Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.mft
File:                     9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.mft (raw, json)
Hash identifier:          VYGO+w0/DgAhPPMb3sAYtXO6qXVq69CTJGyL3jIeRPA=
Subject key identifier:   32:71:B9:92:44:63:FE:02:43:8F:4E:82:32:9B:2F:DE:81:C0:51:F8
Authority key identifier: F6:95:4D:01:03:A7:A3:E6:52:35:4A:74:48:9F:86:DA:F9:A1:A5:9D
Certificate issuer:       /CN=f6954d0103a7a3e652354a74489f86daf9a1a59d
Certificate serial:       0199FAD81B86939D166378DBB1B8EE5F26A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.mft
Manifest number:          16E1
Signing time:             Sun 19 Oct 2025 05:01:30 +0000
Manifest this update:     Sun 19 Oct 2025 05:01:30 +0000
Manifest next update:     Mon 20 Oct 2025 05:01:30 +0000
Files and hashes:         1: 9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.crl (hash: yM5NA0uAprY5ooFiECpf/7+QM8SQ09HLzG3iSp5U/vE=)
                          2: gGwKnYfvhCn5nwp-acIqahsS3nA.roa (hash: Rj4EAnxstBQ29bzxEKAGqDAmg0fXQP5ck4gqOBpaqb4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 05:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:d8:1b:86:93:9d:16:63:78:db:b1:b8:ee:5f:26:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6954d0103a7a3e652354a74489f86daf9a1a59d
        Validity
            Not Before: Oct 19 05:01:30 2025 GMT
            Not After : Oct 20 05:01:30 2025 GMT
        Subject: CN=3271b9924463fe02438f4e82329b2fde81c051f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:3e:80:91:a1:3a:58:f6:36:a1:2f:4c:61:2c:
                    3b:f5:2a:80:89:ce:82:44:17:dc:85:12:dc:41:21:
                    f0:0d:55:18:dd:d6:39:73:e7:db:f2:06:a5:9f:4f:
                    f6:64:10:5b:13:3a:69:af:f8:b2:34:8e:f2:16:7f:
                    80:02:a4:32:2d:d6:6a:f1:8a:82:46:a1:e6:58:3f:
                    2f:86:73:fc:29:41:2f:74:df:9d:2d:c0:bb:92:28:
                    f7:8c:11:9e:4b:9e:d7:b9:4b:9e:d7:a8:45:00:4a:
                    74:24:9d:c5:b6:4b:9f:22:a0:f9:68:7e:5d:dd:38:
                    e2:24:78:1e:57:a8:50:6b:8b:48:79:d2:39:74:2e:
                    8a:eb:49:a7:d2:67:d4:89:96:37:e7:e1:26:95:f6:
                    73:d1:66:2f:39:9e:e6:e1:0f:72:ab:2d:83:91:71:
                    b1:13:57:bd:6b:97:89:c6:e7:e9:84:c9:0b:3e:35:
                    fa:34:bb:fd:b9:ab:82:fc:78:22:25:f7:07:c5:98:
                    c2:e7:04:96:4e:41:33:69:1d:0e:86:99:73:0c:1e:
                    ef:0e:a1:f7:46:82:57:bb:37:8b:f4:2b:e4:f3:73:
                    a2:af:f3:59:7d:c2:dd:ee:9a:c3:f1:ed:53:3e:de:
                    d6:f4:a7:18:08:73:c3:5b:3f:8d:7a:91:76:a6:62:
                    cf:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:71:B9:92:44:63:FE:02:43:8F:4E:82:32:9B:2F:DE:81:C0:51:F8
            X509v3 Authority Key Identifier:
                keyid:F6:95:4D:01:03:A7:A3:E6:52:35:4A:74:48:9F:86:DA:F9:A1:A5:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:f4:2c:e7:63:c6:50:16:35:fc:bc:4a:d0:9e:36:d3:d7:19:
         e7:21:1d:c8:d7:b1:93:30:b0:4d:a6:80:43:f8:c7:f5:f4:e5:
         99:78:9a:a5:10:ef:1c:fb:90:1e:48:4c:f4:f9:e9:30:10:e2:
         59:54:c4:7c:f0:2d:7b:e5:b8:4a:35:ef:a2:a2:e5:9d:c2:28:
         17:f7:25:30:df:55:a9:cd:ed:b1:fd:ce:5d:be:ca:c8:7e:22:
         b6:7d:d2:1c:c5:e5:de:99:4c:8e:35:32:f3:be:2d:f6:d7:03:
         d5:69:f6:49:ca:19:95:f6:5b:dd:77:2a:a2:24:95:9b:65:bc:
         4e:70:58:1c:03:b5:03:35:c0:ca:10:a4:74:75:15:49:e0:d9:
         01:44:69:38:99:3e:bf:e1:6f:58:9f:bc:6c:bd:92:44:86:7a:
         fe:25:b3:83:8a:f2:fd:01:6c:df:60:66:66:d4:79:da:7a:64:
         94:33:7d:81:88:31:53:01:84:a2:15:d2:a2:92:22:03:4e:fe:
         b1:aa:17:8d:b6:dd:9d:fc:b9:63:6b:c6:44:37:bd:bc:a8:b1:
         81:ce:6b:4c:d5:50:16:6f:ac:ac:99:ea:75:67:6e:cf:5d:eb:
         b0:d6:ff:08:37:75:79:74:19:a8:5a:d0:6e:b8:cb:7e:14:c7:
         23:11:e4:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:10:28 2025 by rpki-client