Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/945dbd-2fb7-4dd1-96a6-0585de4d4ee7/1/RABxct-fwtSi3bupNM68nwKG08o.mft
File:                     RABxct-fwtSi3bupNM68nwKG08o.mft (raw, json)
Hash identifier:          fnlZG8OGbH08aDEZymrXvlHCw5W7fW6rBb3gITzsJf0=
Subject key identifier:   2D:B6:C8:2C:B6:6B:8B:6F:19:41:E7:66:1C:2E:94:7C:1C:0F:DB:2B
Authority key identifier: 44:00:71:72:DF:9F:C2:D4:A2:DD:BB:A9:34:CE:BC:9F:02:86:D3:CA
Certificate issuer:       /CN=44007172df9fc2d4a2ddbba934cebc9f0286d3ca
Certificate serial:       0199FD345449413C17C7BDEA5586F95A6E66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RABxct-fwtSi3bupNM68nwKG08o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/945dbd-2fb7-4dd1-96a6-0585de4d4ee7/1/RABxct-fwtSi3bupNM68nwKG08o.mft
Manifest number:          16E7
Signing time:             Sun 19 Oct 2025 16:01:29 +0000
Manifest this update:     Sun 19 Oct 2025 16:01:29 +0000
Manifest next update:     Mon 20 Oct 2025 16:01:29 +0000
Files and hashes:         1: 480p7BIjIK-B7q3fhqVH-c9jWtM.roa (hash: Oq3bjkZh6ACA9+Ey6L0eW4PFiYEb6oJn3R3aG4qJpMs=)
                          2: 7MVokHTUjOR_Ula_qOVzOSXNEdU.roa (hash: iVCuhBUobzj667bcusQ2j4zXO5PCfzjmGuh6mK8Lkeo=)
                          3: GYuIoE-jlXSckwk_qSK_aV7UB4Q.roa (hash: sORKouCrelcQgpTPPPbZDvGrSxjdHNUzrheoRMHaMrw=)
                          4: RABxct-fwtSi3bupNM68nwKG08o.crl (hash: Y7uJhyUtlWHN6xejK1l48H7bUc42NM4wu5GGlk3JrlA=)
                          5: aa2j5wVm0c-lQnZ_s16QHGRxbVU.roa (hash: 2qdz/uEuQTzsIMdeNOG9LQdnTQSy4fa2A5Rp2WG5LzI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/945dbd-2fb7-4dd1-96a6-0585de4d4ee7/1/RABxct-fwtSi3bupNM68nwKG08o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/945dbd-2fb7-4dd1-96a6-0585de4d4ee7/1/RABxct-fwtSi3bupNM68nwKG08o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RABxct-fwtSi3bupNM68nwKG08o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:34:54:49:41:3c:17:c7:bd:ea:55:86:f9:5a:6e:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44007172df9fc2d4a2ddbba934cebc9f0286d3ca
        Validity
            Not Before: Oct 19 16:01:29 2025 GMT
            Not After : Oct 20 16:01:29 2025 GMT
        Subject: CN=2db6c82cb66b8b6f1941e7661c2e947c1c0fdb2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:33:2f:1d:09:48:fe:e6:6b:44:cc:45:24:c6:
                    64:12:71:59:c5:10:a4:f6:a1:4f:76:3c:3a:d4:e8:
                    81:84:e9:76:d7:f8:ce:55:6b:73:eb:91:d0:82:51:
                    bc:6f:3a:70:ee:d0:1d:5f:9b:95:07:ef:c8:77:89:
                    38:de:20:b6:7d:60:d4:0f:44:05:9e:23:aa:fe:2d:
                    f8:27:eb:91:9b:56:60:88:39:0a:24:d5:db:74:10:
                    d0:ae:53:23:78:cd:c1:63:d1:20:47:5b:1d:48:ed:
                    83:82:40:b0:74:f2:14:ec:02:64:80:96:bd:40:5e:
                    d6:46:3c:99:65:9c:39:06:df:be:74:e7:31:e7:b8:
                    b9:3b:c1:fb:de:4d:37:3c:41:54:ec:61:0b:3e:d2:
                    2d:9f:ee:5b:33:a1:56:3a:ea:e1:72:74:55:90:43:
                    31:4a:fa:d8:95:fa:30:01:3d:30:d3:ea:36:cc:46:
                    e9:52:fd:2e:ff:65:ec:58:f0:c7:df:bb:4b:77:1e:
                    de:3e:4f:1f:ca:01:c3:15:ef:8b:a2:79:40:c0:7e:
                    a7:3d:33:ed:e0:9d:90:0f:dd:29:02:33:de:4a:91:
                    88:2c:5c:d7:31:ab:cc:1d:31:b7:8c:41:f9:15:85:
                    0f:7d:8e:ff:9c:ff:df:7b:33:06:ef:00:55:82:d8:
                    54:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:B6:C8:2C:B6:6B:8B:6F:19:41:E7:66:1C:2E:94:7C:1C:0F:DB:2B
            X509v3 Authority Key Identifier:
                keyid:44:00:71:72:DF:9F:C2:D4:A2:DD:BB:A9:34:CE:BC:9F:02:86:D3:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RABxct-fwtSi3bupNM68nwKG08o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/945dbd-2fb7-4dd1-96a6-0585de4d4ee7/1/RABxct-fwtSi3bupNM68nwKG08o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/945dbd-2fb7-4dd1-96a6-0585de4d4ee7/1/RABxct-fwtSi3bupNM68nwKG08o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:fc:c9:3f:ef:de:b7:49:4c:a4:d8:64:d2:b4:57:e9:29:91:
         09:e3:57:ed:96:b4:f9:d6:91:11:a3:8f:72:3d:a7:66:ec:40:
         80:5e:14:e3:fe:34:dc:c8:37:2b:13:e2:83:29:62:a9:1d:da:
         52:e2:c7:66:16:31:9a:ef:ec:80:73:ee:90:f0:8e:84:dd:4f:
         7f:7e:2a:38:d2:32:3d:10:6c:af:60:51:fb:cc:16:a0:a3:d3:
         f8:43:15:6f:9d:b1:f1:b5:e5:9d:94:ce:51:69:2b:a8:2c:ae:
         52:68:af:e3:b9:ad:93:72:44:a9:c7:60:3a:4e:05:fb:5e:f1:
         ad:f4:d7:0e:13:69:23:43:cc:59:a6:bb:64:ef:58:37:fb:87:
         0f:f3:a1:8d:83:f5:0b:ef:21:ba:a4:fb:a3:18:0a:d4:c6:1f:
         ba:25:97:8f:56:39:d6:7a:0f:e9:ee:20:75:2f:a4:82:26:3c:
         ec:9a:f1:0c:28:31:14:13:69:e4:af:3a:ee:94:be:b2:35:c1:
         7d:20:ea:4f:ab:98:63:84:56:65:f4:72:dd:98:97:0f:7e:61:
         b2:a9:ca:18:cd:87:30:6b:47:7c:43:1d:da:7c:db:f8:0a:dc:
         11:a7:f7:05:93:09:29:94:44:95:2d:93:87:8e:24:4a:af:bc:
         a8:24:84:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:00:36 2025 by rpki-client