Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/2c3619-2c59-46d2-aaae-ef7453ad099f/1/lRZkUh1QOVkhL1WypZrsbSB7Cig.mft
File:                     lRZkUh1QOVkhL1WypZrsbSB7Cig.mft (raw, json)
Hash identifier:          HR7Gp0rANZgunS7uzHy6OfQ8v6P2N84QMvz3Z1I+u7E=
Subject key identifier:   8E:74:92:77:2B:E5:21:10:5A:6E:B2:EF:8A:6E:D8:9F:08:AC:F1:E8
Authority key identifier: 95:16:64:52:1D:50:39:59:21:2F:55:B2:A5:9A:EC:6D:20:7B:0A:28
Certificate issuer:       /CN=951664521d503959212f55b2a59aec6d207b0a28
Certificate serial:       0199FE46FD5EC0C0E0A345D7958A97B9905F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lRZkUh1QOVkhL1WypZrsbSB7Cig.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/2c3619-2c59-46d2-aaae-ef7453ad099f/1/lRZkUh1QOVkhL1WypZrsbSB7Cig.mft
Manifest number:          16E1
Signing time:             Sun 19 Oct 2025 21:01:29 +0000
Manifest this update:     Sun 19 Oct 2025 21:01:29 +0000
Manifest next update:     Mon 20 Oct 2025 21:01:29 +0000
Files and hashes:         1: IPg6gK3cvCBZgriElu-X9QULHhI.roa (hash: KfBBSFaoabvdCiHx1hEd3tUcsuSp0LUQmRosJtF9Y6s=)
                          2: lRZkUh1QOVkhL1WypZrsbSB7Cig.crl (hash: fguM0LJAiWg3BU6yFAo2rcKSlj/yZBRnyHsOtl2waWo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/2c3619-2c59-46d2-aaae-ef7453ad099f/1/lRZkUh1QOVkhL1WypZrsbSB7Cig.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/2c3619-2c59-46d2-aaae-ef7453ad099f/1/lRZkUh1QOVkhL1WypZrsbSB7Cig.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lRZkUh1QOVkhL1WypZrsbSB7Cig.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:46:fd:5e:c0:c0:e0:a3:45:d7:95:8a:97:b9:90:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=951664521d503959212f55b2a59aec6d207b0a28
        Validity
            Not Before: Oct 19 21:01:29 2025 GMT
            Not After : Oct 20 21:01:29 2025 GMT
        Subject: CN=8e7492772be521105a6eb2ef8a6ed89f08acf1e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:f4:69:b1:db:36:e7:91:09:1c:53:2e:f4:c3:
                    b9:ac:1e:f4:16:d9:7a:c3:10:ce:52:cd:6f:4c:df:
                    9f:39:8f:9f:f4:e3:60:e0:70:c3:94:0d:69:e1:c6:
                    f5:55:c0:63:39:ea:f9:4e:04:79:ab:5b:22:8f:45:
                    ec:dc:35:42:62:fa:e4:ed:62:08:06:fc:0b:52:58:
                    ae:33:32:2d:6b:fe:5f:d0:a6:e5:3d:ce:85:13:dd:
                    5a:db:99:2c:8a:bf:5a:9b:9c:87:22:5e:18:ac:90:
                    63:b7:02:8f:ed:33:38:be:6d:9d:0c:cd:94:42:96:
                    f9:a1:db:df:8b:5d:57:2f:49:81:76:e9:72:e9:10:
                    ed:d2:5a:bf:19:94:5e:30:51:32:c8:d5:b2:a0:b1:
                    f2:97:d1:60:61:5d:67:07:c1:00:f9:5e:49:81:07:
                    04:24:da:65:78:8c:f8:a5:30:4e:71:30:9d:78:74:
                    88:46:31:5d:35:6f:84:60:2a:a9:22:8b:99:7a:79:
                    f9:37:e9:5b:c5:59:c8:dd:55:ec:3a:30:70:15:60:
                    0d:23:52:28:74:fd:7e:c6:27:09:2e:b2:9c:5c:49:
                    e9:32:99:2f:d7:79:02:eb:2a:fd:a8:a8:57:3d:01:
                    16:06:f9:13:13:37:fb:9b:45:b9:14:8a:cf:ec:18:
                    6f:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:74:92:77:2B:E5:21:10:5A:6E:B2:EF:8A:6E:D8:9F:08:AC:F1:E8
            X509v3 Authority Key Identifier:
                keyid:95:16:64:52:1D:50:39:59:21:2F:55:B2:A5:9A:EC:6D:20:7B:0A:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lRZkUh1QOVkhL1WypZrsbSB7Cig.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/2c3619-2c59-46d2-aaae-ef7453ad099f/1/lRZkUh1QOVkhL1WypZrsbSB7Cig.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/2c3619-2c59-46d2-aaae-ef7453ad099f/1/lRZkUh1QOVkhL1WypZrsbSB7Cig.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:a7:a2:f7:d5:19:84:d6:3d:47:16:19:de:fd:35:75:26:67:
         20:e4:bd:8f:c3:1f:f0:9f:7a:57:4c:2a:58:9c:62:5e:bd:45:
         eb:c3:cc:9a:95:e3:d9:34:4b:44:3b:24:19:b6:fb:e5:0f:31:
         88:67:0f:11:54:8f:a4:d9:05:eb:cc:80:56:0a:d2:dd:2e:cb:
         60:1b:78:93:f4:b7:05:b4:69:74:7b:70:50:fd:f6:95:0b:c8:
         6e:ae:cf:5e:d6:4f:c8:24:4d:2e:1d:9f:57:bb:ba:87:84:87:
         99:46:01:73:6b:81:7b:d4:f8:71:d9:23:27:92:2f:ad:27:33:
         3c:15:93:58:82:c7:dc:ae:6b:34:9f:04:5a:e7:2f:65:8f:32:
         fa:af:a0:02:63:c6:53:ec:fd:cf:43:00:33:51:5b:6b:03:92:
         d4:79:2a:fa:46:e3:15:c3:d8:fa:45:10:f2:35:df:6d:7e:13:
         1f:6e:eb:64:38:a9:ec:b6:db:00:b0:28:d9:a0:fa:e0:50:f4:
         3c:de:85:3e:8e:3f:66:b1:b5:7f:5f:24:d8:22:b5:dd:1f:dc:
         8f:2c:0d:7d:02:b9:d1:7d:39:a8:59:12:da:25:a5:ac:a0:c3:
         84:f0:d2:83:50:e9:03:c4:fd:ca:f7:dd:09:4e:8f:17:05:fa:
         60:c3:4a:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:43:39 2025 by rpki-client