Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/3E5FOv_olbZFK4QCdDfFwA_TcGc.mft
File:                     3E5FOv_olbZFK4QCdDfFwA_TcGc.mft (raw, json)
Hash identifier:          Bwhn61g0m7wxD0Wq09bqSw0ssXUGTrLyr7I//MFKk04=
Subject key identifier:   F0:FF:22:C9:4B:B5:F9:45:00:DE:68:DB:59:E4:E9:CC:A1:6C:04:77
Authority key identifier: DC:4E:45:3A:FF:E8:95:B6:45:2B:84:02:74:37:C5:C0:0F:D3:70:67
Certificate issuer:       /CN=dc4e453affe895b6452b84027437c5c00fd37067
Certificate serial:       0199FBEC03C8074F80344C7894B3424033D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3E5FOv_olbZFK4QCdDfFwA_TcGc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/3E5FOv_olbZFK4QCdDfFwA_TcGc.mft
Manifest number:          16F8
Signing time:             Sun 19 Oct 2025 10:02:52 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:52 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:52 +0000
Files and hashes:         1: 3E5FOv_olbZFK4QCdDfFwA_TcGc.crl (hash: T+AijWyxP05xcicz8PXXqZ9L7sXIrjoTKY6PMWvYnBk=)
                          2: ILL8Bsx1CidlNDnMPzCUcS5U2Mo.roa (hash: B9pNA14gZya54yZcULKpZm4AHqIWlkttw9up4kc/opc=)
                          3: VwaG3F-L6xL12XPSU_UWu2Bd58g.roa (hash: /URPWuVnWdS2o9I0omCNTV0BM2l7vJwm+zKrLTezQaI=)
                          4: kNjxTs2znVvLY08E4W9HAeORpIc.roa (hash: iCvB3dIqghJ54VOy8M3fVHjOeELiRaWYAGP93zCiWmc=)
                          5: lin8JZNkawhqPQLq4l5oDz7p9_Q.roa (hash: BVUXkfHTFAe9GN10E46L1MHHgXHBoub4CNAdGpuz0fk=)
                          6: mytf20wX2aBV2FUaQnt3tXEi67s.roa (hash: FaOUPn+Qyashzwjxkz567M7mihch3bci9gHJEHkVovg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/3E5FOv_olbZFK4QCdDfFwA_TcGc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/3E5FOv_olbZFK4QCdDfFwA_TcGc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3E5FOv_olbZFK4QCdDfFwA_TcGc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 10:02:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:ec:03:c8:07:4f:80:34:4c:78:94:b3:42:40:33:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc4e453affe895b6452b84027437c5c00fd37067
        Validity
            Not Before: Oct 19 10:02:52 2025 GMT
            Not After : Oct 20 10:02:52 2025 GMT
        Subject: CN=f0ff22c94bb5f94500de68db59e4e9cca16c0477
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b8:07:c8:b8:50:20:fb:d0:a3:b2:71:0d:d3:
                    78:20:34:40:c8:30:87:48:c2:03:a9:d7:09:47:f7:
                    96:6f:5c:79:36:37:25:00:c3:07:e0:7c:8a:be:30:
                    9b:ad:bf:93:8d:d8:03:ae:f3:e2:d6:ea:65:77:86:
                    73:de:72:74:71:64:1b:60:41:2d:4e:c3:44:90:e4:
                    29:66:25:a7:9f:63:1a:00:d7:ab:f8:05:77:e4:72:
                    69:13:7f:fc:d9:14:31:e5:02:6b:14:f5:e9:bc:f6:
                    c2:43:46:ef:8a:f0:bf:01:1a:9f:9e:21:64:b0:eb:
                    c9:59:1c:b1:fb:c6:b7:98:32:5a:27:6f:be:ee:c4:
                    bc:68:26:2b:ba:8f:8a:43:f7:24:58:ee:e0:00:33:
                    31:04:28:45:ac:4c:25:f4:ec:b7:10:2a:37:8c:41:
                    68:3f:d7:e3:44:c2:ca:17:c3:86:8c:54:85:44:af:
                    39:24:bc:80:f6:4a:87:91:b1:6a:6f:41:74:92:03:
                    47:6a:eb:ba:55:6d:fd:39:80:bc:a0:ef:ed:24:4e:
                    5a:8d:63:40:e1:ce:38:88:06:33:93:68:c7:42:85:
                    89:f2:cd:14:40:fa:40:3a:97:d4:b7:11:20:14:d8:
                    dc:7d:3b:37:7b:ed:90:fb:ba:c3:5d:96:c1:ba:33:
                    0d:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:FF:22:C9:4B:B5:F9:45:00:DE:68:DB:59:E4:E9:CC:A1:6C:04:77
            X509v3 Authority Key Identifier:
                keyid:DC:4E:45:3A:FF:E8:95:B6:45:2B:84:02:74:37:C5:C0:0F:D3:70:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3E5FOv_olbZFK4QCdDfFwA_TcGc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/3E5FOv_olbZFK4QCdDfFwA_TcGc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/3E5FOv_olbZFK4QCdDfFwA_TcGc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:78:04:ce:9e:b0:0f:5e:5b:68:cd:21:30:e3:35:52:b8:0b:
         85:25:98:2f:ca:2d:d5:bf:8f:1a:43:de:7c:b0:f4:e2:b8:d5:
         42:db:1f:10:38:b3:e9:5e:dc:1b:e8:13:19:f5:b5:66:e0:c5:
         8b:10:91:0f:ce:ec:8b:0d:0e:c0:be:37:dc:e5:3d:7c:8e:86:
         22:71:58:96:a2:06:23:82:15:d5:10:a6:3f:db:d6:e3:c8:c8:
         3b:45:27:11:3f:60:48:2f:cd:bf:19:77:b8:db:f8:70:06:85:
         51:3f:28:d2:9f:8f:69:3a:92:c7:6d:af:8b:21:d1:09:18:d7:
         9b:b0:9a:de:95:e3:49:6f:11:01:1f:df:3d:78:4d:57:8e:19:
         5f:f1:ef:50:45:56:a6:91:b1:7e:66:1a:89:49:99:8e:69:b5:
         67:39:a2:dd:e7:29:16:f3:54:a3:2d:de:ca:44:dc:3f:a2:09:
         2a:d7:72:b0:e0:da:14:81:23:0c:c8:00:95:c9:64:ec:49:b3:
         98:8a:d7:96:55:ac:bd:f0:d4:98:5f:e5:30:d9:88:a0:e8:80:
         bc:e0:d3:01:17:65:dc:68:91:7a:16:7a:71:e9:7a:7f:57:0d:
         31:a9:45:59:a9:10:40:84:17:57:c4:83:cf:41:03:84:63:26:
         28:31:8f:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:31:54 2025 by rpki-client