Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.mft
File:                     kjorPddmcnXwmIbffaB591XO7Vk.mft (raw, json)
Hash identifier:          nrl8Q3kX9qPhQC8v7aE6AJmyc7OBt08TEMUUq4tYhzk=
Subject key identifier:   A4:BE:CD:FE:D7:2F:37:35:E0:3B:FA:BD:37:91:B1:FE:7F:9D:7D:ED
Authority key identifier: 92:3A:2B:3D:D7:66:72:75:F0:98:86:DF:7D:A0:79:F7:55:CE:ED:59
Certificate issuer:       /CN=923a2b3dd7667275f09886df7da079f755ceed59
Certificate serial:       0199FC21B2805112B9774E1AE9403998496D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kjorPddmcnXwmIbffaB591XO7Vk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.mft
Manifest number:          16E6
Signing time:             Sun 19 Oct 2025 11:01:30 +0000
Manifest this update:     Sun 19 Oct 2025 11:01:30 +0000
Manifest next update:     Mon 20 Oct 2025 11:01:30 +0000
Files and hashes:         1: 9kHCDEYZPWH5aik7KavJ0sDUmNA.roa (hash: ijJR9ND92QYljIrNDlxEINq6c8DaInEaO2V/WhuFgzU=)
                          2: Mdtn2WNSBNsE9Aa9ivpouspTZzc.roa (hash: S9ae068y1S4PtOCQAT0sFXCH1rFhFv4f3zsh6JDJIEk=)
                          3: ZgG20-53jQJwsyA9Uj-HDlUNiyA.roa (hash: r4Yw7FV6MragLYSnWbxNhJIL4Bz5tpt7zooYhdKRX2U=)
                          4: kjorPddmcnXwmIbffaB591XO7Vk.crl (hash: 0KuEVmhZ1Vpynpstn95Y4NFhwHHP1+kwa+dCK7/87DY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kjorPddmcnXwmIbffaB591XO7Vk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:21:b2:80:51:12:b9:77:4e:1a:e9:40:39:98:49:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=923a2b3dd7667275f09886df7da079f755ceed59
        Validity
            Not Before: Oct 19 11:01:30 2025 GMT
            Not After : Oct 20 11:01:30 2025 GMT
        Subject: CN=a4becdfed72f3735e03bfabd3791b1fe7f9d7ded
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c4:73:07:79:1d:62:62:3f:80:8f:00:42:23:
                    e3:91:d6:6d:d5:1a:24:26:6b:ff:3e:36:41:a2:50:
                    ac:aa:71:ad:b4:39:94:7a:f5:f8:03:df:33:99:69:
                    23:ca:c4:74:cd:2f:60:33:95:0d:5a:a5:36:f8:81:
                    8d:d4:4a:ed:4b:a7:ba:1e:62:85:7f:bf:53:3f:b1:
                    c3:35:f2:1c:d9:54:84:67:a7:89:ab:fb:6e:10:2e:
                    8d:5b:57:49:9d:67:8c:bb:04:46:ae:60:97:fb:c3:
                    86:8f:a8:72:71:15:f4:70:58:75:03:79:07:48:01:
                    2e:ae:c0:fc:11:ec:cc:96:ac:cc:d4:c4:4b:f4:21:
                    76:59:94:14:41:94:0e:84:29:43:d8:51:68:1a:25:
                    5f:4d:af:fb:fd:b9:c1:52:84:f7:fc:6a:ba:37:26:
                    34:b7:74:a4:8b:c2:9f:47:99:a6:01:f8:52:10:91:
                    85:a4:81:35:e1:9d:b3:68:a2:19:71:cb:3c:68:03:
                    96:20:c3:a5:92:81:5e:8e:7b:eb:2f:0f:a8:b3:e2:
                    07:82:b8:37:6d:53:47:10:01:e9:db:7e:44:c9:80:
                    de:79:65:59:23:56:20:8a:5a:6b:92:6f:7d:f6:95:
                    a8:e9:ef:08:bb:9a:87:3c:b7:46:b7:d9:d5:5d:93:
                    2c:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:BE:CD:FE:D7:2F:37:35:E0:3B:FA:BD:37:91:B1:FE:7F:9D:7D:ED
            X509v3 Authority Key Identifier:
                keyid:92:3A:2B:3D:D7:66:72:75:F0:98:86:DF:7D:A0:79:F7:55:CE:ED:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kjorPddmcnXwmIbffaB591XO7Vk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:ac:8b:7a:4d:e0:cd:3e:75:51:38:fa:b3:d6:9d:de:f2:40:
         95:11:11:ad:7b:1a:4b:a5:22:61:4a:ea:b2:36:fc:07:38:3d:
         3f:72:ff:f4:64:d0:00:aa:6d:f2:43:2d:cd:39:e5:63:14:bf:
         ea:4f:cf:40:a2:d5:43:fa:40:26:ac:91:90:00:95:28:56:ed:
         f3:1f:df:fd:98:ac:3e:16:c9:a8:24:98:ff:3d:d1:66:ec:86:
         31:9f:b8:46:64:ec:3e:29:83:87:d3:53:8a:dc:42:84:98:3b:
         38:f5:61:c7:b1:71:b7:9c:3f:07:8c:3e:02:c9:d1:2a:d5:0f:
         15:67:4d:f5:d2:89:d1:9a:15:bf:df:98:bf:c4:27:45:19:42:
         50:14:12:b7:3e:5f:20:6a:56:9e:9f:99:ad:67:9e:f5:63:0c:
         81:94:b4:3f:bd:7c:ab:e0:97:df:d1:67:0a:53:78:f1:e3:58:
         42:9d:79:69:70:85:8e:38:54:8d:02:6d:c2:76:a4:39:76:b2:
         f3:ad:ec:8e:cc:6c:7a:60:7c:05:74:4b:73:6c:23:92:3b:c4:
         ec:db:78:f6:19:eb:76:11:06:c5:81:71:c9:2f:13:1c:59:0e:
         bc:b8:ec:50:55:27:52:0c:bd:e5:46:59:a1:c9:f2:08:33:c8:
         a9:fc:bb:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:02:03 2025 by rpki-client