Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/k2eWXig08Yk8-oYxpIQHHmotRbc.mft
File:                     k2eWXig08Yk8-oYxpIQHHmotRbc.mft (raw, json)
Hash identifier:          Q9cIpNQFQu3MTa+rmu08QN1seTfc97IcDDkfFwJT07Q=
Subject key identifier:   6C:AE:28:4C:DB:32:D6:CE:25:AF:A8:24:59:9D:7D:D5:1B:55:48:E0
Authority key identifier: 93:67:96:5E:28:34:F1:89:3C:FA:86:31:A4:84:07:1E:6A:2D:45:B7
Certificate issuer:       /CN=9367965e2834f1893cfa8631a484071e6a2d45b7
Certificate serial:       0199FBB361C1890204FA619E6ECC6B0302EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k2eWXig08Yk8-oYxpIQHHmotRbc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/k2eWXig08Yk8-oYxpIQHHmotRbc.mft
Manifest number:          16E5
Signing time:             Sun 19 Oct 2025 09:01:00 +0000
Manifest this update:     Sun 19 Oct 2025 09:01:00 +0000
Manifest next update:     Mon 20 Oct 2025 09:01:00 +0000
Files and hashes:         1: 8Fy9I-oQhMxbs3z3a1slxp3FSXo.roa (hash: syWqGLAGI08ya5lx0Hert03mbaxaIeNX2fCZeit4wOQ=)
                          2: Nf9NANpHpYDyjvffxc3Yokjh2Xo.roa (hash: a6nBEkn4InmMm+Pg6s6MSypG+gVY7YcwBjZWW41SjW0=)
                          3: WdmItzgEujgbNu1eGYJwzawwMog.roa (hash: aIeRx/U40LddmgTD3UvIlve/kjfqwjuwkm6nemky7CA=)
                          4: aQYXwN1hIPnjjCzzBaRpPeGmHJY.roa (hash: cRP6ljm3HcbCmhQ/DifjNEtuIJrF64sc54A2KruH5EI=)
                          5: iKe81R-d7NpY31TD5bcPHVmsY2g.roa (hash: NrmL4rDM8Soz+h7m5cCsCbBdg9SwqLhYZsJEc4odfCg=)
                          6: iRG9ucM5Y1__Y1j40udIIAjWRo4.roa (hash: IhQn4ZuEkIr4xebbPWQUjrsTXErn0Gt0OnIFGQHg8dQ=)
                          7: k2eWXig08Yk8-oYxpIQHHmotRbc.crl (hash: 7XotdJFLspNGS/ALlJFuKBBeK3QPgeVnS52cWyV2s+k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/k2eWXig08Yk8-oYxpIQHHmotRbc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/k2eWXig08Yk8-oYxpIQHHmotRbc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k2eWXig08Yk8-oYxpIQHHmotRbc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:b3:61:c1:89:02:04:fa:61:9e:6e:cc:6b:03:02:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9367965e2834f1893cfa8631a484071e6a2d45b7
        Validity
            Not Before: Oct 19 09:01:00 2025 GMT
            Not After : Oct 20 09:01:00 2025 GMT
        Subject: CN=6cae284cdb32d6ce25afa824599d7dd51b5548e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b2:3e:61:a7:89:e5:5a:42:00:2b:d1:aa:bf:
                    2f:98:df:5c:5b:b1:8f:b5:a5:35:c6:10:25:b1:2c:
                    06:b1:7e:58:9b:bd:2f:dc:e0:61:07:0a:54:82:cc:
                    db:29:d6:98:1a:04:c3:f2:93:ea:48:bc:6e:8d:6f:
                    10:ba:cd:d1:b7:9c:d0:b2:83:7f:26:c4:49:21:e8:
                    52:3d:13:ce:f3:67:74:81:5c:eb:52:6d:ea:99:29:
                    72:12:f8:87:22:b8:43:68:37:48:ad:52:fb:b3:50:
                    c2:77:b7:15:05:4f:bf:8f:72:22:32:f6:72:91:62:
                    a7:37:7e:43:ea:11:e3:ad:a8:93:0f:8b:9b:7c:d7:
                    71:3d:1b:7f:83:38:d3:94:4e:f7:92:77:c7:0f:0c:
                    f3:99:61:b3:99:3a:08:ce:41:1b:73:85:63:de:3c:
                    3b:49:5d:d3:00:bb:49:04:10:69:15:a9:ce:4e:77:
                    5d:2c:f7:a3:11:16:a6:36:05:7a:bf:29:7f:65:bb:
                    bc:1c:2c:ba:ac:cc:b4:e8:f0:09:7a:e8:01:86:ad:
                    a8:3f:f9:fa:3d:79:14:34:a2:8e:4f:ae:91:4b:73:
                    11:c2:1f:1a:bc:ed:97:e9:41:91:f6:2d:0b:dc:07:
                    b2:ee:e8:5a:6d:02:51:c9:1d:94:ac:dd:60:13:63:
                    b3:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:AE:28:4C:DB:32:D6:CE:25:AF:A8:24:59:9D:7D:D5:1B:55:48:E0
            X509v3 Authority Key Identifier:
                keyid:93:67:96:5E:28:34:F1:89:3C:FA:86:31:A4:84:07:1E:6A:2D:45:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2eWXig08Yk8-oYxpIQHHmotRbc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/k2eWXig08Yk8-oYxpIQHHmotRbc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/k2eWXig08Yk8-oYxpIQHHmotRbc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:cb:76:f4:44:f3:ec:53:6a:0a:79:ec:36:5e:08:16:22:11:
         0f:09:eb:cc:6a:70:d5:aa:98:95:63:e9:55:8f:56:43:c0:3d:
         c4:9d:87:d4:5f:a4:52:2e:19:e5:b4:23:3f:11:1d:3c:b4:08:
         38:a8:a1:5f:ae:7c:15:cb:41:31:38:66:83:38:21:a3:00:67:
         ae:32:c6:33:bf:0d:33:c9:f0:96:84:ff:37:3f:49:53:31:bf:
         9e:85:83:fc:0d:8d:12:88:c2:9f:55:91:f5:08:e0:2c:01:2d:
         3b:e5:1f:dc:25:b2:4b:b0:ff:66:2b:83:eb:e6:64:9e:70:94:
         7e:13:77:ad:d6:14:68:28:b7:d6:50:c2:ea:f9:22:35:01:50:
         07:74:86:43:49:a1:ce:ce:da:da:d8:60:49:aa:bb:e8:eb:4e:
         c9:c1:99:4a:8c:c3:ed:c7:b4:c7:7d:26:2e:67:0d:be:c9:7f:
         a2:9e:a1:0c:a5:74:ca:ed:f9:df:e9:72:a8:09:5a:15:44:ed:
         34:42:59:41:73:84:4b:cc:3d:35:90:10:33:c4:f0:41:cf:ab:
         66:2e:d6:df:91:d4:24:a8:af:37:2d:d0:f0:1c:e5:8d:a8:4b:
         b9:ee:d1:fa:d3:be:dd:40:60:70:a0:1b:8e:5c:a9:08:51:de:
         1b:1a:ba:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:28:28 2025 by rpki-client