Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/_h0Y2aIic226wjERC4jerI2wM20.mft
File:                     _h0Y2aIic226wjERC4jerI2wM20.mft (raw, json)
Hash identifier:          4r6Z47/1Rj6xOa+gsVyeSJ7GoZwJuF2aIEC2AQ5GnL0=
Subject key identifier:   BC:9B:88:0D:DC:6B:D3:90:16:BB:B1:F8:30:59:A3:EE:31:E6:F9:C7
Authority key identifier: FE:1D:18:D9:A2:22:73:6D:BA:C2:31:11:0B:88:DE:AC:8D:B0:33:6D
Certificate issuer:       /CN=fe1d18d9a222736dbac231110b88deac8db0336d
Certificate serial:       0199FC58BC55D17F4BFB1FF26EF4900E918A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_h0Y2aIic226wjERC4jerI2wM20.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/_h0Y2aIic226wjERC4jerI2wM20.mft
Manifest number:          16E5
Signing time:             Sun 19 Oct 2025 12:01:37 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:37 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:37 +0000
Files and hashes:         1: EZTTi0DeKjOt5n50pGmAFCowsBg.roa (hash: E6d6xhT95nfb0o31mLYa+7IwZxSu5Vcz/JzrKKV4/Tw=)
                          2: _h0Y2aIic226wjERC4jerI2wM20.crl (hash: RcwyKtY0SpaTC+LYqxHnvrhDPPU7u2w49SU/GHtEk3g=)
                          3: _j56SkoPwjvw5J3-yiHS-OHaGdg.roa (hash: 8LANgZZ7cUUufNrH/hblrmKv7SFmglJPoUVHRC20Sgc=)
                          4: nphj8rzOnLWDJ-Ev9uLxCzuPoh0.roa (hash: HyT5REdDkPYj/vcE9InpMXDrNrWM+FwGj433uROaITI=)
                          5: rrJ9oJTEKjWY36H_-ybxMrxa8AU.roa (hash: VOnvk/Pca3s41OyosIHhlUhIPKuz7htec6edKpEFyTA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/_h0Y2aIic226wjERC4jerI2wM20.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/_h0Y2aIic226wjERC4jerI2wM20.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_h0Y2aIic226wjERC4jerI2wM20.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:58:bc:55:d1:7f:4b:fb:1f:f2:6e:f4:90:0e:91:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe1d18d9a222736dbac231110b88deac8db0336d
        Validity
            Not Before: Oct 19 12:01:37 2025 GMT
            Not After : Oct 20 12:01:37 2025 GMT
        Subject: CN=bc9b880ddc6bd39016bbb1f83059a3ee31e6f9c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:6f:f5:af:07:55:f2:97:a0:db:bc:8c:bb:3d:
                    b9:3e:61:f7:74:80:6c:e2:12:c4:dc:7a:1a:12:75:
                    f1:b4:c0:ea:4b:87:65:61:a3:ac:b0:02:11:61:f4:
                    67:e6:af:ca:69:ed:8a:0a:d3:99:f0:87:bc:9b:cb:
                    cb:1b:d5:e3:0c:24:93:0b:b5:0e:40:ed:98:b2:45:
                    c1:f8:28:b2:a5:72:c8:aa:76:24:d0:1f:d6:8f:08:
                    d5:f5:ab:2f:f1:10:19:72:15:f1:32:9a:44:7f:80:
                    93:4d:cb:7f:d2:ed:b9:c8:68:20:23:84:79:23:d5:
                    56:7c:c0:42:dc:e9:30:96:43:7e:14:79:4d:e9:25:
                    31:63:c9:32:71:58:86:d5:1f:c7:ff:38:f7:d8:73:
                    1a:60:4d:c7:d8:2a:2b:5b:11:15:3f:d7:d9:77:8c:
                    6f:8b:c0:09:9e:52:5a:5f:f2:20:2c:ab:7d:a1:47:
                    96:17:f4:97:29:80:ed:ea:93:a8:0b:56:cc:87:bf:
                    02:f8:3a:cc:8a:b3:69:25:76:0a:6c:3e:c3:ef:1c:
                    18:63:4c:7c:e0:65:2a:b6:18:1f:ef:98:7b:a6:04:
                    8d:62:de:47:d5:f7:f3:e5:9e:b6:ea:be:ce:7e:93:
                    17:04:e1:a3:3b:92:a3:24:5d:c9:7c:c8:1f:b9:76:
                    a7:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:9B:88:0D:DC:6B:D3:90:16:BB:B1:F8:30:59:A3:EE:31:E6:F9:C7
            X509v3 Authority Key Identifier:
                keyid:FE:1D:18:D9:A2:22:73:6D:BA:C2:31:11:0B:88:DE:AC:8D:B0:33:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_h0Y2aIic226wjERC4jerI2wM20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/_h0Y2aIic226wjERC4jerI2wM20.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/_h0Y2aIic226wjERC4jerI2wM20.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:ac:68:1d:bd:9d:57:7f:63:73:29:65:bb:2c:47:95:65:6f:
         01:61:30:d6:ab:32:09:dd:dd:38:31:6c:aa:f0:61:46:93:f9:
         90:b7:26:4f:c6:e9:d6:53:cd:11:68:cd:42:57:2c:6d:46:b3:
         a3:d3:5a:16:39:4f:ae:a2:63:68:ca:1a:49:bb:b6:41:26:9a:
         98:fa:16:0b:9f:c0:37:b7:49:be:cc:21:2a:d2:b1:0f:e1:d6:
         d4:ca:2f:b9:0a:55:fb:9d:71:32:b8:f6:4e:6e:99:17:34:80:
         89:0d:47:6c:96:47:9f:35:c8:d9:c5:f6:a6:9e:75:12:cb:28:
         9c:6d:63:ba:85:e2:61:c9:1b:d6:91:b6:44:6a:48:f3:90:51:
         d1:5f:a4:e8:8f:2b:15:79:95:1a:46:c5:e6:7e:a2:cb:65:33:
         ae:0e:c3:fc:00:72:a9:b0:3b:ea:fd:a2:7f:24:39:c2:e4:38:
         e7:53:85:26:9a:3d:5a:36:90:7d:78:ed:66:10:5f:39:e0:78:
         5e:c9:2e:d2:60:04:a1:05:2b:4e:78:ae:ae:70:74:41:ca:7f:
         e1:35:11:27:17:4e:7c:9c:9c:fc:51:c9:67:c8:68:16:59:15:
         54:b8:df:44:fe:4c:e0:fc:80:98:52:d0:9a:03:7e:2b:dd:38:
         cc:b6:7d:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:22:12 2025 by rpki-client