Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/403ddd-c2d5-4b54-973a-2b7a794d5795/1/ACQ0xzoO6iLG5EEHLpPbd8foovE.mft
File:                     ACQ0xzoO6iLG5EEHLpPbd8foovE.mft (raw, json)
Hash identifier:          ITcJGazE1f5D/cxvIaIK7rkTVWxMeXBFKJWPtHoo/Mg=
Subject key identifier:   52:AE:EE:F5:45:4B:18:39:B4:26:E9:12:9C:E4:BD:E2:8F:48:67:FD
Authority key identifier: 00:24:34:C7:3A:0E:EA:22:C6:E4:41:07:2E:93:DB:77:C7:E8:A2:F1
Certificate issuer:       /CN=002434c73a0eea22c6e441072e93db77c7e8a2f1
Certificate serial:       019A22899549A5B903837AFE9E826D136C5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ACQ0xzoO6iLG5EEHLpPbd8foovE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/403ddd-c2d5-4b54-973a-2b7a794d5795/1/ACQ0xzoO6iLG5EEHLpPbd8foovE.mft
Manifest number:          16F7
Signing time:             Sun 26 Oct 2025 22:00:33 +0000
Manifest this update:     Sun 26 Oct 2025 22:00:33 +0000
Manifest next update:     Mon 27 Oct 2025 22:00:33 +0000
Files and hashes:         1: ACQ0xzoO6iLG5EEHLpPbd8foovE.crl (hash: 6X5Oxw4TpcRtePYWRlzx2Ch4NbtIygs4q2BbbNv6sUQ=)
                          2: cHH8n9jIhtvEhfYf9DzKMDe1sMM.roa (hash: 24RyHXYm2+n9v+uk7dd0yGKCI/vamDa6gkuFRLODvdE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/403ddd-c2d5-4b54-973a-2b7a794d5795/1/ACQ0xzoO6iLG5EEHLpPbd8foovE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/403ddd-c2d5-4b54-973a-2b7a794d5795/1/ACQ0xzoO6iLG5EEHLpPbd8foovE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ACQ0xzoO6iLG5EEHLpPbd8foovE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Oct 2025 19:48:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:22:89:95:49:a5:b9:03:83:7a:fe:9e:82:6d:13:6c:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=002434c73a0eea22c6e441072e93db77c7e8a2f1
        Validity
            Not Before: Oct 26 22:00:33 2025 GMT
            Not After : Oct 27 22:00:33 2025 GMT
        Subject: CN=52aeeef5454b1839b426e9129ce4bde28f4867fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:68:02:98:ae:ca:f1:9b:69:6a:93:d6:0c:a7:
                    df:f4:e9:06:0e:3b:c3:ce:85:0c:97:83:3c:e9:3e:
                    c1:5a:bc:f0:1e:fe:76:9d:41:b0:40:dc:7d:30:8d:
                    ba:d8:f3:e8:56:c8:18:e3:8d:e0:16:ad:ff:b4:09:
                    61:a8:6a:b3:76:91:bb:0c:d9:d3:68:2c:0e:5c:b2:
                    20:fa:77:f5:f8:70:19:6b:05:28:22:09:4f:60:29:
                    00:0c:13:74:30:14:86:9e:b5:be:4b:8b:a2:33:53:
                    96:94:c4:e8:aa:c1:30:50:1c:f4:11:13:47:8b:2b:
                    82:24:f4:cb:0f:df:46:49:cf:02:0a:60:68:bc:a6:
                    15:1b:b6:3e:cb:62:54:53:76:6d:80:57:07:c3:41:
                    43:80:66:14:6a:9d:10:1b:f8:51:8b:2f:43:80:03:
                    f3:94:63:fa:c6:65:98:74:9b:41:2a:e5:76:d1:96:
                    70:5c:71:c7:97:24:c3:c8:1f:97:f3:76:12:63:4c:
                    98:18:b7:14:4f:55:0a:fb:e6:37:de:2e:df:68:f0:
                    3c:7d:90:3b:e7:57:00:94:1c:af:5c:c9:b4:7a:b4:
                    31:38:33:85:76:22:a2:f9:95:7d:90:05:24:3e:52:
                    b1:09:46:4d:32:67:dd:31:82:8d:45:d1:f5:6e:f6:
                    cc:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:AE:EE:F5:45:4B:18:39:B4:26:E9:12:9C:E4:BD:E2:8F:48:67:FD
            X509v3 Authority Key Identifier:
                keyid:00:24:34:C7:3A:0E:EA:22:C6:E4:41:07:2E:93:DB:77:C7:E8:A2:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACQ0xzoO6iLG5EEHLpPbd8foovE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/403ddd-c2d5-4b54-973a-2b7a794d5795/1/ACQ0xzoO6iLG5EEHLpPbd8foovE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/403ddd-c2d5-4b54-973a-2b7a794d5795/1/ACQ0xzoO6iLG5EEHLpPbd8foovE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:6d:e5:b3:ac:bc:f8:ae:08:ba:22:79:96:d1:4b:3b:8a:6c:
         70:de:47:5c:76:4c:a8:5d:dc:e8:bd:7f:42:95:38:ae:5e:5b:
         05:73:5b:3a:c8:49:62:71:2e:e7:cc:77:1b:ee:0a:4e:c3:57:
         41:69:05:9f:89:15:49:6a:51:37:30:9b:e0:bb:f3:a5:ab:32:
         47:c8:56:e5:0f:9d:e8:ec:f6:ea:c2:a8:a0:7f:b8:35:e6:8a:
         ad:21:81:62:b5:e0:25:69:3a:39:83:e2:42:b9:1a:1a:c0:0a:
         46:c8:a2:fb:e5:88:17:70:48:ac:cc:ec:c7:9f:ac:4f:20:c9:
         ae:18:87:45:cb:02:7c:d7:33:f8:30:f1:7b:20:8a:f5:66:be:
         38:55:25:14:64:3c:4c:76:97:5a:67:28:9d:a1:8e:f4:dc:38:
         1a:48:4e:89:b5:33:fc:7a:9c:e3:f9:e6:c2:f2:8d:20:e3:a1:
         89:51:b1:81:5b:3e:0b:c4:62:4f:65:b8:5f:a7:a2:db:32:ba:
         bd:f7:d5:9f:55:2f:69:db:30:3d:6d:a4:ac:8e:47:4e:f1:5f:
         db:01:54:8f:3c:50:2b:b0:63:00:8c:5f:91:9a:c8:46:af:04:
         74:3b:e2:73:9b:cc:b5:3b:a9:a1:ff:da:02:bb:41:9d:c8:a1:
         10:c3:ab:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:38:50 2025 by rpki-client