Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/5d5f73-63b9-4aaa-a8ec-5afc3a4fe542/1/myNjkGD_h6d_xnpuA8DE3Srkw5E.mft
File:                     myNjkGD_h6d_xnpuA8DE3Srkw5E.mft (raw, json)
Hash identifier:          8FELJbC4p7sxHUGF9pYuFVA8bCQ2SObzNDW/oi2/kEs=
Subject key identifier:   69:BB:7B:AA:47:F8:9B:6A:55:A8:A5:68:BA:CA:EB:E8:BF:BF:1D:A2
Authority key identifier: 9B:23:63:90:60:FF:87:A7:7F:C6:7A:6E:03:C0:C4:DD:2A:E4:C3:91
Certificate issuer:       /CN=9b23639060ff87a77fc67a6e03c0c4dd2ae4c391
Certificate serial:       0199FAD7EEA9E86EBBC1003964708735D3A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/myNjkGD_h6d_xnpuA8DE3Srkw5E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/5d5f73-63b9-4aaa-a8ec-5afc3a4fe542/1/myNjkGD_h6d_xnpuA8DE3Srkw5E.mft
Manifest number:          16E1
Signing time:             Sun 19 Oct 2025 05:01:19 +0000
Manifest this update:     Sun 19 Oct 2025 05:01:19 +0000
Manifest next update:     Mon 20 Oct 2025 05:01:19 +0000
Files and hashes:         1: NN299CMGcNrQCWLhS0OXaJqVLGQ.roa (hash: 93xwbIS/LqBoxP2s7kvpuTwTAH+EjaA0+8jXoFMAE+Y=)
                          2: myNjkGD_h6d_xnpuA8DE3Srkw5E.crl (hash: ndgBh4IHgr6C29OPFEXFNzVefRBmkDod1fJ9ar3B9mI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/5d5f73-63b9-4aaa-a8ec-5afc3a4fe542/1/myNjkGD_h6d_xnpuA8DE3Srkw5E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/5d5f73-63b9-4aaa-a8ec-5afc3a4fe542/1/myNjkGD_h6d_xnpuA8DE3Srkw5E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/myNjkGD_h6d_xnpuA8DE3Srkw5E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 05:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:d7:ee:a9:e8:6e:bb:c1:00:39:64:70:87:35:d3:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b23639060ff87a77fc67a6e03c0c4dd2ae4c391
        Validity
            Not Before: Oct 19 05:01:19 2025 GMT
            Not After : Oct 20 05:01:19 2025 GMT
        Subject: CN=69bb7baa47f89b6a55a8a568bacaebe8bfbf1da2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:be:41:56:57:98:52:27:07:45:3e:7b:4a:bc:
                    11:59:50:0d:10:3f:c0:79:11:3c:77:51:45:9f:02:
                    63:b1:8a:72:43:cc:41:4c:ef:09:15:b3:2c:0d:4e:
                    1b:a5:cc:7a:23:03:82:1b:30:93:cf:06:94:71:96:
                    36:35:f3:6d:89:02:d9:3f:10:1f:19:04:70:23:b4:
                    b3:93:51:c5:4f:a6:f7:83:29:e8:79:43:2c:00:9b:
                    0a:c3:10:e3:34:af:3d:26:1e:36:e2:7d:36:db:4f:
                    96:31:df:60:16:f3:5f:8b:b5:0b:3f:e2:1d:83:25:
                    ed:50:ef:8c:ba:5f:40:85:46:a1:6f:f5:1f:90:fe:
                    e0:bc:ef:5a:a4:c8:f8:1f:b5:e6:2c:54:34:fc:c3:
                    3b:4a:59:fc:39:4e:61:3b:aa:44:6d:b8:2f:72:fa:
                    94:a0:51:bb:1f:80:4a:7e:df:3b:3e:ac:03:c8:25:
                    a4:5e:d2:15:e5:0c:eb:9e:a2:e1:6f:99:0f:30:6a:
                    1e:47:e1:fe:28:0d:1e:74:98:6c:0e:7c:e0:9f:47:
                    a8:77:31:21:50:29:5f:97:d0:8b:b4:d4:41:0c:bd:
                    c0:b5:59:49:0c:3b:c8:75:f3:ce:ad:74:d2:ea:10:
                    a9:91:3b:bb:30:26:81:e9:f2:3f:3b:ea:cb:4a:f4:
                    50:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:BB:7B:AA:47:F8:9B:6A:55:A8:A5:68:BA:CA:EB:E8:BF:BF:1D:A2
            X509v3 Authority Key Identifier:
                keyid:9B:23:63:90:60:FF:87:A7:7F:C6:7A:6E:03:C0:C4:DD:2A:E4:C3:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/myNjkGD_h6d_xnpuA8DE3Srkw5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5d5f73-63b9-4aaa-a8ec-5afc3a4fe542/1/myNjkGD_h6d_xnpuA8DE3Srkw5E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5d5f73-63b9-4aaa-a8ec-5afc3a4fe542/1/myNjkGD_h6d_xnpuA8DE3Srkw5E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:1b:08:81:fe:e6:7f:97:cb:05:df:da:73:72:ea:10:93:9f:
         77:8f:51:8f:90:91:69:14:01:31:80:65:81:3b:09:1f:f0:16:
         d8:48:02:9d:85:62:23:de:9f:73:4e:c6:91:55:c3:d5:9c:a0:
         3f:66:5a:d8:af:bb:6d:90:4b:b2:72:87:80:ab:c3:f6:ce:e9:
         6d:0e:ec:eb:24:de:80:3f:dc:15:1c:99:ce:25:79:b9:de:31:
         45:03:fb:fa:ef:7b:0b:3e:53:89:39:8d:80:63:96:bc:8f:39:
         69:13:89:e0:b4:5b:c5:51:16:ee:ce:f8:bf:ba:a1:f6:5c:3b:
         bf:d2:1d:a8:93:a6:a5:11:a7:18:9f:12:d1:8c:df:5e:3a:e3:
         05:c3:11:d9:86:29:2d:04:f3:c9:14:61:44:b6:8f:f0:df:51:
         e9:4f:b5:59:19:c6:01:64:af:67:38:de:72:b9:3e:f5:ef:d3:
         ee:71:77:0f:6b:3c:83:71:e2:02:c6:ab:44:b5:ad:b9:e3:00:
         5f:14:81:8d:35:c0:28:36:6c:1e:b8:50:72:24:2e:44:7b:86:
         d2:2d:38:32:81:fe:ca:c9:3a:f6:57:9a:c6:6b:58:25:85:ef:
         fc:89:00:19:4e:bb:76:ca:c2:84:ca:08:1c:3d:c5:b8:8e:88:
         fd:9c:1a:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:06:20 2025 by rpki-client