Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/e1b84b-39a6-4ac8-be63-30fee27e84cb/1/J_UYD5uTrnVzwIqJS9RSvXfOVs0.mft
File:                     J_UYD5uTrnVzwIqJS9RSvXfOVs0.mft (raw, json)
Hash identifier:          dhMCS6jmfJ2NZt6WbsTcsyKXNtc1fBUXSiBKhQlR4vM=
Subject key identifier:   18:16:7C:F3:1F:46:DB:80:8F:A0:AF:7C:D6:4C:AF:48:96:3E:AB:E8
Authority key identifier: 27:F5:18:0F:9B:93:AE:75:73:C0:8A:89:4B:D4:52:BD:77:CE:56:CD
Certificate issuer:       /CN=27f5180f9b93ae7573c08a894bd452bd77ce56cd
Certificate serial:       0199FBEAC6D86C465A3A0D950452DC6BDDDA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J_UYD5uTrnVzwIqJS9RSvXfOVs0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/e1b84b-39a6-4ac8-be63-30fee27e84cb/1/J_UYD5uTrnVzwIqJS9RSvXfOVs0.mft
Manifest number:          16E1
Signing time:             Sun 19 Oct 2025 10:01:31 +0000
Manifest this update:     Sun 19 Oct 2025 10:01:31 +0000
Manifest next update:     Mon 20 Oct 2025 10:01:31 +0000
Files and hashes:         1: 1Up92kLaciflZCGF6thZ6O_2gb4.roa (hash: MZjlg+hjkFznVUD2gKvbQop6qeX1ypK906BpNhUjgLA=)
                          2: JDa6SY9OudTO59Luwi4g9XuH-5g.roa (hash: 9WJ0L7baOHSNBgfr0oc7eP1UiTVZAMhpoL/3V6eL10k=)
                          3: J_UYD5uTrnVzwIqJS9RSvXfOVs0.crl (hash: 6aiJQ/JhDJc8VTDk7B/xlIxqPBpCKhEdqUNEoNRS1aY=)
                          4: UjdRg-4YFjoxl_g8YXlmvQbDI8A.roa (hash: rgWrNq7qmzpWB8PQIHq/XPPdpuoL1N7tYUChf7PYf28=)
                          5: cvzTz2OXBB_yidJBNxcXZxwYdrY.roa (hash: YVNb7JT5aj8Grywf7uIQmWk7NHgm3JKfDMAhwde/BcQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/e1b84b-39a6-4ac8-be63-30fee27e84cb/1/J_UYD5uTrnVzwIqJS9RSvXfOVs0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/e1b84b-39a6-4ac8-be63-30fee27e84cb/1/J_UYD5uTrnVzwIqJS9RSvXfOVs0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J_UYD5uTrnVzwIqJS9RSvXfOVs0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:ea:c6:d8:6c:46:5a:3a:0d:95:04:52:dc:6b:dd:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27f5180f9b93ae7573c08a894bd452bd77ce56cd
        Validity
            Not Before: Oct 19 10:01:31 2025 GMT
            Not After : Oct 20 10:01:31 2025 GMT
        Subject: CN=18167cf31f46db808fa0af7cd64caf48963eabe8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b3:99:d3:e6:51:53:81:81:29:2f:db:87:b2:
                    fc:34:05:f6:a6:c8:74:ef:74:09:7b:cc:cf:1e:b6:
                    f8:1d:1a:a2:4d:68:d9:e8:22:10:de:51:00:7a:1e:
                    e4:86:08:84:ce:06:12:5f:05:c6:c1:e6:ce:e7:b9:
                    3e:cc:e6:e8:a4:ab:0f:27:a0:06:73:1b:87:ef:82:
                    72:35:99:45:15:a2:c1:20:91:3f:7d:5a:2f:70:d0:
                    24:f5:9d:92:25:b4:0c:62:87:51:75:97:67:98:16:
                    44:34:06:92:2a:cf:53:47:3f:3e:e6:6b:6f:45:6e:
                    f0:1a:95:0d:ae:86:a0:87:5f:29:b6:98:67:af:e1:
                    cc:c8:be:c6:7a:e1:80:42:39:eb:2e:58:02:fe:db:
                    28:22:84:93:55:3e:d3:f2:5b:fb:46:10:81:fa:0d:
                    52:a9:51:4b:87:bd:7f:fc:b2:53:b1:f4:4a:39:6a:
                    38:32:79:03:63:57:9f:ab:d3:7b:ff:a3:e2:5a:a6:
                    56:c3:f3:70:8c:b8:5b:f7:73:8d:fa:40:19:f4:49:
                    39:64:ab:bc:40:32:dd:1c:b7:4e:30:a3:f8:54:6e:
                    60:c8:96:f0:d8:66:d8:e2:3d:75:bd:63:a0:b5:1e:
                    c5:f6:8e:2b:c9:4a:a4:77:fb:fe:22:95:c8:e8:08:
                    dc:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:16:7C:F3:1F:46:DB:80:8F:A0:AF:7C:D6:4C:AF:48:96:3E:AB:E8
            X509v3 Authority Key Identifier:
                keyid:27:F5:18:0F:9B:93:AE:75:73:C0:8A:89:4B:D4:52:BD:77:CE:56:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_UYD5uTrnVzwIqJS9RSvXfOVs0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e1b84b-39a6-4ac8-be63-30fee27e84cb/1/J_UYD5uTrnVzwIqJS9RSvXfOVs0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e1b84b-39a6-4ac8-be63-30fee27e84cb/1/J_UYD5uTrnVzwIqJS9RSvXfOVs0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:8d:2c:08:c1:be:b6:19:98:5e:1d:d1:fc:aa:a3:cb:fd:20:
         a2:c8:da:c3:3c:0e:88:20:eb:69:38:80:f6:80:d2:f6:0f:1f:
         03:d9:18:56:17:ec:ab:25:cb:4e:04:8e:3a:cf:de:c8:fb:6c:
         9d:82:e4:f0:10:e1:8e:47:9b:e4:b3:94:9f:09:25:9b:fc:52:
         6b:59:e4:58:22:e2:42:0d:63:4e:ec:54:b7:77:34:5c:2f:25:
         24:95:e8:20:71:6d:01:00:fa:89:f7:05:20:bc:aa:b5:21:f6:
         60:7f:39:42:75:b4:10:8d:fa:e7:5d:77:de:72:a0:f9:06:9a:
         42:32:f3:49:1c:ac:69:fd:79:c5:86:a1:1e:7c:bf:08:e6:48:
         81:69:32:24:bb:9f:f2:2c:3c:42:ed:24:ec:96:a5:37:45:0f:
         2a:ae:9c:d1:9f:bc:7e:0c:ed:f8:88:73:6b:f2:73:30:47:2e:
         84:cb:3e:22:66:6d:93:56:1e:8d:a2:70:18:c4:c9:74:f1:84:
         67:ad:78:02:33:f9:bd:46:93:e8:30:c1:cd:17:84:2f:5d:56:
         bb:06:6a:87:b6:59:26:5a:36:04:6e:2d:3a:9b:26:01:5d:aa:
         40:fe:c1:12:85:2f:6b:6b:91:ab:dc:05:c7:b9:d9:dd:b2:32:
         4b:73:e8:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 12:53:59 2025 by rpki-client