Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.mft
File:                     maLC7PWMRLNaDaKVf_TcouYLaGo.mft (raw, json)
Hash identifier:          ceTYEbLZHqB3jT8a1a7MxbmCIpfwidamBGhl3SuuGaY=
Subject key identifier:   E0:07:CD:0C:75:DF:DE:15:19:48:A3:9E:C6:36:6D:B5:11:E3:F3:A4
Authority key identifier: 99:A2:C2:EC:F5:8C:44:B3:5A:0D:A2:95:7F:F4:DC:A2:E6:0B:68:6A
Certificate issuer:       /CN=99a2c2ecf58c44b35a0da2957ff4dca2e60b686a
Certificate serial:       0199FCFD4F9B0CDDFAB31206546A02B6B18C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/maLC7PWMRLNaDaKVf_TcouYLaGo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.mft
Manifest number:          16E9
Signing time:             Sun 19 Oct 2025 15:01:23 +0000
Manifest this update:     Sun 19 Oct 2025 15:01:23 +0000
Manifest next update:     Mon 20 Oct 2025 15:01:23 +0000
Files and hashes:         1: 7SHUyFna48Gf23nUCUcnIJUN0XE.roa (hash: Ec+uLYhIFx++PbARlrI21OedFGiTD/IgiH7xQ2ltHrQ=)
                          2: kbF58umfOAdBtIYcGYzLP1M0THQ.roa (hash: yOTBG23MZMkfBQCZJEYn1qCc0xRSjBYNZHJvnVk7GVU=)
                          3: l-8L9wVjtXMNnDKiGH1zdKvOuYc.roa (hash: nBkBluTNUREBdIijySnHRU5IOfDXkAtF0rCyhddkb6A=)
                          4: maLC7PWMRLNaDaKVf_TcouYLaGo.crl (hash: KUWl7dhR4R885EOdK28VUlJ+0FCzFRA0mtTMsKKpzXc=)
                          5: vgIq0oA7dsz4YveZyNyrfiJkguc.roa (hash: Sy+M0tdHwOYb8xMH8vV2+d4iB36APQaABzmr+xlZblA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/maLC7PWMRLNaDaKVf_TcouYLaGo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:fd:4f:9b:0c:dd:fa:b3:12:06:54:6a:02:b6:b1:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99a2c2ecf58c44b35a0da2957ff4dca2e60b686a
        Validity
            Not Before: Oct 19 15:01:23 2025 GMT
            Not After : Oct 20 15:01:23 2025 GMT
        Subject: CN=e007cd0c75dfde151948a39ec6366db511e3f3a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b9:a3:b5:df:20:45:7b:72:3e:56:f5:c9:27:
                    7b:6a:44:53:b6:13:28:ad:e7:cd:a8:e3:1d:e9:9c:
                    4e:ac:e5:5d:b8:2a:17:4e:7f:50:d8:9c:3a:e6:51:
                    d8:05:95:6a:39:81:77:a5:78:5b:9b:19:fa:5c:5f:
                    81:94:72:f4:e6:69:a1:62:7f:41:ba:3c:f6:38:58:
                    89:0a:d9:c9:f7:8e:c8:68:c7:e5:23:8d:63:67:4b:
                    70:9a:61:f2:9e:66:28:cc:3d:d0:8c:4f:13:1a:95:
                    b0:40:d6:c9:13:00:d3:d8:86:66:39:db:56:48:c8:
                    ce:d0:e7:9b:8a:4d:e8:42:c7:e1:f7:ee:e3:fd:a0:
                    d2:1c:0e:d5:ad:55:29:a9:a1:85:4f:2e:85:4f:22:
                    3e:c3:8f:8b:69:1e:96:cc:f2:33:e8:22:c8:01:e4:
                    50:ad:58:ce:2c:be:ed:64:09:d4:7c:e4:8c:50:de:
                    62:37:78:8f:8c:e2:61:a3:7c:ee:be:95:f5:6b:0d:
                    16:3a:cd:3f:c0:8d:84:da:df:0b:f2:cd:93:c7:23:
                    94:b3:67:c0:a8:1e:c7:b8:5b:7b:c1:00:35:25:35:
                    fa:e3:ad:86:a5:84:0a:79:92:07:8d:79:be:40:a1:
                    1b:d3:f7:f0:8e:f8:33:b0:cd:7b:e1:c3:6d:66:6b:
                    61:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:07:CD:0C:75:DF:DE:15:19:48:A3:9E:C6:36:6D:B5:11:E3:F3:A4
            X509v3 Authority Key Identifier:
                keyid:99:A2:C2:EC:F5:8C:44:B3:5A:0D:A2:95:7F:F4:DC:A2:E6:0B:68:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maLC7PWMRLNaDaKVf_TcouYLaGo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:1b:c8:e8:f6:bb:ed:29:78:e5:ca:55:74:4f:97:80:a4:9d:
         93:0c:f9:5f:52:6b:c5:73:3b:d3:b3:4c:38:bd:99:0e:a6:50:
         e2:0c:d2:af:c7:e2:b5:3b:85:1e:c0:3d:da:c3:fa:d5:1b:66:
         c4:3b:9d:fc:68:db:7a:fc:4d:a0:fa:5a:9b:99:da:23:66:ba:
         f7:16:79:1b:d5:8f:e5:3f:57:41:93:18:98:59:8b:37:94:6b:
         00:66:72:60:9d:8b:ce:ab:53:7d:4d:a0:61:3f:e4:4c:a3:00:
         3e:41:44:37:2e:12:e9:19:ca:a8:82:bf:73:57:57:bf:21:05:
         ce:87:4c:a1:06:68:24:4b:09:0c:d3:79:c4:cf:ad:db:1b:62:
         5b:d0:81:40:c5:1c:55:31:27:a5:cf:6e:76:8e:3b:85:d5:70:
         aa:0e:de:7d:11:83:86:03:5e:e7:7f:00:d9:28:0d:e7:d5:ca:
         a5:9b:d0:95:b6:91:dc:02:64:f6:c6:d6:4d:ec:ae:5d:1d:28:
         c0:39:4c:f0:37:0d:5a:7e:3e:13:96:e5:0b:98:5b:6e:ce:fd:
         c6:95:47:80:8d:e9:2f:55:24:dd:73:75:18:de:7b:fd:59:df:
         72:2e:40:68:75:15:97:e4:76:f7:b5:59:b1:b3:e5:e0:e3:de:
         33:e9:ef:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:53:09 2025 by rpki-client