Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.mft
File:                     xgWHGIm53K_n7DE2rtHd_uLfvH0.mft (raw, json)
Hash identifier:          6Tu75VdEvBN+NkX/mOlbkVIr7L2+O7UbKSNi30xdazQ=
Subject key identifier:   1E:15:79:B6:64:27:31:FA:68:60:63:17:28:79:21:8D:8A:AC:2F:08
Authority key identifier: C6:05:87:18:89:B9:DC:AF:E7:EC:31:36:AE:D1:DD:FE:E2:DF:BC:7D
Certificate issuer:       /CN=c605871889b9dcafe7ec3136aed1ddfee2dfbc7d
Certificate serial:       0199FB7CD77A5D1F668D30B4B0FDB6CB3476
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xgWHGIm53K_n7DE2rtHd_uLfvH0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.mft
Manifest number:          16E5
Signing time:             Sun 19 Oct 2025 08:01:26 +0000
Manifest this update:     Sun 19 Oct 2025 08:01:26 +0000
Manifest next update:     Mon 20 Oct 2025 08:01:26 +0000
Files and hashes:         1: CzBENFpROta46Ahh1b9jdj6JXrk.roa (hash: L4tfWnC6wyVnCN7M94V7ANHnHcbMgExMDsrJgBJJe38=)
                          2: WppkWIxYDl7yRokwyQv6w_qkTkM.roa (hash: pMxyfIHw8b62QMs/8crKL+TvmHlR2BI1fy3D9pIMtBI=)
                          3: xgWHGIm53K_n7DE2rtHd_uLfvH0.crl (hash: zw6SUl2mpGzB9LoqcK23gl7cjwJCSpE+kSn8XNvwXs4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xgWHGIm53K_n7DE2rtHd_uLfvH0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:7c:d7:7a:5d:1f:66:8d:30:b4:b0:fd:b6:cb:34:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c605871889b9dcafe7ec3136aed1ddfee2dfbc7d
        Validity
            Not Before: Oct 19 08:01:26 2025 GMT
            Not After : Oct 20 08:01:26 2025 GMT
        Subject: CN=1e1579b6642731fa686063172879218d8aac2f08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:12:21:d6:b3:58:12:fc:cc:cf:13:f6:c8:0b:
                    0a:ea:04:2c:d4:f1:b4:b0:9a:d3:34:a0:76:3e:80:
                    06:ff:7f:1f:0c:2b:3f:52:86:a0:93:42:f7:02:34:
                    12:c2:c2:33:d4:bc:7d:83:4c:d5:31:07:34:4a:2a:
                    fa:bc:50:a1:df:a0:bc:0b:17:53:2f:32:ee:56:a7:
                    d5:2a:26:84:0d:6d:98:b3:df:61:99:ae:16:c4:69:
                    ed:64:e5:ec:8a:af:29:e6:f7:7d:26:0c:70:9d:3f:
                    74:2d:c8:ae:a2:86:59:d7:a1:02:bd:06:98:e3:ca:
                    32:33:fb:69:b1:45:d3:b3:25:70:56:f0:db:d5:4b:
                    cd:6f:b7:b5:67:46:48:57:dd:df:7b:b7:86:b8:6d:
                    5e:82:82:0f:b8:7b:5a:71:b5:81:ff:68:11:53:5c:
                    a6:e7:01:38:2a:37:0c:55:6d:9a:31:34:67:c2:ee:
                    d3:56:56:ed:98:06:56:68:c5:8d:19:7e:8d:25:78:
                    cf:37:97:f6:0e:fe:19:4d:aa:50:55:3a:d9:1e:fc:
                    db:4c:3c:cb:19:4c:f9:05:b8:8a:d5:3f:37:ac:5f:
                    b3:de:0b:52:87:15:42:9c:1e:67:00:b7:dc:90:b0:
                    b3:60:04:13:6f:6a:37:92:54:91:6d:65:d1:e4:48:
                    47:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:15:79:B6:64:27:31:FA:68:60:63:17:28:79:21:8D:8A:AC:2F:08
            X509v3 Authority Key Identifier:
                keyid:C6:05:87:18:89:B9:DC:AF:E7:EC:31:36:AE:D1:DD:FE:E2:DF:BC:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xgWHGIm53K_n7DE2rtHd_uLfvH0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6046a6-decb-49a3-a3b4-3087f86a63ab/1/xgWHGIm53K_n7DE2rtHd_uLfvH0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:e2:c7:f2:0f:c0:fb:ae:57:5c:17:4b:85:a7:ca:4b:38:d1:
         ee:38:15:b6:b4:05:66:8e:90:08:14:ed:14:29:12:ef:dd:6d:
         d8:8d:e0:71:f0:44:96:62:60:d0:ed:63:b2:f9:af:01:7e:41:
         ea:c8:c6:5b:66:c0:21:33:6e:76:1e:20:2b:4a:51:17:55:0a:
         06:5e:71:1a:81:7c:24:f0:e4:9c:05:21:7f:65:95:f0:1d:e2:
         50:7e:c9:e0:49:37:f5:a3:c4:47:a0:81:cb:2f:06:17:16:f7:
         e9:b7:62:74:0a:30:6a:aa:ae:85:f9:c1:72:7d:a6:f4:b4:6e:
         01:7e:ad:ae:2a:2c:f2:28:62:4a:88:81:e4:03:8f:40:64:7c:
         4b:77:e5:80:30:34:8b:f9:23:ba:9a:17:bc:46:95:26:25:ee:
         0f:22:53:14:aa:e3:bd:ee:1b:c5:71:a9:a0:87:de:46:79:a6:
         17:4e:3e:71:18:18:62:8b:83:40:29:bd:01:38:c0:37:36:45:
         9f:ac:e3:8e:46:9c:c6:a3:af:27:43:49:4a:a6:62:cd:5a:7a:
         f8:51:cf:fe:7d:82:8e:5b:ee:9c:cd:a2:1a:ba:b2:8b:1e:2a:
         c8:54:3e:65:c4:09:e9:49:b9:d6:f9:36:80:b6:4d:5f:03:10:
         9e:61:83:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:07:50 2025 by rpki-client