Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/455f56-1e6f-467d-b711-ebdf38b0095c/1/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.mft
File:                     9EYNZVTVgeu4DjnkUBXNfTbZP2Y.mft (raw, json)
Hash identifier:          Ewi+0Zkwox7PTkeqYuT2UeCcDMWKjvUagMnJ/LbA68o=
Subject key identifier:   B9:5A:0A:0F:74:C7:6A:F8:1B:53:30:1B:BA:7A:66:96:CD:C3:96:4A
Authority key identifier: F4:46:0D:65:54:D5:81:EB:B8:0E:39:E4:50:15:CD:7D:36:D9:3F:66
Certificate issuer:       /CN=f4460d6554d581ebb80e39e45015cd7d36d93f66
Certificate serial:       0199D0C964FF383AD1C204E3266335B33594
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/455f56-1e6f-467d-b711-ebdf38b0095c/1/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.mft
Manifest number:          16CB
Signing time:             Sat 11 Oct 2025 01:01:23 +0000
Manifest this update:     Sat 11 Oct 2025 01:01:23 +0000
Manifest next update:     Sun 12 Oct 2025 01:01:23 +0000
Files and hashes:         1: 9EYNZVTVgeu4DjnkUBXNfTbZP2Y.crl (hash: S1Hn87POG3hQVucoHPa7K0dErZsneX7WAhb/XAY1vTw=)
                          2: LlgzLPbqvndzjINwUyqBSYNVUGU.roa (hash: XoxwnbkJ+YTYL7TqUKVjhOHoVLZf5ofK0CZEjvcyK/8=)
                          3: PGS1oZw9diLKm80xvba4ttY7lOY.roa (hash: cvoGOrBt83PsBex3WYE3oC8O/LqiWSgJX37kVGMXEQ8=)
                          4: a9e6waB73R-2gGYR6nbP9rwuh8I.roa (hash: 1oI2gE9eJeYPxxdSHWs9WVzpaBQMrNDfnP1js7RW/p4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/455f56-1e6f-467d-b711-ebdf38b0095c/1/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/455f56-1e6f-467d-b711-ebdf38b0095c/1/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 12 Oct 2025 01:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:d0:c9:64:ff:38:3a:d1:c2:04:e3:26:63:35:b3:35:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4460d6554d581ebb80e39e45015cd7d36d93f66
        Validity
            Not Before: Oct 11 01:01:23 2025 GMT
            Not After : Oct 12 01:01:23 2025 GMT
        Subject: CN=b95a0a0f74c76af81b53301bba7a6696cdc3964a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:4b:72:9b:cb:de:c5:69:bb:85:0e:88:fc:b9:
                    c5:89:a5:a1:4c:12:a0:15:60:83:ec:47:c1:44:15:
                    fc:d9:2a:1e:51:4b:78:e7:3f:02:a8:e0:ff:0c:a1:
                    86:66:59:5f:24:41:ee:a8:d7:6b:73:24:b2:c1:72:
                    e7:23:8b:02:d8:91:54:de:7f:8f:48:3e:9c:d6:42:
                    bf:71:1e:c0:f9:6e:84:ef:67:5a:6b:69:06:95:6e:
                    7a:2f:a1:78:15:20:f0:b0:8d:29:c3:48:44:ad:03:
                    5b:4c:65:15:00:f4:c1:d6:37:65:c8:c5:92:ab:cb:
                    8b:23:09:90:59:b5:28:6a:9d:6b:05:65:4a:e2:f8:
                    6f:94:3d:7a:60:d4:b4:25:1a:5b:d2:b2:6c:f4:28:
                    4b:68:f4:97:a6:bb:94:3b:50:5c:08:98:65:5f:17:
                    2d:f0:9d:43:10:3c:1d:a6:e6:3a:e0:83:f1:32:b0:
                    af:fb:ae:90:a2:56:5a:05:02:25:b4:1b:c7:01:8b:
                    3e:16:83:47:93:88:01:67:3d:a0:62:2a:cc:7e:42:
                    32:51:56:59:f4:03:17:7c:14:e3:08:ed:81:b4:88:
                    3b:7c:cb:fd:a4:80:a5:19:ba:fa:05:df:ac:77:0e:
                    3a:ce:a0:22:51:d6:4a:63:37:e2:5e:3f:c5:ce:94:
                    32:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:5A:0A:0F:74:C7:6A:F8:1B:53:30:1B:BA:7A:66:96:CD:C3:96:4A
            X509v3 Authority Key Identifier:
                keyid:F4:46:0D:65:54:D5:81:EB:B8:0E:39:E4:50:15:CD:7D:36:D9:3F:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/455f56-1e6f-467d-b711-ebdf38b0095c/1/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/455f56-1e6f-467d-b711-ebdf38b0095c/1/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:67:82:ed:9d:c1:80:66:e3:f3:85:18:9a:3c:5e:75:b0:ad:
         52:16:c3:bc:f6:6d:9d:2c:9a:68:da:80:63:66:4c:61:cb:ae:
         6d:bd:36:64:83:ee:3f:7d:26:60:4a:78:72:4c:a6:bf:75:96:
         d4:be:e0:f3:33:d9:6d:e0:7a:0a:91:dd:2a:66:05:41:7e:ed:
         b6:d3:5c:8e:c5:65:0f:18:25:9e:28:75:f8:05:80:80:bf:05:
         1c:b8:0e:5a:cb:a4:53:60:ae:87:88:4b:7c:0c:0f:3a:00:22:
         c6:75:05:76:a6:35:d0:8c:1f:18:0d:79:79:59:71:64:d0:5f:
         97:a1:31:59:7b:85:42:bc:bd:50:8e:a0:3a:2f:4a:2f:47:ed:
         c1:0b:7c:7e:99:d4:fd:7f:8a:79:21:f4:d7:08:56:38:21:c0:
         7a:93:84:2d:58:82:ed:9f:5a:6c:88:69:12:45:63:8b:e8:b5:
         e8:d1:bc:fb:07:ea:28:f5:42:34:af:81:c5:a7:9b:08:f9:e0:
         8e:71:b8:65:f2:33:24:5d:f4:e2:f0:a1:a5:38:b9:d5:22:0d:
         37:ea:c0:8d:7b:21:67:cc:a9:37:63:9d:a8:b8:43:8a:32:4b:
         65:95:3c:40:fd:01:c6:fb:0b:7d:c5:5d:2e:5e:44:67:b8:6a:
         ef:fa:76:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 07:28:51 2025 by rpki-client