Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.mft
File:                     kwTroql6CcmzsIz_g9-0dxQbwcs.mft (raw, json)
Hash identifier:          iVDGwLsOIq6JrXbtH2iaAdo6s6yP0ejhgmZN56fj3hI=
Subject key identifier:   4B:65:3D:C9:D0:B7:F5:C9:50:C0:99:93:83:AF:76:36:26:6F:B9:21
Authority key identifier: 93:04:EB:A2:A9:7A:09:C9:B3:B0:8C:FF:83:DF:B4:77:14:1B:C1:CB
Certificate issuer:       /CN=9304eba2a97a09c9b3b08cff83dfb477141bc1cb
Certificate serial:       0199FD6B65F0DA660DB10A9D4467BA86B353
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kwTroql6CcmzsIz_g9-0dxQbwcs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.mft
Manifest number:          16E4
Signing time:             Sun 19 Oct 2025 17:01:37 +0000
Manifest this update:     Sun 19 Oct 2025 17:01:37 +0000
Manifest next update:     Mon 20 Oct 2025 17:01:37 +0000
Files and hashes:         1: kwTroql6CcmzsIz_g9-0dxQbwcs.crl (hash: vnK00wu6N/twRgqFtex+vYEz7c/4xvX6wy2SgQlVlGk=)
                          2: veklkDiCqI48H1uQ5ixFAlK84NY.roa (hash: KUIRIFDZrVheg1iXYyW8LsCjhDrH33Kf+Op6ybMvK2o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kwTroql6CcmzsIz_g9-0dxQbwcs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:6b:65:f0:da:66:0d:b1:0a:9d:44:67:ba:86:b3:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9304eba2a97a09c9b3b08cff83dfb477141bc1cb
        Validity
            Not Before: Oct 19 17:01:37 2025 GMT
            Not After : Oct 20 17:01:37 2025 GMT
        Subject: CN=4b653dc9d0b7f5c950c0999383af7636266fb921
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e9:f9:76:1d:58:94:80:ce:f1:df:ef:7a:75:
                    be:c2:f6:e9:59:6e:d1:7f:5b:c1:d5:2d:78:a2:ce:
                    37:95:56:4a:81:6b:52:60:0b:94:1b:88:8b:ae:f0:
                    6a:2c:ce:e3:65:8e:d6:d6:9e:9a:52:ae:7d:06:45:
                    86:e4:93:a3:e5:55:8b:77:f4:09:95:a1:21:9e:c4:
                    8a:f1:22:d4:37:71:d5:a1:9b:47:de:62:29:2a:47:
                    12:64:46:0a:f7:14:00:55:ef:73:17:1d:cd:f9:d7:
                    c4:74:1a:84:2f:86:0d:a2:60:3a:e9:32:66:64:ea:
                    50:af:8a:03:7d:41:a3:99:a1:3d:8b:b8:36:0b:df:
                    e3:9d:d3:fc:f3:76:97:ec:c3:fb:42:8e:bd:c5:5c:
                    af:f6:2a:0e:89:bb:36:f8:b4:a8:da:2d:a8:d6:b6:
                    4c:e6:5a:bb:c7:b2:ae:f4:19:4e:7a:48:c9:ba:3a:
                    b7:43:5c:95:34:d5:85:50:63:a6:f3:3f:65:08:69:
                    40:bb:a4:5f:d4:c4:1a:3f:66:ff:67:ca:15:20:26:
                    11:74:f5:5a:d2:aa:67:da:f3:42:f2:4c:99:d3:7c:
                    19:df:e2:c6:66:60:3e:40:b9:3e:2f:62:bc:30:cf:
                    b2:35:ca:02:99:fb:d4:3e:48:39:19:8e:74:29:93:
                    fb:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:65:3D:C9:D0:B7:F5:C9:50:C0:99:93:83:AF:76:36:26:6F:B9:21
            X509v3 Authority Key Identifier:
                keyid:93:04:EB:A2:A9:7A:09:C9:B3:B0:8C:FF:83:DF:B4:77:14:1B:C1:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwTroql6CcmzsIz_g9-0dxQbwcs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:83:12:b3:59:10:fd:b3:01:61:cc:23:c8:c5:a1:65:b5:b1:
         09:11:45:01:61:7b:c5:b0:14:b6:04:5d:33:2b:45:44:00:89:
         4b:aa:7c:42:9d:e3:f3:19:d6:9b:ae:00:be:0d:9a:db:a9:42:
         03:95:cc:ea:37:45:a1:50:25:ee:59:5d:c4:3e:25:b7:fa:56:
         a6:85:a9:90:ed:2f:8e:6a:a9:b3:d0:c3:9f:e5:41:db:46:e3:
         5a:b8:d6:19:e7:88:63:49:b3:b3:0b:1f:5d:b1:3f:89:b9:70:
         02:83:38:19:56:88:f1:6a:af:e2:31:fd:86:8c:20:c2:03:72:
         58:08:67:af:b2:7e:c3:34:8e:ef:03:d7:1b:24:9d:71:12:ac:
         e2:96:b6:94:de:b0:25:c4:84:e1:ec:11:7e:12:0f:c1:6e:57:
         8a:8c:c1:d9:f5:b9:dd:0c:2d:7a:64:fe:45:f3:67:97:28:bf:
         f3:5e:f5:91:f5:74:de:75:d8:32:fc:90:77:2c:10:43:4a:c5:
         44:6f:26:bb:b7:be:5b:c1:96:09:02:31:15:0d:10:72:c9:4f:
         3b:0e:06:5b:6c:7b:80:89:7f:a4:6b:f9:28:ba:cb:46:5a:93:
         2e:f5:64:13:b2:be:81:90:82:d6:d8:d8:b3:ef:19:0d:af:cb:
         b3:92:03:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:15:26 2025 by rpki-client