Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/jbSbrxfwbDZKAPjmTIkcU3Kfei8.mft
File:                     jbSbrxfwbDZKAPjmTIkcU3Kfei8.mft (raw, json)
Hash identifier:          7hzMIlmNwPO7U2yYY/8m0kyPnwP/ZozPyORQTBwp0Og=
Subject key identifier:   F8:C6:96:D0:3F:1C:61:2F:9C:B9:F4:BF:73:A6:34:76:69:71:A7:A5
Authority key identifier: 8D:B4:9B:AF:17:F0:6C:36:4A:00:F8:E6:4C:89:1C:53:72:9F:7A:2F
Certificate issuer:       /CN=8db49baf17f06c364a00f8e64c891c53729f7a2f
Certificate serial:       0199FC8F75377EA7CC3C6581297E5F56BDFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jbSbrxfwbDZKAPjmTIkcU3Kfei8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/jbSbrxfwbDZKAPjmTIkcU3Kfei8.mft
Manifest number:          16E7
Signing time:             Sun 19 Oct 2025 13:01:23 +0000
Manifest this update:     Sun 19 Oct 2025 13:01:23 +0000
Manifest next update:     Mon 20 Oct 2025 13:01:23 +0000
Files and hashes:         1: T1NphBpxfH2bIKCDktHdRZTHIcY.roa (hash: jIDQlaKJTEZfvbg4vcsOnliaPcSJWC3wo/0K3CkIb7o=)
                          2: jbSbrxfwbDZKAPjmTIkcU3Kfei8.crl (hash: l9ybMgvAOZzJUhC9tEp93/XL/6N4XOczD0xyKQ9GZhA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/jbSbrxfwbDZKAPjmTIkcU3Kfei8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/jbSbrxfwbDZKAPjmTIkcU3Kfei8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jbSbrxfwbDZKAPjmTIkcU3Kfei8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:8f:75:37:7e:a7:cc:3c:65:81:29:7e:5f:56:bd:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8db49baf17f06c364a00f8e64c891c53729f7a2f
        Validity
            Not Before: Oct 19 13:01:23 2025 GMT
            Not After : Oct 20 13:01:23 2025 GMT
        Subject: CN=f8c696d03f1c612f9cb9f4bf73a634766971a7a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:00:de:72:d3:59:88:cd:90:30:4b:03:33:bb:
                    c8:19:dd:d1:1c:96:12:41:7c:fe:9b:c2:b3:c0:f8:
                    42:3e:74:ac:66:13:09:39:57:ea:0b:a7:50:76:ee:
                    53:b6:55:dc:14:05:f4:1b:1a:e7:bd:50:9f:55:ab:
                    68:29:9e:6f:60:fb:62:41:12:2e:a6:12:38:75:a0:
                    a5:d5:be:93:7a:6e:3d:98:3c:38:44:46:17:e6:9d:
                    f7:e0:3a:1d:47:7a:d1:77:02:ee:2f:63:91:56:08:
                    18:c4:e5:c0:aa:f5:fa:d8:35:84:38:bb:00:83:15:
                    30:db:00:af:a9:9b:13:c1:ba:08:cf:47:81:00:df:
                    d6:4a:2a:d5:2b:b4:31:cc:4c:a5:38:3d:60:ad:fe:
                    ac:57:25:bb:3f:50:b8:49:0e:08:78:f4:d3:53:c0:
                    66:e1:bc:78:5c:92:c8:5e:93:1d:53:b0:1a:4a:f2:
                    1e:1b:24:b2:1d:54:c6:de:f7:cf:68:cc:0b:d6:99:
                    c1:14:5a:89:a4:9b:4a:a7:58:38:e5:e4:e3:ec:00:
                    e7:71:31:f4:c9:ba:ab:bf:f4:e9:cd:3f:c7:00:19:
                    fb:1b:5f:83:ad:38:31:c1:c4:f6:83:d6:9f:ce:15:
                    69:11:ab:27:0c:e7:3c:25:62:02:12:cb:0c:64:68:
                    1a:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:C6:96:D0:3F:1C:61:2F:9C:B9:F4:BF:73:A6:34:76:69:71:A7:A5
            X509v3 Authority Key Identifier:
                keyid:8D:B4:9B:AF:17:F0:6C:36:4A:00:F8:E6:4C:89:1C:53:72:9F:7A:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jbSbrxfwbDZKAPjmTIkcU3Kfei8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/jbSbrxfwbDZKAPjmTIkcU3Kfei8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/jbSbrxfwbDZKAPjmTIkcU3Kfei8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:87:b7:a9:91:60:9d:88:de:66:7a:c1:5e:d9:d1:4d:4d:81:
         32:12:9b:7e:22:fb:ae:f5:f5:f0:1d:8e:06:ff:19:7a:2b:dd:
         f6:69:89:43:35:13:0f:06:73:88:51:f7:a3:f8:61:2c:96:c2:
         7d:15:8d:86:58:2d:a0:80:15:88:ae:69:83:74:ad:ed:6e:38:
         82:dd:0a:7c:27:6c:9a:8a:d0:86:1c:e1:24:3b:fa:5a:6d:39:
         e9:31:8d:2b:5b:9d:5f:43:c3:c0:d6:3b:cb:af:c4:ae:ae:43:
         7a:3c:42:33:09:f7:7c:a9:27:ef:7e:5e:2a:3f:61:02:f0:1c:
         b7:dd:04:4d:b3:77:2e:31:f2:93:66:95:8f:e6:5e:bb:be:72:
         ee:9d:ac:0b:f7:0a:7a:76:e3:42:9b:c1:0c:c8:f6:ee:1d:c4:
         f5:9b:67:f6:29:0a:f5:ae:fc:76:cb:10:78:15:76:cc:17:3c:
         74:9f:b3:67:ab:8f:45:aa:c8:22:41:fa:7b:06:d5:13:6f:68:
         e6:69:18:df:2b:3b:4e:04:41:a6:8b:04:0b:d0:21:cc:e2:99:
         64:be:83:0a:4e:2b:4c:0d:e8:9f:fa:67:b2:14:54:39:d6:76:
         7d:32:eb:3c:32:bb:c3:56:56:f0:c1:a4:2b:6e:bd:2e:9a:4c:
         21:6a:68:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8j3U3fqfMPGWBKX5fVr3/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkYjQ5YmFmMTdmMDZjMzY0YTAwZjhlNjRjODkxYzUzNzI5
ZjdhMmYwHhcNMjUxMDE5MTMwMTIzWhcNMjUxMDIwMTMwMTIzWjAzMTEwLwYDVQQD
EyhmOGM2OTZkMDNmMWM2MTJmOWNiOWY0YmY3M2E2MzQ3NjY5NzFhN2E1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3wDectNZiM2QMEsDM7vIGd3RHJYS
QXz+m8KzwPhCPnSsZhMJOVfqC6dQdu5TtlXcFAX0GxrnvVCfVatoKZ5vYPtiQRIu
phI4daCl1b6Tem49mDw4REYX5p334DodR3rRdwLuL2ORVggYxOXAqvX62DWEOLsA
gxUw2wCvqZsTwboIz0eBAN/WSirVK7QxzEylOD1grf6sVyW7P1C4SQ4IePTTU8Bm
4bx4XJLIXpMdU7AaSvIeGySyHVTG3vfPaMwL1pnBFFqJpJtKp1g45eTj7ADncTH0
ybqrv/TpzT/HABn7G1+DrTgxwcT2g9afzhVpEasnDOc8JWICEssMZGgajQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPjGltA/HGEvnLn0v3OmNHZpcaelMB8GA1UdIwQY
MBaAFI20m68X8Gw2SgD45kyJHFNyn3ovMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamJTYnJ4ZndiRFpLQVBqbVRJa2NVM0tmZWk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi85YzFlYzgtY2MzOS00Mzg5LTg1ODQt
ODUxNzNlNTdlYjUyLzEvamJTYnJ4ZndiRFpLQVBqbVRJa2NVM0tmZWk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi85YzFlYzgtY2MzOS00Mzg5LTg1ODQtODUxNzNlNTdlYjUy
LzEvamJTYnJ4ZndiRFpLQVBqbVRJa2NVM0tmZWk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhIe3qZFg
nYjeZnrBXtnRTU2BMhKbfiL7rvX18B2OBv8Zeivd9mmJQzUTDwZziFH3o/hhLJbC
fRWNhlgtoIAViK5pg3St7W44gt0KfCdsmorQhhzhJDv6Wm056TGNK1udX0PDwNY7
y6/Erq5DejxCMwn3fKkn735eKj9hAvAct90ETbN3LjHyk2aVj+Zeu75y7p2sC/cK
enbjQpvBDMj27h3E9Ztn9ikK9a78dssQeBV2zBc8dJ+zZ6uPRarIIkH6ewbVE29o
5mkY3ys7TgRBposEC9AhzOKZZL6DCk4rTA3on/pnshRUOdZ2fTLrPDK7w1ZW8MGk
K269LppMIWpoJQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:17:53 2025 by rpki-client