Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/e05dff-be12-4e82-873d-d31a33fc5e99/1/RiJNyTluWA_3Eg8lc1OnDHI3nJM.mft
File:                     RiJNyTluWA_3Eg8lc1OnDHI3nJM.mft (raw, json)
Hash identifier:          rex7Y7Dq8HShaSOpTsxbuc+vool770/csn7vAH2rXcQ=
Subject key identifier:   81:93:D4:43:DA:71:C0:73:12:E2:BE:7A:F9:6E:2E:ED:5F:21:3E:1A
Authority key identifier: 46:22:4D:C9:39:6E:58:0F:F7:12:0F:25:73:53:A7:0C:72:37:9C:93
Certificate issuer:       /CN=46224dc9396e580ff7120f257353a70c72379c93
Certificate serial:       0199FDD9753BF5CCEBC80EEAC7F0D673DDB7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RiJNyTluWA_3Eg8lc1OnDHI3nJM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/e05dff-be12-4e82-873d-d31a33fc5e99/1/RiJNyTluWA_3Eg8lc1OnDHI3nJM.mft
Manifest number:          16B9
Signing time:             Sun 19 Oct 2025 19:01:50 +0000
Manifest this update:     Sun 19 Oct 2025 19:01:50 +0000
Manifest next update:     Mon 20 Oct 2025 19:01:50 +0000
Files and hashes:         1: 237nnYKB7i2VaJ7m52nEdfcb0Ac.roa (hash: dLnbAiBZCTSW/Pqjq4dBaGgbhjyCcK3BPz7BIZYga/k=)
                          2: RiJNyTluWA_3Eg8lc1OnDHI3nJM.crl (hash: j5anlqLS0PUYmGTs38pPXmz8zPMklzoidNseey6hXB4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/e05dff-be12-4e82-873d-d31a33fc5e99/1/RiJNyTluWA_3Eg8lc1OnDHI3nJM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/e05dff-be12-4e82-873d-d31a33fc5e99/1/RiJNyTluWA_3Eg8lc1OnDHI3nJM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RiJNyTluWA_3Eg8lc1OnDHI3nJM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:d9:75:3b:f5:cc:eb:c8:0e:ea:c7:f0:d6:73:dd:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46224dc9396e580ff7120f257353a70c72379c93
        Validity
            Not Before: Oct 19 19:01:50 2025 GMT
            Not After : Oct 20 19:01:50 2025 GMT
        Subject: CN=8193d443da71c07312e2be7af96e2eed5f213e1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:4d:ab:44:a0:ba:fb:c5:44:8a:e9:d8:5c:af:
                    7e:91:53:81:4f:04:73:57:95:ac:7b:6d:0f:d3:a8:
                    84:3f:91:39:ae:a9:c9:ab:f9:5f:eb:df:3a:fb:9d:
                    62:9e:95:7f:f7:b7:6a:e8:da:97:72:0b:39:22:34:
                    28:c5:c8:8d:be:53:98:cd:a7:d9:f4:a1:bd:48:45:
                    7c:65:4e:f1:d7:3b:10:88:7e:28:3f:01:85:98:7c:
                    2b:fc:68:e8:9f:5e:73:4c:d0:9c:5b:e0:b7:f7:35:
                    53:b9:6c:e0:83:d4:4c:9f:0c:21:2f:c6:ee:d7:e2:
                    b6:63:64:67:d7:17:32:56:61:0e:5a:92:b5:21:fa:
                    2d:10:7b:d4:bd:b8:83:ac:a9:1e:ea:97:cd:f8:0d:
                    45:60:87:5f:0d:c2:0a:31:55:cd:39:0e:48:88:3d:
                    06:a4:df:9b:6c:7a:2e:e0:0e:51:26:19:4b:83:b8:
                    e4:df:77:51:9b:a0:5f:fa:d5:8a:75:d8:e4:50:b3:
                    41:29:be:9e:91:c3:da:58:e3:a7:0d:fd:b2:98:af:
                    57:2e:a9:76:02:39:c8:23:32:7a:3c:ce:26:e4:fc:
                    ae:8a:fd:39:0d:3d:36:4e:e9:c7:af:de:f2:c1:a2:
                    0d:12:64:ef:46:45:44:1e:3f:c2:5a:de:f4:24:c3:
                    1d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:93:D4:43:DA:71:C0:73:12:E2:BE:7A:F9:6E:2E:ED:5F:21:3E:1A
            X509v3 Authority Key Identifier:
                keyid:46:22:4D:C9:39:6E:58:0F:F7:12:0F:25:73:53:A7:0C:72:37:9C:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RiJNyTluWA_3Eg8lc1OnDHI3nJM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/e05dff-be12-4e82-873d-d31a33fc5e99/1/RiJNyTluWA_3Eg8lc1OnDHI3nJM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/e05dff-be12-4e82-873d-d31a33fc5e99/1/RiJNyTluWA_3Eg8lc1OnDHI3nJM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:db:3e:71:04:2e:4f:66:65:b2:b9:bc:b1:84:bb:20:25:3c:
         c1:d3:40:2f:f8:b5:29:a8:32:d9:55:14:0a:10:53:e9:6d:8b:
         75:33:ae:c1:71:3d:d6:17:30:6d:a0:c0:24:2b:eb:ec:b7:e3:
         a4:6c:d4:cd:46:95:85:a4:5d:67:bd:6d:b2:18:4d:11:92:05:
         8b:a0:8a:f5:a8:90:78:96:cc:f3:39:9e:39:92:69:de:66:1f:
         8b:38:b9:fd:65:a2:d4:02:9a:12:b8:8a:35:3e:b1:95:a5:8f:
         a4:46:45:5b:de:6f:6d:ab:7e:9d:3a:70:f8:6c:56:e7:cc:8c:
         d4:a7:8c:7e:cb:f1:56:3e:34:24:09:2f:92:9a:73:44:f6:67:
         d0:ed:0c:8b:b8:82:4e:48:5a:84:4e:50:ab:d1:73:db:ce:39:
         76:47:56:54:2d:e0:b9:79:83:80:a8:be:b5:f1:21:37:83:7b:
         19:e2:60:d2:e6:2c:76:75:6a:19:f6:42:12:e4:ae:f7:0d:b1:
         d7:b2:48:75:7e:50:ae:62:69:30:3a:1d:7e:69:05:c8:05:a0:
         b2:cd:a5:9c:45:31:33:06:58:7c:72:24:1b:78:b8:44:00:7b:
         80:10:46:38:00:5b:6c:8e:bd:70:7c:bc:03:5a:61:d5:60:e3:
         3f:5f:ef:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:52:46 2025 by rpki-client