Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.mft
File:                     rCe8JF52ul5cH8Xp7lW0tI3n-Fo.mft (raw, json)
Hash identifier:          a6LzrfzxWqVZblB9eeh7pxBWKlCZ+s598UQEOmCGayU=
Subject key identifier:   4C:9A:AF:F7:AE:5B:33:24:DB:0C:25:CE:D0:50:54:6B:DF:B5:0A:9E
Authority key identifier: AC:27:BC:24:5E:76:BA:5E:5C:1F:C5:E9:EE:55:B4:B4:8D:E7:F8:5A
Certificate issuer:       /CN=ac27bc245e76ba5e5c1fc5e9ee55b4b48de7f85a
Certificate serial:       0199FC587FFEA0C25A9DC5F451CE3FBAFED2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.mft
Manifest number:          16E5
Signing time:             Sun 19 Oct 2025 12:01:22 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:22 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:22 +0000
Files and hashes:         1: 8GfQJwSm8WOL4eiiEZHqevjvttA.roa (hash: 3bVJWVWZRhXVWLoMKn0YWpgHV5qRAlMtfEADmaxXPBY=)
                          2: rCe8JF52ul5cH8Xp7lW0tI3n-Fo.crl (hash: Nvy3RG/rvbrDn04gCSvPcURyaWfFpSr/RVvCcsNiC98=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:58:7f:fe:a0:c2:5a:9d:c5:f4:51:ce:3f:ba:fe:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac27bc245e76ba5e5c1fc5e9ee55b4b48de7f85a
        Validity
            Not Before: Oct 19 12:01:22 2025 GMT
            Not After : Oct 20 12:01:22 2025 GMT
        Subject: CN=4c9aaff7ae5b3324db0c25ced050546bdfb50a9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:47:fd:f7:b2:13:d5:dc:22:05:a2:07:51:10:
                    4e:1a:d5:61:86:58:7c:dc:f9:68:ec:8a:46:21:a6:
                    ba:74:8d:9e:eb:3c:2e:a7:e5:a5:22:6f:87:9c:5c:
                    31:f2:f3:a9:d1:c3:17:d6:7e:04:42:02:aa:c4:81:
                    50:63:c2:2f:2b:6b:b8:fc:01:fe:ba:12:5d:ea:49:
                    41:4c:00:fe:7c:f8:8a:ac:24:56:8a:dc:ad:a5:38:
                    c8:d2:c3:a7:34:5b:00:d2:68:c8:13:16:2b:ca:e6:
                    5d:fb:72:38:7f:cc:21:75:3c:6f:1b:0d:4b:07:60:
                    92:f3:78:a6:42:69:48:f5:38:6b:5d:ea:ec:4f:5b:
                    47:aa:e1:8f:cd:6b:ca:ea:1b:06:37:bc:49:97:cf:
                    d7:c5:4f:86:8c:f7:87:de:bb:61:8f:e4:59:73:03:
                    90:cf:a1:33:bb:4a:4f:4f:07:f7:80:7c:c3:eb:b4:
                    58:a6:35:95:7b:79:bc:4d:a2:bb:33:9a:7b:10:df:
                    df:9d:70:db:b4:a0:74:36:6b:a7:33:79:ee:ff:9a:
                    3e:9d:0b:5f:c3:a3:d4:2e:0c:18:31:a4:f2:15:41:
                    cb:b0:7d:96:5d:67:c7:ef:01:57:cf:ab:7d:ef:42:
                    0e:fb:24:c8:68:0d:0e:76:57:95:0e:80:2b:18:8e:
                    9f:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:9A:AF:F7:AE:5B:33:24:DB:0C:25:CE:D0:50:54:6B:DF:B5:0A:9E
            X509v3 Authority Key Identifier:
                keyid:AC:27:BC:24:5E:76:BA:5E:5C:1F:C5:E9:EE:55:B4:B4:8D:E7:F8:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:18:37:72:05:d3:06:f8:af:a7:62:aa:a6:1c:b2:9d:67:a4:
         15:60:85:16:5c:7f:c2:b6:b0:1a:8c:56:78:db:dc:96:ac:03:
         6b:a0:0c:2e:f8:4b:1d:65:ce:3d:6e:ce:d5:c1:a4:4d:51:f3:
         45:a4:18:ea:4a:56:bb:77:32:86:d4:0b:60:9d:59:c5:56:74:
         c0:b8:ad:6c:69:98:f4:6a:54:c0:da:8d:ca:c7:97:7b:6d:28:
         56:67:ad:91:d1:3a:51:47:25:b8:31:03:a8:8f:f9:b8:8c:ca:
         04:95:71:26:bf:64:fe:d4:15:83:42:16:a0:d0:ef:22:88:12:
         0d:e5:68:32:12:fc:4e:50:d7:ce:ec:47:c8:96:70:ef:13:d3:
         e4:ab:e3:7a:21:1a:04:ab:82:d0:ab:39:e0:ff:94:2d:8b:f8:
         0d:95:19:a8:83:82:36:f1:da:84:27:e6:74:49:d3:6f:3e:9b:
         cd:3f:69:4a:5f:0c:65:fc:97:50:be:1f:50:5e:a7:78:4d:4e:
         36:c6:d2:9a:68:e9:23:74:8a:10:d6:18:e3:9d:aa:16:d3:e7:
         f3:d2:28:62:8d:ec:db:a8:78:bf:fc:ad:a9:8d:fc:9d:b3:cb:
         88:71:84:09:09:ca:45:ee:8c:6a:b6:fa:22:3a:86:19:99:38:
         33:53:50:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:01:59 2025 by rpki-client