Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/85a208-1ab6-46f7-b1a5-a26d25bc7654/1/CcUO_hOq31QjsE8N3KizKIOVgj4.mft
File:                     CcUO_hOq31QjsE8N3KizKIOVgj4.mft (raw, json)
Hash identifier:          ulPFA7pFTUICQsMHq7TRbTKDosTyVDC/BEvKgLKvGYA=
Subject key identifier:   7D:EE:FE:13:52:B7:00:AA:07:5A:FF:C2:72:0B:1E:5E:72:90:36:3E
Authority key identifier: 09:C5:0E:FE:13:AA:DF:54:23:B0:4F:0D:DC:A8:B3:28:83:95:82:3E
Certificate issuer:       /CN=09c50efe13aadf5423b04f0ddca8b3288395823e
Certificate serial:       019A1D633D005CBCF43ABB25E493E2B20186
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CcUO_hOq31QjsE8N3KizKIOVgj4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/85a208-1ab6-46f7-b1a5-a26d25bc7654/1/CcUO_hOq31QjsE8N3KizKIOVgj4.mft
Manifest number:          16F6
Signing time:             Sat 25 Oct 2025 22:00:34 +0000
Manifest this update:     Sat 25 Oct 2025 22:00:34 +0000
Manifest next update:     Sun 26 Oct 2025 22:00:34 +0000
Files and hashes:         1: 8pbOtoickn4gngDPghS6zzsubu8.roa (hash: 2DV5k3x2c9dOCN9Cru+gCMm0tJjouTk+IFDhMI+k6C0=)
                          2: CcUO_hOq31QjsE8N3KizKIOVgj4.crl (hash: pyag+13agiLoWm331sFbYa7tvYzicBfV7plNkiZeyMY=)
                          3: bQWTWaPJMURhOwMcF82QvoPW9eA.roa (hash: ZBXbwgCoJr1O/tkU4TQtGdf606M6fVdS5KYW5/tfGVU=)
                          4: e4h7xssIbvZ0s7Vw9JjG46tDvZ0.roa (hash: isku2v3Qa+kI0md0IS8QEjqPkTCho6QFnoe7uAw4O+0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/85a208-1ab6-46f7-b1a5-a26d25bc7654/1/CcUO_hOq31QjsE8N3KizKIOVgj4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/85a208-1ab6-46f7-b1a5-a26d25bc7654/1/CcUO_hOq31QjsE8N3KizKIOVgj4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CcUO_hOq31QjsE8N3KizKIOVgj4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 26 Oct 2025 19:59:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:1d:63:3d:00:5c:bc:f4:3a:bb:25:e4:93:e2:b2:01:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09c50efe13aadf5423b04f0ddca8b3288395823e
        Validity
            Not Before: Oct 25 22:00:34 2025 GMT
            Not After : Oct 26 22:00:34 2025 GMT
        Subject: CN=7deefe1352b700aa075affc2720b1e5e7290363e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:59:97:9d:83:39:56:73:7f:38:c6:84:13:d1:
                    d1:14:93:e6:c2:98:d1:09:ce:ee:80:e9:54:25:24:
                    cd:90:0f:4d:87:57:88:ca:e5:c1:c4:40:50:96:9a:
                    63:1f:bd:83:ce:76:bc:82:ab:2f:a5:d2:67:f3:0c:
                    1a:db:13:75:f0:cd:30:74:cc:ec:5a:60:2c:9c:03:
                    90:b5:1c:46:47:e6:2f:b6:f4:d2:22:6e:47:0b:5e:
                    2a:61:c9:62:73:18:6d:65:57:3a:5e:ed:70:59:31:
                    3d:51:f5:b6:89:92:9a:1e:6f:8e:93:c7:40:3e:8a:
                    db:8f:ad:37:07:9c:3a:b7:d2:fb:85:f4:15:7a:3e:
                    fa:0e:fa:69:c4:e9:21:8a:ba:2d:79:e2:9e:00:28:
                    37:2a:4b:a9:31:f1:48:1c:b9:f8:f4:e9:73:30:a3:
                    46:a3:36:9e:1d:c3:e9:ec:67:03:7c:59:23:7c:20:
                    d2:56:b5:d3:75:a3:73:cf:e8:cf:b0:29:67:e1:76:
                    6a:23:38:f3:06:a2:bc:f2:fc:2f:48:ab:81:49:0d:
                    6d:af:0e:eb:bf:6d:15:73:a6:cf:11:a7:3e:5a:84:
                    57:63:e1:42:91:64:47:7e:79:ce:5f:d8:59:f5:2a:
                    b4:6a:92:c6:29:79:3c:7f:d8:40:72:f4:2c:44:7d:
                    45:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:EE:FE:13:52:B7:00:AA:07:5A:FF:C2:72:0B:1E:5E:72:90:36:3E
            X509v3 Authority Key Identifier:
                keyid:09:C5:0E:FE:13:AA:DF:54:23:B0:4F:0D:DC:A8:B3:28:83:95:82:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CcUO_hOq31QjsE8N3KizKIOVgj4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/85a208-1ab6-46f7-b1a5-a26d25bc7654/1/CcUO_hOq31QjsE8N3KizKIOVgj4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/85a208-1ab6-46f7-b1a5-a26d25bc7654/1/CcUO_hOq31QjsE8N3KizKIOVgj4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:d2:54:1b:f5:d3:8a:1e:5e:5f:f5:58:2d:bd:da:9b:93:57:
         6e:c3:fd:0f:91:3e:cc:22:00:34:2c:3f:0e:fd:57:d6:5c:c2:
         41:8a:85:7e:b2:ee:b6:2c:4a:0d:57:e2:b3:e6:90:9b:5d:1d:
         fe:f0:ae:a8:54:84:d4:22:bc:73:d5:b6:07:27:01:30:f3:9d:
         d8:2b:72:8c:ff:d9:00:1f:dc:cc:13:f9:3a:8a:22:49:3e:e2:
         45:23:b9:04:26:05:ba:63:01:a3:b0:5a:fa:70:37:2c:91:99:
         fc:42:39:fb:2b:5b:a6:cc:f8:cd:1a:18:b5:67:9f:65:56:1b:
         65:66:ae:73:4c:91:75:fe:e2:03:f6:4d:63:db:7c:96:ba:18:
         0f:bc:6c:88:2a:49:c8:94:ed:a0:1d:cd:d5:2e:f0:d5:ca:91:
         57:83:03:c8:31:18:5a:55:29:4c:99:3d:3f:3c:26:5f:87:aa:
         4d:d5:53:ff:fa:76:f0:6f:10:2d:fe:c4:a4:66:06:58:5d:66:
         67:7f:17:2d:99:03:be:14:d5:eb:fa:b9:2e:95:e2:26:30:a0:
         07:05:35:66:50:bf:ef:33:bf:3c:89:63:b9:bb:90:cd:e6:d4:
         47:89:30:f3:b8:00:f9:d3:55:7b:94:18:68:15:fb:0d:1b:ef:
         1f:3c:82:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 03:15:00 2025 by rpki-client