Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.mft
File:                     k8ONPhxOflQ6Nsi2NT62baTatAs.mft (raw, json)
Hash identifier:          GpPDg0hm8A516VylZQT8AIoxu5kdXFjltuhWf0xa/PU=
Subject key identifier:   53:3A:B4:51:C8:A3:2F:1B:FE:99:64:D5:21:AF:D4:99:21:9A:6A:C5
Authority key identifier: 93:C3:8D:3E:1C:4E:7E:54:3A:36:C8:B6:35:3E:B6:6D:A4:DA:B4:0B
Certificate issuer:       /CN=93c38d3e1c4e7e543a36c8b6353eb66da4dab40b
Certificate serial:       0199FEEBA589D6A21A3BF273073C20BE32C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k8ONPhxOflQ6Nsi2NT62baTatAs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.mft
Manifest number:          16E3
Signing time:             Mon 20 Oct 2025 00:01:20 +0000
Manifest this update:     Mon 20 Oct 2025 00:01:20 +0000
Manifest next update:     Tue 21 Oct 2025 00:01:20 +0000
Files and hashes:         1: VRs8CShO6bRg5uI1JwT1RKe3PrI.roa (hash: fbnkM+ZXK5PucV+W/pV7w3InLQ8yhq+sy8zU5D/9V1k=)
                          2: k8ONPhxOflQ6Nsi2NT62baTatAs.crl (hash: pr2f+08O0XOE9iCNPZ8EV2wKvNzgJ5GJXwehkoBqKMQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k8ONPhxOflQ6Nsi2NT62baTatAs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:eb:a5:89:d6:a2:1a:3b:f2:73:07:3c:20:be:32:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93c38d3e1c4e7e543a36c8b6353eb66da4dab40b
        Validity
            Not Before: Oct 20 00:01:20 2025 GMT
            Not After : Oct 21 00:01:20 2025 GMT
        Subject: CN=533ab451c8a32f1bfe9964d521afd499219a6ac5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:76:71:6e:f6:b5:fd:8b:bc:72:2e:b1:51:58:
                    1c:ee:20:5c:fc:92:54:5e:e5:48:6e:6d:3c:2c:6a:
                    bf:54:80:ca:5a:dd:a9:d8:39:6b:55:7c:62:64:16:
                    6b:af:5b:ad:64:d1:6c:95:c7:c4:64:89:86:f7:67:
                    51:f1:b0:51:50:af:92:52:68:f8:29:d4:e1:3d:c2:
                    00:d3:0b:0a:b0:75:e6:cf:b9:29:e7:99:bd:79:30:
                    db:d9:6e:f0:d6:4d:58:33:88:41:4c:fc:42:d4:c8:
                    ba:75:8d:fe:8d:2d:6b:c2:12:41:12:76:d7:47:f6:
                    59:d7:55:db:9d:fb:dd:ba:7b:1b:15:44:d4:27:f3:
                    02:e8:c3:1c:2e:61:6d:8f:67:29:9d:ce:83:e5:df:
                    c2:c5:95:1b:f9:43:89:fa:06:e2:69:dc:78:c9:52:
                    1b:91:23:ab:fc:e1:64:b4:f8:65:05:6d:69:02:66:
                    ad:eb:53:2c:a8:e8:6c:dd:25:07:b1:b4:5e:c6:a6:
                    dc:4a:5c:bb:52:07:8c:c0:26:5c:75:ef:a1:fb:34:
                    87:e7:15:01:8d:f6:7b:0f:3a:fa:38:42:7c:d9:26:
                    b3:07:0a:61:20:36:4c:28:ed:ca:10:24:00:66:fe:
                    8c:76:95:66:f4:35:ac:fa:c9:bd:94:5c:4f:b0:b8:
                    a9:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:3A:B4:51:C8:A3:2F:1B:FE:99:64:D5:21:AF:D4:99:21:9A:6A:C5
            X509v3 Authority Key Identifier:
                keyid:93:C3:8D:3E:1C:4E:7E:54:3A:36:C8:B6:35:3E:B6:6D:A4:DA:B4:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k8ONPhxOflQ6Nsi2NT62baTatAs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:92:87:d5:54:04:7e:14:a2:bb:77:64:41:f9:94:eb:be:bb:
         15:76:cd:29:d9:8f:4b:0a:d3:96:a5:86:8c:9e:24:dd:1d:ed:
         62:cc:69:f6:16:b1:16:cb:b3:fa:13:f4:04:94:4c:f4:cc:f8:
         2b:2e:df:fc:69:c2:89:e6:8a:24:04:5b:9d:20:bf:01:fe:a3:
         11:7b:3c:e6:ba:82:6a:ab:ef:ac:e9:8a:31:53:c3:5c:3e:ec:
         05:45:9f:3e:2c:94:a5:7f:12:03:fe:28:26:91:7e:10:6f:57:
         14:29:40:63:af:f5:9b:58:f2:3b:b7:ac:15:50:27:cd:6d:05:
         f4:0c:8a:c1:c3:04:21:5b:f8:a7:27:5f:71:19:01:c6:2d:05:
         ae:77:74:75:d3:ff:fd:05:ab:99:a6:a5:dc:34:94:92:b5:6c:
         8f:d6:21:86:29:25:46:e8:2f:d1:dd:28:c8:52:89:12:27:f4:
         55:f7:06:b7:9c:30:e3:c2:11:b8:6f:99:a7:56:42:51:b2:d1:
         ef:93:bc:a8:20:ae:df:c9:1c:1e:01:05:e2:29:6b:1e:ed:7b:
         7d:84:5e:47:b6:dd:bf:07:6b:f5:64:00:90:9c:5f:a4:e3:59:
         14:33:6a:b7:c9:28:d0:19:49:62:40:13:8c:a4:18:01:33:15:
         e9:78:b6:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:48:42 2025 by rpki-client