Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/634890-8b48-49ae-b042-999cce4d4ad2/1/j9-HylMGV5hEdkUlX4KbU7wdohU.mft
File:                     j9-HylMGV5hEdkUlX4KbU7wdohU.mft (raw, json)
Hash identifier:          9MbxhpD+HBxvHfRgSvhRrc7Z1BOL3+i5gxqSYKQxt4o=
Subject key identifier:   AB:96:90:89:F2:0A:A8:DE:88:AA:7B:D7:10:94:83:7C:45:44:A9:C9
Authority key identifier: 8F:DF:87:CA:53:06:57:98:44:76:45:25:5F:82:9B:53:BC:1D:A2:15
Certificate issuer:       /CN=8fdf87ca53065798447645255f829b53bc1da215
Certificate serial:       0199FBEC3831E711ECC9E3A245908BCE13BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j9-HylMGV5hEdkUlX4KbU7wdohU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/634890-8b48-49ae-b042-999cce4d4ad2/1/j9-HylMGV5hEdkUlX4KbU7wdohU.mft
Manifest number:          062C
Signing time:             Sun 19 Oct 2025 10:03:06 +0000
Manifest this update:     Sun 19 Oct 2025 10:03:06 +0000
Manifest next update:     Mon 20 Oct 2025 10:03:06 +0000
Files and hashes:         1: 13OA8Kowa9u-F_7ZWwXTDMJLU0A.roa (hash: TLY9MKIWsbVqHZrgOnopJQQ8yZUjxig3a2ZRbtkH/Xw=)
                          2: j9-HylMGV5hEdkUlX4KbU7wdohU.crl (hash: g6YG2o/KPLk8UbNhwdqDkAK6nGmFQGDJ4uGmgwoAr8M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/634890-8b48-49ae-b042-999cce4d4ad2/1/j9-HylMGV5hEdkUlX4KbU7wdohU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/634890-8b48-49ae-b042-999cce4d4ad2/1/j9-HylMGV5hEdkUlX4KbU7wdohU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j9-HylMGV5hEdkUlX4KbU7wdohU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 10:03:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:ec:38:31:e7:11:ec:c9:e3:a2:45:90:8b:ce:13:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fdf87ca53065798447645255f829b53bc1da215
        Validity
            Not Before: Oct 19 10:03:06 2025 GMT
            Not After : Oct 20 10:03:06 2025 GMT
        Subject: CN=ab969089f20aa8de88aa7bd71094837c4544a9c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:56:5c:98:4d:bb:53:87:8e:7d:d0:42:55:00:
                    10:b0:88:38:4f:c7:f0:f7:5b:8a:3b:07:40:f0:a3:
                    69:85:3a:17:b3:60:2c:ee:24:13:6e:c6:8f:9c:8e:
                    1c:a2:49:79:38:c3:9e:62:ff:97:02:ca:2f:71:ca:
                    88:ae:5d:ff:f6:b6:f5:b4:af:90:e1:d1:c3:9c:ae:
                    33:29:06:15:b7:8f:df:2d:c0:a8:01:ff:9c:38:3d:
                    f8:fd:d0:9e:75:65:24:b3:ff:8d:db:27:eb:e6:67:
                    c9:c2:6b:4c:a8:87:1f:31:06:ef:b7:51:3a:2a:d7:
                    b7:c8:4d:98:d5:bc:53:86:71:1d:85:cb:27:a4:a9:
                    15:9b:45:20:60:53:38:51:46:c9:6e:10:f2:76:62:
                    b0:22:52:78:47:a5:f0:38:78:c8:bb:8d:06:2b:32:
                    13:c5:2c:5e:4e:8d:e3:1d:9d:22:81:67:bb:01:a3:
                    d0:b3:84:89:64:e7:4d:0e:80:5f:6e:cd:f8:c5:10:
                    88:09:ea:ca:67:d5:82:c1:93:ab:00:4f:1b:c4:7a:
                    e5:90:ec:82:b1:0a:e0:ee:68:db:63:cb:b1:8f:a0:
                    04:83:58:f7:62:cb:31:f1:f0:01:7f:00:e0:ac:29:
                    f3:a6:df:eb:4d:5c:63:ff:ef:a4:6e:8f:0e:65:11:
                    76:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:96:90:89:F2:0A:A8:DE:88:AA:7B:D7:10:94:83:7C:45:44:A9:C9
            X509v3 Authority Key Identifier:
                keyid:8F:DF:87:CA:53:06:57:98:44:76:45:25:5F:82:9B:53:BC:1D:A2:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j9-HylMGV5hEdkUlX4KbU7wdohU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/634890-8b48-49ae-b042-999cce4d4ad2/1/j9-HylMGV5hEdkUlX4KbU7wdohU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/634890-8b48-49ae-b042-999cce4d4ad2/1/j9-HylMGV5hEdkUlX4KbU7wdohU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:60:3a:d0:b5:80:41:9d:da:37:49:c2:20:3e:21:aa:fa:49:
         12:51:76:53:49:e9:36:d0:7a:10:0d:0c:24:13:9a:4b:04:79:
         3f:e5:33:b5:de:78:87:5c:42:98:97:75:9c:21:c2:b2:8d:92:
         b9:0d:f4:bf:18:2b:79:55:17:ed:72:95:3f:b9:41:b0:f1:e2:
         ec:70:a1:4f:3b:f7:e2:7a:41:d8:3b:66:6c:a5:44:8f:65:05:
         01:88:a3:75:2b:92:5d:9d:e0:d3:1e:43:73:56:cd:32:04:52:
         12:4b:fa:26:b8:7a:83:8c:2d:fa:d8:a2:fe:7e:4c:2b:1b:5d:
         01:ba:9e:6f:2a:87:4b:e4:22:30:2f:4d:e7:22:4c:4d:0f:0a:
         24:fc:a5:2f:5b:36:b0:97:28:a7:f1:c2:f5:b7:ea:96:40:70:
         32:0b:74:d8:93:c0:da:56:b2:e3:7a:c3:4f:5c:8d:66:d3:d1:
         ca:68:d0:ab:ff:17:22:0f:a2:8f:4e:f5:c5:6f:b6:e6:a9:75:
         41:17:a3:75:0e:9f:24:df:c5:36:1c:22:53:22:c6:24:6f:53:
         7e:27:9e:25:17:6d:21:b4:bb:de:8b:27:65:34:db:15:85:d4:
         b0:6c:91:b1:42:a2:f8:76:38:28:33:52:72:dd:a8:04:ff:43:
         10:e8:86:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:02:56 2025 by rpki-client