Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/6090ab-b8fa-43d9-8d15-3f44519665ac/1/l79b5z8YIydEmN9So3U10T2lvmI.mft
File:                     l79b5z8YIydEmN9So3U10T2lvmI.mft (raw, json)
Hash identifier:          jZYc7BFc4WSc3IV16nJQQtonxFp3lf0rJmAjZsNJ8Lk=
Subject key identifier:   7E:5F:CA:40:CB:98:F6:DF:40:45:3B:0D:7C:C8:7A:E7:B8:7A:BC:59
Authority key identifier: 97:BF:5B:E7:3F:18:23:27:44:98:DF:52:A3:75:35:D1:3D:A5:BE:62
Certificate issuer:       /CN=97bf5be73f1823274498df52a37535d13da5be62
Certificate serial:       0199FE7DDCDE86211E8456D0B52C35B80777
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l79b5z8YIydEmN9So3U10T2lvmI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/6090ab-b8fa-43d9-8d15-3f44519665ac/1/l79b5z8YIydEmN9So3U10T2lvmI.mft
Manifest number:          16E4
Signing time:             Sun 19 Oct 2025 22:01:25 +0000
Manifest this update:     Sun 19 Oct 2025 22:01:25 +0000
Manifest next update:     Mon 20 Oct 2025 22:01:25 +0000
Files and hashes:         1: HWzBieo8pIQmRXoRuWfRIehTEwE.roa (hash: JynDcSW3QZoBehAT3uFmeO42DtekqQpNN7+NxcQtvOQ=)
                          2: l79b5z8YIydEmN9So3U10T2lvmI.crl (hash: V3XowaWeRSuLluzJSstOfCp87e4prkl5HWCDKBOVI5I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/6090ab-b8fa-43d9-8d15-3f44519665ac/1/l79b5z8YIydEmN9So3U10T2lvmI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/6090ab-b8fa-43d9-8d15-3f44519665ac/1/l79b5z8YIydEmN9So3U10T2lvmI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l79b5z8YIydEmN9So3U10T2lvmI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:7d:dc:de:86:21:1e:84:56:d0:b5:2c:35:b8:07:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97bf5be73f1823274498df52a37535d13da5be62
        Validity
            Not Before: Oct 19 22:01:25 2025 GMT
            Not After : Oct 20 22:01:25 2025 GMT
        Subject: CN=7e5fca40cb98f6df40453b0d7cc87ae7b87abc59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f2:1a:eb:9c:77:1b:29:bd:97:28:ee:ca:67:
                    b4:5f:63:c5:e3:f7:81:07:0c:a7:a4:09:a8:52:07:
                    43:5d:d3:27:06:dd:8c:77:80:db:e5:22:79:44:12:
                    46:ec:81:70:b6:20:29:01:05:36:93:19:dd:e9:8e:
                    12:65:4a:f0:29:1e:3d:a5:d2:48:b9:8e:68:7f:52:
                    da:63:b2:98:dc:04:28:45:ac:54:a8:0b:03:e4:dd:
                    56:fe:51:1b:1e:70:a2:e9:6c:1a:bb:fc:1f:13:b4:
                    ed:5f:48:d1:41:69:88:db:59:c6:ba:36:16:a7:eb:
                    9f:26:31:d6:5d:7c:f1:6f:be:64:f6:80:7b:72:1f:
                    1e:3a:af:9a:54:76:cf:56:34:1d:20:4f:a2:14:07:
                    1f:89:17:cb:bd:95:d8:87:95:56:df:84:16:97:75:
                    af:e6:bb:89:59:67:ee:c2:3a:c0:c2:eb:1c:dc:18:
                    5e:55:41:c5:4f:14:8c:fd:22:8b:51:5c:43:2d:80:
                    f5:81:ff:8b:c5:2a:ec:79:79:93:39:a3:ae:2c:2e:
                    4e:29:2c:ee:6f:ce:56:17:a6:0f:75:d2:cf:9d:8c:
                    70:72:17:8f:64:6d:80:10:6a:2d:64:fe:a7:f1:78:
                    89:74:83:31:23:65:38:b6:30:70:23:40:d5:d9:60:
                    1a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:5F:CA:40:CB:98:F6:DF:40:45:3B:0D:7C:C8:7A:E7:B8:7A:BC:59
            X509v3 Authority Key Identifier:
                keyid:97:BF:5B:E7:3F:18:23:27:44:98:DF:52:A3:75:35:D1:3D:A5:BE:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l79b5z8YIydEmN9So3U10T2lvmI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/6090ab-b8fa-43d9-8d15-3f44519665ac/1/l79b5z8YIydEmN9So3U10T2lvmI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/6090ab-b8fa-43d9-8d15-3f44519665ac/1/l79b5z8YIydEmN9So3U10T2lvmI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:f3:1c:c1:80:24:48:3a:d4:bd:51:dd:9a:a2:c0:7c:1f:9f:
         59:31:bc:8f:13:ae:f2:86:3b:79:65:32:c7:16:38:fa:bb:15:
         55:9c:2e:47:dd:a3:2b:be:f0:57:e3:c1:70:ba:6f:b4:43:5c:
         07:0b:3a:3a:48:37:39:bc:95:a4:ab:c4:4c:9e:ec:5b:59:5e:
         c5:f1:dd:4b:e0:99:a2:58:6c:dc:2f:97:44:86:71:b4:e5:bd:
         0f:dd:b2:76:c5:27:2c:98:aa:e7:be:db:a6:2c:92:3a:3e:e6:
         8e:ad:51:22:2f:f2:59:6d:4f:72:bd:e5:c8:a4:fd:a4:6e:58:
         fd:a0:5e:d0:7a:f6:fa:11:49:2c:d7:72:b0:b9:28:a8:67:a4:
         83:6e:ef:9a:b2:20:ac:a7:a9:78:e0:13:38:56:49:5a:6d:1f:
         2c:5f:2a:5c:25:60:27:31:d4:00:70:81:83:8d:74:d9:e2:a2:
         ef:50:2e:6d:c1:4a:b3:60:89:bf:d9:07:8e:4f:5b:0c:fc:cd:
         33:95:34:aa:f4:cd:26:0d:a7:7f:41:41:c7:a2:7f:9d:c9:fd:
         97:36:2f:cf:ed:b6:aa:56:20:49:79:6f:44:77:2e:4b:e5:b3:
         0b:f3:2d:a2:e0:64:52:f7:17:51:a0:35:69:7f:d8:4a:8b:0a:
         2d:59:c8:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:43:31 2025 by rpki-client