Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/cd231b-ff1e-4b93-a5b7-85d634c5bd50/1/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.mft
File:                     0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.mft (raw, json)
Hash identifier:          9ti50WuPZbD0uhoakNnSljNIq4uSGIGsTCyijWFyPdM=
Subject key identifier:   C9:0F:4C:6C:2B:01:42:6D:18:CF:AA:25:F2:81:5E:59:1A:93:27:66
Authority key identifier: D1:C1:5F:0A:EC:0E:33:66:62:DE:9F:63:71:52:1C:E2:5E:8D:E1:0F
Certificate issuer:       /CN=d1c15f0aec0e336662de9f6371521ce25e8de10f
Certificate serial:       0199FC58A9CBED1875DBC39BB6B29265D96C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/cd231b-ff1e-4b93-a5b7-85d634c5bd50/1/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.mft
Manifest number:          16E4
Signing time:             Sun 19 Oct 2025 12:01:32 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:32 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:32 +0000
Files and hashes:         1: 0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.crl (hash: 83aty9k4oQbJUzc3HmKHCtSNjKdMbv95t/rR+jy6En8=)
                          2: TWeGvhRSmnN9ba3aLN_PX9mER2s.roa (hash: 6BkkLF5ZMW9w4BTie7IiuTOLhKMimv1AW7aDs2REbaI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/cd231b-ff1e-4b93-a5b7-85d634c5bd50/1/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/cd231b-ff1e-4b93-a5b7-85d634c5bd50/1/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:58:a9:cb:ed:18:75:db:c3:9b:b6:b2:92:65:d9:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1c15f0aec0e336662de9f6371521ce25e8de10f
        Validity
            Not Before: Oct 19 12:01:32 2025 GMT
            Not After : Oct 20 12:01:32 2025 GMT
        Subject: CN=c90f4c6c2b01426d18cfaa25f2815e591a932766
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:b2:6f:c9:fe:16:19:ba:36:1d:60:1f:81:f9:
                    a0:a4:de:b1:54:fb:d0:90:c2:eb:8b:14:58:4a:fa:
                    e4:78:a2:e1:b5:fc:f7:ad:78:b3:5a:1d:4f:85:74:
                    3e:7d:9b:68:0d:2e:5b:66:40:b0:86:7e:b3:f4:a5:
                    31:e0:cf:05:9a:23:17:02:d8:50:b4:a5:95:16:fe:
                    1d:58:de:60:e0:76:3d:9a:04:f3:09:bf:74:3d:d0:
                    00:1b:2e:ab:d2:4d:a9:f0:ec:ed:01:b6:19:16:20:
                    a5:a6:ec:2c:09:df:12:73:1f:d1:c7:48:e7:94:f8:
                    12:aa:ef:54:47:18:1f:c3:80:f7:93:7d:d2:ae:d9:
                    5d:05:6d:f6:09:c3:16:20:a1:bc:36:87:be:54:cc:
                    e6:ac:57:a7:5b:d3:5c:3b:54:26:04:4a:20:48:f1:
                    52:df:fc:c7:97:70:80:4e:b1:2b:6b:e4:ce:a6:1d:
                    7f:11:8c:48:a3:3e:ad:11:f8:70:47:5a:99:41:d2:
                    89:3b:c0:6d:4d:56:c4:5e:45:3a:5b:ce:d8:18:54:
                    d6:93:ec:c4:6e:0e:a9:c0:3d:ed:55:3a:36:7d:14:
                    a0:a9:c2:f4:f2:03:da:14:9f:3d:78:49:65:6f:04:
                    4a:1a:46:90:8f:8f:d4:0b:11:f9:25:34:66:87:34:
                    2e:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:0F:4C:6C:2B:01:42:6D:18:CF:AA:25:F2:81:5E:59:1A:93:27:66
            X509v3 Authority Key Identifier:
                keyid:D1:C1:5F:0A:EC:0E:33:66:62:DE:9F:63:71:52:1C:E2:5E:8D:E1:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/cd231b-ff1e-4b93-a5b7-85d634c5bd50/1/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/cd231b-ff1e-4b93-a5b7-85d634c5bd50/1/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:46:f8:eb:dd:09:61:5c:67:d8:de:7f:33:e5:ec:93:28:2d:
         ee:3c:b5:0e:3c:92:1b:c9:62:dd:93:52:b4:ef:df:41:82:d1:
         dc:e0:20:cb:9d:36:e0:db:a0:b6:1c:47:39:35:ab:63:68:e4:
         8e:57:d3:6e:64:40:77:07:a4:75:d3:ed:a9:63:3d:f8:5e:18:
         50:09:d4:fe:b5:c1:b9:f1:fe:0f:bf:c0:28:3d:97:ef:50:86:
         45:aa:cd:8a:98:ff:2d:de:95:b1:33:be:c3:e6:31:c7:fa:22:
         32:43:98:7d:4e:7c:e9:d4:61:0d:07:e2:8a:63:c0:c5:4d:3f:
         76:4c:bc:aa:da:31:95:14:23:24:15:3d:59:c6:79:0d:82:06:
         d5:1d:38:32:ed:df:6f:f5:99:01:76:bb:2a:a7:97:c8:a5:84:
         68:38:1e:9d:ea:2b:2f:ac:84:be:53:f9:83:5e:a2:18:a4:3a:
         12:76:27:fe:cc:e7:13:2b:f1:77:5e:8e:28:bf:3a:7a:4c:59:
         81:9e:06:dc:24:55:38:3d:81:f0:9c:db:c7:e5:3a:0f:4d:a7:
         41:05:31:a8:f3:30:7b:58:69:95:97:38:a8:c1:ad:33:f6:71:
         ac:e4:d2:45:4f:7d:5f:74:f1:8d:d3:63:1e:82:bd:d3:46:ee:
         b9:85:4c:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:46 2025 by rpki-client