Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/1-3nCbzFXU0UVnIQO0nioeKklZhU.mft
File:                     1-3nCbzFXU0UVnIQO0nioeKklZhU.mft (raw, json)
Hash identifier:          M9iLEHozaFRN1G0A771OOnel3GZFQXcMQlUgi8Rqn54=
Subject key identifier:   40:45:DD:67:E3:1C:35:77:DC:1C:11:D1:79:2E:8C:C9:2E:9B:A4:4B
Authority key identifier: FB:79:C2:6F:31:57:53:45:15:9C:84:0E:D2:78:A8:78:A9:25:66:15
Certificate issuer:       /CN=fb79c26f31575345159c840ed278a878a9256615
Certificate serial:       019A00A31FB8EED3D86BEBECB602D5F19E15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-3nCbzFXU0UVnIQO0nioeKklZhU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/1-3nCbzFXU0UVnIQO0nioeKklZhU.mft
Manifest number:          16EC
Signing time:             Mon 20 Oct 2025 08:01:21 +0000
Manifest this update:     Mon 20 Oct 2025 08:01:21 +0000
Manifest next update:     Tue 21 Oct 2025 08:01:21 +0000
Files and hashes:         1: 1-3nCbzFXU0UVnIQO0nioeKklZhU.crl (hash: IVkcxKjiQEMykBG261SsSzhGUiSqQX61a3WeE1lDH10=)
                          2: HlfC9yfvGN7DHKK4tv23ZO2ZzTI.roa (hash: lvbBBqCHLb7K+iy+sLWnMQKI6pl/6vd+wtc46LAcd44=)
                          3: Vxlq2Z39A9F-eaPA57TXXEurwJs.roa (hash: 4xN4zUrQu99FYL0d5xYUEvVHQtyeUZcoIRVpmdGGWqo=)
                          4: wBLhap3qy1Bc5_-udfUtTUhswUE.roa (hash: yKTNsxF+At82L6AqbVZLyPnofD0bf/S3KDHdg52k6Ec=)
                          5: wytxdRZXxEWi72ICxppv0nWaK_g.roa (hash: HLAxZnhzpvrbRLPZ50VaAEF9FMDzhmk4qqTXoJRwuoo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/1-3nCbzFXU0UVnIQO0nioeKklZhU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/1-3nCbzFXU0UVnIQO0nioeKklZhU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-3nCbzFXU0UVnIQO0nioeKklZhU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 08:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:00:a3:1f:b8:ee:d3:d8:6b:eb:ec:b6:02:d5:f1:9e:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb79c26f31575345159c840ed278a878a9256615
        Validity
            Not Before: Oct 20 08:01:21 2025 GMT
            Not After : Oct 21 08:01:21 2025 GMT
        Subject: CN=4045dd67e31c3577dc1c11d1792e8cc92e9ba44b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:9b:e3:68:40:60:af:1d:f8:f9:17:36:1d:98:
                    1a:c6:ba:6c:c4:ee:c3:eb:68:1d:24:16:5f:e7:1d:
                    98:54:ec:1d:d1:e4:33:bb:05:92:52:85:a6:28:87:
                    6e:55:1a:66:f1:ab:d6:21:61:42:a2:f7:bf:2b:05:
                    da:f8:e1:22:80:1d:86:ec:3b:1d:2f:1d:bc:f8:18:
                    05:79:cf:3f:ad:a9:d4:10:5e:22:4f:3e:5e:93:e7:
                    07:a3:aa:38:5d:6c:6d:d1:6d:d0:fe:89:4f:e4:ea:
                    24:91:59:35:04:1b:8b:75:dc:0d:2f:6d:88:f7:0b:
                    1c:f4:79:9e:32:43:99:77:52:0a:79:bc:84:be:10:
                    50:41:b6:df:44:7a:c6:31:60:e3:e5:c0:ce:94:22:
                    c1:87:46:69:09:80:ad:0b:9f:d3:31:b9:f6:54:da:
                    60:b8:cb:a1:8b:b4:d8:a0:72:ab:37:50:c6:85:30:
                    be:84:85:40:94:3b:3b:b9:b6:04:0e:3f:a3:60:d5:
                    5f:da:3b:f0:d1:eb:72:17:4d:0e:40:59:ed:ec:d9:
                    8a:a1:ec:55:95:d6:65:d4:17:bb:66:05:dd:a5:b5:
                    0b:ee:93:89:78:01:6b:cf:18:5b:1c:2b:58:b6:6b:
                    f1:ba:a3:62:0f:e7:5a:23:d9:1d:fd:bd:73:98:ed:
                    0b:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:45:DD:67:E3:1C:35:77:DC:1C:11:D1:79:2E:8C:C9:2E:9B:A4:4B
            X509v3 Authority Key Identifier:
                keyid:FB:79:C2:6F:31:57:53:45:15:9C:84:0E:D2:78:A8:78:A9:25:66:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3nCbzFXU0UVnIQO0nioeKklZhU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/1-3nCbzFXU0UVnIQO0nioeKklZhU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/1-3nCbzFXU0UVnIQO0nioeKklZhU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:c0:7d:e6:e9:a7:5e:a5:10:b2:f7:74:62:3c:0b:a8:91:e7:
         0f:ec:5b:25:c4:e0:a9:4b:db:95:77:75:a7:2f:00:ee:7a:a9:
         5d:74:4b:e6:43:e5:33:f5:2b:6f:2d:a2:f9:c9:5c:b2:9e:77:
         cb:67:94:7c:8f:1f:2a:94:be:96:59:e1:9d:d2:0e:b2:6b:e1:
         a0:80:1b:da:f7:f5:f4:39:0f:69:e2:54:3e:61:3f:da:54:8b:
         7e:67:cc:db:b7:ac:03:95:e7:68:ad:c2:f8:c5:bf:e8:36:ec:
         9a:d5:20:cc:13:5b:c8:20:ca:b6:ca:cd:4c:39:d8:b0:de:cc:
         6c:8e:cb:e7:35:7d:6d:bc:3d:78:d4:93:7a:bb:e6:72:37:d3:
         e7:49:06:02:34:f1:e6:fa:3d:73:d6:36:c5:77:3e:97:20:14:
         14:60:71:1b:11:09:82:39:59:3d:2a:53:ff:9a:72:e7:03:cd:
         b1:57:fc:2c:32:e4:7e:76:69:e0:5e:5d:15:e1:43:7e:c3:59:
         8c:6a:40:8b:9c:b4:8f:60:94:ae:9b:6b:fe:94:ae:14:e0:cd:
         4c:39:80:fa:20:a0:ee:ee:33:dc:2b:15:c9:b7:cf:81:91:e0:
         5b:46:34:8d:c1:e0:9a:6d:4e:92:44:d4:6d:ad:a2:19:d5:7d:
         2e:60:b8:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:20:05 2025 by rpki-client