Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/194589-6c6e-47ce-9733-13952643f114/1/mo9LAp4p7t8n1FzU05AQgya-JvA.mft
File:                     mo9LAp4p7t8n1FzU05AQgya-JvA.mft (raw, json)
Hash identifier:          /cgsRm9Z6bpVXcRSstS9zKbvyVn2u+TnDoN53uKuyvs=
Subject key identifier:   C3:27:8D:47:0E:70:D3:9E:40:EB:2B:59:C6:23:A0:E9:F2:37:A4:C1
Authority key identifier: 9A:8F:4B:02:9E:29:EE:DF:27:D4:5C:D4:D3:90:10:83:26:BE:26:F0
Certificate issuer:       /CN=9a8f4b029e29eedf27d45cd4d390108326be26f0
Certificate serial:       0199FCC6B96343337A4AC9872E6EC52490A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mo9LAp4p7t8n1FzU05AQgya-JvA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/194589-6c6e-47ce-9733-13952643f114/1/mo9LAp4p7t8n1FzU05AQgya-JvA.mft
Manifest number:          16E3
Signing time:             Sun 19 Oct 2025 14:01:46 +0000
Manifest this update:     Sun 19 Oct 2025 14:01:46 +0000
Manifest next update:     Mon 20 Oct 2025 14:01:46 +0000
Files and hashes:         1: Zw30iDu4jzobtmXOoRJnqyr607Y.roa (hash: 4CedzSiaWJKzH9a7MTqU1eCaCh1zeNHdX5Usa6vZk+8=)
                          2: mo9LAp4p7t8n1FzU05AQgya-JvA.crl (hash: y6y6YZkT/Ppi7Vt8Jv0LTD2oGmaYw78CbLmxG5/kEDo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/194589-6c6e-47ce-9733-13952643f114/1/mo9LAp4p7t8n1FzU05AQgya-JvA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/194589-6c6e-47ce-9733-13952643f114/1/mo9LAp4p7t8n1FzU05AQgya-JvA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mo9LAp4p7t8n1FzU05AQgya-JvA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:c6:b9:63:43:33:7a:4a:c9:87:2e:6e:c5:24:90:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a8f4b029e29eedf27d45cd4d390108326be26f0
        Validity
            Not Before: Oct 19 14:01:46 2025 GMT
            Not After : Oct 20 14:01:46 2025 GMT
        Subject: CN=c3278d470e70d39e40eb2b59c623a0e9f237a4c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:2c:b1:46:19:2e:92:e1:fc:2a:45:5b:2d:f6:
                    9f:d1:e0:d9:f4:7b:a2:94:a1:60:9e:6f:eb:35:9d:
                    d5:56:ae:e4:26:be:06:c8:8d:59:83:2a:e4:31:e7:
                    1b:13:58:7f:54:ab:41:90:a0:a0:f2:2c:88:1f:f7:
                    94:02:26:9e:75:d6:a7:3a:87:ee:0f:ce:dd:19:fd:
                    01:e0:d0:28:6a:a6:56:e8:c7:77:fc:2f:4b:a6:b4:
                    91:2b:de:2e:ec:b4:db:fb:c8:0d:c2:3b:23:26:08:
                    ea:74:24:b4:3d:e8:9e:ac:3b:99:82:67:b9:cf:d8:
                    dc:35:b4:50:a7:8f:e6:63:2c:72:e9:0e:6d:65:5c:
                    e4:7d:47:ae:ed:50:3d:f9:e6:b7:f0:d6:00:e3:46:
                    ad:b2:28:65:2c:8a:60:c2:e9:4f:0c:5f:2f:5c:d6:
                    c3:f7:4e:3a:7c:59:0e:a3:0a:c0:a1:4b:12:be:ce:
                    d0:38:69:d3:29:a5:43:3a:bc:3f:57:e9:07:5e:e9:
                    e6:44:45:17:1f:66:6f:2f:5c:ae:ba:ac:29:00:a0:
                    4a:45:4d:06:a5:e7:3b:7d:9c:01:fa:dd:69:ef:54:
                    98:c3:94:a5:8f:40:c9:d4:8b:9e:1e:81:58:a1:54:
                    50:0d:80:b4:e1:ca:6b:f4:dc:0e:dc:27:08:31:0d:
                    03:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:27:8D:47:0E:70:D3:9E:40:EB:2B:59:C6:23:A0:E9:F2:37:A4:C1
            X509v3 Authority Key Identifier:
                keyid:9A:8F:4B:02:9E:29:EE:DF:27:D4:5C:D4:D3:90:10:83:26:BE:26:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mo9LAp4p7t8n1FzU05AQgya-JvA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/194589-6c6e-47ce-9733-13952643f114/1/mo9LAp4p7t8n1FzU05AQgya-JvA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/194589-6c6e-47ce-9733-13952643f114/1/mo9LAp4p7t8n1FzU05AQgya-JvA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:03:d0:12:30:78:4d:c5:62:2f:02:a1:cf:0c:81:f5:93:2a:
         1a:e8:3c:f2:d1:d0:91:fe:22:35:c0:b3:00:cb:9d:6f:16:f2:
         f7:85:55:62:7d:a7:56:5e:dd:c1:13:62:64:06:dd:e4:f5:e1:
         a8:89:2a:83:1a:3d:03:6a:f3:9b:f6:f1:7e:e0:43:b1:3e:05:
         0e:f8:0b:2a:79:d6:55:ae:df:ae:e0:7e:83:ed:3e:df:23:60:
         bb:7a:60:f1:87:ec:45:58:45:1b:87:b2:a9:fd:e8:61:42:8d:
         1d:3e:94:4a:92:d8:05:ad:02:d9:3e:e2:ce:8e:e6:3c:94:98:
         3e:81:c4:59:d5:a8:67:4a:07:13:73:4c:75:ee:e1:79:09:e2:
         7c:5d:dd:31:3e:22:ce:bb:f3:b0:a6:bb:42:a9:37:ee:21:33:
         19:5c:64:e1:e3:2a:bd:b0:f7:68:6a:b9:26:bc:13:a3:a7:47:
         0a:20:6b:09:ba:ff:5f:14:5b:2d:eb:28:fb:1f:fe:00:e4:a6:
         8b:e3:77:dc:03:88:69:3d:4c:4c:ec:1f:e2:9d:0a:fc:59:0d:
         7a:07:4e:49:87:cf:62:ac:de:a2:ca:1d:5e:70:39:61:73:7f:
         de:83:eb:e0:8b:ed:17:63:bf:c1:3c:4e:cb:0f:2c:95:b7:9c:
         42:f9:c0:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:43:44 2025 by rpki-client