Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/cdbd0a-68ec-487d-8fea-619281380bc2/1/n2m9-bvSpFl-Js4gv-E4YkytM9w.mft
File:                     n2m9-bvSpFl-Js4gv-E4YkytM9w.mft (raw, json)
Hash identifier:          6YP3bs1oMSdwe9BH0y+QAh938kkWjDfjl2nyNeNQhG0=
Subject key identifier:   75:67:BE:C5:22:9A:D8:18:EA:4A:68:AE:02:5E:38:DB:70:1A:D4:15
Authority key identifier: 9F:69:BD:F9:BB:D2:A4:59:7E:26:CE:20:BF:E1:38:62:4C:AD:33:DC
Certificate issuer:       /CN=9f69bdf9bbd2a4597e26ce20bfe138624cad33dc
Certificate serial:       0199FE1021B6DD987FF47E159B47885AABB3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n2m9-bvSpFl-Js4gv-E4YkytM9w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/cdbd0a-68ec-487d-8fea-619281380bc2/1/n2m9-bvSpFl-Js4gv-E4YkytM9w.mft
Manifest number:          16E7
Signing time:             Sun 19 Oct 2025 20:01:34 +0000
Manifest this update:     Sun 19 Oct 2025 20:01:34 +0000
Manifest next update:     Mon 20 Oct 2025 20:01:34 +0000
Files and hashes:         1: c6IRErIGfaFkFauAsD0yX1D2OJo.roa (hash: xl23q8TaDjC94/sI1Iw9HbGjuwzReW51qdpjOFZcIcI=)
                          2: n2m9-bvSpFl-Js4gv-E4YkytM9w.crl (hash: DoEdG+ps2W1Ff/peht3sTkeK1zhL/BIHUY+ftnj5FDE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/cdbd0a-68ec-487d-8fea-619281380bc2/1/n2m9-bvSpFl-Js4gv-E4YkytM9w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/cdbd0a-68ec-487d-8fea-619281380bc2/1/n2m9-bvSpFl-Js4gv-E4YkytM9w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n2m9-bvSpFl-Js4gv-E4YkytM9w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:10:21:b6:dd:98:7f:f4:7e:15:9b:47:88:5a:ab:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f69bdf9bbd2a4597e26ce20bfe138624cad33dc
        Validity
            Not Before: Oct 19 20:01:34 2025 GMT
            Not After : Oct 20 20:01:34 2025 GMT
        Subject: CN=7567bec5229ad818ea4a68ae025e38db701ad415
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:47:04:06:68:19:94:9c:c8:36:ed:c3:f0:30:
                    fc:bf:05:48:3d:e2:67:7e:8e:81:e6:66:60:f6:be:
                    01:a5:19:e2:44:08:7e:2e:4d:01:bf:32:d4:52:45:
                    2c:4b:56:14:f4:c3:07:68:e9:15:3b:05:06:e8:dd:
                    5a:22:0a:01:6f:55:7c:47:94:26:f0:3a:95:6a:6d:
                    81:7e:e2:8e:a4:df:4b:d3:cc:74:52:2d:6b:5f:e6:
                    13:59:44:82:e1:0d:52:7f:ae:f7:c4:d0:e8:e0:53:
                    68:f0:21:8c:49:2e:fb:6b:a2:a4:6f:d8:92:9d:9d:
                    6d:9f:46:03:90:56:47:34:33:94:9c:80:5f:7e:44:
                    fc:ac:04:d4:07:5b:01:44:0c:9b:51:7b:71:ac:52:
                    d7:10:d9:6a:2f:df:ff:d2:fb:b4:05:0d:95:80:45:
                    67:e4:7b:59:56:2c:ed:5f:14:88:db:1a:b9:84:a2:
                    0e:c2:b1:b5:e7:0c:9e:a8:74:11:4b:4d:e4:34:ca:
                    5f:18:9d:46:6c:24:da:4e:d1:05:fb:93:ba:8a:2b:
                    c9:f9:e6:04:6c:9a:c6:52:d7:b0:0f:a7:4e:ce:d1:
                    23:12:ca:44:90:fc:38:01:f0:ee:34:9c:50:e2:ec:
                    13:50:a7:c7:7d:04:0b:4f:4c:62:8f:da:32:7b:92:
                    6b:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:67:BE:C5:22:9A:D8:18:EA:4A:68:AE:02:5E:38:DB:70:1A:D4:15
            X509v3 Authority Key Identifier:
                keyid:9F:69:BD:F9:BB:D2:A4:59:7E:26:CE:20:BF:E1:38:62:4C:AD:33:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n2m9-bvSpFl-Js4gv-E4YkytM9w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/cdbd0a-68ec-487d-8fea-619281380bc2/1/n2m9-bvSpFl-Js4gv-E4YkytM9w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/cdbd0a-68ec-487d-8fea-619281380bc2/1/n2m9-bvSpFl-Js4gv-E4YkytM9w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:56:e2:37:f2:1d:63:d2:b1:d0:0f:6f:56:54:17:ea:af:99:
         34:c4:99:6c:c9:61:73:9d:67:8d:5d:df:e5:3b:b0:14:ec:b3:
         e5:d1:b3:3f:a3:51:49:e7:9d:f9:5c:1a:3d:a6:4e:12:50:2b:
         d1:c6:35:1b:d8:88:3e:8b:f2:75:44:bd:f1:ea:83:89:04:1d:
         61:6e:8e:b5:06:24:a5:b0:8b:8f:97:a6:1a:b0:ca:e3:b4:33:
         70:6f:0e:0b:64:44:a3:32:21:ce:1b:f3:44:6f:74:39:97:0a:
         7a:b6:40:58:16:fe:fb:72:3b:f5:b4:ea:04:84:4c:b0:a0:aa:
         79:c8:4b:0f:fa:0c:cd:10:f8:41:05:3a:5d:25:87:af:96:5e:
         24:5b:f5:10:a5:38:12:25:35:40:78:c8:33:df:a9:c7:3d:f2:
         9c:5b:c9:f5:55:11:78:a0:9d:13:a2:0d:db:bb:62:85:d4:bf:
         d7:07:aa:45:87:83:13:96:5a:98:44:0f:bf:3b:77:e5:78:66:
         02:71:96:b1:8e:5f:99:6c:c1:54:46:44:46:a4:04:e3:8d:11:
         37:28:22:c7:0b:c6:96:9a:8e:df:fd:cc:2b:12:5a:73:b1:b4:
         a1:e0:b3:73:a3:0f:ab:fc:a5:fe:52:cc:bb:b9:43:45:b1:38:
         2c:48:6e:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:14:39 2025 by rpki-client