Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/c7c51d-4f90-4087-a13a-f3c1a9a11d73/1/nEfuc8KHgLEvFSz6JZrePYrg0Ts.mft
File:                     nEfuc8KHgLEvFSz6JZrePYrg0Ts.mft (raw, json)
Hash identifier:          w65uVOqFIJ5ceGNgFX3Kx1FdMX0WcQeAd34SAZncpAs=
Subject key identifier:   08:22:97:4E:52:E7:1E:2F:1E:3D:CA:F9:92:5E:8C:43:CD:9B:C9:A6
Authority key identifier: 9C:47:EE:73:C2:87:80:B1:2F:15:2C:FA:25:9A:DE:3D:8A:E0:D1:3B
Certificate issuer:       /CN=9c47ee73c28780b12f152cfa259ade3d8ae0d13b
Certificate serial:       019A2854631BD697E36E524A81E84A2A29E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nEfuc8KHgLEvFSz6JZrePYrg0Ts.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/c7c51d-4f90-4087-a13a-f3c1a9a11d73/1/nEfuc8KHgLEvFSz6JZrePYrg0Ts.mft
Manifest number:          16FE
Signing time:             Tue 28 Oct 2025 01:00:10 +0000
Manifest this update:     Tue 28 Oct 2025 01:00:10 +0000
Manifest next update:     Wed 29 Oct 2025 01:00:10 +0000
Files and hashes:         1: GMzP4FK3BWd73BtB1rspDBtNJAI.roa (hash: RDWj3PKIvnG4Znaa0y/vyFyoiglGm7aIo1wXj8w5Ol8=)
                          2: TrApzRwO46U5cvWOoWRmtJkH50k.roa (hash: jn6OnmEsOzdilDL0UdqQEgfGfw7WKVGdZ+IBRjWfYTM=)
                          3: bkPZdYGaPrRP7ibLuByUsUTfmq8.roa (hash: mPM3jm7wNDKXQnm9t+BGq+2FqCZJMLYCeySMg/uwrT0=)
                          4: nEfuc8KHgLEvFSz6JZrePYrg0Ts.crl (hash: J4EGcNn15jxEDL8BFplaAsaFIE4Es37jqMJ+D4RWYx8=)
                          5: pMrmZ3KyK7unt5S4RyO1ymV1xyQ.roa (hash: huCovKVCwZRD1Jyuh4oDP9/7mz4WorFE/yOJ4oY3xMM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/c7c51d-4f90-4087-a13a-f3c1a9a11d73/1/nEfuc8KHgLEvFSz6JZrePYrg0Ts.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/c7c51d-4f90-4087-a13a-f3c1a9a11d73/1/nEfuc8KHgLEvFSz6JZrePYrg0Ts.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nEfuc8KHgLEvFSz6JZrePYrg0Ts.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Oct 2025 00:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:28:54:63:1b:d6:97:e3:6e:52:4a:81:e8:4a:2a:29:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c47ee73c28780b12f152cfa259ade3d8ae0d13b
        Validity
            Not Before: Oct 28 01:00:10 2025 GMT
            Not After : Oct 29 01:00:10 2025 GMT
        Subject: CN=0822974e52e71e2f1e3dcaf9925e8c43cd9bc9a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:44:1a:83:51:17:16:53:b9:46:5c:16:37:ca:
                    e5:2e:44:4e:c0:3e:15:34:37:f9:58:60:6d:6d:f4:
                    09:2f:e0:d0:fa:a3:c2:64:b7:78:e7:1d:b5:6c:a3:
                    da:b9:76:3d:5a:f4:2d:c9:0f:25:d1:49:3d:36:41:
                    b7:e2:60:68:0e:68:92:85:18:e4:80:e0:b4:32:19:
                    26:a0:4b:31:b5:a2:06:83:5b:43:78:8e:1e:4e:e3:
                    3c:e0:76:9e:0e:75:ce:fd:a5:b2:64:75:d7:bb:f6:
                    43:6d:8d:3f:f9:ea:3a:53:14:a5:8e:6c:d5:74:ed:
                    97:2f:d2:94:e2:50:3b:f3:38:1a:cf:f3:4a:c4:ea:
                    62:ba:08:b7:fc:78:52:2e:da:39:dc:2d:48:11:37:
                    b5:b6:53:b5:ea:af:1c:bc:1a:98:b3:96:e0:99:56:
                    cf:9b:96:a0:02:0b:6d:b5:1f:d3:36:29:da:bc:77:
                    46:c9:36:0f:b1:c7:52:e8:71:10:40:0b:12:fb:34:
                    97:e2:07:7d:33:0b:4c:5e:08:03:51:aa:3b:5e:fa:
                    8d:c1:42:b2:4f:03:e7:ed:ae:31:2c:1b:ed:36:a7:
                    16:2a:88:10:8d:2d:be:3c:ba:11:4c:cd:89:99:c4:
                    e4:9d:de:9e:ac:e2:1b:33:32:a3:2b:27:6b:18:f0:
                    ff:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:22:97:4E:52:E7:1E:2F:1E:3D:CA:F9:92:5E:8C:43:CD:9B:C9:A6
            X509v3 Authority Key Identifier:
                keyid:9C:47:EE:73:C2:87:80:B1:2F:15:2C:FA:25:9A:DE:3D:8A:E0:D1:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nEfuc8KHgLEvFSz6JZrePYrg0Ts.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c7c51d-4f90-4087-a13a-f3c1a9a11d73/1/nEfuc8KHgLEvFSz6JZrePYrg0Ts.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c7c51d-4f90-4087-a13a-f3c1a9a11d73/1/nEfuc8KHgLEvFSz6JZrePYrg0Ts.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:0b:50:5d:44:a4:7e:7a:ec:19:fb:a2:d4:1c:2f:62:2e:8d:
         e6:3d:bb:17:ee:98:85:1b:71:48:92:25:e4:49:c8:4f:98:0c:
         1a:9f:68:34:32:b0:35:af:2a:46:f1:53:e0:14:76:d8:e0:72:
         c3:1e:db:19:92:2d:cd:ae:3c:89:93:99:cc:ea:c5:ef:36:a0:
         66:e2:3f:7c:4e:f6:3e:1d:cd:a7:5b:67:ae:23:68:02:c4:4a:
         27:7c:2f:42:0a:ae:27:f2:35:b0:dc:3a:16:4f:0d:b7:d8:6e:
         5d:f4:12:f8:7c:a2:c0:79:6b:3c:10:e9:d9:12:bb:1b:da:34:
         ad:c3:b6:d4:f9:68:91:0f:12:5b:fe:90:b0:c6:d5:e8:2d:82:
         2c:a8:3f:48:4b:b1:47:e0:d4:fb:c2:1e:a5:11:e2:63:34:87:
         cf:c0:80:a8:9c:5e:f4:24:5c:a1:c2:6e:d6:0b:f8:1d:7a:51:
         fd:db:e1:fa:6c:75:ec:68:ed:02:f9:fd:6b:c8:e2:94:8a:ab:
         aa:d6:c4:ec:17:6b:8e:05:b6:66:0c:0d:0f:d5:2a:5b:a2:fc:
         17:37:74:69:10:21:65:4d:d2:25:5e:d3:71:38:26:9c:c8:5d:
         a7:03:f2:19:6d:56:30:93:d7:9a:29:fc:50:4c:8d:2f:12:68:
         16:9b:ff:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 06:29:18 2025 by rpki-client