
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/6d74fd-5bb9-42f8-bb51-0d9cd7e8ff36/1/AdbvBHn5_fqCZlff2ODvNmjKGr8.mft
File:                     AdbvBHn5_fqCZlff2ODvNmjKGr8.mft (raw, json)
Hash identifier:          AImhuTucQFvAvfX7Vd2q9XHWuTQKWdouxrt0XJvWUdc=
Subject key identifier:   E2:B5:4B:0C:CB:A5:17:67:3C:64:A4:1F:4F:B0:5A:74:A5:22:DD:ED
Authority key identifier: 01:D6:EF:04:79:F9:FD:FA:82:66:57:DF:D8:E0:EF:36:68:CA:1A:BF
Certificate issuer:       /CN=01d6ef0479f9fdfa826657dfd8e0ef3668ca1abf
Certificate serial:       019A4DE21A43457DE2710F4B2F36E3671CE7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AdbvBHn5_fqCZlff2ODvNmjKGr8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/6d74fd-5bb9-42f8-bb51-0d9cd7e8ff36/1/AdbvBHn5_fqCZlff2ODvNmjKGr8.mft
Manifest number:          16A1
Signing time:             Tue 04 Nov 2025 08:00:54 +0000
Manifest this update:     Tue 04 Nov 2025 08:00:54 +0000
Manifest next update:     Wed 05 Nov 2025 08:00:54 +0000
Files and hashes:         1: 7EOzLcM3E8sNA4PjSFrYUsbrEd0.roa (hash: no++UKlw2Jo1Bu83dbRNy2X31/EQKIzfSNC5oFSK5Ew=)
                          2: AdbvBHn5_fqCZlff2ODvNmjKGr8.crl (hash: b8AAwBHPzoAWA1/hxI+bn2NQjfUuCOjV/c1OMHFvaMA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/6d74fd-5bb9-42f8-bb51-0d9cd7e8ff36/1/AdbvBHn5_fqCZlff2ODvNmjKGr8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/6d74fd-5bb9-42f8-bb51-0d9cd7e8ff36/1/AdbvBHn5_fqCZlff2ODvNmjKGr8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AdbvBHn5_fqCZlff2ODvNmjKGr8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 08:00:54 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4d:e2:1a:43:45:7d:e2:71:0f:4b:2f:36:e3:67:1c:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01d6ef0479f9fdfa826657dfd8e0ef3668ca1abf
        Validity
            Not Before: Nov  4 08:00:54 2025 GMT
            Not After : Nov  5 08:00:54 2025 GMT
        Subject: CN=e2b54b0ccba517673c64a41f4fb05a74a522dded
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:e5:00:26:bd:e9:a6:2a:4e:2b:92:db:23:c1:
                    85:8b:ee:2f:92:a2:45:63:2d:98:9e:a6:92:8a:49:
                    8b:32:36:3a:82:34:0c:6b:55:55:fc:7f:32:f6:cc:
                    95:29:59:cc:83:7d:67:15:37:e4:a1:0f:5a:51:97:
                    32:bb:e1:c1:dd:35:7f:40:77:0c:a9:fb:74:a9:86:
                    9d:29:e4:d4:fe:48:70:c2:da:ba:2b:70:a1:84:c0:
                    22:15:38:97:7b:ff:5d:cb:07:3a:9b:4e:40:fb:e9:
                    bd:6d:4f:73:4a:35:ab:48:a0:04:cf:da:b1:25:0d:
                    90:39:14:e7:14:37:86:fa:55:64:d9:84:51:cf:dd:
                    ff:fe:80:a8:01:6c:0d:74:d0:0e:e5:41:2c:b7:d9:
                    50:bb:3e:08:b6:1b:87:5b:1d:ed:78:eb:ee:70:f0:
                    69:4e:b6:30:84:2e:c8:77:b7:5f:dd:c9:8c:02:9e:
                    09:eb:36:cc:3a:a5:17:b0:ac:d6:98:74:d2:d7:08:
                    9d:6c:7a:4e:ff:a5:8e:57:54:37:4e:8e:93:07:40:
                    58:c9:e9:8a:c6:3a:d1:af:26:2a:0b:7e:a3:30:e5:
                    5d:24:86:ec:54:37:a7:cb:69:de:fc:5d:e7:22:14:
                    c3:8a:89:45:d4:c9:a8:93:f2:b0:f2:c7:68:27:f2:
                    88:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:B5:4B:0C:CB:A5:17:67:3C:64:A4:1F:4F:B0:5A:74:A5:22:DD:ED
            X509v3 Authority Key Identifier:
                keyid:01:D6:EF:04:79:F9:FD:FA:82:66:57:DF:D8:E0:EF:36:68:CA:1A:BF
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AdbvBHn5_fqCZlff2ODvNmjKGr8.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/6d74fd-5bb9-42f8-bb51-0d9cd7e8ff36/1/AdbvBHn5_fqCZlff2ODvNmjKGr8.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/6d74fd-5bb9-42f8-bb51-0d9cd7e8ff36/1/AdbvBHn5_fqCZlff2ODvNmjKGr8.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         a5:70:7d:be:e0:d1:e5:2c:b2:31:4c:3d:7d:3d:ba:91:d5:55:
         ac:4e:24:c2:d7:86:8d:55:c6:be:06:44:bc:73:7d:7b:1d:73:
         63:7f:db:8b:6c:42:61:15:c2:b8:3e:a0:77:1f:12:bc:74:ec:
         91:15:73:7b:e8:84:45:a5:20:93:b5:f8:08:8a:0f:d7:4d:8e:
         05:05:f7:a9:bf:04:9f:e0:30:67:d7:54:c2:7b:d8:63:ec:c0:
         fb:2a:3e:ab:29:6a:86:6a:84:e3:59:8d:3d:af:ed:d6:91:57:
         29:20:ee:d1:e4:95:94:55:d9:aa:cd:0f:4c:92:5c:64:7a:55:
         bd:70:06:30:a9:94:2a:57:c7:d1:6b:52:a8:62:e7:80:10:94:
         13:3e:7f:11:55:1d:a7:2a:4b:16:3f:7b:dd:e4:f7:8f:49:22:
         d2:ce:77:52:78:c0:07:5c:31:ac:c4:2f:c3:6b:dc:1f:81:89:
         26:fa:f0:d9:d5:85:37:7b:c7:bc:c7:6e:6a:51:23:a7:13:b2:
         3d:13:37:10:8e:26:5e:b3:68:aa:5c:2f:23:c1:1e:d0:4b:23:
         7f:7e:cb:e9:84:0b:fe:15:9e:6c:df:bc:b0:45:62:d0:83:70:
         19:1a:71:88:6f:0f:3c:f6:0a:91:da:47:7a:af:9c:7e:07:ff:
         c1:9c:2e:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 10:46:00 2025 by rpki-client