Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f30d2b-2abd-4872-b17e-fbdf94a11e6f/1/c9-R-zxozrhlDuGaY85As8WSpWs.mft
File:                     c9-R-zxozrhlDuGaY85As8WSpWs.mft (raw, json)
Hash identifier:          xJXiRSUZMR3u8Z+pgbaBXn+lYSYvMBPBuFEw+faZ3FI=
Subject key identifier:   3C:88:A5:C8:7D:97:82:4C:02:3A:01:CE:33:F6:D5:2C:CB:97:31:5F
Authority key identifier: 73:DF:91:FB:3C:68:CE:B8:65:0E:E1:9A:63:CE:40:B3:C5:92:A5:6B
Certificate issuer:       /CN=73df91fb3c68ceb8650ee19a63ce40b3c592a56b
Certificate serial:       0199FBEC12E153C764CEBE469096CBC406F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c9-R-zxozrhlDuGaY85As8WSpWs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/f30d2b-2abd-4872-b17e-fbdf94a11e6f/1/c9-R-zxozrhlDuGaY85As8WSpWs.mft
Manifest number:          16DB
Signing time:             Sun 19 Oct 2025 10:02:56 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:56 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:56 +0000
Files and hashes:         1: 0amjr-ykBDXEbQi_cMXvoQKh8bk.roa (hash: pJpLLUDDlGjGkAROaE4HmHEdylVREbndXEfDAHQqlPs=)
                          2: c9-R-zxozrhlDuGaY85As8WSpWs.crl (hash: ER0mj63+fpEsKkp/AwkbySgF+b04QJgilX12NyEiKgE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/f30d2b-2abd-4872-b17e-fbdf94a11e6f/1/c9-R-zxozrhlDuGaY85As8WSpWs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/f30d2b-2abd-4872-b17e-fbdf94a11e6f/1/c9-R-zxozrhlDuGaY85As8WSpWs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c9-R-zxozrhlDuGaY85As8WSpWs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:ec:12:e1:53:c7:64:ce:be:46:90:96:cb:c4:06:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73df91fb3c68ceb8650ee19a63ce40b3c592a56b
        Validity
            Not Before: Oct 19 10:02:56 2025 GMT
            Not After : Oct 20 10:02:56 2025 GMT
        Subject: CN=3c88a5c87d97824c023a01ce33f6d52ccb97315f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:f0:c6:4f:f6:a9:71:ff:35:7d:72:90:51:2e:
                    a6:c3:5c:70:ae:fe:3d:cf:13:b8:36:03:46:d4:43:
                    67:66:60:15:16:68:37:e3:41:2a:17:f1:b7:64:9a:
                    0c:47:06:00:d1:85:02:99:cc:ed:61:09:f8:65:e7:
                    d7:57:9e:74:9c:9c:46:a2:4b:e7:a4:4b:50:be:dd:
                    51:68:ac:ba:19:f4:b1:66:ba:d6:2b:bf:d5:10:86:
                    96:dc:b2:65:29:02:51:15:05:e7:42:c3:62:67:6e:
                    40:90:36:90:44:8a:d7:7b:12:3a:fe:e2:e7:6e:f7:
                    b8:80:62:ed:d4:28:56:29:80:1a:da:24:f5:ec:0f:
                    68:fc:fd:24:8b:90:82:36:79:43:c9:d2:ab:a4:95:
                    aa:06:7d:d0:77:ad:40:96:58:65:89:cd:8b:67:03:
                    fc:bc:63:85:8f:f1:75:31:ea:59:57:f7:34:60:91:
                    23:f7:38:4c:95:29:1b:68:56:a8:55:95:66:7a:cf:
                    1e:27:ff:41:37:73:50:ff:cd:62:51:f5:97:b6:3d:
                    f9:2b:de:58:39:2d:68:79:22:8e:fc:f9:e3:74:0f:
                    b0:eb:02:e2:33:36:62:74:f3:50:ab:b0:d6:32:47:
                    90:a3:c1:e7:bd:98:7b:38:5b:1e:62:b0:b5:df:21:
                    fd:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:88:A5:C8:7D:97:82:4C:02:3A:01:CE:33:F6:D5:2C:CB:97:31:5F
            X509v3 Authority Key Identifier:
                keyid:73:DF:91:FB:3C:68:CE:B8:65:0E:E1:9A:63:CE:40:B3:C5:92:A5:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9-R-zxozrhlDuGaY85As8WSpWs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f30d2b-2abd-4872-b17e-fbdf94a11e6f/1/c9-R-zxozrhlDuGaY85As8WSpWs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f30d2b-2abd-4872-b17e-fbdf94a11e6f/1/c9-R-zxozrhlDuGaY85As8WSpWs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:22:26:f2:13:36:17:6a:e8:96:24:ca:e9:73:f4:48:80:c2:
         db:f4:3f:18:06:1d:3d:9e:3d:86:51:e3:62:ee:7d:d0:47:11:
         32:6d:65:74:f3:db:f8:40:7e:6b:59:eb:3d:ca:f8:50:86:b9:
         ea:8f:f5:91:0a:e1:01:22:11:09:33:0b:0a:cb:48:29:b2:cd:
         36:66:aa:94:75:12:d0:48:2f:0d:87:79:63:d4:b0:5a:93:92:
         24:59:a1:f5:a1:4b:db:c7:b7:73:c4:15:49:1d:97:0d:d5:31:
         ae:92:b1:88:e9:3b:77:0e:cc:54:e8:ce:c8:1d:a1:8c:8c:d6:
         ce:16:a2:b1:6c:70:97:8e:74:0f:90:c5:93:a1:d7:82:24:96:
         8b:ad:11:a3:9d:70:b3:23:0d:50:3c:58:ec:b4:a8:3f:8a:ba:
         79:31:13:dd:a0:3f:ca:22:05:73:06:38:88:40:53:2e:ac:0a:
         eb:a3:31:c5:b2:b1:64:3e:05:e2:46:23:e2:03:05:7a:0a:3f:
         bd:8d:57:58:00:b7:30:9b:87:81:e5:1c:ce:9b:47:ec:cd:d1:
         49:52:55:e3:e6:9c:76:ca:c1:e1:c6:c5:62:d0:08:95:64:27:
         e7:ca:a2:73:8c:63:5e:36:68:9d:7e:63:8d:cf:79:c1:b3:d1:
         8c:42:70:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:18:32 2025 by rpki-client