Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/e6a0db-c766-4991-b72c-74bd045b2af7/1/I-Ivi97cvhm7M_zhT8HbauOkDpA.mft
File:                     I-Ivi97cvhm7M_zhT8HbauOkDpA.mft (raw, json)
Hash identifier:          HsNmV674sgPRDrf4xI31lDDfaYbNl9dKgeSpXeu+GoA=
Subject key identifier:   C5:9C:96:CC:36:E1:A8:44:05:21:0A:41:FD:09:84:A3:0A:30:1A:EC
Authority key identifier: 23:E2:2F:8B:DE:DC:BE:19:BB:33:FC:E1:4F:C1:DB:6A:E3:A4:0E:90
Certificate issuer:       /CN=23e22f8bdedcbe19bb33fce14fc1db6ae3a40e90
Certificate serial:       0199FCC652D5111D74B05B4E19451D0B1846
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I-Ivi97cvhm7M_zhT8HbauOkDpA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/e6a0db-c766-4991-b72c-74bd045b2af7/1/I-Ivi97cvhm7M_zhT8HbauOkDpA.mft
Manifest number:          16E2
Signing time:             Sun 19 Oct 2025 14:01:19 +0000
Manifest this update:     Sun 19 Oct 2025 14:01:19 +0000
Manifest next update:     Mon 20 Oct 2025 14:01:19 +0000
Files and hashes:         1: BSo6esZVhXizhr6rXIY91M7Ycb0.roa (hash: rDl9FCgKvio+Um9dNVGYTCS6mmU9eKk7X7/TBLZ4IMU=)
                          2: I-Ivi97cvhm7M_zhT8HbauOkDpA.crl (hash: 41tQusI/4Ijz07YptpJcIxGTUKuPYUQo00lYI+2HBwY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/e6a0db-c766-4991-b72c-74bd045b2af7/1/I-Ivi97cvhm7M_zhT8HbauOkDpA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/e6a0db-c766-4991-b72c-74bd045b2af7/1/I-Ivi97cvhm7M_zhT8HbauOkDpA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I-Ivi97cvhm7M_zhT8HbauOkDpA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:c6:52:d5:11:1d:74:b0:5b:4e:19:45:1d:0b:18:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23e22f8bdedcbe19bb33fce14fc1db6ae3a40e90
        Validity
            Not Before: Oct 19 14:01:19 2025 GMT
            Not After : Oct 20 14:01:19 2025 GMT
        Subject: CN=c59c96cc36e1a84405210a41fd0984a30a301aec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e8:18:60:db:4f:c8:7a:22:45:00:7c:97:21:
                    c9:1b:69:df:9c:4f:8b:a9:78:70:b4:39:4f:ab:a2:
                    0a:72:e3:31:90:1c:9f:92:f6:4d:91:e0:8f:81:78:
                    9c:d4:39:94:8e:32:fe:6a:2d:60:64:a1:85:9e:b8:
                    97:08:a4:76:5e:5e:0b:5e:24:b7:ca:a4:f9:57:5d:
                    7d:8f:f5:04:02:85:c1:59:de:1d:d3:fb:0d:94:7c:
                    55:0c:76:8a:cc:de:11:71:75:a4:f1:15:f7:d6:97:
                    0a:d6:66:fc:76:2d:75:ac:b5:40:83:b1:b7:ed:72:
                    b4:8b:1a:3f:53:14:54:3a:0b:d7:e9:93:de:f7:8e:
                    f1:bd:72:24:da:1a:2c:25:88:96:fc:15:68:6a:49:
                    b9:30:73:4b:b2:79:f3:5b:c3:f4:cc:91:eb:ee:71:
                    42:ba:45:9d:28:b0:b0:1d:0c:85:88:b2:b2:d8:c0:
                    15:f6:9f:e6:d3:bd:5f:26:88:a3:04:f2:ba:8f:87:
                    66:fb:34:e4:16:a4:29:59:dc:6c:91:f4:b4:b3:9b:
                    b6:2a:e4:b1:35:a6:da:58:fe:ba:91:8d:7c:44:15:
                    86:41:1b:79:66:99:f4:ec:c1:0b:b0:83:e3:04:b4:
                    5c:35:d2:2b:d9:b6:75:6c:5c:df:73:46:21:89:e1:
                    07:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:9C:96:CC:36:E1:A8:44:05:21:0A:41:FD:09:84:A3:0A:30:1A:EC
            X509v3 Authority Key Identifier:
                keyid:23:E2:2F:8B:DE:DC:BE:19:BB:33:FC:E1:4F:C1:DB:6A:E3:A4:0E:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-Ivi97cvhm7M_zhT8HbauOkDpA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e6a0db-c766-4991-b72c-74bd045b2af7/1/I-Ivi97cvhm7M_zhT8HbauOkDpA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e6a0db-c766-4991-b72c-74bd045b2af7/1/I-Ivi97cvhm7M_zhT8HbauOkDpA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:e4:b7:eb:0e:c7:e1:ed:8e:68:82:4a:62:c7:f5:3f:78:ff:
         e6:0a:05:d8:ae:bb:66:d0:4e:c6:cc:90:7b:c3:49:3d:29:c8:
         3b:85:99:d4:a1:67:2d:38:6b:37:09:4c:80:ed:31:c4:33:f3:
         bc:ba:0b:ee:f9:16:5e:51:9a:4c:5e:e6:f9:5d:80:ea:b2:a8:
         44:ff:3d:ce:37:ca:16:45:bb:a3:f1:5b:f2:51:c9:f8:bd:f9:
         5f:3c:5e:d9:58:ff:6d:57:33:a1:5d:2a:48:7c:60:df:2d:d7:
         be:c3:d0:63:57:60:f4:b3:9e:e4:ae:30:3f:09:c2:40:ed:80:
         a5:63:22:61:3f:b0:2e:58:a8:ea:f8:3b:11:42:18:65:94:8a:
         1f:40:01:19:fb:43:44:46:e7:48:d9:77:ef:0d:e6:35:6d:25:
         fb:48:b8:6a:e8:d1:73:e3:4c:07:af:d3:44:49:04:00:d8:46:
         fe:cd:9b:dd:31:bf:8c:51:0e:eb:97:56:01:9d:01:31:33:a3:
         d2:62:18:10:26:54:c9:24:89:3e:2c:ba:d6:ad:fc:ec:1d:f8:
         5f:14:12:09:1d:a1:77:f9:d1:c1:66:38:e6:c2:f5:72:b6:0f:
         3d:e7:a2:8e:a0:f2:e8:a5:c5:42:7d:aa:de:79:32:7f:00:60:
         38:16:41:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:46:50 2025 by rpki-client