Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/87206f-33d0-4f33-b781-84f8fdc0c698/1/ijjRGR9m8fAxXeX0XMGU0c0Z0fs.mft
File:                     ijjRGR9m8fAxXeX0XMGU0c0Z0fs.mft (raw, json)
Hash identifier:          6KiopM1/JnQjnAR4eRsAYn5rwvKTtWTCMbA87L08fUI=
Subject key identifier:   41:D6:B4:E6:26:A6:4E:E7:D8:B3:27:45:16:32:B8:FB:2B:ED:F5:E3
Authority key identifier: 8A:38:D1:19:1F:66:F1:F0:31:5D:E5:F4:5C:C1:94:D1:CD:19:D1:FB
Certificate issuer:       /CN=8a38d1191f66f1f0315de5f45cc194d1cd19d1fb
Certificate serial:       0199FE7E05B6C567A8E701C03C9BF864DD75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ijjRGR9m8fAxXeX0XMGU0c0Z0fs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/87206f-33d0-4f33-b781-84f8fdc0c698/1/ijjRGR9m8fAxXeX0XMGU0c0Z0fs.mft
Manifest number:          16E3
Signing time:             Sun 19 Oct 2025 22:01:35 +0000
Manifest this update:     Sun 19 Oct 2025 22:01:35 +0000
Manifest next update:     Mon 20 Oct 2025 22:01:35 +0000
Files and hashes:         1: hLakS4LRqtwndizOwv35_LPmSM8.roa (hash: T21fBsQZHckhVR25IcmVqL7irT842KR48E+IblvWuLQ=)
                          2: ijjRGR9m8fAxXeX0XMGU0c0Z0fs.crl (hash: 8C3qdh5wFtks1z4j4xH9YYCZYsO1TcDNjXlQD55wuPs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/87206f-33d0-4f33-b781-84f8fdc0c698/1/ijjRGR9m8fAxXeX0XMGU0c0Z0fs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/87206f-33d0-4f33-b781-84f8fdc0c698/1/ijjRGR9m8fAxXeX0XMGU0c0Z0fs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ijjRGR9m8fAxXeX0XMGU0c0Z0fs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:7e:05:b6:c5:67:a8:e7:01:c0:3c:9b:f8:64:dd:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a38d1191f66f1f0315de5f45cc194d1cd19d1fb
        Validity
            Not Before: Oct 19 22:01:35 2025 GMT
            Not After : Oct 20 22:01:35 2025 GMT
        Subject: CN=41d6b4e626a64ee7d8b327451632b8fb2bedf5e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b8:5e:03:47:f7:4f:3c:fb:a5:60:8e:b8:61:
                    9c:35:51:b4:a7:77:a0:30:02:3c:55:b0:f1:28:8a:
                    19:85:4c:52:ba:56:1c:af:2b:63:dc:bc:45:e0:2e:
                    e0:da:cf:71:aa:4a:de:81:71:9f:6b:d6:ef:ef:e1:
                    3a:42:69:80:1f:30:3f:79:54:d6:6a:93:c6:4a:d4:
                    ec:db:7d:81:b3:59:d2:35:c0:79:15:8b:81:2a:26:
                    af:fb:d5:2d:07:d9:b9:d4:7b:de:a4:87:a4:2b:96:
                    5a:bf:12:69:d5:f0:92:ac:c2:66:f9:38:6c:d8:aa:
                    8b:e6:7a:a9:51:87:48:da:27:f4:37:ba:7d:12:95:
                    e6:6c:32:f6:38:d9:13:74:f4:c5:2e:cb:30:b0:96:
                    e7:e6:4b:07:6d:41:a2:47:d8:a7:73:d7:c9:0b:7e:
                    76:18:f2:a2:cf:4e:1b:39:90:ca:86:f2:72:35:19:
                    da:32:11:4c:6d:b9:5a:99:1a:88:7b:43:50:3e:d2:
                    05:96:53:10:5c:1a:7a:d5:0d:a1:5f:e9:35:16:82:
                    7d:a2:e2:58:b4:90:d9:03:fa:96:54:78:22:1e:6e:
                    2b:2a:80:a6:12:56:f7:0a:72:45:b7:28:58:0a:2a:
                    b1:ff:b7:07:b2:9b:ae:de:ee:7b:22:e3:8f:1c:cb:
                    86:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:D6:B4:E6:26:A6:4E:E7:D8:B3:27:45:16:32:B8:FB:2B:ED:F5:E3
            X509v3 Authority Key Identifier:
                keyid:8A:38:D1:19:1F:66:F1:F0:31:5D:E5:F4:5C:C1:94:D1:CD:19:D1:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ijjRGR9m8fAxXeX0XMGU0c0Z0fs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/87206f-33d0-4f33-b781-84f8fdc0c698/1/ijjRGR9m8fAxXeX0XMGU0c0Z0fs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/87206f-33d0-4f33-b781-84f8fdc0c698/1/ijjRGR9m8fAxXeX0XMGU0c0Z0fs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:ee:56:be:f7:4a:4d:3f:ff:c9:e4:8c:60:8f:51:a8:ed:27:
         b6:dc:0f:73:1b:71:1e:f6:93:9a:04:cd:f5:54:21:ac:99:7d:
         ea:20:ae:51:69:23:6c:3a:90:33:77:5d:12:27:d0:7b:8b:01:
         eb:3f:e7:e4:bd:f4:d6:e2:27:c9:ad:a9:6c:c0:b2:51:39:af:
         ff:42:3d:fb:49:fe:25:53:9a:21:e2:85:cd:9d:4e:af:ae:12:
         45:69:9c:0d:da:d9:48:7a:83:1f:ce:e9:cd:6a:c1:db:f7:2f:
         2a:fc:b9:25:1d:bb:89:1c:bd:cb:31:47:77:c5:0a:8f:4b:9a:
         68:92:f1:28:3c:4c:b2:0a:02:3c:45:f2:4f:bd:1e:f9:41:45:
         d5:8b:ba:4f:c0:db:ac:88:e5:e2:7e:aa:4e:0a:b0:c2:9f:d9:
         ee:44:c1:2b:12:36:7b:f9:53:0c:11:31:20:26:ec:ca:9c:25:
         b0:71:37:00:01:2f:aa:a2:67:aa:75:07:ee:93:7f:43:50:69:
         b8:ac:0e:4d:97:26:f7:6f:48:ad:4e:49:40:e3:58:46:15:6d:
         28:db:84:7f:99:76:31:55:b3:f8:79:b4:83:3c:c5:dd:68:5f:
         4e:03:35:ac:56:70:d5:37:f8:1b:46:36:6d:1f:78:2f:5f:2e:
         eb:2b:75:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:17:54 2025 by rpki-client