Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/eefa72-8f4c-486c-b019-b4eaa0561fc7/1/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.mft
File:                     0gdchPUpyH3YX9Sv6k4JNDZq9Uo.mft (raw, json)
Hash identifier:          fxdorShKKv0tLrgjw1E5EWM/0aIwEfNU/yaDy/356VA=
Subject key identifier:   6B:4C:51:5F:A1:6A:72:47:EC:D9:DB:C1:CE:96:FB:7A:88:52:42:96
Authority key identifier: D2:07:5C:84:F5:29:C8:7D:D8:5F:D4:AF:EA:4E:09:34:36:6A:F5:4A
Certificate issuer:       /CN=d2075c84f529c87dd85fd4afea4e0934366af54a
Certificate serial:       019A31FD620977931E35D8837E35849C8767
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/eefa72-8f4c-486c-b019-b4eaa0561fc7/1/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.mft
Manifest number:          16FE
Signing time:             Wed 29 Oct 2025 22:01:20 +0000
Manifest this update:     Wed 29 Oct 2025 22:01:20 +0000
Manifest next update:     Thu 30 Oct 2025 22:01:20 +0000
Files and hashes:         1: 0gdchPUpyH3YX9Sv6k4JNDZq9Uo.crl (hash: zn+xEa5VLSoYUvoidlkU+Hz0UB+aV6sV1mS+AYlvvvs=)
                          2: 9e9KE2F8zCrYqsOR0ocKB3uWC0g.roa (hash: xWmWZ6mNV40OXaNhlTROFGFnywkkEouFvFZTD1JJjZc=)
                          3: MXxh0YHPMrk5arTCf3q6sfloz_s.roa (hash: N+z7kc9squE6rbdRMbjpnb079oubXEpLhtNwZjifRAU=)
                          4: PJMpQm9gwngY8P3_lMKl-7kl_Jo.roa (hash: kW2DqnWjgsO28lEW1wrqQlb2aOCM46/dPtOZpgqTEW0=)
                          5: q6I6gf2csqwaWg3RJJBU3r8Ww9s.roa (hash: TuJ+a/fTT9f6d+FkeMmzYXOZB23+5zFwPl6nA0Nxjxw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/eefa72-8f4c-486c-b019-b4eaa0561fc7/1/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/eefa72-8f4c-486c-b019-b4eaa0561fc7/1/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Oct 2025 17:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:31:fd:62:09:77:93:1e:35:d8:83:7e:35:84:9c:87:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2075c84f529c87dd85fd4afea4e0934366af54a
        Validity
            Not Before: Oct 29 22:01:20 2025 GMT
            Not After : Oct 30 22:01:20 2025 GMT
        Subject: CN=6b4c515fa16a7247ecd9dbc1ce96fb7a88524296
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:0e:89:dd:fe:2a:f1:ee:7a:73:b2:04:0f:78:
                    f3:8a:a6:62:b9:6a:4c:38:c9:76:bc:d9:38:c5:a6:
                    48:50:7c:33:a2:0f:2d:6b:2d:fd:b6:0e:c2:d4:2d:
                    31:59:53:a5:66:9d:d1:46:d9:f4:75:60:d1:04:d4:
                    1e:1e:d4:cf:54:6f:05:cc:20:98:6c:e6:37:bb:fe:
                    ed:3b:55:05:db:e0:dd:f1:36:c1:be:c3:d3:af:e8:
                    f3:0d:f9:e4:29:97:54:3c:8f:04:51:da:9c:3d:1e:
                    1f:8e:12:8d:30:30:04:4e:6d:44:23:5e:9b:cc:2f:
                    6c:bc:8f:ce:f1:d0:66:6b:e8:ef:a4:f1:6a:ea:14:
                    11:10:f2:55:45:0f:44:63:be:25:43:3d:6e:36:b2:
                    44:97:ee:d0:77:d7:62:44:75:20:26:e5:a1:c0:d3:
                    89:59:6e:86:3d:12:b4:da:36:c6:0e:f0:a2:4c:0e:
                    35:3e:04:85:c3:21:31:94:42:cc:29:30:37:3e:d3:
                    77:c7:a3:54:32:2d:b6:5a:39:4b:9f:59:a5:9b:2c:
                    99:ec:a4:42:ae:1b:e4:e5:2f:f7:56:f3:ae:3c:3e:
                    7a:3c:02:f3:3e:57:0a:ca:98:93:a9:67:56:d1:2c:
                    a2:d7:b0:c3:62:89:0e:b9:6a:a2:8d:1c:e4:9b:63:
                    8b:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:4C:51:5F:A1:6A:72:47:EC:D9:DB:C1:CE:96:FB:7A:88:52:42:96
            X509v3 Authority Key Identifier:
                keyid:D2:07:5C:84:F5:29:C8:7D:D8:5F:D4:AF:EA:4E:09:34:36:6A:F5:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/eefa72-8f4c-486c-b019-b4eaa0561fc7/1/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/eefa72-8f4c-486c-b019-b4eaa0561fc7/1/0gdchPUpyH3YX9Sv6k4JNDZq9Uo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:bd:b0:cd:25:d8:c5:c0:9a:49:19:61:34:ab:a8:23:39:ab:
         bb:87:37:7e:fc:36:b1:6c:a9:5d:ae:24:79:41:4e:52:f0:20:
         51:56:ad:0d:b3:0d:f0:e5:04:7e:57:4d:58:fb:d7:05:8a:78:
         1b:19:2a:5f:10:c7:d2:3b:c6:1e:a9:a4:9b:1f:f0:4d:47:e3:
         89:97:7f:4a:4a:b0:14:fd:6d:ac:f6:c1:44:5a:06:16:7b:f3:
         7f:c2:e2:63:47:4a:01:96:fa:14:7b:1a:33:b1:7c:c7:de:fa:
         02:ed:2b:02:60:5e:6c:87:75:ae:21:22:a2:06:1f:98:7e:48:
         3c:cf:46:78:88:08:9e:1a:9f:07:fa:e3:7a:39:cc:b8:ec:c5:
         26:74:a4:93:da:d0:ad:18:e3:8c:d6:6c:0e:0e:e4:4b:f9:0b:
         ef:94:99:94:fc:37:9a:d5:ac:0f:d9:12:7e:ac:70:cb:37:57:
         51:64:55:4d:32:f1:ee:db:fc:ba:df:5e:ea:f2:49:02:27:de:
         26:05:e5:2e:a6:58:49:bd:8d:43:c7:a5:fe:ef:ae:56:e7:1c:
         e2:cc:68:b2:ca:51:9d:bd:f9:f7:5e:3b:b4:26:db:ce:3f:9b:
         08:c9:b3:4b:4f:6a:a8:7a:01:67:85:83:d6:44:3a:65:98:b3:
         32:0d:04:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 30 03:29:25 2025 by rpki-client