Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/6b850a-4f12-4206-a50f-5d58711f3662/1/0-jUy45ELsOKa8P6QAoqUXzuDR4.mft
File:                     0-jUy45ELsOKa8P6QAoqUXzuDR4.mft (raw, json)
Hash identifier:          ZzH8/ZD5BgWUIhWfiHV0SBVWSWZuwsKUX/UPvF0tvi8=
Subject key identifier:   2A:E4:A3:E4:98:43:27:EA:D5:FB:B4:EA:4F:19:6C:AB:55:8D:86:C3
Authority key identifier: D3:E8:D4:CB:8E:44:2E:C3:8A:6B:C3:FA:40:0A:2A:51:7C:EE:0D:1E
Certificate issuer:       /CN=d3e8d4cb8e442ec38a6bc3fa400a2a517cee0d1e
Certificate serial:       0199FC2176A66A6C9E036A725E005B7B00A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0-jUy45ELsOKa8P6QAoqUXzuDR4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/6b850a-4f12-4206-a50f-5d58711f3662/1/0-jUy45ELsOKa8P6QAoqUXzuDR4.mft
Manifest number:          16E2
Signing time:             Sun 19 Oct 2025 11:01:15 +0000
Manifest this update:     Sun 19 Oct 2025 11:01:15 +0000
Manifest next update:     Mon 20 Oct 2025 11:01:15 +0000
Files and hashes:         1: 0-jUy45ELsOKa8P6QAoqUXzuDR4.crl (hash: zD+6usKpc8EaHJtWuDgoMc0jADpUtHwUciL8l6XKlBQ=)
                          2: 814d1F1Lpiv2ZmQt3nv-Q0MhR14.roa (hash: vJZyCty8aaf+QpA3OskD2b+GSFI6e+26K8I9XWLd+A4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/6b850a-4f12-4206-a50f-5d58711f3662/1/0-jUy45ELsOKa8P6QAoqUXzuDR4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/6b850a-4f12-4206-a50f-5d58711f3662/1/0-jUy45ELsOKa8P6QAoqUXzuDR4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0-jUy45ELsOKa8P6QAoqUXzuDR4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:21:76:a6:6a:6c:9e:03:6a:72:5e:00:5b:7b:00:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3e8d4cb8e442ec38a6bc3fa400a2a517cee0d1e
        Validity
            Not Before: Oct 19 11:01:15 2025 GMT
            Not After : Oct 20 11:01:15 2025 GMT
        Subject: CN=2ae4a3e4984327ead5fbb4ea4f196cab558d86c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:ef:a8:bb:84:29:2a:9d:4b:80:f9:7e:2c:e8:
                    e9:d8:51:83:b1:90:30:f6:75:1b:a1:49:10:8c:a2:
                    81:78:a9:6c:af:c1:27:35:b6:d1:1c:c6:cf:c6:84:
                    41:9e:79:7c:a4:bd:2b:e7:0b:fa:0d:15:2c:a6:e3:
                    92:a1:53:b8:5a:ab:cd:ec:fe:64:82:0a:3d:ae:ca:
                    74:42:c7:7f:6c:7a:2a:d3:1c:ca:d3:a7:f7:c7:2f:
                    b3:29:35:13:81:d6:bf:c0:f4:80:c6:17:86:62:81:
                    39:0a:3d:08:3f:80:55:2b:40:8f:89:af:3d:d7:39:
                    99:07:92:97:56:de:a6:db:6a:4f:8e:3c:62:37:55:
                    5c:6f:30:1c:9e:db:7a:cf:79:05:61:16:79:9b:2a:
                    cd:82:6d:a0:7c:f6:33:9c:de:7f:7b:f1:96:51:66:
                    e2:f4:4b:6e:df:bf:4f:f1:10:e9:a9:4c:b2:4e:e9:
                    df:14:0d:1b:ac:81:ae:07:9b:8d:09:ae:06:66:bc:
                    97:e4:97:c2:bc:20:39:47:53:a3:0f:17:b4:fc:9b:
                    b7:5d:b5:ff:f7:6b:68:ed:fc:59:8e:77:50:7f:cd:
                    fd:ad:f7:98:96:3a:cc:04:bb:58:4e:d9:4c:75:ae:
                    1f:85:5d:8b:63:3e:bf:71:1a:40:ea:75:3d:b1:6d:
                    fc:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:E4:A3:E4:98:43:27:EA:D5:FB:B4:EA:4F:19:6C:AB:55:8D:86:C3
            X509v3 Authority Key Identifier:
                keyid:D3:E8:D4:CB:8E:44:2E:C3:8A:6B:C3:FA:40:0A:2A:51:7C:EE:0D:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-jUy45ELsOKa8P6QAoqUXzuDR4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/6b850a-4f12-4206-a50f-5d58711f3662/1/0-jUy45ELsOKa8P6QAoqUXzuDR4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/6b850a-4f12-4206-a50f-5d58711f3662/1/0-jUy45ELsOKa8P6QAoqUXzuDR4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:e5:b5:4d:83:f5:ed:ac:f6:40:a2:7b:f0:0e:56:df:e7:ba:
         12:9d:01:d3:0c:e4:8a:8d:e8:b0:00:6e:58:4e:1d:66:13:09:
         38:48:4f:49:28:0e:cd:d9:fd:10:69:f8:41:ae:30:e2:aa:64:
         d3:6f:97:83:de:79:59:68:44:19:19:a5:6c:79:9a:75:ee:2c:
         86:74:eb:d2:3a:03:d2:37:c0:87:89:2c:eb:bc:40:3c:08:b9:
         dd:2a:cb:ad:bd:f7:8f:4f:2f:04:77:76:90:8c:f8:6f:cf:30:
         e2:94:dd:6e:09:b3:c9:c1:bd:18:6f:55:84:22:c2:30:b3:52:
         82:ca:6b:c0:9e:6e:13:b6:a7:86:3f:0f:c5:1f:e7:00:b0:6f:
         aa:62:9c:d1:96:cb:98:42:c0:67:da:2f:a9:fb:34:2d:cc:0e:
         77:83:7a:9d:6f:99:3a:7c:f7:57:fd:26:c4:59:d8:31:44:82:
         66:9e:e3:2a:33:f2:75:95:20:bf:fa:09:41:cb:f2:75:88:34:
         5f:cb:87:0b:2a:53:9d:51:c4:49:0b:46:db:ce:e4:98:4d:11:
         1e:16:e3:87:cf:b9:66:35:90:84:8d:48:09:db:84:45:65:02:
         40:31:5b:bf:eb:79:47:61:6e:d6:93:44:14:43:d9:b5:15:f8:
         b6:a0:68:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:18:45 2025 by rpki-client