Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/b816b9-91b0-46da-8e58-91488a34fcc8/1/vJxAXxQuU-tnscSZI6t5XoQyjJs.mft
File:                     vJxAXxQuU-tnscSZI6t5XoQyjJs.mft (raw, json)
Hash identifier:          FIUkyWTI8Pm75JVgDI3r/RFTiUNJafmVJaadkHCt90s=
Subject key identifier:   02:BE:D6:0D:AC:5F:0C:36:38:03:84:B3:AE:C3:EA:E7:07:D6:C5:29
Authority key identifier: BC:9C:40:5F:14:2E:53:EB:67:B1:C4:99:23:AB:79:5E:84:32:8C:9B
Certificate issuer:       /CN=bc9c405f142e53eb67b1c49923ab795e84328c9b
Certificate serial:       0199FC21C86BDD68F708C5713694BF3213BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vJxAXxQuU-tnscSZI6t5XoQyjJs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/b816b9-91b0-46da-8e58-91488a34fcc8/1/vJxAXxQuU-tnscSZI6t5XoQyjJs.mft
Manifest number:          16E1
Signing time:             Sun 19 Oct 2025 11:01:36 +0000
Manifest this update:     Sun 19 Oct 2025 11:01:36 +0000
Manifest next update:     Mon 20 Oct 2025 11:01:36 +0000
Files and hashes:         1: irXjb7CbWugP3w5JDOFWDswYhlc.roa (hash: xfc5cfeM1faq3Raf49DNOnepZD3IOLsHNfYtcKklaZE=)
                          2: vJxAXxQuU-tnscSZI6t5XoQyjJs.crl (hash: 2X3LLQW5tbOn+pea1+vvBKORIyBzyZtpgsouQAfyft8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/b816b9-91b0-46da-8e58-91488a34fcc8/1/vJxAXxQuU-tnscSZI6t5XoQyjJs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/b816b9-91b0-46da-8e58-91488a34fcc8/1/vJxAXxQuU-tnscSZI6t5XoQyjJs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vJxAXxQuU-tnscSZI6t5XoQyjJs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:21:c8:6b:dd:68:f7:08:c5:71:36:94:bf:32:13:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc9c405f142e53eb67b1c49923ab795e84328c9b
        Validity
            Not Before: Oct 19 11:01:36 2025 GMT
            Not After : Oct 20 11:01:36 2025 GMT
        Subject: CN=02bed60dac5f0c36380384b3aec3eae707d6c529
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:31:d8:9e:22:25:7a:7d:50:12:c6:fd:78:08:
                    24:75:34:6b:72:00:12:38:e5:bd:cd:1e:ae:02:58:
                    2e:87:5c:9a:3e:19:8d:ac:98:b7:1a:7f:6a:90:bf:
                    8a:f2:4a:71:14:82:04:87:dd:86:01:81:3a:19:d0:
                    59:56:14:0a:9f:1a:e3:bf:60:cf:c6:88:d9:6c:28:
                    c0:94:7e:aa:00:8d:f1:3d:c7:03:df:8d:65:67:7a:
                    78:f0:5e:19:b9:d0:1d:d5:6a:6e:c0:77:d4:4d:7d:
                    eb:c6:b2:97:a3:18:66:66:62:e4:71:3a:7d:f0:c7:
                    3c:43:91:d8:a5:ad:a7:e6:64:26:b4:77:37:5c:cc:
                    48:cc:80:75:20:f6:bc:f9:f8:fa:89:08:a5:56:59:
                    36:c8:47:e3:5c:52:4d:30:fb:c1:f2:64:61:bb:5c:
                    61:30:95:46:52:73:fa:d4:a3:07:d6:72:8d:3e:dc:
                    a2:9f:fb:be:40:62:29:d5:8f:44:f6:6f:03:bb:83:
                    3b:0c:d2:b5:c6:8a:cd:11:79:60:d0:39:fe:f5:e4:
                    a4:f4:b2:48:1f:99:83:ff:b1:86:10:0c:68:0a:28:
                    2a:46:88:a9:84:10:65:7c:dc:b6:b4:88:99:79:88:
                    f0:73:b7:11:d2:b8:88:fb:19:3b:ae:ad:49:19:98:
                    c8:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:BE:D6:0D:AC:5F:0C:36:38:03:84:B3:AE:C3:EA:E7:07:D6:C5:29
            X509v3 Authority Key Identifier:
                keyid:BC:9C:40:5F:14:2E:53:EB:67:B1:C4:99:23:AB:79:5E:84:32:8C:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJxAXxQuU-tnscSZI6t5XoQyjJs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b816b9-91b0-46da-8e58-91488a34fcc8/1/vJxAXxQuU-tnscSZI6t5XoQyjJs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b816b9-91b0-46da-8e58-91488a34fcc8/1/vJxAXxQuU-tnscSZI6t5XoQyjJs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:5f:a5:a0:56:af:f5:40:b2:91:a1:a9:39:ee:c7:1a:a9:dd:
         40:4b:f0:49:7c:26:fc:e1:3b:96:9c:92:53:5f:f6:19:57:2e:
         f4:97:81:4a:b4:9f:a1:45:5a:8b:74:cc:07:36:9f:52:3c:27:
         32:77:3c:27:44:d5:76:8a:73:a5:04:04:a3:90:5c:78:44:c3:
         e6:ce:cb:20:46:36:5b:f7:12:68:ab:dc:e3:2f:b2:e1:77:f5:
         17:0f:4e:88:19:7b:d2:c0:f5:1d:be:9a:f6:f4:ee:9f:55:a7:
         39:eb:65:b8:37:97:ac:50:38:f3:e0:42:b4:81:b2:42:4f:1e:
         7f:c1:ba:1c:1f:77:b9:fb:11:3c:c9:0a:d0:8e:e9:bf:73:a1:
         2c:b3:04:b4:a3:36:0e:4f:40:90:a8:3f:38:a4:14:9e:2e:68:
         99:1b:2e:79:12:87:8e:34:d7:72:6f:30:f1:df:19:62:1b:3d:
         7a:f1:f0:4b:22:17:3b:31:94:a9:dc:7c:4d:c4:1d:86:54:2f:
         b5:06:45:ac:3e:85:be:b0:f7:ef:cf:67:7d:09:a7:0b:5b:25:
         17:39:8d:d2:f0:aa:08:86:03:b4:2f:03:a5:4e:32:80:ef:e1:
         e1:53:a0:5d:11:7f:27:81:2f:56:57:e1:f9:99:73:7f:83:a2:
         b8:2a:8f:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:06:11 2025 by rpki-client