Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/ZjokSA8E0TGL8acNq_-ksn7zLaI.mft
File:                     ZjokSA8E0TGL8acNq_-ksn7zLaI.mft (raw, json)
Hash identifier:          gjF/EIt8aELO608v3BUeHOhnQgYFhASWKjCMbrIV5jE=
Subject key identifier:   6F:92:FF:F2:A6:B8:44:72:74:CA:57:F0:07:B7:3C:09:CD:C1:76:A5
Authority key identifier: 66:3A:24:48:0F:04:D1:31:8B:F1:A7:0D:AB:FF:A4:B2:7E:F3:2D:A2
Certificate issuer:       /CN=663a24480f04d1318bf1a70dabffa4b27ef32da2
Certificate serial:       0199FC8F16185BB56BAEBA90CFCD7D5BFE5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZjokSA8E0TGL8acNq_-ksn7zLaI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/ZjokSA8E0TGL8acNq_-ksn7zLaI.mft
Manifest number:          02F9
Signing time:             Sun 19 Oct 2025 13:00:59 +0000
Manifest this update:     Sun 19 Oct 2025 13:00:59 +0000
Manifest next update:     Mon 20 Oct 2025 13:00:59 +0000
Files and hashes:         1: G8N3qTa4VczFzinJ5WzomATxm3g.roa (hash: 9nI91Hj8CyleS8L7CFcjCsRKa59524cSRX5eWMKZBYE=)
                          2: ZjokSA8E0TGL8acNq_-ksn7zLaI.crl (hash: gBXbFaubkofJJ2JNjVCd4Jel6q0UQcEEAdiZSUNGFu8=)
                          3: _Y6pXHXe2mBIlsIBI_Y9Ro_HsC8.roa (hash: qOtTpTR/zqFbarpkC5ntwdGXF3sXgx9iaLwPu7BpM7Y=)
                          4: lh0Ymr_ga0779X3_Cx26imTai5c.roa (hash: KAwIiW82rtUV/DIsKOEYKgQfn7noiC8wAVVTIRXrLCk=)
                          5: mzs5lFKEy4ZtL_t-Ol870PRlztM.roa (hash: OwW8CUre3/5rikXiPneNNGHqjsl4FYJ2I/CWMA48GjE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/ZjokSA8E0TGL8acNq_-ksn7zLaI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/ZjokSA8E0TGL8acNq_-ksn7zLaI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZjokSA8E0TGL8acNq_-ksn7zLaI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:8f:16:18:5b:b5:6b:ae:ba:90:cf:cd:7d:5b:fe:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=663a24480f04d1318bf1a70dabffa4b27ef32da2
        Validity
            Not Before: Oct 19 13:00:59 2025 GMT
            Not After : Oct 20 13:00:59 2025 GMT
        Subject: CN=6f92fff2a6b8447274ca57f007b73c09cdc176a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:b6:66:8e:7b:13:4e:61:71:29:96:30:48:5b:
                    41:a6:fe:c8:bf:e8:25:39:9f:c6:fc:9b:ee:23:6e:
                    35:1f:83:56:07:c0:e0:bb:ea:80:87:c1:19:2d:e5:
                    40:ca:e5:07:15:1d:d3:7f:62:17:c0:5c:2c:5c:a2:
                    52:b3:b4:2b:f4:4e:85:c7:ac:55:33:b2:3c:32:e0:
                    8e:a0:66:49:1b:df:1f:e4:f6:85:b3:b8:e3:3d:8c:
                    b9:a5:05:80:24:cb:ce:07:a5:b5:81:a1:85:19:c1:
                    56:35:dd:b9:de:98:d9:7f:77:ca:ec:e7:9b:da:9a:
                    51:8b:ed:20:de:f7:44:6c:cf:d0:8a:36:64:38:88:
                    01:2d:77:8c:02:df:63:ed:cf:ed:38:31:93:2d:c9:
                    8a:14:ab:f9:92:66:e3:cc:f7:4e:03:94:96:67:f9:
                    4a:1f:9d:c6:64:34:1c:06:55:02:7e:09:58:07:66:
                    ee:55:1f:a4:a0:e7:96:48:b1:82:95:4d:91:7f:5d:
                    4d:0c:43:c9:fe:1b:45:6e:bf:76:7c:e8:e7:7a:39:
                    f0:9b:60:a8:8f:86:9a:9e:91:53:14:1e:1c:83:80:
                    83:33:28:af:b2:43:e6:15:25:16:a8:3c:31:92:ea:
                    71:74:d6:03:b9:87:d0:3c:78:de:9e:46:46:1e:4d:
                    9c:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:92:FF:F2:A6:B8:44:72:74:CA:57:F0:07:B7:3C:09:CD:C1:76:A5
            X509v3 Authority Key Identifier:
                keyid:66:3A:24:48:0F:04:D1:31:8B:F1:A7:0D:AB:FF:A4:B2:7E:F3:2D:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZjokSA8E0TGL8acNq_-ksn7zLaI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/ZjokSA8E0TGL8acNq_-ksn7zLaI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/ZjokSA8E0TGL8acNq_-ksn7zLaI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:19:ee:47:72:43:ee:ce:cd:e6:9c:41:7f:97:1f:98:dd:b3:
         9b:79:a3:ee:1a:84:d7:e5:b0:fd:ff:49:3a:d8:9d:73:10:b4:
         f8:da:77:f6:0f:84:6e:47:e0:c5:e0:9e:99:9e:b8:03:74:5d:
         63:68:0c:6c:e3:ca:d6:66:f0:d0:ef:9e:6b:ed:f9:96:ed:b4:
         b8:85:85:85:28:62:4f:ba:4a:ca:9d:8f:b2:aa:dd:2c:0e:4b:
         c0:07:ef:9c:0c:25:2e:8c:4e:34:c8:f1:b5:24:9f:f9:b4:fa:
         ab:da:6f:e2:c1:69:3e:85:72:7d:3d:c1:c3:6e:f9:71:1e:0d:
         7b:62:94:28:c1:e8:0d:9f:17:1f:a5:9a:18:5b:60:99:81:fe:
         11:77:b8:09:d8:52:df:d5:4e:fe:b5:22:fe:db:5c:8a:d4:97:
         a3:40:8b:e9:4f:35:90:94:1c:4d:1c:7c:3c:b1:7b:6b:0f:d2:
         83:cd:d5:b4:cb:89:79:88:da:1d:b9:c0:8e:7d:38:51:fb:96:
         19:82:90:bd:4e:81:57:f9:63:4a:9c:d9:a7:bb:88:6f:4a:f5:
         0f:bf:b7:f1:2e:07:46:13:98:1a:7b:cb:e4:9c:e0:4f:8b:dd:
         46:32:e8:04:85:ef:da:da:8d:bb:9e:b4:31:7f:28:1f:66:f8:
         46:bb:43:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:42:54 2025 by rpki-client