Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/4a613a-31ef-4a73-8da4-a5af937fbc05/1/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.mft
File:                     C44gxI6Jc8Mx4zzlUZWjIXc_CsM.mft (raw, json)
Hash identifier:          zfboSuewhurPrd/9JYFF51onX9VAYd0zo/eCE3LKJxo=
Subject key identifier:   F9:0B:F5:57:EE:A9:B3:A1:78:C4:7F:6E:D0:BC:95:0A:F3:AA:73:3C
Authority key identifier: 0B:8E:20:C4:8E:89:73:C3:31:E3:3C:E5:51:95:A3:21:77:3F:0A:C3
Certificate issuer:       /CN=0b8e20c48e8973c331e33ce55195a321773f0ac3
Certificate serial:       019A50076485152AE508933668BDE798ECCB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/4a613a-31ef-4a73-8da4-a5af937fbc05/1/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.mft
Manifest number:          16DE
Signing time:             Tue 04 Nov 2025 18:00:52 +0000
Manifest this update:     Tue 04 Nov 2025 18:00:52 +0000
Manifest next update:     Wed 05 Nov 2025 18:00:52 +0000
Files and hashes:         1: C44gxI6Jc8Mx4zzlUZWjIXc_CsM.crl (hash: iuXszXsVuvMtUVjmjS/6uQ03IgFmlLo9j+L3uSxQTmg=)
                          2: f_yh7-7v7LI3DnSdnUSk00iuL5g.roa (hash: WRI0Xz6/VCX9n+DPCS4hBmIPi2foRqOlNvNKjpUOgU4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/4a613a-31ef-4a73-8da4-a5af937fbc05/1/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/4a613a-31ef-4a73-8da4-a5af937fbc05/1/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 16:49:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:50:07:64:85:15:2a:e5:08:93:36:68:bd:e7:98:ec:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b8e20c48e8973c331e33ce55195a321773f0ac3
        Validity
            Not Before: Nov  4 18:00:52 2025 GMT
            Not After : Nov  5 18:00:52 2025 GMT
        Subject: CN=f90bf557eea9b3a178c47f6ed0bc950af3aa733c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a4:78:1e:c6:34:0e:44:38:a5:a5:b7:64:57:
                    5f:ba:20:15:9f:6d:75:ff:6b:d5:ef:df:ac:e3:b5:
                    58:e1:a4:24:9d:92:de:3d:66:ce:89:d3:ed:fd:d7:
                    77:1e:eb:d9:f4:52:db:97:a3:ed:db:42:e0:64:5e:
                    13:e5:72:09:7c:8e:4e:14:84:5b:9f:4c:42:90:8b:
                    45:8b:37:5f:61:6b:79:11:8c:32:10:60:17:e3:45:
                    8c:10:cf:b3:20:8f:74:49:f2:00:50:6b:95:64:f1:
                    1e:d8:59:83:1e:62:6b:0b:79:8c:d5:11:59:63:5b:
                    64:6a:b5:39:d3:d2:cc:dd:54:4a:81:a6:39:b4:0f:
                    39:c7:18:7c:f7:3e:71:68:75:07:58:61:4a:2b:38:
                    35:e0:15:ef:6a:68:01:ef:8f:01:c3:5b:4f:dd:18:
                    e6:65:f9:98:ed:80:c5:ad:37:a9:ff:9a:83:49:68:
                    d2:63:09:40:b2:2a:06:ee:ea:ea:87:0c:21:8d:9c:
                    25:3d:a2:2b:41:08:49:c2:6d:34:19:23:58:51:24:
                    01:dd:9d:6f:3b:bc:6e:6e:ea:b6:a4:09:a4:ff:8c:
                    62:9c:c7:24:a7:19:3e:fd:5d:8e:74:0e:3a:fe:1f:
                    46:d0:aa:dd:b2:69:b5:68:44:23:85:3a:2a:d9:87:
                    a1:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:0B:F5:57:EE:A9:B3:A1:78:C4:7F:6E:D0:BC:95:0A:F3:AA:73:3C
            X509v3 Authority Key Identifier:
                keyid:0B:8E:20:C4:8E:89:73:C3:31:E3:3C:E5:51:95:A3:21:77:3F:0A:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4a613a-31ef-4a73-8da4-a5af937fbc05/1/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4a613a-31ef-4a73-8da4-a5af937fbc05/1/C44gxI6Jc8Mx4zzlUZWjIXc_CsM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:c6:7c:f3:97:09:3d:90:bf:dd:35:ad:82:96:40:3a:3f:a7:
         75:79:9c:24:2d:2a:da:c9:04:37:db:12:fc:c3:e6:ec:70:47:
         e5:64:b5:51:fa:4f:ad:0c:d5:4a:c4:b2:a0:85:6c:9e:6f:77:
         6c:44:6d:fb:35:80:29:c4:18:f6:c9:40:8e:8c:d5:e7:42:98:
         42:12:69:de:49:6a:15:19:8e:bf:6f:40:e7:6c:07:a1:6d:4c:
         6b:a0:6f:c6:3a:40:7f:ab:c2:9c:43:c1:53:c9:56:10:35:6b:
         24:83:79:fd:a8:63:49:b2:86:10:e8:2d:ce:4e:7d:66:c8:66:
         e0:a9:1d:51:df:58:ba:3f:64:89:9e:1e:79:d6:01:83:3a:a9:
         96:d1:8a:ef:dc:c7:f6:f4:61:9b:04:ee:4f:9e:5c:44:18:07:
         7c:86:b9:ba:9b:72:33:e1:df:27:4a:ad:8e:84:7e:c3:c0:80:
         3e:fe:fd:6a:05:9e:3a:5d:53:8a:26:a4:87:57:b2:25:3f:3b:
         de:ad:73:55:cd:c8:2f:a8:5e:72:f6:2c:a8:d8:76:81:6a:4f:
         fb:36:b5:6d:57:3f:b4:90:f2:4b:e3:b8:ad:12:55:28:cf:c6:
         e1:58:44:a1:99:d2:41:40:8f:b7:b6:ce:a1:6d:7c:5e:cf:0e:
         dc:49:01:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:27:34 2025 by rpki-client