Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/d2974f-7efa-4611-8827-260c377a314a/1/cGt_6orTURHKaHqc0ApJ-aTwRZs.mft
File:                     cGt_6orTURHKaHqc0ApJ-aTwRZs.mft (raw, json)
Hash identifier:          DWvmJLeM/HglRmgyK05Xxu2Rp2eZCTiTn15JX8d1EkI=
Subject key identifier:   C1:D7:06:F6:DB:0E:43:9E:4B:1A:08:28:A5:2C:7C:95:33:82:25:10
Authority key identifier: 70:6B:7F:EA:8A:D3:51:11:CA:68:7A:9C:D0:0A:49:F9:A4:F0:45:9B
Certificate issuer:       /CN=706b7fea8ad35111ca687a9cd00a49f9a4f0459b
Certificate serial:       019A21ADE9A5B26B19899087733765DB3BEC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cGt_6orTURHKaHqc0ApJ-aTwRZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/d2974f-7efa-4611-8827-260c377a314a/1/cGt_6orTURHKaHqc0ApJ-aTwRZs.mft
Manifest number:          16EE
Signing time:             Sun 26 Oct 2025 18:00:36 +0000
Manifest this update:     Sun 26 Oct 2025 18:00:36 +0000
Manifest next update:     Mon 27 Oct 2025 18:00:36 +0000
Files and hashes:         1: 1-i7nGTwXEwybr4Pzt1yuXERVK6c.roa (hash: 6WebZuQEVFb53qv4JdObZh7gRJmnrMnS1KiKHpMOHA8=)
                          2: F98rZRsLL_WSYn3n29uuLg-FPR0.roa (hash: 73uq7x903k93laF4iGlteDX6rFg0Y3etQUcDdi1l7lg=)
                          3: R66tp2YspSa0WKGVVBRpgjOOMSc.roa (hash: vAJd7pQTatYNcNboScZHezKRexmDJyWedTR7sHg29G0=)
                          4: VPHhytFNuubbFjm4tYvAl8Nd2ZE.roa (hash: 6/FzWhj3KyFvDY5lx/pXSGk3g0b0b2s63jOD/2yTOio=)
                          5: cGt_6orTURHKaHqc0ApJ-aTwRZs.crl (hash: E5spSZjfcOAMC1re9UBOiLF/DTjy87NTZTrCFatKtFE=)
                          6: zMZkIjmJ2QpgvnpDUAinKvhQb1o.roa (hash: Y7E9I/njb2IhcUidLKH3fAcdQ31FJYDtFn4eagm4C1Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/d2974f-7efa-4611-8827-260c377a314a/1/cGt_6orTURHKaHqc0ApJ-aTwRZs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/d2974f-7efa-4611-8827-260c377a314a/1/cGt_6orTURHKaHqc0ApJ-aTwRZs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cGt_6orTURHKaHqc0ApJ-aTwRZs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Oct 2025 18:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:21:ad:e9:a5:b2:6b:19:89:90:87:73:37:65:db:3b:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=706b7fea8ad35111ca687a9cd00a49f9a4f0459b
        Validity
            Not Before: Oct 26 18:00:36 2025 GMT
            Not After : Oct 27 18:00:36 2025 GMT
        Subject: CN=c1d706f6db0e439e4b1a0828a52c7c9533822510
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:32:3e:a5:7d:f2:77:ca:64:cf:58:2f:10:3c:
                    b0:ad:8a:62:8f:28:92:4d:39:5d:1a:2a:fa:c0:8a:
                    98:c8:d5:20:db:6b:31:b6:ea:9a:03:2f:da:27:a7:
                    28:e7:0a:fc:31:0a:9b:e4:6b:71:57:d2:68:97:87:
                    88:b7:75:f6:14:61:41:c1:8a:ce:21:1f:b7:09:c2:
                    ce:e5:c0:18:76:4d:40:a0:14:1a:d3:0d:5b:5e:1f:
                    fc:05:12:3e:8f:0e:64:b2:19:a6:79:2d:b9:52:e1:
                    ae:90:7f:0c:14:da:60:48:d0:57:b5:47:24:01:30:
                    d1:78:b7:7e:8a:55:de:4d:2c:6b:43:75:6f:ac:87:
                    66:68:82:dd:30:32:37:00:a0:1a:43:42:b3:17:1d:
                    ec:8e:80:18:d9:88:d4:c8:34:c3:23:f9:a8:f7:ba:
                    cf:62:5a:61:0e:3e:1b:d9:99:32:67:10:04:d0:9f:
                    2c:47:dc:28:d4:a8:bd:95:33:51:3a:bd:38:51:86:
                    8b:88:6e:82:0a:d6:fc:30:d5:2d:55:b5:4c:e0:b6:
                    7f:95:ac:6d:d4:bc:f4:de:d3:29:fb:c8:8c:0b:56:
                    5e:35:f4:74:7c:25:df:5c:ac:5e:d1:57:8a:ee:c9:
                    5b:96:83:c8:c2:6e:25:84:db:ab:41:fb:3a:5a:d0:
                    56:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:D7:06:F6:DB:0E:43:9E:4B:1A:08:28:A5:2C:7C:95:33:82:25:10
            X509v3 Authority Key Identifier:
                keyid:70:6B:7F:EA:8A:D3:51:11:CA:68:7A:9C:D0:0A:49:F9:A4:F0:45:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cGt_6orTURHKaHqc0ApJ-aTwRZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d2974f-7efa-4611-8827-260c377a314a/1/cGt_6orTURHKaHqc0ApJ-aTwRZs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d2974f-7efa-4611-8827-260c377a314a/1/cGt_6orTURHKaHqc0ApJ-aTwRZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:56:1a:ab:66:05:51:be:2a:77:3f:c9:57:67:c9:5a:ac:ef:
         11:2b:85:1f:85:da:47:1f:eb:cb:30:37:9b:db:4c:6b:d9:fb:
         25:26:67:83:7c:0f:6b:62:ac:4a:07:26:28:04:da:1d:f9:03:
         a4:67:eb:86:3d:d0:98:d6:95:0d:8a:ff:eb:c5:fe:8e:24:1c:
         d4:08:3a:27:f8:d7:4f:fe:2a:1e:f1:75:b3:30:7d:89:2f:3c:
         2f:e9:13:a1:83:ed:75:24:11:70:17:56:42:77:48:59:d8:7a:
         78:c1:d0:98:5b:24:ed:88:d8:e1:c8:44:08:42:e0:c0:88:9b:
         6e:4f:28:3c:65:59:0e:05:11:61:ab:6d:ab:51:3f:be:41:9a:
         8a:7c:ca:00:bf:6f:65:92:dc:a4:bc:7e:67:c0:1a:99:97:d8:
         cf:09:b5:7f:db:e2:ce:cc:f7:56:83:02:90:ad:14:f0:9c:92:
         ed:58:88:f4:91:f0:6a:47:37:28:b1:bf:16:de:9c:ac:78:8a:
         8e:04:73:ab:51:33:37:e1:80:03:fd:02:fb:52:4d:df:c3:b2:
         d1:d4:de:51:be:c9:3e:cf:68:6e:89:63:20:f9:06:7a:83:dd:
         9c:ea:c9:8a:5e:44:47:27:d5:65:91:fd:78:3a:5d:00:91:e7:
         42:16:2e:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 03:59:51 2025 by rpki-client