Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.mft
File:                     3DiEAh0bAujBa1VXQ9_rnajkjjE.mft (raw, json)
Hash identifier:          ivLdsPO5JIuTWiiOCdRxvlOq3q2U0oy6h33ckyS9YVw=
Subject key identifier:   F1:FD:D0:F5:0A:40:43:8B:E6:97:97:CB:F1:9E:96:6B:05:39:9E:12
Authority key identifier: DC:38:84:02:1D:1B:02:E8:C1:6B:55:57:43:DF:EB:9D:A8:E4:8E:31
Certificate issuer:       /CN=dc3884021d1b02e8c16b555743dfeb9da8e48e31
Certificate serial:       0199FB0F21218E31C4834B66ED09ACC60DDC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3DiEAh0bAujBa1VXQ9_rnajkjjE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.mft
Manifest number:          16E6
Signing time:             Sun 19 Oct 2025 06:01:36 +0000
Manifest this update:     Sun 19 Oct 2025 06:01:36 +0000
Manifest next update:     Mon 20 Oct 2025 06:01:36 +0000
Files and hashes:         1: 3DiEAh0bAujBa1VXQ9_rnajkjjE.crl (hash: Brr2/4glgsCesMiOeQyzPNcipBmFI2aA+2F9Zp8J7BQ=)
                          2: Fv3sE2iVskV-mDIZ6tC2kUlGAaA.roa (hash: H3F5XuYvkLtvyyyPb3WNBs3Jib+ztvm2aFiyN79ql3U=)
                          3: Lf6gNW4pB2_3G8WJ1gs4diM2dp4.roa (hash: KsApADDkWth8orQKJUtme8wDWNYjMSX9ur5fZXW4Ab8=)
                          4: MC2jKTT_qt4dQPRJuzCLJkn3dIY.roa (hash: 690YFNoA6dF93SoBbsIHXRbUtNVseAW76vFSFSdgmtM=)
                          5: Y7R0jQTyur7PS79n24V95dokJ1E.roa (hash: kBuKXhAOJMq8DqLXajUVs2ZVCA0WRxqfHOvHHVdd1e0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3DiEAh0bAujBa1VXQ9_rnajkjjE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:0f:21:21:8e:31:c4:83:4b:66:ed:09:ac:c6:0d:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc3884021d1b02e8c16b555743dfeb9da8e48e31
        Validity
            Not Before: Oct 19 06:01:36 2025 GMT
            Not After : Oct 20 06:01:36 2025 GMT
        Subject: CN=f1fdd0f50a40438be69797cbf19e966b05399e12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:9c:0e:88:1e:38:9e:5a:78:0c:53:b9:18:d0:
                    9d:81:16:a9:85:f5:41:18:cc:e2:d2:f8:e2:81:c4:
                    c8:39:af:d4:16:ac:c4:e9:65:48:4b:88:a3:0a:d1:
                    59:fb:6f:a5:7e:0f:b8:59:d2:1f:b9:d6:ce:a7:0c:
                    59:46:e4:f2:43:f4:b7:75:0b:f8:3f:7f:4a:85:95:
                    2e:eb:b4:b1:12:c8:d4:1c:01:5a:1a:f9:b4:3c:e4:
                    53:86:73:56:33:fb:0d:99:77:ad:c0:27:92:4e:49:
                    d1:41:62:fc:91:c1:a1:17:f5:a7:1b:51:a2:aa:f8:
                    bd:a2:02:72:91:8b:f2:a6:18:39:a7:35:3e:bf:b8:
                    ee:37:cd:93:ac:77:e3:0e:cb:e7:03:04:ad:95:98:
                    24:4c:1a:d1:dd:4e:fb:a6:0c:b2:04:71:6b:aa:9e:
                    35:ab:fe:82:1f:54:1b:91:f5:fb:96:bc:3c:a2:22:
                    a6:fb:fe:bd:93:54:bd:b9:4f:2e:2f:9f:b5:67:a3:
                    a2:4d:c4:7b:c9:dd:2c:76:05:21:b6:48:3b:36:1a:
                    50:f6:d4:17:49:cb:05:dd:ec:4c:c9:4a:c5:d0:53:
                    af:b8:96:80:f0:a6:7d:ce:85:5c:a7:02:34:5f:de:
                    6b:84:32:29:9a:91:1a:dd:8d:c3:08:66:1a:cf:f9:
                    24:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:FD:D0:F5:0A:40:43:8B:E6:97:97:CB:F1:9E:96:6B:05:39:9E:12
            X509v3 Authority Key Identifier:
                keyid:DC:38:84:02:1D:1B:02:E8:C1:6B:55:57:43:DF:EB:9D:A8:E4:8E:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DiEAh0bAujBa1VXQ9_rnajkjjE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:27:03:44:26:3e:d3:40:4d:d0:a4:c9:dd:60:a8:55:a2:b7:
         9e:97:ab:32:da:80:13:d1:36:5d:e2:b9:91:b8:e4:14:53:01:
         79:56:59:83:b9:bb:87:77:c1:ff:8e:5d:37:6e:eb:c0:0c:82:
         db:6c:b7:ad:4d:74:2e:bc:80:bb:c5:6f:15:e4:29:4d:af:99:
         d2:07:a3:69:9e:be:fe:0b:c7:9e:2e:fc:51:11:ff:b6:9f:47:
         88:05:72:71:ad:ec:7a:8b:18:cf:77:d6:f7:a7:6c:ee:4c:0a:
         d2:d9:7c:3e:fa:03:68:fd:65:24:3c:5b:7f:b8:8b:de:e8:48:
         61:d1:de:0b:d9:bb:0e:8e:c2:9a:10:c0:a4:a5:7a:f4:0d:5f:
         a9:e8:c1:71:06:92:aa:28:54:81:58:63:12:c2:81:68:4b:e9:
         96:c5:7c:b7:3a:77:2d:37:8d:9c:3e:f2:83:e4:01:2e:a8:12:
         92:e8:ae:a7:5c:b0:39:83:32:52:73:72:67:c1:ba:f2:8a:ee:
         7a:0a:de:3f:0e:83:b0:c0:0a:a9:cc:a1:6c:7c:8b:f4:68:71:
         0b:52:0a:49:96:f0:12:0d:4b:7a:c4:58:b1:ef:12:51:f9:67:
         18:55:2c:c1:39:13:52:20:e4:8b:f4:aa:e7:4b:e7:73:1f:53:
         c7:ec:b2:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:29:00 2025 by rpki-client