Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.mft
File:                     Km7fIyZLQ4IdrpfRC9Nky2u38jQ.mft (raw, json)
Hash identifier:          jjeY4qnD0RTuq2CZtDqhsySxEwfDNAm6YFmPVO7fqXk=
Subject key identifier:   BE:2A:0E:EE:91:2A:7E:FA:4F:5F:8F:A3:98:45:00:D7:2C:45:AB:FA
Authority key identifier: 2A:6E:DF:23:26:4B:43:82:1D:AE:97:D1:0B:D3:64:CB:6B:B7:F2:34
Certificate issuer:       /CN=2a6edf23264b43821dae97d10bd364cb6bb7f234
Certificate serial:       019A17983D761C70C9229DF1B0EDC28C0116
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.mft
Manifest number:          16F6
Signing time:             Fri 24 Oct 2025 19:00:44 +0000
Manifest this update:     Fri 24 Oct 2025 19:00:44 +0000
Manifest next update:     Sat 25 Oct 2025 19:00:44 +0000
Files and hashes:         1: Km7fIyZLQ4IdrpfRC9Nky2u38jQ.crl (hash: C8qYccaCuqpUjkpGiPaHiLQ/JQQEVsEgqSwOcBsdLx0=)
                          2: Xz5fRm1rvrLEvX3nzQNpvfuqwdQ.roa (hash: 3vZNMQRQpFvLq3O7/5316ZbW91wqqPn0EJ7/sIa76eA=)
                          3: rIuFBAfmvp_-lxNjPhpoImYAjZk.roa (hash: UYHTUbb1Al1rBA78c79sngeNx1JvlEPhDvWJaFDSi+E=)
                          4: y4ueXY0ijBf4RZb4fGJVsXQLGA0.roa (hash: UvuMlXoUYXPwY2R/r9zwqG0BA2XfWQY7ClxJAXl4TJs=)
                          5: yoc8JMk-9f_YUHXEL_9_ZmX1Dg4.roa (hash: vHYZAYQIcTZ88hbC8SwB+Nm3QsYJxFwlJCLWjy+CEWs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Oct 2025 15:30:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:17:98:3d:76:1c:70:c9:22:9d:f1:b0:ed:c2:8c:01:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a6edf23264b43821dae97d10bd364cb6bb7f234
        Validity
            Not Before: Oct 24 19:00:44 2025 GMT
            Not After : Oct 25 19:00:44 2025 GMT
        Subject: CN=be2a0eee912a7efa4f5f8fa3984500d72c45abfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f1:14:25:f5:cc:d4:08:16:a7:39:80:35:31:
                    80:7b:92:45:ed:c8:5e:d2:5e:9e:44:42:cc:c7:da:
                    c0:8d:1b:5b:32:f3:a4:9f:8a:2f:ce:31:50:3f:45:
                    54:64:40:50:aa:2c:82:bf:45:f1:20:2e:04:5e:f2:
                    18:c8:e9:9f:69:34:cf:09:cb:5a:2b:65:de:f6:e1:
                    7b:5f:f2:87:0d:b3:0d:1f:c2:91:b6:2f:a7:64:23:
                    44:d3:94:3e:5b:8f:e0:a6:45:a7:f8:d4:89:76:b4:
                    e2:02:84:63:11:46:4d:c2:f2:13:8e:69:13:f2:a3:
                    49:37:c3:c0:4d:76:8b:8e:a0:c1:50:30:2e:6d:6f:
                    cc:50:94:bb:0e:b9:cf:9f:16:1b:14:81:96:cb:62:
                    94:90:e8:fc:d5:08:e7:56:d6:35:35:33:17:c0:6f:
                    75:71:6c:e3:8f:07:e0:a0:fe:ac:e9:4d:1a:f4:33:
                    2d:6c:7a:29:d5:a1:bf:40:11:c7:e4:15:60:b0:53:
                    fa:2a:78:0d:c0:54:63:1e:c6:ae:da:9d:ad:ce:7f:
                    36:34:8b:1a:0c:32:65:f9:0a:7c:8b:4b:f2:c4:8e:
                    0a:d4:90:75:23:59:ad:e1:2a:91:ea:86:8d:4d:f4:
                    86:df:86:76:39:8e:ce:f3:6d:06:a5:ea:8a:ad:04:
                    bc:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:2A:0E:EE:91:2A:7E:FA:4F:5F:8F:A3:98:45:00:D7:2C:45:AB:FA
            X509v3 Authority Key Identifier:
                keyid:2A:6E:DF:23:26:4B:43:82:1D:AE:97:D1:0B:D3:64:CB:6B:B7:F2:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:96:cb:a1:4c:61:47:ef:5b:e8:f0:65:d7:88:0b:f2:3d:54:
         4b:ca:0e:54:29:ae:57:72:4e:c0:8c:a9:3f:3b:47:fc:10:10:
         88:b2:48:5c:06:58:7e:fd:c5:3d:fa:95:8f:61:1a:7b:ad:08:
         03:f5:c7:53:e5:e7:4a:6e:e1:f5:88:5c:7c:aa:6c:69:80:bb:
         93:d8:ef:b4:b6:b7:7d:55:ba:68:18:eb:06:9f:d6:c6:f5:40:
         19:57:0d:07:55:e7:e9:d9:95:4c:67:bf:c0:69:ef:41:b8:59:
         69:5e:1f:74:a5:5f:3e:51:9d:8b:59:b3:e2:25:fc:66:7b:61:
         61:cf:34:9e:33:b0:5e:b8:cc:9c:17:6d:bc:1d:5c:c0:9e:23:
         31:3c:4b:ab:c6:2c:60:6f:4d:6a:3e:ef:ec:32:56:2d:db:88:
         36:1a:a7:9b:0c:13:93:26:b0:66:57:45:9f:58:5e:13:12:a7:
         40:cd:e9:8e:b4:12:df:27:f2:2d:75:af:cb:63:b1:77:cb:7e:
         99:b0:d8:22:03:54:18:fd:9d:4f:3f:a4:ef:38:9f:f6:d8:6e:
         45:0f:f1:01:ff:8c:31:f6:95:17:8c:b9:ce:ea:6b:68:15:fe:
         97:4f:a6:e5:5d:11:af:3f:14:2e:76:2c:5e:0b:ed:b0:db:5d:
         d0:0d:ab:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 00:05:57 2025 by rpki-client