Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.mft
File:                     JNm7BTDf4yKPg7CGE5LihFk0tpg.mft (raw, json)
Hash identifier:          oX+9SNypqvuoARAc5AT+t9hRS8kfZI3WYQ4YpOiJaKU=
Subject key identifier:   60:32:95:AF:F4:B1:A7:7A:21:CD:38:57:D9:01:4C:2B:8D:55:A3:66
Authority key identifier: 24:D9:BB:05:30:DF:E3:22:8F:83:B0:86:13:92:E2:84:59:34:B6:98
Certificate issuer:       /CN=24d9bb0530dfe3228f83b0861392e2845934b698
Certificate serial:       0199FE1032C9CBE3CEB18BC2EFC60008A098
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JNm7BTDf4yKPg7CGE5LihFk0tpg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.mft
Manifest number:          16E1
Signing time:             Sun 19 Oct 2025 20:01:38 +0000
Manifest this update:     Sun 19 Oct 2025 20:01:38 +0000
Manifest next update:     Mon 20 Oct 2025 20:01:38 +0000
Files and hashes:         1: 1ZxW8u-5P1t4UMze5JFbl0Ooyu4.roa (hash: Nhhuv6DdC39yd8/4en2lPPTqam7XI+LxbkaMlQc4uqc=)
                          2: JNm7BTDf4yKPg7CGE5LihFk0tpg.crl (hash: KoE/R9lW/QpGS8XcqOTcgGOc4iKzbxUFpIYM7ergzcg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JNm7BTDf4yKPg7CGE5LihFk0tpg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:10:32:c9:cb:e3:ce:b1:8b:c2:ef:c6:00:08:a0:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24d9bb0530dfe3228f83b0861392e2845934b698
        Validity
            Not Before: Oct 19 20:01:38 2025 GMT
            Not After : Oct 20 20:01:38 2025 GMT
        Subject: CN=603295aff4b1a77a21cd3857d9014c2b8d55a366
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c8:20:c0:07:ec:cc:5a:eb:6e:34:28:85:8a:
                    ec:5b:be:a8:7e:80:4b:7e:10:6b:f8:79:59:d1:49:
                    80:35:c7:1b:c4:79:dd:5d:aa:b3:85:6d:5d:9f:bb:
                    5a:77:85:8b:41:70:17:fd:4a:17:ae:14:52:29:aa:
                    da:8e:44:37:09:f9:37:e8:13:09:00:e6:5a:cf:7b:
                    7c:b4:8d:70:cb:94:cf:7d:c9:5f:a8:97:2e:2c:9b:
                    d0:5e:5e:bc:61:79:21:e9:1e:d1:93:7c:61:a1:a8:
                    a1:73:80:cd:21:49:98:fa:97:8a:5f:67:6b:27:27:
                    14:1c:d2:d3:c3:5d:4e:6e:ab:82:6f:87:e5:65:89:
                    5c:d3:c9:03:52:c5:07:1f:e7:bb:4a:5b:ea:67:5e:
                    e6:fd:ff:5a:45:89:dd:22:81:08:04:25:3c:21:16:
                    94:f8:b1:44:d6:10:db:ed:1a:e3:db:74:e4:d2:a4:
                    64:46:a8:3a:f3:48:e3:74:5c:05:6b:4f:bf:db:56:
                    53:ef:0e:fc:75:10:14:32:6f:21:7a:14:6a:b2:b1:
                    da:15:ec:81:f7:16:b0:ec:fa:b0:66:9b:fe:ed:53:
                    1c:f1:37:83:70:b0:29:c1:d3:02:b5:cb:4e:0f:62:
                    c6:cb:4f:0c:0d:25:8a:6f:12:17:28:92:46:29:9d:
                    2e:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:32:95:AF:F4:B1:A7:7A:21:CD:38:57:D9:01:4C:2B:8D:55:A3:66
            X509v3 Authority Key Identifier:
                keyid:24:D9:BB:05:30:DF:E3:22:8F:83:B0:86:13:92:E2:84:59:34:B6:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNm7BTDf4yKPg7CGE5LihFk0tpg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:78:22:ae:de:95:9a:8e:d0:cc:8e:5b:5c:ce:d7:8e:c8:50:
         7b:80:70:ef:63:30:be:1c:7d:44:c4:a8:94:d5:89:0d:f3:7e:
         f0:ac:54:d7:d1:2a:16:c8:e2:46:ab:ad:6d:ce:6a:c4:27:6a:
         de:83:76:55:02:f4:22:61:2c:2b:ef:2d:ae:d6:5c:27:6c:db:
         90:95:4e:fd:a2:03:a4:27:d9:48:ae:ad:f3:1d:a5:6a:56:5c:
         3c:b0:58:ab:78:51:25:53:fc:61:9c:d2:3f:62:63:ea:cf:ae:
         e4:67:ad:53:24:1d:e8:ba:2c:b5:78:51:b9:0b:1c:8d:b8:53:
         d8:69:ff:ad:04:e0:c5:bc:5c:f9:58:05:70:98:ef:c7:ac:52:
         bb:cc:ae:91:28:64:f0:60:50:e1:de:5d:f1:52:8e:35:b7:d9:
         85:84:c4:18:81:c0:9d:10:e2:28:3f:c1:3c:10:3c:64:a5:a0:
         21:e8:38:32:b9:58:b8:0c:91:1a:be:cb:1e:61:59:a8:10:5b:
         55:1f:24:0f:d6:2a:dd:3e:fa:ce:d7:b6:e6:d9:dd:43:2c:f8:
         46:f5:6c:68:b1:a2:bd:d9:a6:1a:30:2e:ff:cc:27:90:0f:88:
         60:6b:91:44:b9:58:05:ed:2f:75:2b:e3:54:48:db:ad:65:15:
         fb:ab:f8:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:30:38 2025 by rpki-client