Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/47275d-5fa7-4bb2-99eb-1f00737cb2a2/1/mur6lsnVY-ZQulkv-wbizutqCFk.mft
File:                     mur6lsnVY-ZQulkv-wbizutqCFk.mft (raw, json)
Hash identifier:          jaenunX+tgfKPdKXxF1idJQMPZcza579tJfMnxts/t4=
Subject key identifier:   76:CF:F0:0B:98:9E:39:A2:61:BC:48:89:0C:8E:E6:2B:99:D3:42:1F
Authority key identifier: 9A:EA:FA:96:C9:D5:63:E6:50:BA:59:2F:FB:06:E2:CE:EB:6A:08:59
Certificate issuer:       /CN=9aeafa96c9d563e650ba592ffb06e2ceeb6a0859
Certificate serial:       0199FD34836C738841A223E4DD2CCCCAB9BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mur6lsnVY-ZQulkv-wbizutqCFk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/47275d-5fa7-4bb2-99eb-1f00737cb2a2/1/mur6lsnVY-ZQulkv-wbizutqCFk.mft
Manifest number:          16E5
Signing time:             Sun 19 Oct 2025 16:01:41 +0000
Manifest this update:     Sun 19 Oct 2025 16:01:41 +0000
Manifest next update:     Mon 20 Oct 2025 16:01:41 +0000
Files and hashes:         1: Uwd9Y3NnCMGZmVRE34P-tV7c6CA.roa (hash: 7yboFI0VfCPRE/G2/gMEN7pPuKOLyqEoyViA8/cI6kQ=)
                          2: irj1HjAurNUv-4zFYoq9zYDgdlE.roa (hash: Q709g8riB8kWPE65HcwVtvNF/Lb15QFI8yUUJR0G7Y0=)
                          3: mur6lsnVY-ZQulkv-wbizutqCFk.crl (hash: KnaumHSyUbvwiHRqnvu6U4CXHWQ/g8QA/3cNf69mVkk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/47275d-5fa7-4bb2-99eb-1f00737cb2a2/1/mur6lsnVY-ZQulkv-wbizutqCFk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/47275d-5fa7-4bb2-99eb-1f00737cb2a2/1/mur6lsnVY-ZQulkv-wbizutqCFk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mur6lsnVY-ZQulkv-wbizutqCFk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:34:83:6c:73:88:41:a2:23:e4:dd:2c:cc:ca:b9:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9aeafa96c9d563e650ba592ffb06e2ceeb6a0859
        Validity
            Not Before: Oct 19 16:01:41 2025 GMT
            Not After : Oct 20 16:01:41 2025 GMT
        Subject: CN=76cff00b989e39a261bc48890c8ee62b99d3421f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:91:56:e7:70:b1:94:f3:cb:9f:dd:27:07:9d:
                    e0:2e:4b:e0:37:5d:59:d1:55:0b:cf:ce:ab:d0:6e:
                    b8:19:99:c9:88:d3:13:84:67:d4:37:40:4e:aa:0b:
                    74:4b:df:0c:bb:1c:c9:fa:d7:9d:d3:53:a4:a3:50:
                    66:76:1d:e3:e6:1d:c3:8b:4e:aa:f2:5c:c6:61:27:
                    63:6d:9b:91:cc:d1:92:4f:f3:be:2a:af:69:87:1b:
                    c3:c1:ae:f4:54:43:82:51:bb:8a:e0:39:6e:a9:0f:
                    3b:4c:59:b2:03:83:1e:da:f0:68:36:94:a5:5b:4f:
                    a3:aa:75:f2:4a:d5:df:fb:dc:14:62:1e:c3:96:d2:
                    81:d7:0f:a3:a3:ca:c8:5c:c3:87:f5:cf:be:4f:36:
                    c5:0b:4e:63:55:3f:f1:38:5f:b1:75:f5:26:5a:b8:
                    11:2d:57:cc:4f:0a:60:0e:79:fe:fc:5d:37:fc:29:
                    ab:b2:45:93:79:37:fa:04:51:59:43:b9:8c:7c:47:
                    00:d0:4d:57:83:a6:9d:a7:1c:9a:f4:d1:fd:eb:7e:
                    92:e9:45:27:01:53:8d:79:54:3d:f5:d8:69:a2:c5:
                    db:5a:fd:c6:52:8d:5f:bf:97:21:7d:9e:83:61:b6:
                    8f:97:02:cd:3a:87:e4:ea:d4:19:aa:e8:e7:24:e3:
                    6d:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:CF:F0:0B:98:9E:39:A2:61:BC:48:89:0C:8E:E6:2B:99:D3:42:1F
            X509v3 Authority Key Identifier:
                keyid:9A:EA:FA:96:C9:D5:63:E6:50:BA:59:2F:FB:06:E2:CE:EB:6A:08:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mur6lsnVY-ZQulkv-wbizutqCFk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/47275d-5fa7-4bb2-99eb-1f00737cb2a2/1/mur6lsnVY-ZQulkv-wbizutqCFk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/47275d-5fa7-4bb2-99eb-1f00737cb2a2/1/mur6lsnVY-ZQulkv-wbizutqCFk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:42:fb:7f:d3:ab:66:2e:d2:2b:27:bc:33:5b:e7:59:f8:da:
         f7:96:85:e3:c9:1e:5d:9d:4c:db:9c:8a:11:2d:ca:44:4e:88:
         e3:90:0d:75:31:17:80:dc:d8:6c:e8:5c:e3:f9:5d:6a:10:17:
         92:e2:fd:b0:31:05:01:ff:2d:10:d1:fe:76:57:1b:80:4f:73:
         87:aa:47:ac:b4:5b:79:b2:f2:cc:04:cf:fe:45:76:5c:a9:6a:
         f3:37:39:d4:12:a5:0d:fd:b1:1f:70:e1:6d:f6:df:b0:e0:e5:
         3d:d4:ea:fc:fc:a7:c3:8a:d6:e2:56:fa:8f:21:2f:f5:76:e0:
         4e:e0:2d:91:3e:35:cb:df:a6:d4:d7:40:d5:0e:39:05:b6:88:
         db:11:5b:aa:26:b2:13:4f:3b:ae:f1:39:3b:34:bd:cb:88:14:
         83:56:26:5e:15:9f:d6:ae:aa:ff:71:30:2b:73:4b:17:bd:6a:
         ee:3d:b6:53:4f:56:e7:5c:b4:8b:75:19:f2:1e:84:d3:5a:d9:
         11:db:de:88:2d:a5:1e:ce:4b:ef:a6:de:7b:22:40:67:e6:54:
         6b:eb:bd:25:36:dd:fe:15:87:46:5f:bb:17:6d:60:87:56:92:
         45:aa:0c:84:d3:9d:5d:46:d2:0a:53:73:65:08:2b:46:16:4a:
         ba:a8:c9:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:36:23 2025 by rpki-client