Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/njUz1mLD8Na7HmkvP6tte6OCTCg.mft
File:                     njUz1mLD8Na7HmkvP6tte6OCTCg.mft (raw, json)
Hash identifier:          qxsgv1qU+tjv7x3LD4ylRd+hobtocK9BzrIXeV1SgEM=
Subject key identifier:   F5:06:77:20:8B:5D:8F:5B:B2:C9:55:57:B5:CB:E8:F6:5C:70:06:07
Authority key identifier: 9E:35:33:D6:62:C3:F0:D6:BB:1E:69:2F:3F:AB:6D:7B:A3:82:4C:28
Certificate issuer:       /CN=9e3533d662c3f0d6bb1e692f3fab6d7ba3824c28
Certificate serial:       0199FCFD9975BB309AF0E4A61826CE67F687
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/njUz1mLD8Na7HmkvP6tte6OCTCg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/njUz1mLD8Na7HmkvP6tte6OCTCg.mft
Manifest number:          16A1
Signing time:             Sun 19 Oct 2025 15:01:42 +0000
Manifest this update:     Sun 19 Oct 2025 15:01:42 +0000
Manifest next update:     Mon 20 Oct 2025 15:01:42 +0000
Files and hashes:         1: RBsyWLfZJ_zLx9s-cNB-ptFfujg.roa (hash: IyFw4v8rAxvkA10wGK9XNcDIKqaq/q2xa7mB4hR4CMY=)
                          2: Zi1iA2N22K6D1EqWuXGSwJbaToE.roa (hash: zSMKFbT/uwlzQj5z6cjWhjz6p9cPAfNZU2ZZ9FmRbIU=)
                          3: jgu3roXa-ppD5Voc7wD-A3FJYsA.roa (hash: IK8p6mGX+CwHf/aA4cC2k9uGzhRGeTYhI8MfPoXscu0=)
                          4: kGMgS3TZAvAnMocHteWjBFNWR8o.roa (hash: afji4OUij4JCrNG8nVCGeIIObZ0hGW3nPREv67Wh4m4=)
                          5: njUz1mLD8Na7HmkvP6tte6OCTCg.crl (hash: OCfixcIhxrXdMkZGICQ5z1A9A1ky9fPR4dMrsnzdXcs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/njUz1mLD8Na7HmkvP6tte6OCTCg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/njUz1mLD8Na7HmkvP6tte6OCTCg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/njUz1mLD8Na7HmkvP6tte6OCTCg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:fd:99:75:bb:30:9a:f0:e4:a6:18:26:ce:67:f6:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e3533d662c3f0d6bb1e692f3fab6d7ba3824c28
        Validity
            Not Before: Oct 19 15:01:42 2025 GMT
            Not After : Oct 20 15:01:42 2025 GMT
        Subject: CN=f50677208b5d8f5bb2c95557b5cbe8f65c700607
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:1a:14:53:8c:b2:88:5d:9a:93:70:33:db:6f:
                    7a:1a:e5:77:2a:3c:7a:e8:b5:16:ea:da:57:a9:df:
                    55:6a:4c:56:c6:ce:58:52:ca:cb:e2:be:82:fc:02:
                    ce:c7:5b:b7:21:db:b3:37:08:00:78:e2:35:c4:30:
                    32:52:60:a6:14:5a:7a:30:db:70:dc:73:cc:72:40:
                    74:84:71:51:9a:30:42:00:10:c7:91:c2:89:4b:c2:
                    ae:6e:35:6a:ad:aa:c0:cf:1c:c8:aa:38:e8:83:f7:
                    22:ae:8d:f5:5b:ca:7f:9d:ad:7a:90:cb:d1:1b:b0:
                    3d:ad:e7:15:bc:29:ae:ae:4f:9a:ac:98:ca:05:bb:
                    7b:4c:31:f9:1f:18:ea:9d:46:55:51:fb:d0:38:74:
                    40:92:92:27:df:42:2d:ef:ea:81:9a:65:94:73:ba:
                    8e:a0:9a:11:37:da:7c:06:aa:f5:d8:9a:f4:25:7c:
                    db:79:bb:5d:e5:32:92:3f:0d:b6:87:62:50:ea:8a:
                    1c:3c:0b:93:6e:c8:b0:2d:d9:80:b4:1e:b4:aa:66:
                    6d:86:bc:07:fa:cd:81:35:05:97:62:82:62:92:be:
                    be:48:da:8e:ca:e1:e0:b9:df:54:d6:6a:4b:dc:23:
                    fe:83:ff:be:c2:aa:73:44:4d:3f:d3:82:86:a8:5f:
                    57:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:06:77:20:8B:5D:8F:5B:B2:C9:55:57:B5:CB:E8:F6:5C:70:06:07
            X509v3 Authority Key Identifier:
                keyid:9E:35:33:D6:62:C3:F0:D6:BB:1E:69:2F:3F:AB:6D:7B:A3:82:4C:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njUz1mLD8Na7HmkvP6tte6OCTCg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/njUz1mLD8Na7HmkvP6tte6OCTCg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/njUz1mLD8Na7HmkvP6tte6OCTCg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:17:9e:6b:d4:87:e8:da:5e:a9:89:80:a8:db:02:d7:8b:18:
         c2:37:b0:01:e7:ff:e9:88:e6:a5:1b:c1:31:18:c6:c4:f4:11:
         de:56:2d:c4:a4:d3:9e:1d:4b:03:63:a8:19:06:ad:eb:c8:8c:
         ec:a5:f4:36:62:b6:a9:b9:ce:3e:f5:8c:80:21:9e:42:47:fe:
         6b:de:66:67:7b:fa:23:7d:3f:d5:53:66:1f:21:42:b5:1a:3d:
         5a:99:95:1a:f9:52:5b:ed:90:96:e3:34:05:8c:16:e3:af:8f:
         5f:f5:7a:ec:dc:47:6c:ba:87:af:08:ec:44:ab:3c:1c:63:5c:
         86:f6:04:26:73:5c:9f:d4:a9:15:8b:84:32:d0:88:21:94:ac:
         b7:e4:99:16:f4:15:65:00:6a:e0:24:e1:88:48:c8:3a:53:ce:
         64:62:e6:05:39:94:ec:cb:bd:ea:f4:50:e3:6c:10:2b:f3:ab:
         54:70:1a:5c:6b:e5:93:43:38:23:2f:36:81:7c:ed:47:4d:b1:
         82:47:b4:86:ab:e1:3e:ac:e0:ba:86:a0:01:19:1a:66:bc:b7:
         6d:47:be:32:68:fa:16:f6:5d:97:ed:9a:16:c8:50:5a:14:5d:
         dc:55:07:b6:17:26:13:64:64:10:25:ee:06:b1:09:22:d2:14:
         4e:e8:ce:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:01:55 2025 by rpki-client