Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/sUP6cD--4Eu9kc5joyFIs2uOVao.mft
File:                     sUP6cD--4Eu9kc5joyFIs2uOVao.mft (raw, json)
Hash identifier:          UmKQ7dwHk9rd48LA6oWcU5+YAFJBpTVX0i7ihkBAFXE=
Subject key identifier:   F6:52:85:83:F3:F2:68:1F:6E:5C:BB:98:41:6F:7F:A5:44:7B:73:08
Authority key identifier: B1:43:FA:70:3F:BE:E0:4B:BD:91:CE:63:A3:21:48:B3:6B:8E:55:AA
Certificate issuer:       /CN=b143fa703fbee04bbd91ce63a32148b36b8e55aa
Certificate serial:       0199FAA164295EFAB32773126169482D0020
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sUP6cD--4Eu9kc5joyFIs2uOVao.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/sUP6cD--4Eu9kc5joyFIs2uOVao.mft
Manifest number:          16E5
Signing time:             Sun 19 Oct 2025 04:01:44 +0000
Manifest this update:     Sun 19 Oct 2025 04:01:44 +0000
Manifest next update:     Mon 20 Oct 2025 04:01:44 +0000
Files and hashes:         1: 58fbPOFYsvSvpunLR9rNMDG4HkA.roa (hash: ReuETm25IMaI+/tSCMwYNSlxDNomkPKvSSM3DvSw9hM=)
                          2: 5bh70NDw7zp64NXJ_51b90SAuu4.roa (hash: 4ywVwFnAjMHvhsAsLPg1qryIBj6T959YwjsSeW0RTBc=)
                          3: bmIFkmc46wZv6ewcgJwZwj1cvlM.roa (hash: t+xCiPV9KaRJxGAZeXjb1sny70g09pMUXGWJ9TkswqI=)
                          4: sUP6cD--4Eu9kc5joyFIs2uOVao.crl (hash: iVEnzkk4gR5vb/h8ImYsObXtlmoMa7C8Z9oCLcQUPos=)
                          5: uQ91Nqx0wJ0hnu7-KkzAQL_V-cs.roa (hash: /lYRhYLBo69SAVI30wQHJh+caFfwu0pd662lIZiJCC0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/sUP6cD--4Eu9kc5joyFIs2uOVao.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/sUP6cD--4Eu9kc5joyFIs2uOVao.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sUP6cD--4Eu9kc5joyFIs2uOVao.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 04:01:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:a1:64:29:5e:fa:b3:27:73:12:61:69:48:2d:00:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b143fa703fbee04bbd91ce63a32148b36b8e55aa
        Validity
            Not Before: Oct 19 04:01:44 2025 GMT
            Not After : Oct 20 04:01:44 2025 GMT
        Subject: CN=f6528583f3f2681f6e5cbb98416f7fa5447b7308
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:57:1c:ad:48:66:59:2a:05:ac:17:27:b6:e9:
                    28:6f:25:fd:e3:43:a4:8d:c2:69:36:a1:d1:0f:13:
                    1c:5f:8f:84:ac:a6:15:5c:fc:28:40:c5:63:4b:7d:
                    aa:46:73:45:bf:f0:6f:52:90:36:7c:24:14:53:7e:
                    5d:bc:c4:71:82:82:9b:b2:a0:2f:56:3a:cb:b4:9b:
                    63:2a:6a:d1:4c:22:b8:f0:bb:89:8a:28:7e:fc:46:
                    30:7c:89:df:b9:42:a7:6b:d1:c6:8d:ba:5d:7e:3d:
                    2a:8d:9a:53:1a:8f:01:25:47:f6:f5:5a:95:e7:43:
                    85:0e:89:e6:af:bd:15:78:3f:e1:28:4a:7d:27:8e:
                    5c:5f:30:29:aa:c0:31:f2:94:cb:4a:6b:50:f7:7a:
                    ee:b6:7c:de:9c:de:71:80:0e:2e:92:b9:ae:99:1a:
                    d3:11:f0:f6:98:24:df:34:15:54:6a:ee:9c:bf:3d:
                    d8:a3:2a:cd:a9:98:eb:35:2a:be:96:3c:90:40:db:
                    95:43:32:00:86:d1:3b:dc:0c:23:96:2c:c7:2b:aa:
                    ec:ee:12:95:ea:59:2a:27:4c:60:8e:f5:69:7f:bf:
                    37:f0:35:0c:ff:15:09:9f:8e:b9:d4:43:4a:7c:0d:
                    46:86:ab:9c:e7:f3:91:67:15:01:a6:65:32:d2:69:
                    c2:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:52:85:83:F3:F2:68:1F:6E:5C:BB:98:41:6F:7F:A5:44:7B:73:08
            X509v3 Authority Key Identifier:
                keyid:B1:43:FA:70:3F:BE:E0:4B:BD:91:CE:63:A3:21:48:B3:6B:8E:55:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUP6cD--4Eu9kc5joyFIs2uOVao.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/sUP6cD--4Eu9kc5joyFIs2uOVao.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/sUP6cD--4Eu9kc5joyFIs2uOVao.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:9b:63:a5:67:d1:93:4e:36:8f:9f:9e:f4:c2:d9:25:b8:6d:
         4b:63:c9:75:a2:04:0b:4c:f1:26:7e:2d:90:99:71:98:15:c4:
         28:68:ac:70:fd:2c:c8:c3:b6:3a:7d:a3:5f:bb:0e:99:b9:46:
         65:a1:46:8d:a9:4c:d9:7d:bf:b8:8c:00:fd:8c:b5:37:c6:5c:
         76:77:78:63:52:1c:ed:3e:d5:ae:88:ad:6d:64:21:6b:f6:ba:
         68:e4:75:ae:f7:cf:d2:a1:f4:91:e3:65:0b:af:aa:1c:6a:72:
         76:9a:62:49:8b:f7:5f:78:a7:f6:9f:f2:a8:bf:d9:68:f1:bd:
         b1:32:e4:1c:13:63:5e:c9:22:d7:fb:7d:9e:4f:e9:53:a0:89:
         e7:9e:b3:96:ad:88:40:ce:8d:32:e9:37:c3:08:12:22:b8:e4:
         68:4e:44:78:61:91:c5:ed:82:ce:68:51:d4:8d:e7:bf:99:e4:
         e0:58:07:60:ad:0d:c7:b5:09:df:1b:c9:9f:55:ea:ca:c4:7b:
         83:2e:04:af:96:c9:c0:2b:bd:54:bb:7e:d4:66:26:d2:df:1b:
         cf:17:1e:ab:cc:0e:8b:93:92:32:8f:e5:65:0d:1a:a4:71:ab:
         f1:1c:99:ab:73:df:47:80:1c:9b:14:21:5f:57:17:a9:86:6f:
         8c:80:aa:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:11:02 2025 by rpki-client