Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.mft
File:                     2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.mft (raw, json)
Hash identifier:          W2HRfxxzw4F7chaPZ3tGrvmB337GCXVqnxnANGmtm+Q=
Subject key identifier:   CB:A1:2B:BB:70:08:A4:EB:05:33:9F:AD:9B:1A:D4:D9:89:59:54:58
Authority key identifier: D8:FC:6E:45:18:1D:83:9F:D1:0E:4A:90:27:62:F2:6C:9A:64:67:96
Certificate issuer:       /CN=d8fc6e45181d839fd10e4a902762f26c9a646796
Certificate serial:       019A2D7ABAF405A5D28D534F3C712176E206
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.mft
Manifest number:          16FE
Signing time:             Wed 29 Oct 2025 01:00:09 +0000
Manifest this update:     Wed 29 Oct 2025 01:00:09 +0000
Manifest next update:     Thu 30 Oct 2025 01:00:09 +0000
Files and hashes:         1: 2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.crl (hash: hFwnZJ1EZKWGX3geydgz1VmGB7VjFArxF7hN7MnWiqg=)
                          2: Hp-aUMiKFduSFShKvppXI42_Uj8.roa (hash: lCB+C5NdYk9yj77o+dq8fC9obFb6kuE+kfqjMFwOwXM=)
                          3: fj4ybxpsDPTq3Dcp32ARk19V658.roa (hash: G3z4kx3nRpiPVloWlnA+5o5/TapLF4KViU9lT9zaU4s=)
                          4: pE4C0VroSmY26_TJM0K-lSQgc7M.roa (hash: vf7UXC4PR0yUJjr6xqwo9zqitXjZXFvwlnGZdHjjf6A=)
                          5: waFJY_9Xx4HVBca8mozwG38i49k.roa (hash: 2sqvgn5zOZZ4lehKra8TFzA3bKpHh9AvNDOTiV97aSw=)
                          6: wwsOTx-pck8zIz4rEJvLSRVOW78.roa (hash: MNbHqch8VEMBR8R4jhawYSxV/uo6TDEte38JPI3LQos=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Oct 2025 23:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:2d:7a:ba:f4:05:a5:d2:8d:53:4f:3c:71:21:76:e2:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8fc6e45181d839fd10e4a902762f26c9a646796
        Validity
            Not Before: Oct 29 01:00:09 2025 GMT
            Not After : Oct 30 01:00:09 2025 GMT
        Subject: CN=cba12bbb7008a4eb05339fad9b1ad4d989595458
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d8:fd:3b:3d:48:7a:e7:5e:da:9d:a9:36:d3:
                    2d:90:27:1b:63:54:11:8e:b8:69:50:71:7b:97:8e:
                    c1:68:dc:34:fc:2c:b9:2f:e6:94:8a:7e:66:3b:1a:
                    96:00:a0:d3:e3:1a:95:c0:0e:2b:23:21:64:a6:72:
                    62:4a:70:a9:ee:65:84:48:a7:c7:75:18:7d:f5:0c:
                    a6:8d:96:54:8c:2e:11:96:20:31:ae:57:3b:64:3b:
                    35:3f:26:cd:96:87:ee:1a:5c:46:58:41:ae:fd:9c:
                    0e:f8:06:fa:ab:ab:67:37:0d:8e:20:78:1a:ab:9d:
                    b3:3f:47:96:28:be:56:11:2b:0e:6c:03:81:cf:3a:
                    7f:01:ea:fb:cf:92:fa:c3:3b:b6:bb:5b:43:a9:db:
                    06:89:10:e7:6c:5a:f3:52:e3:b3:3b:b0:d0:f3:36:
                    5b:a1:39:b9:18:47:71:b8:e5:8e:de:a4:2d:05:ff:
                    ac:22:a4:73:f1:6b:5a:22:c1:26:17:36:ae:f5:a1:
                    83:3f:4f:50:59:2f:19:e0:9e:51:aa:07:26:9f:d3:
                    fa:d5:35:b5:5e:e2:0e:be:36:1b:28:e3:c9:99:2b:
                    9e:be:39:7e:87:3c:8d:a0:68:73:1a:2f:4c:e4:d9:
                    16:52:05:16:fa:92:35:a9:95:8b:1f:dd:ad:32:4d:
                    3d:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:A1:2B:BB:70:08:A4:EB:05:33:9F:AD:9B:1A:D4:D9:89:59:54:58
            X509v3 Authority Key Identifier:
                keyid:D8:FC:6E:45:18:1D:83:9F:D1:0E:4A:90:27:62:F2:6C:9A:64:67:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:8e:8b:02:a5:17:29:10:d4:ca:4f:8a:dd:45:80:93:a1:76:
         1d:ba:fb:d7:ad:bd:d9:53:1b:3e:91:68:76:cb:78:e1:e0:eb:
         62:c3:7e:bd:f3:d6:8c:f9:4b:5d:cd:53:b8:7c:94:e7:88:97:
         43:fc:74:dd:08:b5:8b:73:4d:c2:20:97:20:21:17:df:cc:51:
         02:60:e6:d0:e5:db:6e:99:df:06:1c:f2:cc:3e:65:6e:b8:bd:
         f0:3c:be:bd:5c:83:06:8d:41:04:40:bf:f1:27:f4:9c:34:b8:
         67:bf:02:c5:bb:c9:4b:43:e4:34:fd:df:e0:a4:e6:fb:5a:6d:
         29:fb:90:45:e4:70:34:d2:83:84:71:9f:ae:b0:d2:30:eb:e5:
         bb:1c:75:3a:aa:e5:f4:50:52:22:8e:40:52:5f:9e:95:59:9a:
         fc:fb:e8:1e:25:56:29:78:cf:3d:42:83:ae:3a:98:4b:b3:ca:
         2f:f4:05:db:f1:17:a3:35:c7:16:89:06:14:9b:4f:29:f7:8e:
         fd:db:6f:d3:29:fb:44:e2:16:a0:f5:3e:0c:61:b2:78:cc:bb:
         a0:3c:06:bb:15:13:7f:00:6a:ca:c2:4e:ff:1b:3a:16:bc:76:
         c0:be:8b:4e:4a:4b:29:6c:9c:0f:20:40:74:7a:06:c3:e1:f2:
         25:f5:0e:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 08:11:26 2025 by rpki-client