Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/zWXuI7_0LM9nnXN3_k2mldNBrvA.mft
File:                     zWXuI7_0LM9nnXN3_k2mldNBrvA.mft (raw, json)
Hash identifier:          TXABxqL231Gi+JcF91BN6+gW6/+4WklZKNzffM877R8=
Subject key identifier:   BE:A9:50:D6:74:10:72:43:80:6A:1A:E1:0C:CE:EB:87:EA:BE:29:7E
Authority key identifier: CD:65:EE:23:BF:F4:2C:CF:67:9D:73:77:FE:4D:A6:95:D3:41:AE:F0
Certificate issuer:       /CN=cd65ee23bff42ccf679d7377fe4da695d341aef0
Certificate serial:       019A1FBF19DD405DE598F236B4AADC473072
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zWXuI7_0LM9nnXN3_k2mldNBrvA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/zWXuI7_0LM9nnXN3_k2mldNBrvA.mft
Manifest number:          16FC
Signing time:             Sun 26 Oct 2025 09:00:08 +0000
Manifest this update:     Sun 26 Oct 2025 09:00:08 +0000
Manifest next update:     Mon 27 Oct 2025 09:00:08 +0000
Files and hashes:         1: 8oT7fOBgdsUIIWZBhypDTwG_INQ.roa (hash: WRDiXAITdWeeibEg69ylgGin7yKTe8ComkxuvcQwoIQ=)
                          2: BkPt0aJALr6XVU6twrxQRhczZl4.roa (hash: GquW1GHGVn0JJFYtKkWU3g1jrNnF5g+2QT4CBc2mNJo=)
                          3: CT-3l0p9gg6VPqpkvwK6-YeB6pE.roa (hash: RUIJZLk9xg0lGoyDdhD+bJMX1WkdWP7lO6yMUzIdGIw=)
                          4: QE0murogrnfrhBNI-lIB055tOnQ.roa (hash: Ksxv7cylSwkoYU8exidDycgsWvNKpl/+njghNlj/jds=)
                          5: XgCZLSw672Y4fHLKF3VdR-oVpqY.roa (hash: ZVPJim/tPagRJuy806SzJxw1pNpmAJ8WphC4x+fYVdY=)
                          6: dPQfoA35Gpb11fSOLi6nPVp7H2I.roa (hash: X2zxEmCkV2bmI4Ai/dqf9r0pDpMKOTmxsA77tOPqEAo=)
                          7: zWXuI7_0LM9nnXN3_k2mldNBrvA.crl (hash: IcLmT5rJllcbIG7pfMEvNTnuHNtvptoJB7HnR8z4P0E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/zWXuI7_0LM9nnXN3_k2mldNBrvA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/zWXuI7_0LM9nnXN3_k2mldNBrvA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zWXuI7_0LM9nnXN3_k2mldNBrvA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Oct 2025 09:00:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:1f:bf:19:dd:40:5d:e5:98:f2:36:b4:aa:dc:47:30:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd65ee23bff42ccf679d7377fe4da695d341aef0
        Validity
            Not Before: Oct 26 09:00:08 2025 GMT
            Not After : Oct 27 09:00:08 2025 GMT
        Subject: CN=bea950d674107243806a1ae10cceeb87eabe297e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:06:20:11:e9:19:3a:92:eb:7e:13:41:4f:8c:
                    09:85:6c:28:be:65:20:61:bc:c8:d6:d3:b9:77:ab:
                    5b:ed:68:d1:51:22:7b:43:d2:8b:14:3d:4b:89:d0:
                    a4:86:87:5d:fe:44:a6:b5:3f:67:ec:d4:92:ca:f0:
                    58:53:22:4f:a4:2a:0e:4d:53:cd:e2:16:e3:a4:0b:
                    e4:8c:c8:b7:41:34:12:12:d3:a8:4d:32:29:b8:41:
                    bc:dc:3b:2f:ba:8f:b4:50:9c:b5:5f:8f:cf:49:d3:
                    15:87:35:1d:55:f7:78:a3:ac:7f:39:f4:c9:74:b4:
                    88:08:de:c9:e9:46:e5:da:5a:bf:cf:d5:6e:72:02:
                    73:1c:6f:12:31:a9:1d:ed:e8:3e:5f:6a:c5:51:4d:
                    d0:d6:14:d5:fe:83:d8:28:7c:19:f9:9d:17:26:27:
                    90:10:0a:99:2c:ae:a6:7e:8d:b5:24:92:b7:b4:2c:
                    24:21:d2:35:7c:fc:5a:70:b0:b5:fc:fb:06:88:21:
                    75:76:c8:b9:3d:5e:21:c8:e0:2d:fc:76:de:72:d0:
                    5c:1c:cd:af:38:b6:f0:f9:a2:7a:fa:59:4b:7a:c1:
                    4a:16:1f:d7:fc:4c:6c:d2:b4:fb:8e:9f:66:c3:32:
                    31:27:78:7d:8d:d4:48:32:1e:e3:d8:db:90:5d:69:
                    84:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:A9:50:D6:74:10:72:43:80:6A:1A:E1:0C:CE:EB:87:EA:BE:29:7E
            X509v3 Authority Key Identifier:
                keyid:CD:65:EE:23:BF:F4:2C:CF:67:9D:73:77:FE:4D:A6:95:D3:41:AE:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWXuI7_0LM9nnXN3_k2mldNBrvA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/zWXuI7_0LM9nnXN3_k2mldNBrvA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/zWXuI7_0LM9nnXN3_k2mldNBrvA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:ce:48:a5:e7:d9:db:d5:82:94:b0:ae:8b:d6:12:9d:63:db:
         cf:f7:08:29:82:6a:a8:de:88:fc:a6:76:ed:de:9e:02:d1:c3:
         f5:60:d8:a7:71:2b:3a:62:3e:52:9b:ef:d7:a4:85:d7:99:14:
         c6:63:2f:a3:cc:d4:4e:e9:22:ef:2c:a2:e5:2a:91:7b:cf:d4:
         a3:ea:d1:f6:e9:68:8b:1a:20:e8:9e:b4:90:b0:70:fd:34:18:
         d6:d2:87:5f:22:94:cb:92:3f:58:37:12:9e:91:e3:36:71:4a:
         cc:08:a3:be:12:01:89:b4:5e:f8:41:63:6e:fc:36:ee:e1:f1:
         cb:d8:2e:30:ba:8f:f0:bd:f9:3b:1a:e3:70:97:77:6e:08:cb:
         02:cc:5e:2f:48:56:d3:ec:04:3c:62:ae:3d:5c:48:f7:a4:a5:
         ac:40:7b:17:22:c6:65:cb:f5:3c:d0:99:f3:bf:c5:79:fa:09:
         4a:69:43:0b:26:ec:ac:9b:dd:2c:6d:a9:6d:f6:90:c5:c1:0c:
         54:fc:2a:bd:59:c9:b1:d9:32:dc:de:ea:18:2c:f8:5b:61:31:
         5e:01:a8:40:7d:99:d1:fd:b8:50:60:0e:1e:12:36:a0:f0:28:
         2a:0b:00:63:68:01:7c:a0:b7:83:ad:da:f5:25:14:88:64:45:
         66:ea:36:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 17:05:45 2025 by rpki-client