Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.mft
File:                     bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.mft (raw, json)
Hash identifier:          2K3KLkJ2lQvP9hkcLG76qwYI5VYaJRTI/lsZm2kfkbs=
Subject key identifier:   7E:82:E7:B7:5A:4F:E8:3C:FC:5F:18:C5:96:77:31:C4:E4:41:76:65
Authority key identifier: 6C:03:A2:CA:F2:98:01:9F:BD:66:86:21:51:6C:8C:6E:1D:10:E8:3C
Certificate issuer:       /CN=6c03a2caf298019fbd668621516c8c6e1d10e83c
Certificate serial:       019922FADB34FC16FAA25FC752481E15118B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.mft
Manifest number:          16A6
Signing time:             Sun 07 Sep 2025 07:01:29 +0000
Manifest this update:     Sun 07 Sep 2025 07:01:29 +0000
Manifest next update:     Mon 08 Sep 2025 07:01:29 +0000
Files and hashes:         1: 4GFLNoudKsxo0lKJ1-DlrH13jnQ.roa (hash: HUsEZcDE4OcjX3j8qjU3YIB7IUQvhWtNObC5QxLBOjI=)
                          2: HABzsmEXoTX-9F80tlefBrIojpE.roa (hash: 52kUggTy9NYk2U3Bjz9hs7uyoLjfvw/NlnF/Z95I8C4=)
                          3: QePjCCFm1FINIQleulFli9B8Eok.roa (hash: /guHrTHyVfudxkCaMQP2S3B+Z/m09hjKdZNM8RCBhu8=)
                          4: RvvULY1y4xBfF8ZuGzWFY0OKEEg.roa (hash: NY71LOvBCM5qGOh91dHK/WKKwDoM07O+dhz3A0gNPUc=)
                          5: bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.crl (hash: T3RNHOzlRITUR2MSFn25T9XOTirhBMdu2iaMMM6L9SU=)
                          6: gjLZ8xPb1tsKV2vJR4IOeOvDkLQ.roa (hash: xoIQZnhZzbbmusOiJUznTII6cc6W+LUSKGBLQbZkQx8=)
                          7: knMcRzeWn60PeEDKHh4T-DsD47k.roa (hash: 1cCi1oSzq4A+m9C1hgD9P9MQKYKGGXYQlanHWTpFJ5s=)
                          8: t8J6z3tO2f2jI-WXfX5Z7ghB42Y.roa (hash: CJg1Zg1dR2GxxLuD5y1ebgKx9+kGLch5/dW0dbkm29Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 07:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:fa:db:34:fc:16:fa:a2:5f:c7:52:48:1e:15:11:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c03a2caf298019fbd668621516c8c6e1d10e83c
        Validity
            Not Before: Sep  7 07:01:29 2025 GMT
            Not After : Sep  8 07:01:29 2025 GMT
        Subject: CN=7e82e7b75a4fe83cfc5f18c5967731c4e4417665
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:c1:8d:3f:de:f2:0a:4e:f0:e1:12:63:20:2f:
                    26:ee:f5:a7:ac:5c:fd:f5:48:95:01:75:f2:b8:26:
                    06:1f:73:b4:7c:a9:40:a6:3d:7b:e1:71:02:f0:c0:
                    50:b8:11:8e:1d:17:d5:ef:2c:dd:6a:bb:5b:15:c0:
                    5a:f7:37:b3:94:08:1c:e1:04:9a:3f:6d:b9:8b:b1:
                    3a:f5:87:41:ac:8a:56:00:52:e6:00:09:88:9a:80:
                    88:c4:20:09:6c:04:ec:ad:d1:38:06:20:f5:03:7f:
                    ab:d3:f1:b3:21:13:27:9d:5d:61:43:a2:fb:f0:9a:
                    32:37:c4:19:94:f6:52:0f:fa:48:85:ea:23:6f:7f:
                    19:70:2f:94:82:c4:be:af:dd:db:b1:de:bf:27:79:
                    99:06:5a:69:56:02:47:f9:25:91:3e:1c:1d:e0:3b:
                    58:52:ae:4b:24:75:20:35:56:a7:4f:91:3a:5d:b5:
                    7b:f4:4c:b6:e0:db:b7:d0:4f:d9:0f:2e:40:2b:56:
                    62:a5:3c:76:0f:80:09:e6:3d:e3:04:07:f3:99:34:
                    c5:ac:26:f6:a4:79:df:74:29:47:b4:e2:79:dd:81:
                    eb:f5:42:b7:e1:1e:1b:ef:b5:de:9c:b8:18:de:2f:
                    e3:df:8c:cc:fa:d0:2d:8a:fb:51:ed:f8:a6:af:6b:
                    a5:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:82:E7:B7:5A:4F:E8:3C:FC:5F:18:C5:96:77:31:C4:E4:41:76:65
            X509v3 Authority Key Identifier:
                keyid:6C:03:A2:CA:F2:98:01:9F:BD:66:86:21:51:6C:8C:6E:1D:10:E8:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:3c:b9:55:2f:ec:92:0a:93:fd:f7:52:50:3d:12:03:38:8f:
         eb:55:c9:b4:54:9d:32:ca:b8:5c:2a:01:b6:f0:17:a8:ad:70:
         ff:7c:08:af:ce:d7:52:69:f6:b1:c1:e5:b0:c1:d4:6d:5b:25:
         63:99:81:a0:8f:43:54:08:27:bc:56:05:75:3e:44:dc:62:50:
         56:b0:85:2a:7e:bb:d6:ac:56:da:2b:4c:5c:ba:56:4f:b1:cb:
         22:e9:01:5c:c4:8d:24:86:b4:e4:b7:5f:ae:f5:94:5e:79:e6:
         15:a7:3e:a5:b0:8e:10:54:d5:89:c6:07:77:d2:18:78:b2:47:
         b2:df:6b:1c:eb:f5:9b:fa:ab:2a:11:cb:d0:ea:9a:81:d6:05:
         1f:ff:f3:70:59:4b:3e:70:ae:bd:31:79:6d:5a:9b:c4:5d:78:
         f0:97:0f:10:76:84:4d:d1:ad:70:1a:72:72:35:6a:e9:2c:6d:
         8d:12:36:50:97:5c:90:c0:61:40:c9:9b:0e:04:10:84:0c:1a:
         12:6a:72:b7:a1:cc:56:c0:7a:0d:65:75:0f:87:62:cc:31:17:
         12:63:2b:1f:94:6a:1f:d2:d2:a5:33:d3:14:c4:71:eb:e1:60:
         e1:49:c9:18:c9:1d:b6:d2:44:b9:d8:c2:02:b9:df:dd:91:8d:
         14:99:4a:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:22:23 2025 by rpki-client