Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/434fed-877d-4a0f-a256-85345f660655/1/69-nwK1-9nTdW0GUlg8v_UEV8mE.mft
File:                     69-nwK1-9nTdW0GUlg8v_UEV8mE.mft (raw, json)
Hash identifier:          N4Dtc7r8nNv2yTnhCL8z8E1SDar5N4/TZBbc12RYClQ=
Subject key identifier:   09:CF:69:16:EC:0E:7F:DB:A8:BA:86:84:E7:90:46:DF:B7:57:36:88
Authority key identifier: EB:DF:A7:C0:AD:7E:F6:74:DD:5B:41:94:96:0F:2F:FD:41:15:F2:61
Certificate issuer:       /CN=ebdfa7c0ad7ef674dd5b4194960f2ffd4115f261
Certificate serial:       0199FB458310F7713A26E6651CF9CA253420
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/69-nwK1-9nTdW0GUlg8v_UEV8mE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/434fed-877d-4a0f-a256-85345f660655/1/69-nwK1-9nTdW0GUlg8v_UEV8mE.mft
Manifest number:          16E2
Signing time:             Sun 19 Oct 2025 07:01:00 +0000
Manifest this update:     Sun 19 Oct 2025 07:01:00 +0000
Manifest next update:     Mon 20 Oct 2025 07:01:00 +0000
Files and hashes:         1: 69-nwK1-9nTdW0GUlg8v_UEV8mE.crl (hash: EX7+eMzY4ivi+T/83l+NIGk+ojP7zV6k7hbeiz4za3U=)
                          2: jKlk89-fCSzoTB01s7RShivsAOE.roa (hash: iI/3xADl4iYI6LJcczTraHOHC9ZNevaWvmg8LIoJztg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/434fed-877d-4a0f-a256-85345f660655/1/69-nwK1-9nTdW0GUlg8v_UEV8mE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/434fed-877d-4a0f-a256-85345f660655/1/69-nwK1-9nTdW0GUlg8v_UEV8mE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/69-nwK1-9nTdW0GUlg8v_UEV8mE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:45:83:10:f7:71:3a:26:e6:65:1c:f9:ca:25:34:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebdfa7c0ad7ef674dd5b4194960f2ffd4115f261
        Validity
            Not Before: Oct 19 07:01:00 2025 GMT
            Not After : Oct 20 07:01:00 2025 GMT
        Subject: CN=09cf6916ec0e7fdba8ba8684e79046dfb7573688
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:1f:ba:ff:ae:b0:9a:a5:09:18:a5:0d:8e:6a:
                    ee:f2:93:4d:08:bc:e2:19:40:1d:b3:b3:81:78:e8:
                    36:97:31:c3:1f:d3:10:16:03:5c:ca:d5:55:97:74:
                    54:1e:bb:84:15:a3:6c:c5:0d:e7:f6:30:33:f5:64:
                    16:e6:a4:10:8b:fe:7a:69:7c:28:ae:ac:d8:94:84:
                    7c:4c:4b:85:c2:97:72:73:e3:d0:b5:0b:25:3b:fb:
                    88:ff:6b:34:72:c3:94:d5:73:11:e4:62:11:41:2a:
                    a0:91:c9:17:42:7c:0a:75:27:cd:8e:04:81:5b:80:
                    8d:ad:a5:e9:5d:d3:40:09:59:8a:4d:1c:aa:01:59:
                    50:d4:f2:5d:a1:5e:8b:78:24:69:09:d0:23:24:53:
                    c8:ab:57:55:d2:e5:d3:99:34:12:6b:2d:3b:71:26:
                    8f:a7:38:7a:e4:d4:4e:27:36:06:48:34:2b:1a:ab:
                    f9:47:cb:3f:e0:1a:d4:d4:54:04:1a:72:11:ab:fe:
                    7f:9a:ad:79:dc:8a:ed:85:63:94:38:ec:2c:a2:4a:
                    1d:c6:ba:6c:5f:eb:8e:45:a3:c3:55:5c:06:d2:81:
                    82:91:62:4a:ab:25:77:f3:a3:b6:7e:8c:2d:35:69:
                    8c:41:60:63:ae:7d:a4:1a:07:90:93:57:19:0d:e8:
                    0d:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:CF:69:16:EC:0E:7F:DB:A8:BA:86:84:E7:90:46:DF:B7:57:36:88
            X509v3 Authority Key Identifier:
                keyid:EB:DF:A7:C0:AD:7E:F6:74:DD:5B:41:94:96:0F:2F:FD:41:15:F2:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/69-nwK1-9nTdW0GUlg8v_UEV8mE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/434fed-877d-4a0f-a256-85345f660655/1/69-nwK1-9nTdW0GUlg8v_UEV8mE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/434fed-877d-4a0f-a256-85345f660655/1/69-nwK1-9nTdW0GUlg8v_UEV8mE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:e4:15:74:0d:3e:80:41:cf:e7:9d:1a:b7:75:10:36:63:ad:
         56:d3:60:ca:7b:39:e9:ee:0b:3d:a0:aa:fa:74:bf:a8:c2:66:
         19:39:07:9e:34:93:08:2d:21:3d:f8:1b:eb:9a:38:90:04:cb:
         fc:8a:95:52:ba:a5:b8:dd:5b:3f:c9:c6:de:32:69:40:4f:da:
         d4:36:c9:20:bb:f9:e1:61:2f:52:99:4e:a7:02:3f:bc:19:58:
         37:9d:42:9b:6c:e2:7f:42:51:58:34:dd:21:63:9f:c7:5e:35:
         e2:c6:07:97:9d:aa:c2:51:29:01:74:19:8c:72:b6:79:3b:93:
         66:19:de:62:1f:8f:65:0c:c6:18:11:49:a0:8e:30:68:11:c4:
         ab:7c:ab:f4:f8:ee:b1:bb:27:2a:f9:2c:a7:4c:7c:1b:50:bf:
         28:76:34:7c:ab:e5:62:53:ad:20:88:ae:d8:20:14:3d:c2:bd:
         2a:c1:21:6d:33:d6:66:0f:a1:50:a0:0e:dc:96:c4:aa:c2:d1:
         83:0f:7b:39:cc:ac:c6:e9:1d:64:85:da:af:42:87:8c:b7:2f:
         7a:f9:02:bc:fc:97:43:ae:85:37:d7:51:18:97:29:29:43:64:
         30:65:dd:c4:c3:1c:db:7e:b2:51:57:c9:d9:36:0f:b9:b2:bd:
         07:cb:06:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:43:44 2025 by rpki-client