d0:10:dd:e2:3a:a5:b3:
                    47:29:b9:42:f7:b4:72:58:86:1b:85:2c:c8:a4:ee:
                    a7:27:ff:75:09:58:ca:4f:59:9b:31:e3:03:e3:44:
                    a6:a1:90:bd:e8:12:34:5b:b7:77:95:19:86:e2:23:
                    8e:a9:4c:0a:1c:6e:08:50:76:af:41:27:a6:f6:ee:
                    dc:1e:a6:f0:39:77:e8:15:55:f1:9d:ab:0f:2a:d2:
                    5e:29:fe:6f:45:46:be:43:da:a2:4d:da:e4:5b:a7:
                    e4:5e:22:65:5e:30:63:4a:aa:49:31:ea:3c:92:89:
                    44:de:99:fb:26:83:d2:be:ce:0b:72:b6:5a:d2:a4:
                    c5:4b:e3:6a:21:2e:c7:6a:8b:6d:a0:bd:9e:37:80:
                    6b:73:30:45:19:cf:8c:ce:fe:5f:5c:9a:90:d7:14:
                    ac:8c:f0:9d:3a:58:06:9b:e5:a3:93:79:a1:39:9c:
                    da:6e:1a:ca:b4:67:9a:27:aa:b5:52:dd:4e:00:ea:
                    1b:98:28:f9:02:66:e0:5c:e2:91:49:35:ed:e9:25:
                    99:49:5d:2c:7b:fe:86:c8:32:0d:35:b8:31:02:4e:
                    43:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:94:8E:1B:97:9C:9E:A1:03:61:4C:05:EC:4F:29:1C:EF:7A:E5:D6
            X509v3 Authority Key Identifier:
                keyid:AC:C1:9A:8C:7F:17:41:14:49:C7:D4:8F:F9:30:8D:24:83:2E:95:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rMGajH8XQRRJx9SP-TCNJIMulSs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:20:64:99:87:d1:02:d1:dd:13:aa:be:4e:65:a7:59:26:73:
         86:d5:0a:6b:2d:4d:76:bf:23:af:60:f8:36:d7:65:12:95:ef:
         b6:ba:99:7c:7c:88:c0:ab:6e:83:72:45:0a:12:c3:76:0c:62:
         68:c1:61:d1:c8:a8:89:88:ce:ca:27:35:c2:3e:76:ec:ab:c6:
         6c:a6:c8:e2:1e:cb:7f:99:12:39:e8:7e:41:0e:c5:d5:61:13:
         fe:4e:0c:a8:66:80:5b:18:e1:52:00:dc:6a:b4:54:06:4a:1d:
         35:92:5b:ed:7c:c8:bf:1f:e3:20:6e:e6:fa:16:0d:f8:e9:38:
         85:00:71:ca:72:9f:9d:43:3c:b5:14:c5:23:db:f9:87:c4:8a:
         7a:1f:d9:9c:88:84:ae:c2:bf:f3:ca:a6:fd:ea:ef:49:3b:e6:
         a0:64:17:3d:10:c7:52:0f:33:47:37:c8:13:3b:70:65:7a:6e:
         41:2a:3f:46:ed:8d:bf:d6:cd:a5:0c:cc:f7:67:6d:3d:ad:bc:
         62:19:9a:cb:8d:1d:91:1c:92:34:de:e9:60:68:d3:70:4e:f1:
         cd:2e:d1:ac:ee:27:4f:16:88:be:a8:38:2b:73:9d:c1:96:2b:
         67:f1:92:8a:d3:ae:05:6e:b5:13:3b:69:55:23:7b:0c:2e:10:
         53:14:3b:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:05:36 2025 by rpki-client