Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/a9d9da-f8a5-47ba-b66a-bd0b5774f637/1/jTCBDi3Ccaag8HuOIJ4twiNjeDk.mft
File:                     jTCBDi3Ccaag8HuOIJ4twiNjeDk.mft (raw, json)
Hash identifier:          ybpipt+/6PqWb2uCDXZ23FYmFV/q5SZKucGviO42trs=
Subject key identifier:   46:CF:2D:20:C6:E0:44:4D:83:7D:A8:B3:80:99:78:75:9D:A2:50:09
Authority key identifier: 8D:30:81:0E:2D:C2:71:A6:A0:F0:7B:8E:20:9E:2D:C2:23:63:78:39
Certificate issuer:       /CN=8d30810e2dc271a6a0f07b8e209e2dc223637839
Certificate serial:       0199FC8F214C364FCFAD981AAEBFB6342BAD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jTCBDi3Ccaag8HuOIJ4twiNjeDk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/a9d9da-f8a5-47ba-b66a-bd0b5774f637/1/jTCBDi3Ccaag8HuOIJ4twiNjeDk.mft
Manifest number:          16E6
Signing time:             Sun 19 Oct 2025 13:01:02 +0000
Manifest this update:     Sun 19 Oct 2025 13:01:02 +0000
Manifest next update:     Mon 20 Oct 2025 13:01:02 +0000
Files and hashes:         1: dHwX8PQaURSRhzT9O267zp2eAAU.roa (hash: pQKJANjM+1Peo4ZdiwJW4yKvtPIT0ly/kwXsgNJ+gjU=)
                          2: jTCBDi3Ccaag8HuOIJ4twiNjeDk.crl (hash: xvbY5vgHh9CDrAlVChsbLL9ZaEKGV4j2hga0eBflQKM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/a9d9da-f8a5-47ba-b66a-bd0b5774f637/1/jTCBDi3Ccaag8HuOIJ4twiNjeDk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/a9d9da-f8a5-47ba-b66a-bd0b5774f637/1/jTCBDi3Ccaag8HuOIJ4twiNjeDk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jTCBDi3Ccaag8HuOIJ4twiNjeDk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:8f:21:4c:36:4f:cf:ad:98:1a:ae:bf:b6:34:2b:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d30810e2dc271a6a0f07b8e209e2dc223637839
        Validity
            Not Before: Oct 19 13:01:02 2025 GMT
            Not After : Oct 20 13:01:02 2025 GMT
        Subject: CN=46cf2d20c6e0444d837da8b3809978759da25009
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:7d:ad:6a:2d:45:43:ef:28:38:42:cd:69:f2:
                    96:80:c9:ba:75:71:0b:a4:b4:f8:e9:91:d7:d5:16:
                    44:82:34:02:ad:39:3f:56:8f:15:dd:c9:ad:9a:b6:
                    fa:62:3c:78:8f:8e:10:db:87:80:52:d0:01:3a:3d:
                    4a:42:ac:3f:10:94:c5:71:be:9e:bc:10:a0:4b:68:
                    5f:fb:66:41:fe:16:01:d7:3c:f1:4e:4a:ef:af:b4:
                    7a:21:8d:7f:ab:86:ca:30:25:8c:29:f6:40:7f:e3:
                    77:e0:18:1a:39:a8:92:44:5c:cc:00:ba:6f:ae:a1:
                    67:f8:f7:bb:01:52:33:cd:9b:26:d7:fd:e7:54:fb:
                    68:0a:49:a7:2a:f7:81:91:1f:ca:7e:ba:53:96:30:
                    a0:df:f2:d0:ce:13:69:e4:44:5d:cb:95:d4:41:e8:
                    ba:e1:75:ae:83:45:1a:ae:69:08:43:33:44:59:2f:
                    15:39:58:ce:49:ac:80:4e:e2:54:d3:b8:70:09:42:
                    3a:c4:5b:9f:31:0f:a2:16:28:db:31:4f:4c:79:d1:
                    62:67:dd:ec:27:a1:2f:39:c1:92:a1:b0:4b:9e:61:
                    93:4c:08:dc:4b:8e:9d:47:55:17:29:b9:05:84:37:
                    bd:2b:65:c4:be:44:7c:6e:93:71:03:1d:da:d6:dc:
                    2d:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:CF:2D:20:C6:E0:44:4D:83:7D:A8:B3:80:99:78:75:9D:A2:50:09
            X509v3 Authority Key Identifier:
                keyid:8D:30:81:0E:2D:C2:71:A6:A0:F0:7B:8E:20:9E:2D:C2:23:63:78:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTCBDi3Ccaag8HuOIJ4twiNjeDk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a9d9da-f8a5-47ba-b66a-bd0b5774f637/1/jTCBDi3Ccaag8HuOIJ4twiNjeDk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a9d9da-f8a5-47ba-b66a-bd0b5774f637/1/jTCBDi3Ccaag8HuOIJ4twiNjeDk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:93:70:35:9d:d9:c0:23:1c:10:2d:a0:fd:88:f6:8a:13:6a:
         56:df:24:c6:92:42:a3:65:84:bd:94:8a:e6:0e:a0:29:c0:db:
         60:9f:e5:bf:82:5f:7a:2a:02:3d:de:a7:a7:71:8e:64:81:66:
         59:4b:69:69:1f:cf:40:2a:a6:d8:d4:9a:8e:9a:f7:e5:72:56:
         7d:61:da:b6:83:5f:bf:01:ad:3f:47:e1:68:b0:98:41:b8:f2:
         24:08:de:d2:a3:9b:b7:1a:2f:ef:25:55:eb:ef:e0:84:05:ec:
         99:61:22:c4:2b:41:5c:4c:d5:ca:54:1f:b8:d2:49:a8:98:eb:
         3e:07:81:e4:7c:4f:ac:2b:fc:9f:b9:f7:da:2b:b5:91:42:69:
         a3:b3:28:95:46:9d:23:7a:bd:e6:30:18:52:6c:88:6d:2b:1f:
         1a:5d:79:72:1b:93:87:de:37:aa:b9:8c:b4:08:bd:9c:31:23:
         40:58:40:65:c9:b2:6f:3c:71:9f:15:68:38:d7:32:a6:5f:b7:
         5f:a5:db:1b:ce:de:79:ad:69:ea:54:0f:e1:2a:f5:1c:42:74:
         cd:91:80:bd:b4:e8:69:a0:aa:1e:c4:b4:9a:ee:dc:7c:8c:29:
         a3:5d:df:1c:a5:1e:95:27:98:bc:99:52:0f:2c:d1:33:60:6a:
         6d:74:f2:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:29:20 2025 by rpki-client