Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/294613-9019-47d4-b065-5c1ac2af3672/1/rrc9JyyxdKRjjbIVZ44-57kin_o.mft
File:                     rrc9JyyxdKRjjbIVZ44-57kin_o.mft (raw, json)
Hash identifier:          Ab6roJm/v8ym5HUTPrfnVPImA/an2aenYUML6Wepodc=
Subject key identifier:   9C:FD:BE:C6:1A:69:70:34:D4:5E:1F:56:93:13:94:DC:BB:AE:26:F7
Authority key identifier: AE:B7:3D:27:2C:B1:74:A4:63:8D:B2:15:67:8E:3E:E7:B9:22:9F:FA
Certificate issuer:       /CN=aeb73d272cb174a4638db215678e3ee7b9229ffa
Certificate serial:       019A00354C7FBF4A35F197ADAFF86C925026
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rrc9JyyxdKRjjbIVZ44-57kin_o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/294613-9019-47d4-b065-5c1ac2af3672/1/rrc9JyyxdKRjjbIVZ44-57kin_o.mft
Manifest number:          16E2
Signing time:             Mon 20 Oct 2025 06:01:24 +0000
Manifest this update:     Mon 20 Oct 2025 06:01:24 +0000
Manifest next update:     Tue 21 Oct 2025 06:01:24 +0000
Files and hashes:         1: rrc9JyyxdKRjjbIVZ44-57kin_o.crl (hash: /xGcvQQDlc9XCtmBspTi4cISwzlsgI2bjBd24Oqu7Fg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/294613-9019-47d4-b065-5c1ac2af3672/1/rrc9JyyxdKRjjbIVZ44-57kin_o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/294613-9019-47d4-b065-5c1ac2af3672/1/rrc9JyyxdKRjjbIVZ44-57kin_o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rrc9JyyxdKRjjbIVZ44-57kin_o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:00:35:4c:7f:bf:4a:35:f1:97:ad:af:f8:6c:92:50:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aeb73d272cb174a4638db215678e3ee7b9229ffa
        Validity
            Not Before: Oct 20 06:01:24 2025 GMT
            Not After : Oct 21 06:01:24 2025 GMT
        Subject: CN=9cfdbec61a697034d45e1f56931394dcbbae26f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:66:75:cb:f1:8c:16:07:58:7d:b8:39:9e:6f:
                    c2:26:7c:52:dd:df:3f:45:fb:25:12:49:63:23:5c:
                    af:3f:b0:f8:cf:3f:8e:8f:0b:20:61:20:a5:4a:dd:
                    3a:08:ed:37:ee:87:7e:99:e2:e3:64:9d:cb:8a:9d:
                    c0:5d:71:b1:96:43:f9:31:86:42:02:69:b9:80:44:
                    0f:32:64:72:b8:82:15:2d:1e:91:82:ec:cd:d2:2b:
                    73:40:b0:1b:b3:17:52:fc:d1:82:48:e8:ed:b8:3d:
                    04:5a:39:46:8f:95:f8:a1:42:b8:a9:da:ba:54:6d:
                    34:0e:e6:c3:12:8a:74:1f:9b:72:07:6b:4d:cf:00:
                    9c:f7:92:01:80:ac:da:ec:81:dc:b3:f7:1b:e4:21:
                    26:04:2c:c6:3f:ac:f0:cb:50:da:62:86:1d:fa:e9:
                    5e:ad:85:47:d1:da:f0:76:42:f8:61:0e:f8:42:a5:
                    ff:a1:b2:7a:0a:d3:c2:b6:73:3c:38:23:3c:33:fc:
                    47:58:90:49:7b:0b:b9:bc:76:67:8e:60:57:d5:b6:
                    fb:bb:fc:f2:c6:8e:9a:1b:55:26:8b:9b:c8:bb:38:
                    5c:45:ac:db:41:bc:9d:30:0f:87:36:df:2a:82:9d:
                    74:45:71:7e:d6:6e:b6:df:8d:08:26:21:55:ff:4b:
                    b3:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:FD:BE:C6:1A:69:70:34:D4:5E:1F:56:93:13:94:DC:BB:AE:26:F7
            X509v3 Authority Key Identifier:
                keyid:AE:B7:3D:27:2C:B1:74:A4:63:8D:B2:15:67:8E:3E:E7:B9:22:9F:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rrc9JyyxdKRjjbIVZ44-57kin_o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/294613-9019-47d4-b065-5c1ac2af3672/1/rrc9JyyxdKRjjbIVZ44-57kin_o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/294613-9019-47d4-b065-5c1ac2af3672/1/rrc9JyyxdKRjjbIVZ44-57kin_o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:ea:98:e4:3a:c9:73:89:5b:0a:2a:b3:37:f9:18:b2:4e:a2:
         b6:25:4e:86:54:90:e4:6a:d9:9d:74:7d:7c:66:03:47:97:b5:
         8f:3f:fc:86:f0:d7:bb:18:51:d0:0d:41:ce:73:b4:75:bd:fc:
         5c:97:d1:0c:70:fd:dd:33:31:98:63:49:66:80:b7:ed:a8:54:
         e5:1d:ba:2e:7b:24:86:9a:71:10:95:d6:5c:6a:b9:2c:04:09:
         4e:97:52:55:7d:1c:94:9e:45:5e:42:ce:f1:1b:53:17:8e:6c:
         c5:87:34:9d:8a:fc:a1:a2:08:07:16:e1:6b:ab:1e:47:89:5a:
         be:8f:77:d8:07:86:8f:01:a8:1a:17:b8:7e:76:6c:87:92:17:
         37:f7:f8:99:8b:84:9c:30:43:73:1b:18:19:28:a3:7b:ed:b6:
         5b:29:e6:78:36:30:c2:6c:ce:0a:06:d9:83:c5:11:0e:f5:47:
         8c:56:3b:9a:73:97:d0:e7:0d:85:32:d3:1a:c8:9f:c8:cd:98:
         82:77:b9:ab:ef:f6:e2:a7:6e:db:9a:06:d0:9c:f1:58:59:55:
         59:b6:b0:48:8b:0f:ac:64:09:a7:bb:ec:1a:12:43:0b:2c:f7:
         51:0a:a5:fa:fc:37:b6:c4:75:a1:f0:8c:91:21:eb:e6:fc:f2:
         5b:3e:f7:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:57:43 2025 by rpki-client