Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/d1a717-4cf3-4ae5-b0fc-0bd9ddf3970e/1/jYkvTe2SJX5nunTxdiyLyRTr1hw.mft
File:                     jYkvTe2SJX5nunTxdiyLyRTr1hw.mft (raw, json)
Hash identifier:          8h3nyj2nF4RPtRvO+u4EDqXRT4gqmjsZlw82Fa/eaYw=
Subject key identifier:   E9:7D:53:E3:9F:9B:C6:E7:EB:A7:79:A8:63:FA:B8:D7:93:DB:E4:6C
Authority key identifier: 8D:89:2F:4D:ED:92:25:7E:67:BA:74:F1:76:2C:8B:C9:14:EB:D6:1C
Certificate issuer:       /CN=8d892f4ded92257e67ba74f1762c8bc914ebd61c
Certificate serial:       0199FB461DF7DDFDA4EC680CB3A63437152F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jYkvTe2SJX5nunTxdiyLyRTr1hw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/d1a717-4cf3-4ae5-b0fc-0bd9ddf3970e/1/jYkvTe2SJX5nunTxdiyLyRTr1hw.mft
Manifest number:          16E6
Signing time:             Sun 19 Oct 2025 07:01:40 +0000
Manifest this update:     Sun 19 Oct 2025 07:01:40 +0000
Manifest next update:     Mon 20 Oct 2025 07:01:40 +0000
Files and hashes:         1: 8DFREsz67roq72EhqNj788hY8vo.roa (hash: 0z/SHGgj6DLr9WZ0vWVXRQYl+WMBwxnXd13RzpBpoyE=)
                          2: gYXXaClMotLbmJoUOleGHhnd0Lw.roa (hash: FBHlvCazQHDRqfw7wpw/U/KCEUCJ9oh5ACEVfJCqvj4=)
                          3: jYkvTe2SJX5nunTxdiyLyRTr1hw.crl (hash: GJeb4pAC2T34RMsZmwyx7efC2kudPM6VfPHgDGiXvNw=)
                          4: qbA_9GdwQHPtmS9g6PrCyj74AbM.roa (hash: bivTcz5xx7Jgw1fjpQZeDQON5L3d9aNyp2TKXc5yy2A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/d1a717-4cf3-4ae5-b0fc-0bd9ddf3970e/1/jYkvTe2SJX5nunTxdiyLyRTr1hw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/d1a717-4cf3-4ae5-b0fc-0bd9ddf3970e/1/jYkvTe2SJX5nunTxdiyLyRTr1hw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jYkvTe2SJX5nunTxdiyLyRTr1hw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:46:1d:f7:dd:fd:a4:ec:68:0c:b3:a6:34:37:15:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d892f4ded92257e67ba74f1762c8bc914ebd61c
        Validity
            Not Before: Oct 19 07:01:40 2025 GMT
            Not After : Oct 20 07:01:40 2025 GMT
        Subject: CN=e97d53e39f9bc6e7eba779a863fab8d793dbe46c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ee:81:3a:4c:b1:23:00:58:78:dd:d1:52:2f:
                    61:d8:89:47:dd:f6:07:0a:86:73:e0:8f:12:dc:57:
                    1c:80:e1:52:2d:de:ce:4d:05:83:05:14:a4:9e:5b:
                    34:e7:96:c1:b4:9f:c9:e2:2f:88:74:17:72:e4:12:
                    f8:7f:3a:58:a1:88:52:56:65:05:e1:4e:9f:f5:e4:
                    73:0c:b4:7e:3d:cd:9c:7d:af:0f:c1:7a:fd:b5:a7:
                    09:e8:cf:ca:5c:bd:38:86:32:09:f0:0c:34:c8:0c:
                    64:a8:cb:b3:93:d5:c3:55:57:c7:ca:61:d1:96:c2:
                    b4:c4:37:7e:b2:2d:40:ca:b5:3b:93:60:e6:86:00:
                    92:f5:1f:62:bb:d6:32:2c:b1:77:f6:3e:04:31:fd:
                    c8:e7:39:28:10:cc:6a:76:a8:e0:b7:92:94:b5:2c:
                    b8:68:3f:c6:5f:7c:0e:8c:fa:7b:38:d0:5f:91:40:
                    f5:0b:78:89:98:5b:4d:3a:d6:9b:24:aa:6d:66:81:
                    62:2b:38:97:1f:02:8e:f2:5b:e9:b1:2f:b7:75:26:
                    b4:ef:7e:89:f5:2f:be:e3:90:2a:8a:a2:ce:11:0b:
                    7c:39:ca:c2:f7:eb:e0:a6:66:c4:57:67:1e:10:5b:
                    ae:da:aa:bb:01:00:6e:37:a6:a8:fd:14:38:6e:cb:
                    a9:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:7D:53:E3:9F:9B:C6:E7:EB:A7:79:A8:63:FA:B8:D7:93:DB:E4:6C
            X509v3 Authority Key Identifier:
                keyid:8D:89:2F:4D:ED:92:25:7E:67:BA:74:F1:76:2C:8B:C9:14:EB:D6:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYkvTe2SJX5nunTxdiyLyRTr1hw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/d1a717-4cf3-4ae5-b0fc-0bd9ddf3970e/1/jYkvTe2SJX5nunTxdiyLyRTr1hw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/d1a717-4cf3-4ae5-b0fc-0bd9ddf3970e/1/jYkvTe2SJX5nunTxdiyLyRTr1hw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:5f:42:77:e9:84:ef:c2:8d:3c:c0:f8:d6:9d:4c:78:25:e8:
         eb:e3:52:5c:10:83:82:14:57:95:80:cd:d0:53:a3:6b:a1:cd:
         a1:74:d5:3c:1e:7f:5c:65:24:1e:0f:e1:a6:78:5d:59:a2:60:
         b0:1c:92:2c:47:e7:cd:de:6a:03:e1:bd:37:ce:bf:aa:24:7c:
         88:84:1f:d5:51:c0:1c:9d:86:50:8d:dd:56:38:f0:8c:4f:06:
         d1:a2:3d:08:e5:08:ca:2c:83:8f:03:7a:f5:4e:7d:bc:74:78:
         58:f7:f3:0f:a8:58:c4:41:0a:0a:de:73:6b:53:8a:a3:1c:45:
         ad:ba:ea:5f:5d:68:72:67:5b:7a:c3:a1:e2:3f:bf:0f:b9:3b:
         cc:f6:bf:e3:09:0b:ce:60:fc:a8:a5:d9:d2:b7:49:dd:9e:eb:
         7d:f3:dc:f8:b1:35:3b:9c:b8:75:e5:f4:0e:c1:eb:78:93:fc:
         4f:3b:fb:49:f7:1b:c0:22:a2:91:ce:3c:76:27:cc:8f:7f:84:
         2f:5d:de:9c:8b:60:61:67:ab:09:82:aa:a3:30:b6:23:6a:b0:
         be:2f:18:a7:86:b5:12:5d:3f:1c:88:38:e7:f6:8a:61:43:5c:
         24:7a:5f:14:7f:f6:a3:c7:ca:f9:c3:df:17:90:d3:19:65:cb:
         9f:24:54:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:18:39 2025 by rpki-client