Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/efbb05-8940-43cf-ad1d-28acc7f3193a/1/F4glKGvuyRLRmI0I0uJ39Rjz5Ko.mft
File:                     F4glKGvuyRLRmI0I0uJ39Rjz5Ko.mft (raw, json)
Hash identifier:          qygwEQquRcDwpv9UvNRYLEsyk234PPK3N2eyyLoyx1c=
Subject key identifier:   A0:D9:42:3D:A3:97:A7:38:54:5F:EA:FB:37:09:41:39:7F:99:A1:28
Authority key identifier: 17:88:25:28:6B:EE:C9:12:D1:98:8D:08:D2:E2:77:F5:18:F3:E4:AA
Certificate issuer:       /CN=178825286beec912d1988d08d2e277f518f3e4aa
Certificate serial:       0199FC8F1A10B1A9A92C25A13812E0BF2128
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F4glKGvuyRLRmI0I0uJ39Rjz5Ko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/efbb05-8940-43cf-ad1d-28acc7f3193a/1/F4glKGvuyRLRmI0I0uJ39Rjz5Ko.mft
Manifest number:          16E2
Signing time:             Sun 19 Oct 2025 13:01:00 +0000
Manifest this update:     Sun 19 Oct 2025 13:01:00 +0000
Manifest next update:     Mon 20 Oct 2025 13:01:00 +0000
Files and hashes:         1: F4glKGvuyRLRmI0I0uJ39Rjz5Ko.crl (hash: g82hBwZBTqOsfLGQEuupqjz+5oIV4Rpo26U3r3RWY3o=)
                          2: JTEomKX4OOyZxOy0baHsaALemoI.roa (hash: JGEo9LSNLQbTCM9QYbM4j5mLQD81VFGImQN07wE3Oxw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/efbb05-8940-43cf-ad1d-28acc7f3193a/1/F4glKGvuyRLRmI0I0uJ39Rjz5Ko.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/efbb05-8940-43cf-ad1d-28acc7f3193a/1/F4glKGvuyRLRmI0I0uJ39Rjz5Ko.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F4glKGvuyRLRmI0I0uJ39Rjz5Ko.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:8f:1a:10:b1:a9:a9:2c:25:a1:38:12:e0:bf:21:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=178825286beec912d1988d08d2e277f518f3e4aa
        Validity
            Not Before: Oct 19 13:01:00 2025 GMT
            Not After : Oct 20 13:01:00 2025 GMT
        Subject: CN=a0d9423da397a738545feafb370941397f99a128
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:52:d1:ea:7c:0a:f2:a4:2d:f9:1b:9e:31:ae:
                    e1:83:ea:02:61:87:39:0b:39:bd:a6:27:08:9f:bf:
                    6c:18:72:58:b4:f5:9f:bf:91:1c:5d:21:b7:a8:23:
                    71:e5:82:ed:76:21:e1:bd:5a:87:ea:37:ad:b1:13:
                    b9:f0:c3:2a:2a:75:c4:d8:82:57:2e:7b:95:74:cd:
                    7b:07:d8:aa:f9:97:5f:30:83:cf:1b:a2:71:51:9b:
                    38:08:a0:fc:87:de:2d:d2:7c:ca:df:f7:8f:c4:b3:
                    2b:54:e8:19:a6:ae:f4:f6:33:b8:a4:99:dc:3e:28:
                    9c:65:fc:16:c2:55:33:b0:4f:dd:c5:61:9b:ec:7b:
                    1b:df:a9:16:6d:51:82:43:6c:4d:dd:fe:81:38:b8:
                    bb:07:df:df:4f:28:9b:1f:64:bf:12:c8:53:6f:56:
                    e2:16:c7:84:b3:1c:28:0a:06:a8:aa:a7:5e:ac:3f:
                    7d:bd:63:ed:f8:a5:99:13:c0:9f:85:e4:0c:75:0a:
                    e1:eb:2a:8c:bc:3c:4b:fe:e2:7b:f0:da:da:6d:43:
                    91:1f:53:e6:93:45:42:f2:6c:40:b5:28:fe:45:df:
                    7d:82:21:d5:af:bc:d8:48:a3:7b:ee:05:e1:b6:a2:
                    45:ea:67:fb:d8:5a:73:4d:64:e7:2b:dd:a7:e5:b3:
                    1d:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:D9:42:3D:A3:97:A7:38:54:5F:EA:FB:37:09:41:39:7F:99:A1:28
            X509v3 Authority Key Identifier:
                keyid:17:88:25:28:6B:EE:C9:12:D1:98:8D:08:D2:E2:77:F5:18:F3:E4:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F4glKGvuyRLRmI0I0uJ39Rjz5Ko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/efbb05-8940-43cf-ad1d-28acc7f3193a/1/F4glKGvuyRLRmI0I0uJ39Rjz5Ko.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/efbb05-8940-43cf-ad1d-28acc7f3193a/1/F4glKGvuyRLRmI0I0uJ39Rjz5Ko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:c6:96:99:db:8e:8b:13:11:c9:36:30:3c:40:1c:37:ac:36:
         10:54:b5:cc:cc:c5:35:da:cd:62:e1:0e:29:30:f0:27:a1:ed:
         53:17:d6:67:93:47:91:b7:c6:d1:90:1e:44:99:1b:31:70:5d:
         9b:ed:2e:37:32:f0:e9:09:80:2d:ac:3a:6b:f0:88:6c:88:74:
         34:0d:c4:77:8f:9d:05:14:72:b9:64:b5:b7:f8:0e:9d:c0:79:
         7f:6a:8e:b3:05:2b:15:7d:81:d6:71:ca:38:bd:8e:4a:e7:5c:
         f1:f9:fd:95:c1:75:db:c6:5c:13:97:6a:f0:6b:1c:9d:d5:b8:
         15:ed:5f:2f:de:ec:5c:c6:e5:7a:27:fd:c9:07:64:86:c3:82:
         bf:19:df:15:24:30:eb:52:ec:57:b3:08:83:6d:a3:18:a6:31:
         be:bd:05:f1:87:a0:61:fd:fa:28:0c:f0:0f:df:ce:4a:7f:6f:
         a7:ce:19:ed:5c:74:d9:0e:ae:b1:a8:af:c0:f4:4a:d4:8f:3c:
         87:01:56:8e:35:77:df:6f:13:6a:21:9d:18:5e:7c:50:6f:3b:
         b4:b9:dc:ff:6d:23:f1:7c:ee:f8:e8:df:3d:e2:b1:e7:99:ef:
         b4:33:7b:5a:39:ce:4a:1f:bd:66:b7:43:bc:f0:c9:e0:81:16:
         39:1c:d9:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:39:11 2025 by rpki-client