Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.mft
File:                     s4u2Kkexoq7bcPMvWMl5ugx3fwY.mft (raw, json)
Hash identifier:          EJhf15h3sYqHbv0cH3jmUfLalfJMUWOQkZO1hNWS5dU=
Subject key identifier:   1D:0C:73:8D:A4:D7:52:20:18:6C:51:DE:EC:67:43:60:54:19:5D:42
Authority key identifier: B3:8B:B6:2A:47:B1:A2:AE:DB:70:F3:2F:58:C9:79:BA:0C:77:7F:06
Certificate issuer:       /CN=b38bb62a47b1a2aedb70f32f58c979ba0c777f06
Certificate serial:       019A1F514076A7591362086E658587A7DFCA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s4u2Kkexoq7bcPMvWMl5ugx3fwY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.mft
Manifest number:          16FD
Signing time:             Sun 26 Oct 2025 07:00:09 +0000
Manifest this update:     Sun 26 Oct 2025 07:00:09 +0000
Manifest next update:     Mon 27 Oct 2025 07:00:09 +0000
Files and hashes:         1: 5WxXf6dS__Evv8ybNdjAs3Nto-g.roa (hash: y6JQKN1GUMZnwd9TH2DZ03UU+crYCRvw3vTZfmRAIuw=)
                          2: 8keuoYHRmEN7a8dM4R3KAZIUMn8.roa (hash: cqhsmkY13XgBA/8McBrRobM59idSx8HxeP3LI73UX3s=)
                          3: _g7tJv9RQ8GKBzh3JoIFLDhg6Os.roa (hash: lCKjV64dwqXs6VagiwwJOVKqACy5VCGM5CrdkZRYvvY=)
                          4: fMI-jCDaaLsxpmL0Z0hMaMI0pwA.roa (hash: Ft2AV1Fb/Osk91o2uc7E3/mf/b9LB0/k5lu+soQUSmI=)
                          5: o0jeoBjm6A2tZp_sdpXJQxSFq9g.roa (hash: 0tJFYrvs37c2RcoKNsABjGXFSJGBQds9qdtyJiQGJI4=)
                          6: s4u2Kkexoq7bcPMvWMl5ugx3fwY.crl (hash: Km1hjtaMuSkzZhzpgtFm55/DiWHXI26IJ6m9c62jrpo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s4u2Kkexoq7bcPMvWMl5ugx3fwY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Oct 2025 07:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:1f:51:40:76:a7:59:13:62:08:6e:65:85:87:a7:df:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b38bb62a47b1a2aedb70f32f58c979ba0c777f06
        Validity
            Not Before: Oct 26 07:00:09 2025 GMT
            Not After : Oct 27 07:00:09 2025 GMT
        Subject: CN=1d0c738da4d75220186c51deec67436054195d42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b9:f6:be:42:8e:15:e2:cb:f5:f6:ed:b8:07:
                    fe:c3:2b:29:00:58:d5:00:9b:27:00:9d:20:bb:17:
                    6f:a8:88:68:2c:5d:1f:eb:a6:ad:46:97:c9:98:64:
                    46:0e:11:7d:47:d7:56:25:25:68:6b:bc:99:5c:8f:
                    33:67:e0:f1:0c:95:a6:4c:de:a0:1f:9d:75:6c:e7:
                    40:fe:7c:8d:d9:a5:fe:de:a7:52:0b:e2:5f:f9:8e:
                    e2:63:85:aa:ae:1e:74:c9:03:cb:b7:56:f5:4e:22:
                    c3:d3:68:73:25:e8:18:35:b7:3f:e6:ef:c3:3b:d1:
                    ea:fe:80:6a:14:cd:aa:b7:9a:6d:e9:bb:78:d4:96:
                    ed:5f:7e:9d:7d:77:66:b0:b4:c6:ea:65:91:1c:75:
                    05:1b:9e:3b:e0:a2:f9:a7:ab:dc:a8:31:2b:39:ea:
                    b7:2c:60:0f:e8:df:17:16:3d:48:12:26:4f:2f:00:
                    23:1f:3c:4b:9e:ac:f4:c6:c1:85:af:99:02:ff:68:
                    02:80:be:fc:60:cf:21:db:79:2b:2d:04:63:cd:a1:
                    7d:25:16:62:cd:89:a2:51:37:c2:41:31:79:0d:92:
                    d5:bf:e2:be:bc:50:b1:fc:8b:e9:7f:e6:7b:d2:5d:
                    d4:8d:49:f3:8b:09:12:1f:8c:c7:37:e8:05:71:bb:
                    61:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:0C:73:8D:A4:D7:52:20:18:6C:51:DE:EC:67:43:60:54:19:5D:42
            X509v3 Authority Key Identifier:
                keyid:B3:8B:B6:2A:47:B1:A2:AE:DB:70:F3:2F:58:C9:79:BA:0C:77:7F:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s4u2Kkexoq7bcPMvWMl5ugx3fwY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:0f:d6:48:a8:34:11:b6:23:b6:28:35:f3:aa:90:76:df:3a:
         82:cf:5c:82:04:2d:0a:4d:3b:cf:e1:e9:1a:d7:97:5a:f9:68:
         65:1b:37:c8:68:db:85:05:dc:20:51:1e:de:f4:24:fb:6e:1f:
         fb:5c:5e:6f:29:c8:12:45:ec:07:f0:d0:eb:71:c4:2c:35:b6:
         73:fa:a9:e4:27:1b:98:23:fb:5c:ab:f7:d5:db:ba:70:bd:c1:
         34:ba:53:1d:01:e0:df:a3:73:2f:d8:2c:5d:a7:e9:ca:54:05:
         10:ba:0e:de:52:60:83:08:0a:a7:72:69:7e:3b:09:73:6b:12:
         03:c9:e0:cf:44:52:bc:97:81:48:8e:1d:7a:a4:e0:59:8f:01:
         56:7a:4b:9a:dd:cb:c7:7e:27:08:ac:05:5c:33:bb:f0:45:9b:
         f9:09:fe:9a:a2:88:2a:76:0a:ad:be:31:b4:fe:6c:3a:d9:bb:
         fd:41:a6:92:2b:c2:72:76:b8:fa:dd:1a:c6:c8:dc:6f:d1:87:
         5d:5b:9c:03:a0:06:40:fe:dc:e9:f1:95:8d:9c:af:17:fe:4b:
         ef:f1:c2:9b:dd:b2:6c:48:1c:d9:bb:82:24:a3:88:14:00:31:
         b4:46:c5:6f:df:f6:24:55:09:3e:c5:00:17:99:b6:01:68:76:
         58:75:35:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 17:44:41 2025 by rpki-client