Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/bc48d2-28e8-405d-9f9a-03897f4cb35d/1/_JYxHyB-MOBOXtGJYLMfs7pn2cw.mft
File:                     _JYxHyB-MOBOXtGJYLMfs7pn2cw.mft (raw, json)
Hash identifier:          JbfTAc1cTIqkI3psWzV+wo5lFgdu6wNpz2URQypdkzI=
Subject key identifier:   E5:BB:61:54:8B:8C:54:34:3A:1B:12:2B:88:93:B9:BB:E5:AC:A3:28
Authority key identifier: FC:96:31:1F:20:7E:30:E0:4E:5E:D1:89:60:B3:1F:B3:BA:67:D9:CC
Certificate issuer:       /CN=fc96311f207e30e04e5ed18960b31fb3ba67d9cc
Certificate serial:       0199FEEC0BB11D987D34AA07B2351D22B680
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_JYxHyB-MOBOXtGJYLMfs7pn2cw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/bc48d2-28e8-405d-9f9a-03897f4cb35d/1/_JYxHyB-MOBOXtGJYLMfs7pn2cw.mft
Manifest number:          16E4
Signing time:             Mon 20 Oct 2025 00:01:46 +0000
Manifest this update:     Mon 20 Oct 2025 00:01:46 +0000
Manifest next update:     Tue 21 Oct 2025 00:01:46 +0000
Files and hashes:         1: AUcUK79-20dcWVzVbs60qA_79k0.roa (hash: FTerUGKVvthiTr4P9HvWIOzRwtpT4BbcBUUyIajjaKI=)
                          2: NLujiyLDNINg7_ALKuGpNWHf90o.roa (hash: S6u8CLwoGP6KKvaV/764lqLnv660M41bJlIaV+CiIbg=)
                          3: _JYxHyB-MOBOXtGJYLMfs7pn2cw.crl (hash: Wep0viivdGppX/CxbeP4iO6ahrv8OCU+U1c0sLRXi+E=)
                          4: nQ49DO6jLERCGih3b5vaO6Deyv4.roa (hash: ckCboVu+SkUbYcpUmTQnzPt52sUcRNCO41XKBdBSHpY=)
                          5: xG2m4O3Ec8nKtJOjwCFJQqNJGtM.roa (hash: craC+wIX6RgDFVXZJLTuVHpltgHDojNuxm0azD0e50I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/bc48d2-28e8-405d-9f9a-03897f4cb35d/1/_JYxHyB-MOBOXtGJYLMfs7pn2cw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/bc48d2-28e8-405d-9f9a-03897f4cb35d/1/_JYxHyB-MOBOXtGJYLMfs7pn2cw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_JYxHyB-MOBOXtGJYLMfs7pn2cw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:ec:0b:b1:1d:98:7d:34:aa:07:b2:35:1d:22:b6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc96311f207e30e04e5ed18960b31fb3ba67d9cc
        Validity
            Not Before: Oct 20 00:01:46 2025 GMT
            Not After : Oct 21 00:01:46 2025 GMT
        Subject: CN=e5bb61548b8c54343a1b122b8893b9bbe5aca328
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:38:4e:bb:24:ff:7f:8a:dd:c1:f7:ee:f5:47:
                    18:fa:3a:48:c8:6a:d6:69:51:63:2e:55:41:56:2c:
                    e5:9a:f3:9c:2a:ff:ce:c5:d8:c0:b5:df:c2:cb:4e:
                    a0:01:f5:57:0d:f0:be:46:e4:36:0f:68:7f:70:d2:
                    e9:39:ca:2b:c4:7f:6d:c3:81:8e:d6:8a:8a:db:22:
                    de:bf:03:2d:8e:55:4a:c0:40:42:11:a8:fb:da:d3:
                    d1:d4:7a:a1:90:87:c5:e8:47:30:b6:7d:77:a6:6a:
                    d9:00:f0:2d:29:35:5b:09:de:ed:b5:5a:32:0a:6d:
                    bf:74:2c:07:8c:94:d7:17:9c:05:89:7c:56:20:68:
                    50:4d:8d:7f:8d:07:aa:3b:ca:4e:e5:bc:10:66:81:
                    55:f0:d8:23:86:71:27:5d:03:25:9e:e8:c2:91:ac:
                    42:df:d7:b1:6c:2f:a0:83:83:20:07:27:63:6a:e3:
                    65:5d:98:5f:17:c2:d0:20:40:4e:c7:af:38:1b:e2:
                    d9:46:5e:bb:aa:0b:c5:98:9d:85:09:ff:7e:78:af:
                    e9:9c:a0:51:4b:c9:22:58:e4:34:d5:45:8c:cb:be:
                    9f:0c:ce:ea:5b:13:d7:e4:65:bb:e7:86:02:a1:e7:
                    16:71:3f:7f:e7:a5:14:79:0e:0e:cc:bf:03:fb:c1:
                    7b:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:BB:61:54:8B:8C:54:34:3A:1B:12:2B:88:93:B9:BB:E5:AC:A3:28
            X509v3 Authority Key Identifier:
                keyid:FC:96:31:1F:20:7E:30:E0:4E:5E:D1:89:60:B3:1F:B3:BA:67:D9:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JYxHyB-MOBOXtGJYLMfs7pn2cw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/bc48d2-28e8-405d-9f9a-03897f4cb35d/1/_JYxHyB-MOBOXtGJYLMfs7pn2cw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/bc48d2-28e8-405d-9f9a-03897f4cb35d/1/_JYxHyB-MOBOXtGJYLMfs7pn2cw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:9a:26:fb:6b:e1:99:f5:0e:4a:04:f9:7a:b4:20:e6:a8:96:
         66:c4:88:64:d1:8b:f1:be:45:bb:22:cb:3e:98:d9:b2:74:e0:
         fe:74:8e:de:82:26:ef:b5:2a:0f:8b:ce:6d:df:32:ed:22:1a:
         9b:5c:c9:71:a8:1d:38:f1:67:af:4f:60:c4:95:36:7f:8a:29:
         46:31:38:25:21:b1:4f:21:a8:c1:89:5a:b3:78:a7:f1:c7:fc:
         74:1a:6c:44:9a:28:05:ab:2d:7e:70:6d:99:be:8f:66:2e:e1:
         0c:a5:bc:83:53:ef:48:d6:75:d1:67:9f:de:28:9a:f5:d5:ce:
         d2:f2:e0:86:b3:34:bf:69:9b:b2:a1:23:33:01:a6:08:03:75:
         9f:b5:39:5a:81:96:8d:9d:f7:3f:a6:bc:83:15:58:ed:19:2b:
         9d:2f:0a:d7:46:bc:80:2e:34:8c:7f:c4:eb:d4:8e:b7:34:5f:
         b5:61:57:63:03:dd:57:1b:dc:3a:31:3f:96:51:97:d6:9b:4b:
         e5:11:ec:3a:d2:e1:6e:78:69:8c:e6:5c:0a:db:4b:98:ae:ee:
         76:7f:b6:d5:4f:ad:5b:2d:23:d5:b6:34:b8:12:9f:15:67:5b:
         ad:ac:61:13:51:cf:f3:83:81:e1:b4:5f:79:5e:b5:47:48:42:
         e6:69:48:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:47:16 2025 by rpki-client