Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/50f08f-f907-44de-be94-05764c7edaa7/1/SrbXxGjQkskhMU1mRzz6U4Uc1oY.mft
File:                     SrbXxGjQkskhMU1mRzz6U4Uc1oY.mft (raw, json)
Hash identifier:          KWMcEZpGmF5/rO6wBboo6htgwfofE20yuBmUbZHRNyw=
Subject key identifier:   08:35:06:C9:DE:08:25:CA:3C:51:59:FD:C4:A8:61:6B:25:35:92:6D
Authority key identifier: 4A:B6:D7:C4:68:D0:92:C9:21:31:4D:66:47:3C:FA:53:85:1C:D6:86
Certificate issuer:       /CN=4ab6d7c468d092c921314d66473cfa53851cd686
Certificate serial:       019A00A392BFEF255DEFFC8099FC152659FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SrbXxGjQkskhMU1mRzz6U4Uc1oY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/50f08f-f907-44de-be94-05764c7edaa7/1/SrbXxGjQkskhMU1mRzz6U4Uc1oY.mft
Manifest number:          16E6
Signing time:             Mon 20 Oct 2025 08:01:51 +0000
Manifest this update:     Mon 20 Oct 2025 08:01:51 +0000
Manifest next update:     Tue 21 Oct 2025 08:01:51 +0000
Files and hashes:         1: 18JawMIQ4IIjxCBNljP_sugctIs.roa (hash: EGBShqy4nnzMqWs1NYZxzIjsKkDa8M7h19J8gjpdtvA=)
                          2: 9b23r5dTMPyh48lf-ARDs_h89Qw.roa (hash: WWbvC+50HLDLUoSb1icbjf3J+3CktO1G6aw8ss6OERc=)
                          3: C6gHQdBURBlm35x0GDwcWWNARyk.roa (hash: GaokyZWXRvMib4ncq4hEcNLu2IPcx/q3bdp2NSF7Jyk=)
                          4: QVs3JRJ54mdavYMKzmA8EI3DNl4.roa (hash: LgJPv3PoY+gQldztQf/0Gwj+6GMbnE4l+sQElujcqSY=)
                          5: SrbXxGjQkskhMU1mRzz6U4Uc1oY.crl (hash: s6NBEooChzKp377+m0TOkefN9DJaCUh2Q+kaSnGgPUw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/50f08f-f907-44de-be94-05764c7edaa7/1/SrbXxGjQkskhMU1mRzz6U4Uc1oY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/50f08f-f907-44de-be94-05764c7edaa7/1/SrbXxGjQkskhMU1mRzz6U4Uc1oY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SrbXxGjQkskhMU1mRzz6U4Uc1oY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 08:01:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:00:a3:92:bf:ef:25:5d:ef:fc:80:99:fc:15:26:59:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ab6d7c468d092c921314d66473cfa53851cd686
        Validity
            Not Before: Oct 20 08:01:51 2025 GMT
            Not After : Oct 21 08:01:51 2025 GMT
        Subject: CN=083506c9de0825ca3c5159fdc4a8616b2535926d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c7:59:46:d5:85:12:0d:f8:b3:72:b8:7f:94:
                    7d:b8:92:5f:6f:c1:4a:6f:4a:44:ad:5a:80:92:8f:
                    5d:0a:8a:67:de:b2:72:5b:b2:d2:6a:2d:6d:bb:3b:
                    50:fe:66:c4:e0:93:05:ba:01:70:6a:52:c3:42:89:
                    80:91:cd:98:59:f6:b5:e2:d3:1e:78:28:b4:ee:f4:
                    bc:5b:7c:f3:63:b5:09:75:ed:3e:95:23:44:9f:0a:
                    57:d2:93:9d:c6:98:ea:4c:03:bf:13:c9:2d:c8:82:
                    e6:9f:15:ea:b0:5b:17:c2:14:bd:8c:73:35:03:78:
                    ce:44:10:7e:60:1a:5e:d9:46:ab:a7:d6:98:6a:77:
                    5d:c3:5f:f4:d5:43:86:09:11:d8:4c:47:2b:47:bf:
                    71:2d:68:1b:1b:a8:15:09:54:83:43:93:e0:bd:f2:
                    fb:5c:78:a7:4f:56:8e:cd:e6:fa:ae:9e:df:b1:81:
                    ce:43:28:7e:79:2f:4d:a9:a6:1c:d3:bc:e1:26:68:
                    57:bb:f3:e0:bb:c3:10:16:56:c1:75:d3:82:32:d0:
                    cb:25:5b:f9:b3:18:bb:a2:db:3f:66:44:aa:40:a5:
                    fa:0a:84:c8:32:ec:49:1c:be:67:cd:87:c1:36:79:
                    c6:ef:26:59:ba:7e:e5:06:ae:f4:e7:95:1c:d8:73:
                    b7:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:35:06:C9:DE:08:25:CA:3C:51:59:FD:C4:A8:61:6B:25:35:92:6D
            X509v3 Authority Key Identifier:
                keyid:4A:B6:D7:C4:68:D0:92:C9:21:31:4D:66:47:3C:FA:53:85:1C:D6:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SrbXxGjQkskhMU1mRzz6U4Uc1oY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/50f08f-f907-44de-be94-05764c7edaa7/1/SrbXxGjQkskhMU1mRzz6U4Uc1oY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/50f08f-f907-44de-be94-05764c7edaa7/1/SrbXxGjQkskhMU1mRzz6U4Uc1oY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:4f:61:5a:a3:4c:41:ec:b4:b6:86:ee:b7:86:e6:54:ad:c5:
         dd:95:57:75:54:e8:2c:c1:a4:57:57:2f:6d:e8:0d:1b:f3:1e:
         c2:74:d4:06:78:71:da:7c:52:a1:40:2f:5d:3c:db:eb:cd:71:
         04:21:0d:d9:94:21:fc:f6:23:25:e1:a6:47:43:35:95:6e:00:
         e9:4f:f5:9c:0f:48:4b:90:8f:53:04:73:bb:fa:23:95:4b:16:
         91:98:a2:b5:df:e4:ab:ea:ec:d9:85:81:fa:4f:68:c1:4b:32:
         4d:49:53:c3:a6:9e:9d:bc:66:83:ab:e1:5d:9c:19:5a:ac:8a:
         63:45:51:09:8d:b7:b2:b5:28:e1:33:e8:59:85:d3:2f:fa:2c:
         69:d6:c9:0a:8d:7c:da:fb:be:31:1b:09:37:17:3d:43:7c:8e:
         2a:b6:61:30:e0:d1:fa:2d:09:8d:d4:76:58:d3:65:8b:55:b0:
         4a:94:d8:1d:a3:66:f4:1a:14:dd:a9:2e:05:12:dc:70:9a:12:
         21:9f:63:72:d5:a8:d8:c5:49:46:a8:47:9f:88:a3:56:ad:5e:
         b1:89:71:b6:20:d1:1a:10:37:fd:d6:34:5e:9f:ba:33:c5:dd:
         f4:74:25:48:0f:d1:76:2a:52:a1:49:67:ba:11:6c:a1:09:df:
         a6:9d:5c:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:01:31 2025 by rpki-client