Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/9a0ef7-dd34-4671-bf51-5f2c1050375d/1/kF3q_qO62SSCF7FinkLP_H5JG9k.mft
File:                     kF3q_qO62SSCF7FinkLP_H5JG9k.mft (raw, json)
Hash identifier:          v/IpRjU37CyqqEc/9H+BCNwA5FwDHgIWNwZAeQPWuvk=
Subject key identifier:   09:06:FA:B0:97:72:1C:B8:3E:97:69:F9:12:F3:24:CB:3D:2F:82:B8
Authority key identifier: 90:5D:EA:FE:A3:BA:D9:24:82:17:B1:62:9E:42:CF:FC:7E:49:1B:D9
Certificate issuer:       /CN=905deafea3bad9248217b1629e42cffc7e491bd9
Certificate serial:       0199FBEC0F7DD9E4889C2211AD81AABAC153
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kF3q_qO62SSCF7FinkLP_H5JG9k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/9a0ef7-dd34-4671-bf51-5f2c1050375d/1/kF3q_qO62SSCF7FinkLP_H5JG9k.mft
Manifest number:          16E3
Signing time:             Sun 19 Oct 2025 10:02:55 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:55 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:55 +0000
Files and hashes:         1: F6NVdh8A853FlObS61QBXhYoWUw.roa (hash: bTYe6HPxoy2DgVEr4roCOuCgASU45dN4RfTtGTEfBzY=)
                          2: kF3q_qO62SSCF7FinkLP_H5JG9k.crl (hash: 8vTYS8PA7jOU+vSsfUyjE2sRB4IbqMJQht0BJyh+orM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/9a0ef7-dd34-4671-bf51-5f2c1050375d/1/kF3q_qO62SSCF7FinkLP_H5JG9k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/9a0ef7-dd34-4671-bf51-5f2c1050375d/1/kF3q_qO62SSCF7FinkLP_H5JG9k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kF3q_qO62SSCF7FinkLP_H5JG9k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:ec:0f:7d:d9:e4:88:9c:22:11:ad:81:aa:ba:c1:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=905deafea3bad9248217b1629e42cffc7e491bd9
        Validity
            Not Before: Oct 19 10:02:55 2025 GMT
            Not After : Oct 20 10:02:55 2025 GMT
        Subject: CN=0906fab097721cb83e9769f912f324cb3d2f82b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:c9:f8:7e:22:85:30:c4:00:d6:46:46:5a:ee:
                    c4:3c:c4:e8:83:83:f8:45:bd:4e:6d:2c:ab:89:72:
                    c1:22:91:89:11:21:25:75:8c:2b:95:ce:23:0e:73:
                    64:37:d0:59:6b:c7:3c:c7:4b:a1:f5:2d:47:42:59:
                    58:1e:e8:4d:55:e9:c9:80:97:d1:3b:2f:43:93:38:
                    c2:7a:93:a1:db:d8:b4:a4:69:d0:ee:3f:29:85:80:
                    6e:e1:c7:37:c2:82:6b:6a:9f:ff:44:43:f4:7f:d3:
                    4e:47:20:5e:db:4e:7b:cb:b6:25:8d:b7:c0:79:ad:
                    a3:d6:24:d4:af:e2:10:9e:69:cb:a3:81:46:8f:5c:
                    1e:8f:36:5a:43:e4:cb:32:47:df:a1:ed:38:dc:63:
                    a8:f5:a7:92:0a:e3:39:3a:51:15:83:1a:5b:cd:63:
                    15:e9:62:41:1e:12:9d:71:97:0e:e2:be:e1:27:80:
                    f5:ce:49:b4:ff:9d:57:c6:e6:62:72:f0:37:cb:da:
                    c0:0d:89:f8:17:03:0b:ea:c1:44:5a:76:3c:b1:15:
                    88:d5:03:d1:ed:8e:2f:1a:b8:58:2e:bc:fe:7e:62:
                    b1:e7:9b:a7:7a:ae:31:c5:96:39:43:c6:54:25:28:
                    a9:17:d1:82:1f:fc:c9:50:33:6f:2d:96:1b:00:00:
                    db:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:06:FA:B0:97:72:1C:B8:3E:97:69:F9:12:F3:24:CB:3D:2F:82:B8
            X509v3 Authority Key Identifier:
                keyid:90:5D:EA:FE:A3:BA:D9:24:82:17:B1:62:9E:42:CF:FC:7E:49:1B:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kF3q_qO62SSCF7FinkLP_H5JG9k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/9a0ef7-dd34-4671-bf51-5f2c1050375d/1/kF3q_qO62SSCF7FinkLP_H5JG9k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/9a0ef7-dd34-4671-bf51-5f2c1050375d/1/kF3q_qO62SSCF7FinkLP_H5JG9k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:89:6a:b2:d8:f8:08:8f:7f:68:25:40:4d:cf:82:54:c9:ca:
         80:e1:81:1a:1d:e9:a0:b3:ac:5c:7a:2e:72:05:98:b1:27:5a:
         4b:1c:a7:51:1b:a7:8b:6a:ca:20:57:2d:63:d9:c2:a4:2c:9f:
         5f:7d:d2:39:86:57:6a:5c:84:bd:b3:8c:68:71:73:81:c5:3b:
         9b:a5:d6:b6:63:4e:e7:22:29:fa:24:f4:da:df:0d:1c:66:ab:
         f6:20:14:aa:0f:00:91:b4:15:6e:c6:7a:6b:9c:e6:c3:5c:47:
         14:33:b6:57:0e:55:0b:91:1f:63:32:82:bd:a3:2a:87:04:b7:
         c6:c1:05:ae:71:f5:e7:ac:5a:89:8e:8f:31:26:76:ec:e9:5f:
         e9:b7:f4:bf:4d:53:07:ac:c5:45:ce:3b:7d:25:25:dd:5e:4c:
         12:79:f3:44:4a:f6:1c:54:bf:bf:a2:5f:7f:98:07:54:24:c5:
         5f:3c:73:36:3c:18:70:84:dd:92:e0:00:18:5a:b9:9c:ef:53:
         db:c1:22:d4:f9:26:96:3c:9f:3d:5a:06:9d:1c:b9:10:ec:c8:
         b6:af:47:38:e5:72:42:49:73:f2:58:db:36:ec:53:87:07:d1:
         db:44:56:ee:d5:85:08:60:7b:7a:8a:a2:7b:b6:69:6c:77:0c:
         10:e6:8e:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:14:08 2025 by rpki-client