Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/84LLE93hJljNrBjKyukfu_XFgJA.mft
File:                     84LLE93hJljNrBjKyukfu_XFgJA.mft (raw, json)
Hash identifier:          6ClwrhadPMTgIVpi2joZacc2sps9bzqn+zlDASPm2wU=
Subject key identifier:   2F:47:2F:59:E5:35:F1:47:28:0A:E0:99:4D:07:06:16:5E:19:DA:69
Authority key identifier: F3:82:CB:13:DD:E1:26:58:CD:AC:18:CA:CA:E9:1F:BB:F5:C5:80:90
Certificate issuer:       /CN=f382cb13dde12658cdac18cacae91fbbf5c58090
Certificate serial:       0199FF902CC5A70DEDC0229352EAFB7E7C9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/84LLE93hJljNrBjKyukfu_XFgJA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/84LLE93hJljNrBjKyukfu_XFgJA.mft
Manifest number:          16F1
Signing time:             Mon 20 Oct 2025 03:01:02 +0000
Manifest this update:     Mon 20 Oct 2025 03:01:02 +0000
Manifest next update:     Tue 21 Oct 2025 03:01:02 +0000
Files and hashes:         1: 1-NLVATAgt0gJ1Aq1hVfcdxCumPA.roa (hash: uN2xa+HJ9utBDoQL6cY2MSlIep6ZvrR+uOyLGFZW9Xg=)
                          2: 2z6IIqozQyPH_vBQ1I8B_OaBk44.roa (hash: IqSfTrxbeJd952CmJYdHNDtutp36feaLwKnioO9qAl0=)
                          3: 4tIwWmU-n7-9mbrV6zHCUY2kgO0.roa (hash: UNWMMK2ScoKR3jrKuoJR0R5xS2Hl4Xfz/Y0cE7DjtqA=)
                          4: 84LLE93hJljNrBjKyukfu_XFgJA.crl (hash: 3GruK8V8kwNdbof7LVMwYg+MmBlFUUG23kJZ78i4mGo=)
                          5: ztZZJGj8r4t9WJVtmGb2eSruYgQ.roa (hash: sP6jU6FXG4aQWAWvj/yoi9JuC2AeECQOGtHEuOPJslo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/84LLE93hJljNrBjKyukfu_XFgJA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/84LLE93hJljNrBjKyukfu_XFgJA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/84LLE93hJljNrBjKyukfu_XFgJA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ff:90:2c:c5:a7:0d:ed:c0:22:93:52:ea:fb:7e:7c:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f382cb13dde12658cdac18cacae91fbbf5c58090
        Validity
            Not Before: Oct 20 03:01:02 2025 GMT
            Not After : Oct 21 03:01:02 2025 GMT
        Subject: CN=2f472f59e535f147280ae0994d0706165e19da69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:60:e9:4a:a9:71:4f:f9:b3:53:cf:2a:4b:3e:
                    f3:91:e4:61:cf:79:ba:3d:ae:fe:a1:38:9d:6d:0b:
                    25:c0:64:35:d0:28:72:c3:ee:f8:a5:33:47:8c:e2:
                    7c:f0:17:8f:88:9e:8c:c1:54:ab:d0:47:80:9d:f7:
                    55:10:35:c9:d6:44:7b:aa:d4:45:11:e0:3a:21:df:
                    21:94:5c:06:9d:73:b6:4f:e0:9e:f5:5f:4d:e5:49:
                    b0:16:86:3e:17:09:43:f9:f4:48:32:1b:95:88:87:
                    45:51:59:6b:d5:53:c4:67:fe:44:20:14:eb:5e:a9:
                    82:21:e6:4f:a2:64:2b:ea:7a:79:5f:bd:8d:26:c7:
                    2b:19:80:30:2c:fc:29:61:64:1e:7b:f5:cb:c2:d7:
                    d4:1c:64:67:1c:24:ff:d8:d3:fd:2f:82:66:33:a3:
                    f4:9c:46:6a:2c:96:5a:06:75:a0:8d:7d:25:8b:41:
                    22:bf:42:5d:33:51:4d:17:a8:fa:f5:9c:b7:f7:1a:
                    1d:8c:43:47:72:46:a4:35:18:81:0a:7b:ce:df:9f:
                    34:b8:1e:20:a0:b1:fe:9b:80:66:46:19:2e:12:f8:
                    a7:f6:6b:bc:be:d3:29:fa:47:62:f3:e0:2d:dd:bd:
                    08:be:f9:26:5a:39:44:0e:00:5f:b0:24:23:a0:07:
                    fd:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:47:2F:59:E5:35:F1:47:28:0A:E0:99:4D:07:06:16:5E:19:DA:69
            X509v3 Authority Key Identifier:
                keyid:F3:82:CB:13:DD:E1:26:58:CD:AC:18:CA:CA:E9:1F:BB:F5:C5:80:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/84LLE93hJljNrBjKyukfu_XFgJA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/84LLE93hJljNrBjKyukfu_XFgJA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/84LLE93hJljNrBjKyukfu_XFgJA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:55:a1:82:c0:f5:f2:81:eb:5f:68:56:11:f8:4d:d8:f8:a9:
         17:a4:44:a4:d3:02:b1:40:32:af:8c:1d:59:c6:a0:36:ba:1f:
         ba:9c:df:2a:62:28:fa:b1:63:b3:82:be:5f:da:98:57:f3:a2:
         58:88:6f:4f:62:0e:70:7b:26:2d:f9:a1:a4:29:8b:af:15:88:
         a0:f9:46:b3:55:73:9d:80:95:a0:1f:22:05:fe:cb:c4:fb:94:
         bf:bd:d3:c0:0e:d0:41:c1:1e:cf:2c:ad:7a:9d:7e:61:7d:02:
         1f:ee:23:ff:5b:b3:eb:2a:8f:b9:9d:19:cf:91:e4:9a:ff:99:
         a2:75:40:af:4d:dd:b9:3e:1c:c8:70:ee:b0:5f:81:77:ae:95:
         78:2d:9a:6a:99:41:30:99:b4:92:61:c2:a7:bf:5a:e6:86:b7:
         11:b6:58:67:75:1b:3a:fa:e4:4f:6e:d3:57:7a:dc:51:5c:ea:
         4e:6c:67:3d:cb:ef:5e:26:93:56:69:e1:96:18:8c:0e:a3:2c:
         b8:28:62:e5:4a:d2:fd:ac:76:04:e1:dd:05:10:9c:e8:cc:65:
         20:00:9a:46:7c:b8:78:8e:99:c6:99:71:86:e1:4a:f7:0e:b5:
         58:78:ee:31:5d:36:0d:8e:f7:38:fa:23:c3:ca:75:27:85:69:
         ef:e5:3c:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:30:50 2025 by rpki-client