Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/777038-31ac-4ef7-988a-35b19cf92df9/1/awNYS85ULlVOMieQlEP2giw-TwM.mft
File:                     awNYS85ULlVOMieQlEP2giw-TwM.mft (raw, json)
Hash identifier:          mc1d/bFSwBT9v5ZkdBKezZnbjXwUNyxmKaAqCRKVfYI=
Subject key identifier:   47:B6:E1:A4:27:37:A3:A7:F5:70:E6:C8:21:E9:71:14:F2:23:CD:92
Authority key identifier: 6B:03:58:4B:CE:54:2E:55:4E:32:27:90:94:43:F6:82:2C:3E:4F:03
Certificate issuer:       /CN=6b03584bce542e554e3227909443f6822c3e4f03
Certificate serial:       0199FBEBE801DD4C73B4ACAF109F30628082
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/awNYS85ULlVOMieQlEP2giw-TwM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/777038-31ac-4ef7-988a-35b19cf92df9/1/awNYS85ULlVOMieQlEP2giw-TwM.mft
Manifest number:          16E3
Signing time:             Sun 19 Oct 2025 10:02:45 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:45 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:45 +0000
Files and hashes:         1: awNYS85ULlVOMieQlEP2giw-TwM.crl (hash: qyI5w5Zbd1oST5JUuW4pWShoMDOlSPLNwT5MEPO4mfE=)
                          2: m2VUPycW3p7r44HBBcUdcacohGQ.roa (hash: vUG1tx+98xZiFJXQ4pcNycr8PZc3+HQc11XnoUOn2SE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/777038-31ac-4ef7-988a-35b19cf92df9/1/awNYS85ULlVOMieQlEP2giw-TwM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/777038-31ac-4ef7-988a-35b19cf92df9/1/awNYS85ULlVOMieQlEP2giw-TwM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/awNYS85ULlVOMieQlEP2giw-TwM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 10:02:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:e8:01:dd:4c:73:b4:ac:af:10:9f:30:62:80:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b03584bce542e554e3227909443f6822c3e4f03
        Validity
            Not Before: Oct 19 10:02:45 2025 GMT
            Not After : Oct 20 10:02:45 2025 GMT
        Subject: CN=47b6e1a42737a3a7f570e6c821e97114f223cd92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:08:48:5d:e3:e9:b9:0d:63:0d:93:cf:e3:73:
                    cd:20:2f:dd:83:04:9f:cc:02:bd:f3:47:67:da:4f:
                    c6:f0:5b:ff:a7:66:3e:97:b8:b5:9a:b5:96:09:b4:
                    1b:d0:a1:cf:2b:b3:29:44:05:eb:50:7e:3d:35:6b:
                    74:58:94:b8:c6:f6:de:8a:e3:b4:6f:38:bf:f1:94:
                    f4:0d:7c:4a:4b:5c:b7:2f:09:f8:a2:00:ff:85:04:
                    18:af:43:0f:7c:b6:7f:bf:9a:44:92:c7:02:16:c8:
                    d1:79:30:ac:2f:26:7a:78:27:de:65:ed:dc:91:c8:
                    da:30:b2:e0:ca:45:88:0f:9f:46:49:88:aa:e7:08:
                    8a:46:35:cb:55:4b:90:bb:cd:30:8d:55:83:c9:57:
                    78:a4:88:75:f7:5b:e7:cd:e3:3d:95:ab:b6:68:78:
                    5a:36:9b:e3:55:36:68:b8:29:bd:16:bb:a4:4a:00:
                    bc:b7:ac:33:96:21:5f:ee:18:5c:b9:36:03:c2:a7:
                    5d:09:9b:e7:3b:0b:48:bd:1d:c7:05:24:f9:fb:90:
                    d9:02:4a:bf:dd:46:60:65:92:be:01:77:7e:bd:92:
                    1f:e6:21:fb:dc:ad:6d:10:02:ee:85:18:5c:43:c6:
                    c7:57:8c:5d:08:5c:e7:96:89:19:89:bb:5d:90:9f:
                    44:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:B6:E1:A4:27:37:A3:A7:F5:70:E6:C8:21:E9:71:14:F2:23:CD:92
            X509v3 Authority Key Identifier:
                keyid:6B:03:58:4B:CE:54:2E:55:4E:32:27:90:94:43:F6:82:2C:3E:4F:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/awNYS85ULlVOMieQlEP2giw-TwM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/777038-31ac-4ef7-988a-35b19cf92df9/1/awNYS85ULlVOMieQlEP2giw-TwM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/777038-31ac-4ef7-988a-35b19cf92df9/1/awNYS85ULlVOMieQlEP2giw-TwM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:2e:9d:ab:53:c6:3c:df:f4:9f:37:01:02:00:ed:65:1a:c9:
         78:d8:32:65:b5:6a:e1:1a:46:a6:a6:c5:b2:eb:d9:35:14:d3:
         87:32:0d:3a:af:69:1f:07:87:45:cf:ad:4c:01:4e:bf:69:79:
         e3:54:94:b8:d8:6f:c0:1f:17:8f:b7:f4:a9:ee:7c:ea:0d:da:
         69:8e:18:8d:5f:89:f3:92:4a:c3:d9:ea:81:10:60:c2:64:23:
         e6:85:52:0f:f1:b2:66:0e:8f:1b:96:ed:5c:fc:66:3a:fd:cc:
         5c:e4:e0:3c:f4:ff:ef:b3:42:5b:9d:ff:82:a9:2b:d9:9f:3c:
         de:0e:b2:34:33:f5:8a:9b:7e:c8:30:3e:de:44:06:ef:ad:60:
         ac:08:28:64:71:e9:13:fb:bd:54:c4:79:2d:d3:b2:7b:3d:ef:
         b5:5a:3a:7d:05:2f:14:b8:d1:6b:67:3e:61:9e:a6:ee:78:cd:
         16:72:b2:2d:33:35:74:0a:82:b9:6b:2e:b7:19:2e:ad:cb:8b:
         83:2e:9b:43:48:ed:1c:eb:33:24:07:5c:41:47:e1:06:53:fb:
         4c:b0:a5:cf:ea:6c:53:45:7a:0a:43:2d:a3:02:dc:db:87:d7:
         99:85:1c:90:3d:af:cc:48:96:f4:b9:83:16:16:96:31:59:b6:
         c6:a5:e8:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:18:27 2025 by rpki-client