Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.mft
File:                     kfX87b24TdUvxncNfM_T_GaE-kE.mft (raw, json)
Hash identifier:          zPR2Hk+z0KyYN/yn9QcUBC0w4h/Pp9qlUuhjfYegcrY=
Subject key identifier:   EA:CE:40:DD:13:0D:EF:8D:4B:68:E7:9A:2C:BD:96:8E:45:AC:60:2A
Authority key identifier: 91:F5:FC:ED:BD:B8:4D:D5:2F:C6:77:0D:7C:CF:D3:FC:66:84:FA:41
Certificate issuer:       /CN=91f5fcedbdb84dd52fc6770d7ccfd3fc6684fa41
Certificate serial:       0199FBEBFC7E6BF348D02E5B17F827618EFC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kfX87b24TdUvxncNfM_T_GaE-kE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.mft
Manifest number:          16E9
Signing time:             Sun 19 Oct 2025 10:02:50 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:50 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:50 +0000
Files and hashes:         1: 6UpEJlRsXOn9vaGmBJWrZdfalwA.roa (hash: HSwxSSz5lFpaFRsJuAqgaQ8EsTFkTI/T+FmwfdtjYaA=)
                          2: 9tPvRIgWOFQGF5ALiDiBtpjalf0.roa (hash: CNi9LKlhqfclz9Oir048bs7o3/W9+fUSyftDkxngReE=)
                          3: JvOQdUjkCtx4pMZ63YDUDSKRif8.roa (hash: lpSKgZ5ZudI2jyQ9YWWPgdYiIoklrO/1U/orK0nz9yw=)
                          4: kfX87b24TdUvxncNfM_T_GaE-kE.crl (hash: tSPY0hYLmN9+CSyfkvjfeL7Mq9Gl7CEi07ofQmEm+N8=)
                          5: lKDuxfpv6g9ZDhVaa38VKaYZKKg.roa (hash: OVK0az1AcO1NBXsdKgGXvtFiE3weIknB+sCCAuqYuGw=)
                          6: xXN1JERl6SmTU8LGAK6YjCsE_8g.roa (hash: UJ/2eCVna1OAdfj1e6cD3/kAVB2y1kYmD/HxfsrIilw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kfX87b24TdUvxncNfM_T_GaE-kE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:fc:7e:6b:f3:48:d0:2e:5b:17:f8:27:61:8e:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91f5fcedbdb84dd52fc6770d7ccfd3fc6684fa41
        Validity
            Not Before: Oct 19 10:02:50 2025 GMT
            Not After : Oct 20 10:02:50 2025 GMT
        Subject: CN=eace40dd130def8d4b68e79a2cbd968e45ac602a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:fe:b9:f1:45:f6:6e:f8:2c:2f:ad:93:4f:fb:
                    53:84:de:74:86:1b:00:e7:36:ee:d6:92:91:12:1b:
                    5b:6c:59:30:16:cb:a8:c0:d5:a9:bf:7c:57:a5:82:
                    30:bf:1c:65:56:ab:d2:c9:d1:08:22:1d:d7:60:c3:
                    9f:b7:9f:c7:04:15:84:df:0d:af:da:c7:5f:6a:4a:
                    32:43:64:59:04:61:69:b0:fb:f6:03:1f:f3:c9:a1:
                    f6:67:4a:d4:a1:6d:fa:a2:2c:d6:51:38:6d:b3:cd:
                    d6:38:2e:bf:ac:28:26:a7:94:2c:ae:d5:ab:a6:5e:
                    3b:e3:05:c1:16:86:89:c2:78:bd:77:c1:5d:14:a2:
                    85:68:66:2d:57:fe:a1:e9:4c:ac:e5:a1:73:b4:b3:
                    9a:0c:97:3b:cf:5d:12:be:92:f0:4a:9b:89:ab:a5:
                    78:2e:0f:4d:85:f4:ed:35:65:02:e0:33:88:88:ae:
                    af:d9:9d:c0:66:0b:c2:31:53:20:7c:32:01:9a:55:
                    f4:84:72:7a:65:97:9f:bb:6d:63:ee:62:2b:a6:04:
                    23:b5:f6:b2:12:04:f0:93:f7:6f:22:c0:df:86:7d:
                    93:6b:24:ae:01:3e:b5:0a:81:8e:08:8d:71:8a:55:
                    5f:85:80:92:39:84:8e:03:da:63:94:61:ca:7d:ed:
                    cf:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:CE:40:DD:13:0D:EF:8D:4B:68:E7:9A:2C:BD:96:8E:45:AC:60:2A
            X509v3 Authority Key Identifier:
                keyid:91:F5:FC:ED:BD:B8:4D:D5:2F:C6:77:0D:7C:CF:D3:FC:66:84:FA:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kfX87b24TdUvxncNfM_T_GaE-kE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:8e:f2:d3:d6:02:e1:2d:f8:7c:07:7c:2f:9b:9c:01:f7:aa:
         c4:b6:f2:d4:ce:07:a3:4a:d0:af:c3:e4:ef:22:a2:98:1c:bb:
         9b:53:45:2d:e2:1a:32:6a:ad:38:bd:1c:f1:ea:48:57:99:76:
         38:10:cb:eb:5e:71:f9:92:21:0e:59:2a:60:96:7a:f1:93:9a:
         9a:97:57:23:03:6e:4e:45:04:2b:35:3a:65:07:81:72:31:5d:
         3a:7e:21:1e:2d:f5:52:f9:59:60:c5:83:e8:df:b3:38:a4:f1:
         ce:33:e1:55:dd:2b:17:79:d3:dd:4f:0f:b3:df:39:47:7e:99:
         c3:4a:ac:ba:f5:a9:9d:0d:d2:fa:df:65:33:cf:fb:21:96:24:
         a2:85:11:59:78:94:d6:e5:ca:d4:b6:b3:7c:5e:b7:f9:f4:34:
         b3:b8:f4:da:ab:44:1c:13:1c:12:03:7d:59:0d:c0:95:c9:86:
         70:28:fe:ed:eb:82:7d:f3:b9:d4:1c:35:27:69:5a:db:f9:e1:
         97:a6:7b:b1:42:ce:a3:e0:76:67:d4:c7:76:ff:35:ad:4d:b2:
         74:fd:a1:7f:5f:c9:e5:2c:cc:2b:fb:4a:d3:52:ba:99:ca:28:
         cf:da:00:e9:4d:24:57:9a:66:54:7e:7a:33:b2:af:a4:94:52:
         29:24:10:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:48 2025 by rpki-client