Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/0168ac-342c-4dd0-91a8-1b75867e8dff/1/pWbYM3d2yYdGvSMeaeGF2yqaW-I.mft
File:                     pWbYM3d2yYdGvSMeaeGF2yqaW-I.mft (raw, json)
Hash identifier:          rt5CcZoETX9uvzc8o9Xf/Axl4CU0Qu3NVfxzTbx4kcE=
Subject key identifier:   51:B2:F8:53:3C:80:E4:B6:10:3D:18:9E:8E:17:94:5E:C3:1A:F7:32
Authority key identifier: A5:66:D8:33:77:76:C9:87:46:BD:23:1E:69:E1:85:DB:2A:9A:5B:E2
Certificate issuer:       /CN=a566d8337776c98746bd231e69e185db2a9a5be2
Certificate serial:       019A28547495DDE2376357D8047C7E91BF5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pWbYM3d2yYdGvSMeaeGF2yqaW-I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/0168ac-342c-4dd0-91a8-1b75867e8dff/1/pWbYM3d2yYdGvSMeaeGF2yqaW-I.mft
Manifest number:          16FE
Signing time:             Tue 28 Oct 2025 01:00:14 +0000
Manifest this update:     Tue 28 Oct 2025 01:00:14 +0000
Manifest next update:     Wed 29 Oct 2025 01:00:14 +0000
Files and hashes:         1: 7SmeLFPOio4_Ky8cQI7MC0iIdXA.roa (hash: XAYT9N7Wxwu1sDqxP3875BlVYpctWhwDpAfUj0zPhpw=)
                          2: RruUWaulD3Ts5bLhPekvKUpKn6Q.roa (hash: MWhOe4vkp6Dp9lK3nL7VGv6jbmHEX1p3ZT+EvK2+o70=)
                          3: T1ExYbnMScXpW49W3TzA2j25m2g.roa (hash: y19xXSPvsH3iQpElfEG+Wwae1lHCoSGQlARfuGWM2P0=)
                          4: XUdNcNwhMqFtYsebg1gOrES8fg8.roa (hash: 1SCBRGG9BH3bL2AIx7nLNmgCfpwCw1UXMhqNEU4goqY=)
                          5: lQBaepPxUTQndrJtXUT4fAXM3dQ.roa (hash: GNjGYOD9FpKkiBDma5mL88iC58tqUffFR4KSPc0aU8Q=)
                          6: pWbYM3d2yYdGvSMeaeGF2yqaW-I.crl (hash: 3r6EJi+EYwh2t4D+18fyMbDaPl0HhkB8LzhJ/y/gl04=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/0168ac-342c-4dd0-91a8-1b75867e8dff/1/pWbYM3d2yYdGvSMeaeGF2yqaW-I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/0168ac-342c-4dd0-91a8-1b75867e8dff/1/pWbYM3d2yYdGvSMeaeGF2yqaW-I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pWbYM3d2yYdGvSMeaeGF2yqaW-I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Oct 2025 00:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:28:54:74:95:dd:e2:37:63:57:d8:04:7c:7e:91:bf:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a566d8337776c98746bd231e69e185db2a9a5be2
        Validity
            Not Before: Oct 28 01:00:14 2025 GMT
            Not After : Oct 29 01:00:14 2025 GMT
        Subject: CN=51b2f8533c80e4b6103d189e8e17945ec31af732
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:b2:c2:ba:94:23:90:60:13:35:cb:a9:84:ca:
                    20:d0:77:33:0c:a8:08:e2:6a:5c:82:bc:01:08:bc:
                    fe:fc:ef:ba:fc:16:10:a0:c9:21:a0:bf:bd:2d:10:
                    95:64:e6:cc:e8:f2:d6:4d:dc:00:ff:8e:72:3b:a0:
                    6a:e4:91:50:67:57:cd:73:b4:2a:78:e0:1e:10:e8:
                    1d:56:93:12:b2:fc:ce:e6:26:d2:4a:d5:70:88:ca:
                    a3:81:af:1b:5f:c7:8b:a7:c7:12:8d:87:82:dd:70:
                    55:79:5a:c6:18:f7:6b:8e:81:50:ce:bc:2e:c5:47:
                    59:fb:85:3f:88:db:8c:7b:dd:53:88:ff:a9:e7:3a:
                    a7:71:12:29:e8:3a:95:6c:6b:ae:a4:cd:4c:38:45:
                    a0:b2:f7:30:0b:f7:ed:cc:55:13:f2:64:8e:47:6a:
                    bd:44:5c:c6:a1:f6:bb:8d:e5:fa:81:ba:72:86:c3:
                    5f:5e:15:8d:3a:c5:e6:67:17:2f:f7:f7:73:1f:3a:
                    53:08:b8:f8:0a:2d:f5:20:d3:ab:82:0f:cc:bf:fe:
                    9c:7e:d6:9d:3e:33:b7:c2:37:b5:ca:0f:c4:b9:32:
                    ce:c4:b6:26:b3:47:95:32:d7:13:6f:f3:7e:85:26:
                    71:b2:fd:c5:19:1b:e7:1c:97:a7:9c:e8:63:ff:42:
                    a7:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:B2:F8:53:3C:80:E4:B6:10:3D:18:9E:8E:17:94:5E:C3:1A:F7:32
            X509v3 Authority Key Identifier:
                keyid:A5:66:D8:33:77:76:C9:87:46:BD:23:1E:69:E1:85:DB:2A:9A:5B:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pWbYM3d2yYdGvSMeaeGF2yqaW-I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0168ac-342c-4dd0-91a8-1b75867e8dff/1/pWbYM3d2yYdGvSMeaeGF2yqaW-I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0168ac-342c-4dd0-91a8-1b75867e8dff/1/pWbYM3d2yYdGvSMeaeGF2yqaW-I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:df:ae:70:9c:cb:09:62:0f:6f:59:d8:5d:e8:0a:d7:81:62:
         93:1d:25:8c:ea:08:eb:8c:00:3f:fd:4b:55:07:a7:82:a0:70:
         d3:9b:98:49:c1:a6:61:cb:9f:2a:b1:79:ce:cb:3d:9a:1d:f5:
         e0:73:fe:5c:b9:df:f6:c2:b6:e0:cf:9a:10:38:74:ef:07:89:
         c5:55:d4:df:6a:42:a7:0f:ba:c0:94:32:d9:06:a8:79:ff:22:
         41:c8:4a:c4:58:40:80:20:d3:48:02:b7:d2:ad:4e:f4:da:ae:
         06:34:9c:a1:e6:05:f4:89:b3:89:6b:36:a6:f9:e2:b8:4f:61:
         8b:31:9f:df:87:7c:97:55:4f:22:55:90:42:38:ea:3e:78:fc:
         2d:37:a6:6f:d8:bf:8e:71:10:b3:56:d4:99:8d:0a:16:51:93:
         d2:a0:58:bb:52:33:79:b1:a0:1c:4f:16:b4:bc:26:57:dd:29:
         21:99:b0:a5:8c:f8:f3:56:42:ba:2e:67:37:6e:d9:12:fc:f3:
         63:a5:81:41:1e:f8:b4:34:1f:9b:db:63:d4:dc:01:01:42:4b:
         28:fd:03:9a:42:3b:52:fd:19:b6:6e:cf:f6:f4:da:cd:50:6a:
         63:b9:fa:d9:35:8a:5c:1e:76:96:a4:e7:45:33:cf:02:2c:a4:
         02:40:31:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 07:12:41 2025 by rpki-client