Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/_OoI6EId8vJFx8szPudqFKiILUo.mft
File:                     _OoI6EId8vJFx8szPudqFKiILUo.mft (raw, json)
Hash identifier:          /RYmmpEAZMdU5kTYTyTaz5yA3gAAGMgbn2LUY+DaBog=
Subject key identifier:   0A:39:67:8F:30:F1:12:1E:2F:09:37:10:36:41:39:B1:E1:E5:44:A9
Authority key identifier: FC:EA:08:E8:42:1D:F2:F2:45:C7:CB:33:3E:E7:6A:14:A8:88:2D:4A
Certificate issuer:       /CN=fcea08e8421df2f245c7cb333ee76a14a8882d4a
Certificate serial:       0199FCC6C40FD0789B719AEE54100ABE167D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_OoI6EId8vJFx8szPudqFKiILUo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/_OoI6EId8vJFx8szPudqFKiILUo.mft
Manifest number:          16E5
Signing time:             Sun 19 Oct 2025 14:01:48 +0000
Manifest this update:     Sun 19 Oct 2025 14:01:48 +0000
Manifest next update:     Mon 20 Oct 2025 14:01:48 +0000
Files and hashes:         1: 6rfSl-YG8Bpw7iFs3OGfejPmBow.roa (hash: xWZc5l9yPZ6h0RVi3qTPSak9kbYfcpqaIIv+IYE4hs0=)
                          2: RjzornIpBpWAVg31mbW6GCIn3FE.roa (hash: 1SRf58fZ7vrCHWvD/MO3Mvx+IEH2+W2jesliOPCnBDw=)
                          3: _OoI6EId8vJFx8szPudqFKiILUo.crl (hash: iWIjX6qh/2HhUg0//7WyOo3hJ/muptiVw0+m9ogq+9A=)
                          4: qodg_DBnwKRycROmAU-iKcJ4abc.roa (hash: srDO/uSK7u2lQgddrt4UOUxImFrZqcKNDp2zNmpUe54=)
                          5: s7awYrhPujEu-ZRGweV7KC1XVMo.roa (hash: qDjaklj7okGt/N67lpsepn6cM5rI/Einb7VtSwhb734=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/_OoI6EId8vJFx8szPudqFKiILUo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/_OoI6EId8vJFx8szPudqFKiILUo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_OoI6EId8vJFx8szPudqFKiILUo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:c6:c4:0f:d0:78:9b:71:9a:ee:54:10:0a:be:16:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcea08e8421df2f245c7cb333ee76a14a8882d4a
        Validity
            Not Before: Oct 19 14:01:48 2025 GMT
            Not After : Oct 20 14:01:48 2025 GMT
        Subject: CN=0a39678f30f1121e2f093710364139b1e1e544a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:03:1d:3b:82:ab:7a:ab:d4:32:78:ba:65:d2:
                    7c:9c:98:a7:e0:da:e1:f8:38:35:16:0e:d7:b4:eb:
                    d7:15:31:cb:41:36:90:35:01:41:12:bc:63:79:70:
                    f2:7e:88:66:46:c4:32:e9:ca:02:cb:12:f6:1a:9c:
                    bf:9b:a0:5e:3a:41:97:49:38:90:c0:46:1d:f3:ba:
                    ff:7d:90:fc:d8:9a:c7:86:8d:c7:57:de:c2:7e:8a:
                    b2:85:0f:bb:48:7a:db:f2:9e:eb:83:a3:86:bb:a6:
                    7f:b8:0b:4e:9a:e5:b2:8a:b2:2d:bc:35:3c:33:d9:
                    6a:81:6b:1f:c2:1f:a5:75:41:0e:bd:db:02:b9:75:
                    cf:72:c2:d3:bc:26:20:5d:2b:5e:1b:54:f4:40:d8:
                    0b:36:0a:8a:2f:15:17:1d:a2:d1:bf:3e:ba:01:e5:
                    f7:79:f2:c3:82:33:b9:ce:32:71:fc:64:ce:09:76:
                    83:d6:c2:c0:62:df:e9:69:67:ef:4d:77:9f:4f:61:
                    de:2a:9d:e2:03:4f:c9:49:b9:91:b8:2a:1f:a7:19:
                    46:1b:fc:02:bb:3a:38:d2:d5:b1:96:3c:2e:9b:5b:
                    35:97:ca:32:c0:ae:0a:e5:be:af:dc:3d:58:c0:99:
                    71:87:6d:4f:32:c7:c4:62:94:73:b7:c4:2a:a4:a1:
                    18:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:39:67:8F:30:F1:12:1E:2F:09:37:10:36:41:39:B1:E1:E5:44:A9
            X509v3 Authority Key Identifier:
                keyid:FC:EA:08:E8:42:1D:F2:F2:45:C7:CB:33:3E:E7:6A:14:A8:88:2D:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_OoI6EId8vJFx8szPudqFKiILUo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/_OoI6EId8vJFx8szPudqFKiILUo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/_OoI6EId8vJFx8szPudqFKiILUo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:44:8a:c1:67:67:16:f3:db:95:fd:65:92:ba:60:e1:e0:23:
         f9:e5:12:15:7f:c2:26:66:3a:16:6a:0d:ba:cb:26:1c:fe:a3:
         61:4d:9b:eb:fd:2c:7f:20:6f:d3:87:44:9b:48:55:66:cd:f2:
         29:4a:60:7b:65:ef:1a:79:d7:68:e4:23:41:48:25:9f:ab:f0:
         e2:f9:cf:a0:aa:d5:ec:1a:58:fb:c7:57:c2:4f:9c:01:cc:09:
         b0:6c:30:a3:04:8c:63:13:35:57:23:c3:71:60:75:7d:49:3f:
         88:68:1c:88:f3:59:28:6f:cf:50:72:eb:be:95:eb:3b:5e:ac:
         45:11:4a:3c:ff:02:0d:0c:c2:4a:cc:0c:21:c4:8f:16:ff:1d:
         4f:4b:11:42:c9:b7:26:c6:da:fa:3f:23:c8:c2:95:ee:6b:25:
         e7:f5:f2:63:52:1c:16:8e:84:a3:e2:88:da:e5:0e:b9:d3:c0:
         35:a7:5f:fe:3c:e5:99:5d:60:55:3b:e9:9a:e3:76:d3:79:c7:
         7a:9d:a4:4c:7c:61:f2:27:ff:ad:05:83:64:59:af:26:a6:2c:
         e5:79:82:6c:95:cf:e9:cf:a0:23:91:ff:28:2d:06:63:8c:ae:
         89:8e:7d:bf:6d:22:1f:d9:9d:8f:57:5f:1e:95:2a:a8:cf:cf:
         85:f9:98:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:52:02 2025 by rpki-client