Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/d8e5aa-b119-459e-93f6-a146d6047337/1/_byekQMWvi8EM6qVOSzWc53Ca4Y.mft
File:                     _byekQMWvi8EM6qVOSzWc53Ca4Y.mft (raw, json)
Hash identifier:          cvZpohL1WQOoj6dytQGAzoCoKSBwivnALhfnDMugYRo=
Subject key identifier:   EE:75:77:1B:D6:F8:6E:30:4E:42:A0:54:25:D5:A5:E1:5F:CD:C7:B6
Authority key identifier: FD:BC:9E:91:03:16:BE:2F:04:33:AA:95:39:2C:D6:73:9D:C2:6B:86
Certificate issuer:       /CN=fdbc9e910316be2f0433aa95392cd6739dc26b86
Certificate serial:       0199FC8F2F6A5B5F70C1336CEAC9654C0BB0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_byekQMWvi8EM6qVOSzWc53Ca4Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/d8e5aa-b119-459e-93f6-a146d6047337/1/_byekQMWvi8EM6qVOSzWc53Ca4Y.mft
Manifest number:          16E3
Signing time:             Sun 19 Oct 2025 13:01:06 +0000
Manifest this update:     Sun 19 Oct 2025 13:01:06 +0000
Manifest next update:     Mon 20 Oct 2025 13:01:06 +0000
Files and hashes:         1: _byekQMWvi8EM6qVOSzWc53Ca4Y.crl (hash: wx2I10mlmC36YVZAF1YjpYpKSTUfkpZfviRSkHn6sMA=)
                          2: yxRSGJfki1mfuRlitSEOgfKdMqI.roa (hash: T4WCtISFCRzOuyE0OUo1rNu8VMdZMXWp/avFZYHhGtc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/d8e5aa-b119-459e-93f6-a146d6047337/1/_byekQMWvi8EM6qVOSzWc53Ca4Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/d8e5aa-b119-459e-93f6-a146d6047337/1/_byekQMWvi8EM6qVOSzWc53Ca4Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_byekQMWvi8EM6qVOSzWc53Ca4Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:8f:2f:6a:5b:5f:70:c1:33:6c:ea:c9:65:4c:0b:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdbc9e910316be2f0433aa95392cd6739dc26b86
        Validity
            Not Before: Oct 19 13:01:06 2025 GMT
            Not After : Oct 20 13:01:06 2025 GMT
        Subject: CN=ee75771bd6f86e304e42a05425d5a5e15fcdc7b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ca:ce:da:9c:62:5a:6c:ff:48:88:cb:06:01:
                    dc:b6:8a:42:21:58:67:41:52:7e:ba:7f:bd:c8:a6:
                    7b:1a:ae:85:93:14:c9:83:8a:92:83:23:0f:48:1a:
                    b6:e4:87:fe:b0:1d:23:47:a1:be:fa:98:6e:97:06:
                    78:73:95:eb:4e:24:c6:b7:a6:1e:4f:63:3f:4a:00:
                    f2:b2:88:59:c2:aa:20:db:ed:48:c9:99:53:ab:db:
                    7f:ab:c6:56:6c:b5:a2:f3:74:a3:01:83:ff:18:94:
                    18:32:51:51:d9:6f:f1:10:7d:8e:5f:de:d1:3f:65:
                    0b:6e:4b:0f:44:e6:03:4b:ef:ec:79:03:5e:26:f4:
                    ec:3b:a5:fc:1d:80:27:0e:09:27:5c:fa:ad:2d:c1:
                    0a:5f:99:06:6f:18:d9:1d:22:1f:a1:00:88:bc:57:
                    2c:9b:ff:cf:13:91:ae:66:e8:ac:52:06:61:1f:ac:
                    21:9d:13:34:7b:49:55:17:e9:8a:39:23:57:03:78:
                    f2:50:ff:a3:48:9c:ba:ae:bf:40:10:72:09:c0:f3:
                    e3:eb:ec:4c:23:88:25:0f:11:03:89:94:3a:2f:46:
                    7c:f9:e9:9d:56:54:67:e2:56:c7:73:20:fe:4d:33:
                    72:67:da:9c:83:78:33:a9:60:59:ee:aa:62:60:90:
                    cf:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:75:77:1B:D6:F8:6E:30:4E:42:A0:54:25:D5:A5:E1:5F:CD:C7:B6
            X509v3 Authority Key Identifier:
                keyid:FD:BC:9E:91:03:16:BE:2F:04:33:AA:95:39:2C:D6:73:9D:C2:6B:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_byekQMWvi8EM6qVOSzWc53Ca4Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/d8e5aa-b119-459e-93f6-a146d6047337/1/_byekQMWvi8EM6qVOSzWc53Ca4Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/d8e5aa-b119-459e-93f6-a146d6047337/1/_byekQMWvi8EM6qVOSzWc53Ca4Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:19:f3:93:f0:e7:94:87:dc:71:2e:91:94:d7:18:fc:22:52:
         70:e4:12:92:50:0c:f0:65:45:2b:d8:7c:b6:1b:2c:59:a5:95:
         00:b3:db:0b:eb:72:e6:c2:61:d7:a9:df:a2:4b:f0:55:5f:e0:
         7a:76:bc:42:87:5b:7d:3e:7a:37:fc:0f:f4:74:9a:70:d7:4f:
         67:34:67:36:a9:e4:3c:e1:f5:df:10:8d:ba:da:97:76:ea:9d:
         38:90:f9:fa:f6:c1:e7:24:fb:28:68:f2:73:0e:d4:39:7f:21:
         22:63:6f:98:e5:76:67:01:e9:d2:be:3a:46:29:9b:21:f3:15:
         8b:fa:6c:28:78:5d:84:36:ba:5a:4e:51:1a:ac:94:7c:24:3d:
         b3:06:c2:83:17:01:48:21:a4:9b:12:98:f4:8c:fd:53:ac:49:
         7b:d6:ea:61:f6:15:41:43:21:44:99:e2:d3:50:2b:52:90:12:
         9b:1d:2c:67:54:93:90:5b:70:b1:c4:8a:ab:11:4b:dc:f3:68:
         50:f9:73:66:07:c4:c3:da:2e:cc:d2:ae:17:96:97:9f:eb:78:
         f4:c9:bb:ba:02:24:a9:d4:28:2f:f5:4a:4a:c3:c7:9c:58:63:
         ea:ef:38:f2:a2:c2:42:48:b0:a0:35:30:28:44:76:c9:04:0e:
         c5:08:45:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:37 2025 by rpki-client