Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/058509-2fe7-486b-b4ad-8c74f9dd67fc/1/itkoGq_vyDda2LS35gSJlVWVIjc.mft
File:                     itkoGq_vyDda2LS35gSJlVWVIjc.mft (raw, json)
Hash identifier:          Qx0lFHvXY3xILSiueEDYGqHkZLzLmCS6eApKONkEu9M=
Subject key identifier:   E6:AA:B9:BA:0F:B9:87:B7:C2:79:27:8D:92:D0:2F:DF:5A:19:77:B7
Authority key identifier: 8A:D9:28:1A:AF:EF:C8:37:5A:D8:B4:B7:E6:04:89:95:55:95:22:37
Certificate issuer:       /CN=8ad9281aafefc8375ad8b4b7e604899555952237
Certificate serial:       019A300E8606E71162939F6817AD75B6F63C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/itkoGq_vyDda2LS35gSJlVWVIjc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/058509-2fe7-486b-b4ad-8c74f9dd67fc/1/itkoGq_vyDda2LS35gSJlVWVIjc.mft
Manifest number:          16FD
Signing time:             Wed 29 Oct 2025 13:00:49 +0000
Manifest this update:     Wed 29 Oct 2025 13:00:49 +0000
Manifest next update:     Thu 30 Oct 2025 13:00:49 +0000
Files and hashes:         1: S5poUcmm58bh9LYHwgnRXNYgnoA.roa (hash: lYdAfaTYBlu17YVjsaWJtgDfvkSUWB0Kx0isvQs/8cw=)
                          2: UH7ERX2uEAwiuiu2EIP73IUUkwI.roa (hash: 71rfZI37bB6WKWLPGXn68iFKAbS6rOx+kOHCTWBrP9Q=)
                          3: cFWMX2o_ui2JzGo_3BwtmNDE6Xg.roa (hash: XCpyD2PZhsa33O69EMpxJ6xZIifq0UTk39opm80d+zI=)
                          4: itkoGq_vyDda2LS35gSJlVWVIjc.crl (hash: 5PidHIoCyVula+1lxgW4NK7Z/kTodRliaPPm5YKcbjU=)
                          5: sShD_q4ceLwxQ66Q2G4C6NLHOns.roa (hash: BiX0Ojf2DbZMT20uSZBtFAbZP4As97iO/AHVcU+bzqI=)
                          6: tk3p5E2XBBz_gCKcQbPuR2gwU6g.roa (hash: /uRgiUmwXV30g9CXl0HkFIaUTifbBZ9DvHMj/iIVKLM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/058509-2fe7-486b-b4ad-8c74f9dd67fc/1/itkoGq_vyDda2LS35gSJlVWVIjc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/058509-2fe7-486b-b4ad-8c74f9dd67fc/1/itkoGq_vyDda2LS35gSJlVWVIjc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/itkoGq_vyDda2LS35gSJlVWVIjc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Oct 2025 13:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:30:0e:86:06:e7:11:62:93:9f:68:17:ad:75:b6:f6:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ad9281aafefc8375ad8b4b7e604899555952237
        Validity
            Not Before: Oct 29 13:00:49 2025 GMT
            Not After : Oct 30 13:00:49 2025 GMT
        Subject: CN=e6aab9ba0fb987b7c279278d92d02fdf5a1977b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:18:48:5d:34:de:e3:73:b1:a0:e9:b4:c2:5f:
                    f4:b3:5d:5a:9e:b1:6c:fa:d1:c0:79:d5:2e:be:72:
                    16:c2:a5:46:67:b6:55:97:c0:20:57:35:13:2f:1b:
                    ef:55:2b:24:c9:b4:86:94:90:0f:2a:79:41:b4:7f:
                    62:b2:12:4f:e3:3d:29:54:33:24:d3:71:77:04:20:
                    f9:d9:3a:c3:96:16:d4:5c:ba:c4:8b:a2:2b:8a:45:
                    af:7a:3e:a4:5f:3f:63:a5:cc:e5:d7:4d:95:b6:2c:
                    b7:13:f9:0a:bf:a0:77:91:40:43:f4:22:9f:27:5a:
                    41:be:6a:ac:7f:c8:54:b8:a5:40:f9:12:12:3c:e5:
                    f6:89:98:99:f0:0f:0d:7a:fa:e5:c3:f4:96:3d:a5:
                    19:a4:09:c6:31:96:67:3d:cc:29:f7:20:64:5e:20:
                    96:24:67:6e:10:5b:c4:93:4e:1d:16:f8:9e:9d:38:
                    10:51:f7:d2:2e:c6:90:b3:30:83:e4:25:26:f3:34:
                    54:cf:c5:02:26:90:42:bf:fe:3c:b9:01:cb:e5:25:
                    08:d8:f0:a5:93:69:88:3e:a7:ae:4e:a2:6f:06:45:
                    5b:1e:ae:c6:0d:36:40:6e:c9:dd:f0:b9:fa:dd:9b:
                    f4:33:c5:f7:2d:69:3f:58:78:ab:26:26:92:0e:af:
                    b5:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:AA:B9:BA:0F:B9:87:B7:C2:79:27:8D:92:D0:2F:DF:5A:19:77:B7
            X509v3 Authority Key Identifier:
                keyid:8A:D9:28:1A:AF:EF:C8:37:5A:D8:B4:B7:E6:04:89:95:55:95:22:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itkoGq_vyDda2LS35gSJlVWVIjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/058509-2fe7-486b-b4ad-8c74f9dd67fc/1/itkoGq_vyDda2LS35gSJlVWVIjc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/058509-2fe7-486b-b4ad-8c74f9dd67fc/1/itkoGq_vyDda2LS35gSJlVWVIjc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:45:73:30:22:de:66:0d:ed:06:78:d2:b9:5d:7c:c9:58:e7:
         29:a1:a8:13:22:d1:a9:0f:86:4c:06:51:45:63:c6:94:4a:b2:
         85:24:41:99:ef:f8:33:0e:a1:a6:95:68:26:4e:70:32:7a:23:
         63:bf:11:62:86:60:10:4d:9b:c3:aa:a8:c7:83:22:bf:a5:33:
         09:9f:6a:e7:a5:96:17:ea:d0:f1:30:73:4b:bb:52:23:b6:6c:
         51:47:b7:ca:c2:c7:44:3c:3a:7e:ec:b5:d0:52:ff:fc:e6:44:
         ce:f2:34:4b:d7:9a:bf:a6:1f:79:c4:b6:34:bb:7c:a8:ae:f3:
         f3:ee:23:55:88:26:9b:7d:87:6e:9d:b5:bc:09:3d:bb:2d:ab:
         6e:9d:5a:6a:41:12:5c:d2:16:47:c2:19:03:eb:a8:15:43:70:
         05:af:9c:e0:c5:69:89:59:3a:a8:39:a9:fd:43:05:98:e9:1f:
         e0:63:57:f4:d8:9c:d2:90:c2:9b:93:bb:c3:f4:c9:ae:af:d4:
         ed:0f:56:e5:df:a6:ef:96:bb:c7:ae:b8:8f:39:9d:65:67:18:
         07:d3:98:da:ac:c9:31:43:1e:e1:ef:a9:10:ef:ba:df:b6:aa:
         98:a2:78:c3:25:12:ca:a9:30:19:cb:c0:05:ac:f6:f9:54:ea:
         5e:cd:46:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 18:48:54 2025 by rpki-client