Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/cC9OAJQ3AMCJfeetvPztXRC_LgE.mft
File:                     cC9OAJQ3AMCJfeetvPztXRC_LgE.mft (raw, json)
Hash identifier:          1c1nx5qoYlR/NFWTVWSwPGxbQyt28kq5gbsgbEtWygQ=
Subject key identifier:   30:8E:7D:D6:E8:BC:C1:C8:4F:58:58:FF:A8:A3:84:2A:99:83:83:07
Authority key identifier: 70:2F:4E:00:94:37:00:C0:89:7D:E7:AD:BC:FC:ED:5D:10:BF:2E:01
Certificate issuer:       /CN=702f4e00943700c0897de7adbcfced5d10bf2e01
Certificate serial:       019A2E8DD24DB8989F0EA1CEF6ED674C4D6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cC9OAJQ3AMCJfeetvPztXRC_LgE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/cC9OAJQ3AMCJfeetvPztXRC_LgE.mft
Manifest number:          16FE
Signing time:             Wed 29 Oct 2025 06:00:37 +0000
Manifest this update:     Wed 29 Oct 2025 06:00:37 +0000
Manifest next update:     Thu 30 Oct 2025 06:00:37 +0000
Files and hashes:         1: cC9OAJQ3AMCJfeetvPztXRC_LgE.crl (hash: Zvhxa+4AY7dJVV9XFl7UaoSy+XIoAKGudYsTuznBqww=)
                          2: wfSejFWh26iFaDPELsnvR1TSCTM.roa (hash: OW8hsiyWgn6jtKd7S9vMQN1SrD9c05HrY+6z4A8TNNA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/cC9OAJQ3AMCJfeetvPztXRC_LgE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/cC9OAJQ3AMCJfeetvPztXRC_LgE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cC9OAJQ3AMCJfeetvPztXRC_LgE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Oct 2025 06:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:2e:8d:d2:4d:b8:98:9f:0e:a1:ce:f6:ed:67:4c:4d:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=702f4e00943700c0897de7adbcfced5d10bf2e01
        Validity
            Not Before: Oct 29 06:00:37 2025 GMT
            Not After : Oct 30 06:00:37 2025 GMT
        Subject: CN=308e7dd6e8bcc1c84f5858ffa8a3842a99838307
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:70:f4:b3:76:97:2d:ce:c0:cf:8a:06:90:0d:
                    79:c1:34:4f:3a:7f:3b:6f:1c:bd:39:55:d8:9d:e4:
                    9a:40:d0:47:6c:1a:42:8b:be:ce:ee:2d:96:bd:0b:
                    5f:14:ef:65:39:d7:52:28:0e:85:70:d8:e7:58:b5:
                    fa:6c:ac:f6:5c:d3:01:ca:85:6c:0b:dd:0a:90:67:
                    20:3f:29:3e:86:81:d8:39:78:eb:22:e9:3f:84:98:
                    6f:66:e6:36:6f:d2:28:77:a3:a7:fb:63:34:11:c2:
                    2e:90:01:bb:02:4a:fb:2b:b7:31:09:36:4d:16:df:
                    35:6b:4e:1f:9d:97:f9:96:0d:39:ac:e2:ca:7d:11:
                    0c:c0:88:49:69:d9:ce:ae:d2:42:4f:9b:75:b6:8b:
                    65:82:ea:5c:1d:b3:e9:ac:07:a0:ac:7d:8d:93:00:
                    5a:d2:40:d2:b0:3d:3f:f2:f3:25:6a:14:6e:c7:f1:
                    20:6b:83:f1:1c:46:33:f4:7e:f4:01:6c:9b:28:7d:
                    62:c3:4e:c5:2f:84:9e:b4:6e:9b:d1:c4:60:61:57:
                    21:ba:90:7f:49:16:50:81:d6:ce:69:32:2c:20:13:
                    24:4a:dc:34:1c:03:5f:db:ff:20:e2:14:12:f4:41:
                    88:9b:90:86:f9:3d:23:80:81:32:73:1e:76:72:56:
                    f0:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:8E:7D:D6:E8:BC:C1:C8:4F:58:58:FF:A8:A3:84:2A:99:83:83:07
            X509v3 Authority Key Identifier:
                keyid:70:2F:4E:00:94:37:00:C0:89:7D:E7:AD:BC:FC:ED:5D:10:BF:2E:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cC9OAJQ3AMCJfeetvPztXRC_LgE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/cC9OAJQ3AMCJfeetvPztXRC_LgE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/cC9OAJQ3AMCJfeetvPztXRC_LgE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:8d:4e:ea:7f:1c:0b:28:04:bd:6f:e8:8d:b0:c4:f0:a6:21:
         ad:bc:7a:51:2e:8a:37:e6:e2:9a:5a:4a:4a:77:3b:e6:28:8a:
         f9:56:6a:e1:52:89:26:43:19:40:46:f4:22:23:30:62:69:4c:
         b9:c6:15:6a:ab:e7:31:19:13:24:ae:e5:c6:e2:68:aa:8c:a2:
         eb:85:4d:37:cc:0d:f2:b1:77:d0:01:4f:13:41:51:d3:5e:2e:
         4f:ad:ee:80:ce:f1:a5:44:00:87:4b:50:e0:90:a4:e0:37:79:
         4e:0a:da:c4:cd:85:50:a4:93:6e:6b:4a:f9:c8:8b:0d:d4:c3:
         95:69:25:53:d1:37:33:8c:24:a0:af:b1:f2:fe:df:4b:fc:e6:
         f2:cb:c8:66:4f:21:f5:14:65:ca:63:b6:47:52:2e:91:7c:60:
         94:dd:cb:0d:77:09:59:3a:8c:79:78:22:69:66:67:15:e3:8f:
         01:f1:f3:82:75:d1:de:73:b4:74:1c:50:44:fe:3a:a9:0f:e9:
         6b:85:9d:44:a7:8f:fb:26:05:2d:4a:cc:d9:2a:60:43:76:66:
         ce:d6:e6:d1:3d:13:47:b6:a1:6f:c4:98:15:40:bb:7b:c7:93:
         0d:85:7d:3c:33:1d:05:85:a7:89:70:df:e0:f1:44:a4:59:db:
         c5:fb:13:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 11:03:04 2025 by rpki-client