Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/ef5856-bbc0-45a4-891e-b2dcc1863e8b/1/mecgmoybF2-_Yj7fPuC4IAf8LEA.mft
File:                     mecgmoybF2-_Yj7fPuC4IAf8LEA.mft (raw, json)
Hash identifier:          HZONObJ+/eTYB9pY5OHvJpu5FUnNMVrUX1H9URGI9Hw=
Subject key identifier:   55:44:4C:83:DD:47:BA:D3:2F:0F:73:9F:3B:81:79:92:C9:D6:77:4F
Authority key identifier: 99:E7:20:9A:8C:9B:17:6F:BF:62:3E:DF:3E:E0:B8:20:07:FC:2C:40
Certificate issuer:       /CN=99e7209a8c9b176fbf623edf3ee0b82007fc2c40
Certificate serial:       019A2108A5BB5D54C345B31051BC69535302
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mecgmoybF2-_Yj7fPuC4IAf8LEA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/ef5856-bbc0-45a4-891e-b2dcc1863e8b/1/mecgmoybF2-_Yj7fPuC4IAf8LEA.mft
Manifest number:          16FC
Signing time:             Sun 26 Oct 2025 15:00:06 +0000
Manifest this update:     Sun 26 Oct 2025 15:00:06 +0000
Manifest next update:     Mon 27 Oct 2025 15:00:06 +0000
Files and hashes:         1: 8Yr3TcpHaEQid4NaHBnD3vpLE84.roa (hash: nwAi63b6Bc3AJUqoLYElL2URnBMmDXAT9b7jn7wDHew=)
                          2: CRfBYJKdAcJkuUOzDrxFtsvODlc.roa (hash: sg0iqsUzi8BvUCsL9xp2VmWGXPaK8k3OJtwqd24lwUE=)
                          3: fiBm-H6MZf3doc0iQRwx1WfOBtU.roa (hash: lFEwHkm3foVU/vLtJDQi6VsIU7NhnRJ+voXn3vgZZsQ=)
                          4: kQbp2qzFUZPwkhJafZeDm861YjM.roa (hash: Fkm5avfRjVcfP/ZhaPCK6QXfyeZa3X+294m6m4o5WkA=)
                          5: mecgmoybF2-_Yj7fPuC4IAf8LEA.crl (hash: Na1QuvNqaPYJyqRZXSMec42l8tVUi4eMmJ+TDodFPqo=)
                          6: ow3qzF69wqcAle7bTyTRDSI-CjU.roa (hash: zPkJxRIh+4adiToqm5Gt9iWworMW5Po/0t9AKhqJJ1k=)
                          7: t1AESqjDY-KutFWdkZGisFfagCE.roa (hash: MNFsAROxqzLCXF98BXrdVFPLVe5mdJi+XK1r2Onz//o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/ef5856-bbc0-45a4-891e-b2dcc1863e8b/1/mecgmoybF2-_Yj7fPuC4IAf8LEA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/ef5856-bbc0-45a4-891e-b2dcc1863e8b/1/mecgmoybF2-_Yj7fPuC4IAf8LEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mecgmoybF2-_Yj7fPuC4IAf8LEA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Oct 2025 14:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:21:08:a5:bb:5d:54:c3:45:b3:10:51:bc:69:53:53:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99e7209a8c9b176fbf623edf3ee0b82007fc2c40
        Validity
            Not Before: Oct 26 15:00:06 2025 GMT
            Not After : Oct 27 15:00:06 2025 GMT
        Subject: CN=55444c83dd47bad32f0f739f3b817992c9d6774f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:8c:c4:09:44:36:9d:b6:e0:0f:3f:21:31:08:
                    a1:f7:82:06:be:a2:3e:80:e7:d7:7b:a8:51:d7:59:
                    e8:e6:9d:36:40:31:5e:d3:7c:24:05:40:59:6a:aa:
                    7b:8d:5c:bc:c2:31:97:67:64:82:b6:37:77:33:72:
                    c4:93:68:48:0b:4f:8d:76:04:80:78:a8:c6:a0:e6:
                    39:fe:9e:73:04:1d:d4:dd:72:8b:79:1e:02:11:bc:
                    cf:b2:d9:7c:34:d0:72:b0:82:67:2d:55:11:cf:1a:
                    75:52:bd:69:4e:44:90:44:22:7a:dc:7b:43:42:61:
                    0c:04:6e:8d:98:76:37:8c:9d:32:cd:3b:ea:88:a2:
                    ec:27:15:84:3c:fa:4b:74:47:69:80:46:90:9e:7f:
                    79:e0:72:89:7a:7d:4a:f8:61:02:7a:07:79:94:26:
                    3d:98:53:80:99:c1:a2:2c:83:d0:aa:d7:ba:23:cc:
                    23:af:46:71:a0:1c:c0:e7:bb:39:d9:0b:b3:a0:b2:
                    f4:22:9f:ca:9b:c4:80:dd:4e:16:69:1b:47:18:89:
                    8c:fe:f1:a8:c1:b1:9f:ff:59:35:90:30:fd:75:00:
                    8b:68:f6:e8:28:2c:0f:21:2e:32:6f:b7:2a:fb:a7:
                    d7:ed:61:e2:5a:70:ec:19:0d:9f:0d:07:53:41:01:
                    77:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:44:4C:83:DD:47:BA:D3:2F:0F:73:9F:3B:81:79:92:C9:D6:77:4F
            X509v3 Authority Key Identifier:
                keyid:99:E7:20:9A:8C:9B:17:6F:BF:62:3E:DF:3E:E0:B8:20:07:FC:2C:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mecgmoybF2-_Yj7fPuC4IAf8LEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ef5856-bbc0-45a4-891e-b2dcc1863e8b/1/mecgmoybF2-_Yj7fPuC4IAf8LEA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ef5856-bbc0-45a4-891e-b2dcc1863e8b/1/mecgmoybF2-_Yj7fPuC4IAf8LEA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:3d:ab:37:58:8a:78:5c:18:b4:cd:b8:aa:5b:20:29:27:cb:
         85:a1:b0:6b:60:c3:3d:8a:33:27:16:9e:77:73:06:f2:e9:78:
         cb:8e:d8:af:0c:72:ce:23:2d:47:59:33:cd:0e:b0:dd:df:04:
         b1:ea:f3:78:60:24:f9:1a:ec:0e:42:9d:24:75:12:a0:c1:bd:
         24:78:2a:b5:ca:42:5b:01:1f:47:83:94:26:96:5f:f7:3b:75:
         21:37:ac:97:8d:b7:2c:4a:34:6b:b7:21:b3:04:ef:08:21:3a:
         4c:25:58:73:98:29:eb:ea:58:a4:a4:5c:e7:0c:1a:ca:2b:0e:
         b2:52:fd:6b:40:7a:d6:6a:a7:82:64:c4:32:c9:25:43:90:a2:
         6b:93:72:17:84:5b:0f:ef:87:d7:11:33:d7:23:fe:57:47:e6:
         61:36:81:d5:63:8b:30:20:d6:09:72:f1:1b:b3:34:57:6a:68:
         71:ec:e3:27:27:15:ca:a4:2a:bd:28:26:25:31:22:3e:31:23:
         df:1c:f5:29:1c:46:45:a8:3f:9c:c6:94:38:44:d2:bc:79:0e:
         61:cb:2a:6f:6a:ec:46:0f:9c:7d:61:0e:51:95:53:a8:fb:92:
         a0:2c:c9:db:d3:09:86:db:a0:29:64:e7:f5:ef:96:7a:84:4e:
         c6:8a:2d:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 23:56:44 2025 by rpki-client