Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/ef2216-7c1f-4f6d-85c5-f53ad46caf3c/1/7Dzk4rGtKQhn3cd_MeXxU-myCIc.mft
File:                     7Dzk4rGtKQhn3cd_MeXxU-myCIc.mft (raw, json)
Hash identifier:          k5LkYVTn9xVzCM3e0s3RPM1JUUK1M/M7ayDIilh3VaA=
Subject key identifier:   4D:1C:D3:31:9E:C8:A5:3F:DC:7C:46:5A:EA:49:FF:B7:A7:4C:A7:8F
Authority key identifier: EC:3C:E4:E2:B1:AD:29:08:67:DD:C7:7F:31:E5:F1:53:E9:B2:08:87
Certificate issuer:       /CN=ec3ce4e2b1ad290867ddc77f31e5f153e9b20887
Certificate serial:       0199FC8F83824EDE71D866678937A60FF161
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7Dzk4rGtKQhn3cd_MeXxU-myCIc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/ef2216-7c1f-4f6d-85c5-f53ad46caf3c/1/7Dzk4rGtKQhn3cd_MeXxU-myCIc.mft
Manifest number:          16E3
Signing time:             Sun 19 Oct 2025 13:01:27 +0000
Manifest this update:     Sun 19 Oct 2025 13:01:27 +0000
Manifest next update:     Mon 20 Oct 2025 13:01:27 +0000
Files and hashes:         1: 7Dzk4rGtKQhn3cd_MeXxU-myCIc.crl (hash: xvuk9mNX/nh9KBhIcYGp9Yq8/yKkXapn5fU512oBl8I=)
                          2: Lkrx4unp2o3bAPOAG9k2SxkBPAw.roa (hash: tRVbH1utg4EaQmIZJTzl8DdYJD6yoaFUDEsm8/u1MIs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/ef2216-7c1f-4f6d-85c5-f53ad46caf3c/1/7Dzk4rGtKQhn3cd_MeXxU-myCIc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/ef2216-7c1f-4f6d-85c5-f53ad46caf3c/1/7Dzk4rGtKQhn3cd_MeXxU-myCIc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7Dzk4rGtKQhn3cd_MeXxU-myCIc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:8f:83:82:4e:de:71:d8:66:67:89:37:a6:0f:f1:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec3ce4e2b1ad290867ddc77f31e5f153e9b20887
        Validity
            Not Before: Oct 19 13:01:27 2025 GMT
            Not After : Oct 20 13:01:27 2025 GMT
        Subject: CN=4d1cd3319ec8a53fdc7c465aea49ffb7a74ca78f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:89:02:76:df:17:aa:57:8b:51:cd:ab:32:c7:
                    05:8c:f1:92:eb:80:fa:f2:29:7c:91:e2:ec:ce:9a:
                    39:e1:91:55:e4:79:22:3a:e5:56:6c:dc:80:87:75:
                    87:eb:88:e4:63:ce:13:59:a9:4d:5d:ab:43:40:6a:
                    59:4c:22:3f:06:25:e5:9a:d4:c7:3c:80:69:f9:ef:
                    54:3f:d7:c2:5c:f4:cd:02:49:b7:f7:82:bf:52:5a:
                    9c:b7:08:93:fb:6a:1a:d1:51:d7:92:ac:d0:0e:d5:
                    e3:42:9b:21:21:07:e6:8b:9e:d0:e9:bb:08:8a:86:
                    18:2c:ef:0e:a5:62:c9:0d:03:b5:82:73:05:55:08:
                    59:43:ce:e3:92:31:7d:50:39:03:6c:35:00:1a:c1:
                    a3:7a:b5:53:f0:23:d7:f7:02:c2:09:dd:eb:57:a4:
                    25:47:df:e4:4e:45:8a:3d:ed:65:96:23:c3:37:8f:
                    db:fb:26:29:fb:f6:b9:c0:e4:a1:bf:72:6c:15:a6:
                    a3:9e:d8:51:cf:be:c6:f6:0c:e9:32:81:15:e2:f6:
                    c9:11:bb:9e:ef:e4:bf:2d:2b:32:fa:fa:7a:33:6a:
                    15:02:e3:a5:73:c7:e5:fc:fd:f8:44:9e:00:4e:c7:
                    06:5f:12:ec:ef:bb:fb:44:62:7f:3c:48:36:5b:81:
                    c3:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:1C:D3:31:9E:C8:A5:3F:DC:7C:46:5A:EA:49:FF:B7:A7:4C:A7:8F
            X509v3 Authority Key Identifier:
                keyid:EC:3C:E4:E2:B1:AD:29:08:67:DD:C7:7F:31:E5:F1:53:E9:B2:08:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Dzk4rGtKQhn3cd_MeXxU-myCIc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ef2216-7c1f-4f6d-85c5-f53ad46caf3c/1/7Dzk4rGtKQhn3cd_MeXxU-myCIc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ef2216-7c1f-4f6d-85c5-f53ad46caf3c/1/7Dzk4rGtKQhn3cd_MeXxU-myCIc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:09:31:41:6d:d2:77:69:10:30:ed:c8:3a:17:a2:db:68:90:
         75:8a:9f:9b:b6:50:d5:c5:8d:71:3d:dc:92:ff:91:3c:91:59:
         21:fa:9d:1a:33:f2:74:67:1b:f5:91:f5:f4:1f:31:ef:f8:76:
         8e:5a:f2:2a:ef:19:3f:39:aa:99:50:78:df:ff:b3:a9:6c:ac:
         b3:04:8e:d7:1f:90:72:65:d5:0a:91:e4:8f:0b:bf:13:b6:24:
         ec:f7:7c:11:6d:6f:e8:25:da:40:9a:92:b1:01:f8:91:e6:11:
         d0:4d:6e:f4:3b:9d:d0:ce:1c:10:60:e1:62:39:c2:0c:c1:44:
         06:00:6b:07:b5:43:3e:3d:a6:a5:30:3c:6a:e9:3c:6e:c2:31:
         57:fb:af:b7:e8:04:af:51:df:d3:a8:20:07:e9:81:29:38:2a:
         c6:f6:54:b2:fa:b4:33:8f:0a:70:fc:80:eb:b3:fe:da:23:fe:
         d1:ac:b1:80:2a:01:b8:37:aa:75:fa:6f:1e:1b:76:ce:d9:6a:
         79:20:a4:dd:a3:04:e6:83:bf:20:56:0f:04:c2:55:8b:36:01:
         23:25:6d:1f:ee:7b:26:1d:fa:20:91:6e:d6:a7:f9:d6:fb:de:
         50:9c:6f:6c:16:af:02:dd:44:ac:9d:15:8c:35:9e:b2:da:00:
         d0:98:8d:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:28:49 2025 by rpki-client