Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/ts9OV8vBXOTs70T1DluFkvvu7qA.mft
File:                     ts9OV8vBXOTs70T1DluFkvvu7qA.mft (raw, json)
Hash identifier:          eIb/668tbE5YPnoWXbXOR+CyUMpitO0JRZG86ZPjc6g=
Subject key identifier:   FE:C4:50:8F:D2:A4:22:1F:31:16:65:BB:E6:BC:A1:CD:27:44:DD:02
Authority key identifier: B6:CF:4E:57:CB:C1:5C:E4:EC:EF:44:F5:0E:5B:85:92:FB:EE:EE:A0
Certificate issuer:       /CN=b6cf4e57cbc15ce4ecef44f50e5b8592fbeeeea0
Certificate serial:       0199FE0FD22B41A9C47FEA7433CC67E87531
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ts9OV8vBXOTs70T1DluFkvvu7qA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/ts9OV8vBXOTs70T1DluFkvvu7qA.mft
Manifest number:          0E9C
Signing time:             Sun 19 Oct 2025 20:01:13 +0000
Manifest this update:     Sun 19 Oct 2025 20:01:13 +0000
Manifest next update:     Mon 20 Oct 2025 20:01:13 +0000
Files and hashes:         1: 2bbjZnItd_WfSUsxeSim-v-qB-g.roa (hash: U3T6Blvywe2N+XOmN4d0Sfw2WTnfp19mqzXdb2WW/M8=)
                          2: hs7awmW5u-N7i3rafiPiNllc2Bo.roa (hash: zx9QQVE6GtEBw9ZKQW610wAAxlFBO5GbObUYOTrSVsA=)
                          3: ts9OV8vBXOTs70T1DluFkvvu7qA.crl (hash: TTok5FObPmKqYrpFPH2iwCDP481alr8zyNhsUT8NAwQ=)
                          4: ucQNwDwE2vdn8aT5NeBfcaMP4xI.roa (hash: uOUVs3Rq9AKXwjmauSrDsTRXthAY0OABda9jaa1tn6Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/ts9OV8vBXOTs70T1DluFkvvu7qA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/ts9OV8vBXOTs70T1DluFkvvu7qA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ts9OV8vBXOTs70T1DluFkvvu7qA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:0f:d2:2b:41:a9:c4:7f:ea:74:33:cc:67:e8:75:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6cf4e57cbc15ce4ecef44f50e5b8592fbeeeea0
        Validity
            Not Before: Oct 19 20:01:13 2025 GMT
            Not After : Oct 20 20:01:13 2025 GMT
        Subject: CN=fec4508fd2a4221f311665bbe6bca1cd2744dd02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ac:e5:b8:c6:b2:ec:45:1a:0d:33:44:80:fe:
                    1f:e7:74:b6:20:3d:d9:df:04:60:17:89:0e:c7:f1:
                    57:9b:e0:d7:2d:67:88:28:11:98:7a:a1:70:d6:5d:
                    2e:e5:f7:6d:f4:cf:d0:81:8c:7b:e9:93:db:34:7e:
                    61:29:1b:21:c2:c0:73:f6:d7:53:e7:90:0d:6c:18:
                    48:7e:f9:1f:51:42:5a:01:7d:2d:61:43:ca:0d:c8:
                    e0:27:af:50:dd:9c:56:f3:3a:f5:13:8d:e7:0e:4e:
                    95:92:71:6a:88:2f:93:ab:c0:9b:95:ac:11:20:dc:
                    49:32:9e:67:f1:16:03:77:a6:bb:93:0e:a8:94:75:
                    51:1e:4e:28:47:8b:4d:5b:7c:a6:01:37:d7:d7:cc:
                    15:49:36:72:65:58:99:2d:27:d9:cd:9d:e4:f0:60:
                    56:b2:e3:31:bd:f1:a1:6e:aa:d6:70:af:9b:42:e4:
                    56:04:ff:0d:43:8b:50:c8:6e:1d:9c:2e:7d:24:b0:
                    8a:09:37:fa:e8:a2:c3:a7:4f:3d:02:99:1f:c8:7d:
                    87:3a:f5:1e:06:ed:1e:9e:ff:8b:d4:ed:b9:e6:c4:
                    28:d5:99:a6:2e:9c:69:57:da:00:b3:80:4c:69:cf:
                    86:cc:a2:e6:ab:70:d2:bf:91:dc:5d:01:db:d2:22:
                    e4:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:C4:50:8F:D2:A4:22:1F:31:16:65:BB:E6:BC:A1:CD:27:44:DD:02
            X509v3 Authority Key Identifier:
                keyid:B6:CF:4E:57:CB:C1:5C:E4:EC:EF:44:F5:0E:5B:85:92:FB:EE:EE:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ts9OV8vBXOTs70T1DluFkvvu7qA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/ts9OV8vBXOTs70T1DluFkvvu7qA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/ts9OV8vBXOTs70T1DluFkvvu7qA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:ac:05:9f:bb:75:07:85:47:e3:ff:d6:e6:4d:45:ed:2f:2c:
         df:cb:c5:08:78:bf:a5:28:92:7a:4f:c6:58:91:8f:69:e2:96:
         68:aa:6d:ed:c5:17:98:d1:ef:65:68:aa:6c:bf:96:96:77:13:
         18:6d:96:6e:e1:45:c5:51:9b:db:da:c2:6e:c4:d9:3e:18:19:
         50:48:23:04:43:09:a5:3d:ce:e3:07:82:90:d5:26:0d:c5:a9:
         63:98:a1:9f:54:5f:81:8f:53:b1:0d:fa:0b:9b:1e:e3:dc:0b:
         54:30:fe:e9:a0:06:db:be:eb:99:a3:61:01:6d:a6:fc:6e:6f:
         02:ad:df:01:58:32:bf:4c:f8:ac:ef:08:64:0b:95:b4:c1:55:
         ea:84:07:68:e4:66:ae:05:3a:f9:e8:24:f8:86:1d:7e:6a:27:
         61:b9:a3:d7:84:fd:90:91:aa:2c:ff:00:9c:ed:f8:d0:a6:53:
         6f:42:31:c7:30:42:bc:d2:8b:aa:be:9e:d8:48:95:86:f8:d6:
         1f:25:2d:05:f5:15:3d:d3:09:2f:1a:44:72:91:1f:c5:d2:7d:
         40:ee:af:44:bc:f1:f0:6e:17:1e:81:f5:9f:5e:4d:f6:8b:62:
         2c:13:3c:6f:f0:d4:bd:a4:ab:47:4a:4b:6e:d9:f5:7a:62:d8:
         34:4e:3a:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:59:20 2025 by rpki-client