Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/b01290-d76d-42d8-a234-f9512499e05c/1/Mjq1upi-9dDZvQzqAxof4Td3pIY.mft
File:                     Mjq1upi-9dDZvQzqAxof4Td3pIY.mft (raw, json)
Hash identifier:          +bg4I+pfGgsiUmVNgu4vonn5oZsdIqUL0xScdwI4lJo=
Subject key identifier:   9C:CE:C9:A0:A0:CA:92:78:93:2F:96:79:D6:F5:8F:B8:DC:0D:E7:E3
Authority key identifier: 32:3A:B5:BA:98:BE:F5:D0:D9:BD:0C:EA:03:1A:1F:E1:37:77:A4:86
Certificate issuer:       /CN=323ab5ba98bef5d0d9bd0cea031a1fe13777a486
Certificate serial:       0199FAD8284C79D656360D9BB26C185AFE52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mjq1upi-9dDZvQzqAxof4Td3pIY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/b01290-d76d-42d8-a234-f9512499e05c/1/Mjq1upi-9dDZvQzqAxof4Td3pIY.mft
Manifest number:          16E8
Signing time:             Sun 19 Oct 2025 05:01:33 +0000
Manifest this update:     Sun 19 Oct 2025 05:01:33 +0000
Manifest next update:     Mon 20 Oct 2025 05:01:33 +0000
Files and hashes:         1: 1bbk3xQO4GAsakJYReXogLvLM4k.roa (hash: ma7JWfiezOV+JM83OPhYUisosrWCLMi3zSbBAzKD2O0=)
                          2: 4eUjU3FviKAA-8zjNHUXmCGN0-k.roa (hash: cYvBww/EyQVYauVbE6pk42UaaR9Wj899DGdPG2LUf3g=)
                          3: Mjq1upi-9dDZvQzqAxof4Td3pIY.crl (hash: kLi+I4Qoht+wupfcZeLH+r/uJSCtSZr+YOVmor3jxsI=)
                          4: P79q0XI6jMHcEUJUje7vbekXqMM.roa (hash: rfk192nc+MyT+AA9yTeZKZSIGbJXkqx89FY7vI7SgFM=)
                          5: qKUS3aWdXNKyGrEPIZqo9vOOxtM.roa (hash: aMMBOBw0agva6obgWYqVlq2psGGrS2vafTYjFkbH+48=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/b01290-d76d-42d8-a234-f9512499e05c/1/Mjq1upi-9dDZvQzqAxof4Td3pIY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/b01290-d76d-42d8-a234-f9512499e05c/1/Mjq1upi-9dDZvQzqAxof4Td3pIY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mjq1upi-9dDZvQzqAxof4Td3pIY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 05:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:d8:28:4c:79:d6:56:36:0d:9b:b2:6c:18:5a:fe:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=323ab5ba98bef5d0d9bd0cea031a1fe13777a486
        Validity
            Not Before: Oct 19 05:01:33 2025 GMT
            Not After : Oct 20 05:01:33 2025 GMT
        Subject: CN=9ccec9a0a0ca9278932f9679d6f58fb8dc0de7e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:29:d9:82:bd:6a:1b:ce:44:8a:56:c2:15:7b:
                    00:28:d1:ba:a9:dc:14:d9:37:d9:71:c6:32:7a:24:
                    39:f7:fd:d5:8a:ee:43:d4:ee:23:4d:7f:d0:e3:cd:
                    8b:57:44:a4:00:83:a3:19:e4:29:4c:f8:46:a3:bd:
                    1a:09:e6:04:e7:71:69:5a:78:5f:b4:20:7f:ef:4a:
                    37:7d:47:c3:45:a0:59:e8:7e:94:c0:97:b8:ca:63:
                    10:37:f3:53:5e:74:0a:94:56:23:f7:b0:5f:2e:fc:
                    67:16:07:1d:49:9d:39:fe:7f:02:07:30:75:a0:9c:
                    67:93:c8:08:81:d5:30:e9:c7:52:6f:95:60:9e:97:
                    22:51:58:e5:c3:1e:0f:ff:e7:5c:8b:d3:00:1d:71:
                    45:0b:c6:cc:cb:ef:3b:84:c0:d6:b9:d0:8a:c7:cc:
                    53:68:80:e6:12:ba:b4:e3:2c:6b:89:86:6a:10:7f:
                    c7:09:7c:61:44:81:50:0c:75:19:b1:2c:74:58:c2:
                    4f:59:04:c9:69:fd:d2:b0:ac:d7:44:b8:b2:52:c5:
                    df:45:ea:88:bf:10:1e:99:c5:56:5c:34:71:2b:fe:
                    74:37:cf:7d:ac:a5:f1:7b:68:ac:5b:95:36:d4:90:
                    83:a0:80:8e:da:3c:a7:70:67:20:4c:42:38:78:ab:
                    09:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:CE:C9:A0:A0:CA:92:78:93:2F:96:79:D6:F5:8F:B8:DC:0D:E7:E3
            X509v3 Authority Key Identifier:
                keyid:32:3A:B5:BA:98:BE:F5:D0:D9:BD:0C:EA:03:1A:1F:E1:37:77:A4:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mjq1upi-9dDZvQzqAxof4Td3pIY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b01290-d76d-42d8-a234-f9512499e05c/1/Mjq1upi-9dDZvQzqAxof4Td3pIY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b01290-d76d-42d8-a234-f9512499e05c/1/Mjq1upi-9dDZvQzqAxof4Td3pIY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:7b:c0:bb:de:d6:26:1c:92:2a:93:fc:71:ec:3a:33:58:38:
         b1:55:57:e0:e6:ed:72:7a:6d:91:e2:5f:75:3b:e2:5d:aa:87:
         87:dc:8b:a2:1c:17:bf:77:1b:5c:59:88:06:c7:cb:73:5b:d2:
         4d:26:d6:d2:b1:66:d0:58:0b:4f:48:46:7b:3c:1b:b7:4a:d5:
         b1:98:cd:67:18:0f:53:8e:b4:f9:f0:2e:e9:a9:b6:7d:46:3e:
         7d:c1:2a:33:be:a5:ac:93:30:9f:4d:71:c3:ea:cc:56:3d:37:
         5f:fa:91:b6:13:b2:ff:d1:0f:a8:a2:f8:8d:36:9c:f8:fb:ee:
         d5:3f:39:77:b2:06:54:1e:aa:f7:66:64:b0:ae:05:3a:01:96:
         b9:59:3a:b6:b0:95:ef:73:ce:52:d5:9f:91:e6:dd:08:69:17:
         0a:ce:36:95:01:9e:0d:c4:7c:d5:79:6e:f3:3a:32:49:bf:3e:
         be:8a:a0:ba:43:e7:c1:cd:10:d6:f7:af:04:1b:3e:e4:59:bd:
         38:49:a7:56:2b:6a:9d:31:a9:e0:b6:14:11:7e:11:dd:db:07:
         e1:8e:36:e1:0d:76:a2:78:ad:7a:22:74:ae:99:f6:e3:f6:32:
         e4:3a:7a:44:01:a1:0a:a2:a0:1b:ef:b8:08:94:a4:63:b6:03:
         87:21:0b:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:28:17 2025 by rpki-client