Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/9d0a15-d546-4970-9a81-8596c2af9dcc/1/aFepuyl_CzxESrCvZzpSdQ6Xm04.mft
File:                     aFepuyl_CzxESrCvZzpSdQ6Xm04.mft (raw, json)
Hash identifier:          Kn6DJNr5RW3ejk2TjywIEWp0ChUfwQ9A+xkOZgsru+0=
Subject key identifier:   2B:57:91:28:FA:9F:67:3C:E1:4C:84:44:FC:1C:27:F2:09:44:8F:4B
Authority key identifier: 68:57:A9:BB:29:7F:0B:3C:44:4A:B0:AF:67:3A:52:75:0E:97:9B:4E
Certificate issuer:       /CN=6857a9bb297f0b3c444ab0af673a52750e979b4e
Certificate serial:       0199FDDA5565DD1473EED051905674934E14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aFepuyl_CzxESrCvZzpSdQ6Xm04.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/9d0a15-d546-4970-9a81-8596c2af9dcc/1/aFepuyl_CzxESrCvZzpSdQ6Xm04.mft
Manifest number:          16E3
Signing time:             Sun 19 Oct 2025 19:02:48 +0000
Manifest this update:     Sun 19 Oct 2025 19:02:48 +0000
Manifest next update:     Mon 20 Oct 2025 19:02:48 +0000
Files and hashes:         1: aFepuyl_CzxESrCvZzpSdQ6Xm04.crl (hash: 68DTFYDRjbrdk9gLWJJ2x/UjODOYkEO72zSBWgWe4HU=)
                          2: qnXqSBmvIClWRdSX3rmYASI_2Pc.roa (hash: 2FNK4DlE8j3wOu3WxQxB7a85ZmjXWPid3Sa9pj/6S3M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/9d0a15-d546-4970-9a81-8596c2af9dcc/1/aFepuyl_CzxESrCvZzpSdQ6Xm04.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/9d0a15-d546-4970-9a81-8596c2af9dcc/1/aFepuyl_CzxESrCvZzpSdQ6Xm04.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aFepuyl_CzxESrCvZzpSdQ6Xm04.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:da:55:65:dd:14:73:ee:d0:51:90:56:74:93:4e:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6857a9bb297f0b3c444ab0af673a52750e979b4e
        Validity
            Not Before: Oct 19 19:02:48 2025 GMT
            Not After : Oct 20 19:02:48 2025 GMT
        Subject: CN=2b579128fa9f673ce14c8444fc1c27f209448f4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:af:d0:20:64:fe:f0:32:9f:c4:48:6c:da:2c:
                    7b:74:d3:15:51:ce:c3:25:72:fe:97:11:b2:c8:b2:
                    38:22:d0:9f:e6:5f:69:bb:20:b0:be:f2:9e:20:0a:
                    9b:31:6c:96:79:f7:ef:22:9e:66:57:dd:ee:2c:04:
                    01:17:8d:66:b5:08:6e:30:3c:58:cc:61:38:65:13:
                    40:8d:29:b8:36:82:63:13:48:9c:7f:19:9b:6e:c7:
                    91:69:31:f4:cb:a0:c5:92:95:bd:c0:7e:f8:f8:c9:
                    e0:ab:0c:97:8b:3e:b1:a8:04:20:35:5c:05:c0:04:
                    1d:4b:84:ed:e2:9f:8d:ed:95:cf:18:51:65:a6:53:
                    a5:56:10:bd:31:eb:77:89:3b:93:3c:9b:eb:24:9d:
                    54:e9:73:e7:24:d2:34:18:c7:58:a4:ef:08:b9:f3:
                    6f:20:31:12:ed:14:33:78:ea:6b:7e:b9:08:ca:90:
                    7e:1f:7e:89:19:30:3a:eb:53:ec:5d:76:e6:e6:c6:
                    77:86:03:15:72:61:d9:7d:3b:f1:7c:5c:5c:fd:60:
                    98:07:e2:08:2d:c0:4c:12:8d:d5:42:32:c5:71:0d:
                    5d:8f:b3:aa:31:c6:81:c5:77:d1:65:74:52:24:70:
                    ef:fe:07:b6:ce:0f:7b:57:64:f9:2e:a5:fe:a6:53:
                    1e:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:57:91:28:FA:9F:67:3C:E1:4C:84:44:FC:1C:27:F2:09:44:8F:4B
            X509v3 Authority Key Identifier:
                keyid:68:57:A9:BB:29:7F:0B:3C:44:4A:B0:AF:67:3A:52:75:0E:97:9B:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aFepuyl_CzxESrCvZzpSdQ6Xm04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9d0a15-d546-4970-9a81-8596c2af9dcc/1/aFepuyl_CzxESrCvZzpSdQ6Xm04.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9d0a15-d546-4970-9a81-8596c2af9dcc/1/aFepuyl_CzxESrCvZzpSdQ6Xm04.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:b9:ef:3f:1c:ae:0c:35:9f:21:a2:b4:2e:d7:e1:da:fd:d0:
         f8:e9:dd:1b:85:42:2b:60:6a:35:f4:35:69:c7:a6:7c:a4:0d:
         3f:ec:b0:81:14:a1:83:82:3f:17:6f:c9:86:ed:da:42:4c:49:
         eb:c2:99:63:38:e4:10:5f:f6:3b:f6:05:cc:b9:a3:73:fc:8a:
         ef:c3:a4:2f:91:aa:b1:20:ea:86:2b:8a:74:e2:b7:c6:cb:98:
         9a:fc:57:9c:3d:4e:7d:f1:66:0c:f9:76:f9:32:e9:9d:47:e4:
         3b:eb:c2:88:dc:9c:31:d4:b8:c3:5b:3c:83:79:c5:1e:0f:ba:
         71:01:f4:5b:fd:b8:0b:77:1a:d9:1e:d6:37:61:e6:dc:18:55:
         5c:7d:51:db:52:a6:88:27:ca:d5:11:11:d9:7d:3a:01:61:b4:
         c4:ee:cd:11:92:a1:83:35:8a:7f:c2:5b:83:47:90:e5:4f:d6:
         02:54:07:8d:03:16:89:20:b1:b7:78:fc:96:d0:f5:66:8c:f4:
         7d:8b:ae:3a:e8:3c:91:5b:17:69:45:1b:4c:44:04:72:c1:87:
         20:10:b3:71:17:55:4d:97:2b:61:13:ed:99:7a:24:5b:5b:22:
         1d:82:97:c1:a0:38:b1:b2:72:9e:98:8d:18:a4:f1:03:89:2a:
         3c:62:06:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:57:44 2025 by rpki-client