Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.mft
File:                     jOsj4sXZ8sc0SIkEUFg17ygJ-zs.mft (raw, json)
Hash identifier:          s6h3QtFmWivvZKDzTG9282QLIl5XeXI6Ih4qbBlFRfg=
Subject key identifier:   76:48:12:C0:8C:22:18:34:84:EF:DC:07:B0:E6:93:2E:18:FB:0F:B0
Authority key identifier: 8C:EB:23:E2:C5:D9:F2:C7:34:48:89:04:50:58:35:EF:28:09:FB:3B
Certificate issuer:       /CN=8ceb23e2c5d9f2c734488904505835ef2809fb3b
Certificate serial:       0199FC8FB7F3515A431E1ABEA56340EBAC5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.mft
Manifest number:          16E9
Signing time:             Sun 19 Oct 2025 13:01:41 +0000
Manifest this update:     Sun 19 Oct 2025 13:01:41 +0000
Manifest next update:     Mon 20 Oct 2025 13:01:41 +0000
Files and hashes:         1: RqtwSOLfZXCtT6i-iXJPBXlS-Tw.roa (hash: x++OoIBpOVlhu2bDSyq/BzG7LV3g3RGN/EJ/KyFGWbM=)
                          2: XKepb_otZzL7k3ZMkl3G2IMgCSU.roa (hash: W9mkN91xRU3+fkW8j4EQwJJwcHraAc/r3I+DAJzdLtk=)
                          3: f_hutObJVKzz6DlV5Z0Llo7x9Mo.roa (hash: EtfvCVNkvIMaBjs3btihMYeczz7+WNuxXv7JAgL/tcs=)
                          4: iaU8sQHpBoTYxwRTPRlwZtUJd5I.roa (hash: IaAKm54QKxYLazRG6lIcABBh26piQgK4yLfNw8crUL0=)
                          5: jOsj4sXZ8sc0SIkEUFg17ygJ-zs.crl (hash: bS+xQu1YXUi4aUpfV51E68Q+FG7HpTW28qhULIGjPwY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:8f:b7:f3:51:5a:43:1e:1a:be:a5:63:40:eb:ac:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ceb23e2c5d9f2c734488904505835ef2809fb3b
        Validity
            Not Before: Oct 19 13:01:41 2025 GMT
            Not After : Oct 20 13:01:41 2025 GMT
        Subject: CN=764812c08c22183484efdc07b0e6932e18fb0fb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:2e:f8:54:47:25:ff:24:bb:ff:25:42:56:95:
                    db:c8:7f:0a:71:b8:f4:e0:0c:54:c6:60:49:c1:9e:
                    ec:20:bb:a3:8e:17:38:7f:46:5c:d2:64:c9:ab:4d:
                    4f:d6:77:99:83:e6:f8:43:52:ba:0c:e1:d9:e9:37:
                    8c:fd:e7:4f:94:29:61:ca:73:1d:d5:7d:39:49:3f:
                    79:b6:19:07:1e:5d:70:96:72:81:9b:27:68:a1:49:
                    c5:56:d5:bb:35:77:54:0f:25:3a:6e:f9:d0:81:5a:
                    38:a4:d2:1a:63:d5:3b:31:b6:48:34:a3:a9:f7:76:
                    30:cd:3a:eb:99:51:64:a9:d6:5b:07:ba:7e:a5:60:
                    7e:2e:a5:8e:38:73:99:a7:16:c1:e0:56:1f:6d:ca:
                    44:be:75:84:a3:8c:e1:d4:c8:21:23:e9:e0:20:d5:
                    35:eb:86:f5:78:da:6e:ab:05:78:b4:4f:bb:f2:ca:
                    fc:4f:a9:81:04:aa:5b:b7:1b:34:7f:07:2f:7d:53:
                    3b:d0:74:0d:ff:58:22:3e:03:3a:77:4b:2c:aa:15:
                    a6:3a:b2:75:ba:44:7f:db:d0:f5:5a:5b:2d:ad:e8:
                    3a:86:81:4c:bf:af:58:a2:ad:83:97:7b:8e:dd:78:
                    41:c6:59:32:c3:f2:ef:96:1f:01:b6:8a:cc:d9:0f:
                    4a:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:48:12:C0:8C:22:18:34:84:EF:DC:07:B0:E6:93:2E:18:FB:0F:B0
            X509v3 Authority Key Identifier:
                keyid:8C:EB:23:E2:C5:D9:F2:C7:34:48:89:04:50:58:35:EF:28:09:FB:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:d3:2d:91:8c:4d:16:ff:e4:80:3d:52:8d:58:8c:5e:5f:c7:
         27:8c:c8:d5:bc:cd:1e:fe:3b:d7:ab:4b:e4:9f:93:41:5f:ff:
         24:5a:51:cd:0c:ce:e4:39:87:a3:f7:a5:67:0d:e7:50:0f:b2:
         87:ed:31:14:79:20:87:26:6f:fe:17:49:ce:0c:79:8b:f7:33:
         2d:ec:a1:c3:b1:5a:50:55:d2:cb:bd:cc:1d:83:10:9e:b5:62:
         61:ba:25:40:9e:e9:f2:04:9f:21:3e:95:95:64:ad:2d:43:6f:
         40:76:14:64:45:7b:35:a8:09:74:0c:d9:12:eb:e3:e8:26:f2:
         64:51:88:79:6c:de:ea:35:1d:b5:79:10:a3:36:3c:55:6c:36:
         cf:93:4e:4b:eb:a8:ff:d7:3d:f7:f2:47:40:80:72:fd:41:69:
         d0:5d:d0:0f:93:95:d6:a1:a2:e6:d9:cb:2f:b6:ab:38:fb:31:
         05:a7:03:e5:80:82:22:76:ef:71:16:8d:3f:49:da:66:49:b1:
         72:1a:da:6c:ed:8f:77:83:de:de:dc:11:7a:a7:bc:62:b4:b1:
         38:b8:cf:29:b8:e4:97:e4:aa:91:49:05:6f:5d:7e:9a:d4:e1:
         df:13:ab:ae:05:c6:b9:05:4e:69:d4:62:5e:d4:e8:71:54:25:
         8e:53:ca:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:59:03 2025 by rpki-client