Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/njUz1mLD8Na7HmkvP6tte6OCTCg.mft
File:                     njUz1mLD8Na7HmkvP6tte6OCTCg.mft (raw, json)
Hash identifier:          W4VfLHtPpfsiAIKCpeWbI9DXt5qYnQP8w2tGyhLqg+s=
Subject key identifier:   6A:82:4D:52:5A:54:D7:73:ED:29:B9:C5:D1:6E:E1:55:4E:B0:D2:F3
Authority key identifier: 9E:35:33:D6:62:C3:F0:D6:BB:1E:69:2F:3F:AB:6D:7B:A3:82:4C:28
Certificate issuer:       /CN=9e3533d662c3f0d6bb1e692f3fab6d7ba3824c28
Certificate serial:       0199C2319483A75F0C77D3625BC94E57E406
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/njUz1mLD8Na7HmkvP6tte6OCTCg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/njUz1mLD8Na7HmkvP6tte6OCTCg.mft
Manifest number:          1682
Signing time:             Wed 08 Oct 2025 05:00:53 +0000
Manifest this update:     Wed 08 Oct 2025 05:00:53 +0000
Manifest next update:     Thu 09 Oct 2025 05:00:53 +0000
Files and hashes:         1: RBsyWLfZJ_zLx9s-cNB-ptFfujg.roa (hash: IyFw4v8rAxvkA10wGK9XNcDIKqaq/q2xa7mB4hR4CMY=)
                          2: Zi1iA2N22K6D1EqWuXGSwJbaToE.roa (hash: zSMKFbT/uwlzQj5z6cjWhjz6p9cPAfNZU2ZZ9FmRbIU=)
                          3: jgu3roXa-ppD5Voc7wD-A3FJYsA.roa (hash: IK8p6mGX+CwHf/aA4cC2k9uGzhRGeTYhI8MfPoXscu0=)
                          4: njUz1mLD8Na7HmkvP6tte6OCTCg.crl (hash: EgfESHk9VUYdk5bHSOZYL2Sh8JAUVTGTE8IZWs5yA2w=)
                          5: ogrehkPhRYBIB8kBlw0NNeumFUg.roa (hash: EbaU2xzh9VEPxkQPiv8RpsHH8ML6jMtFQNE2GPC6Bk4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/njUz1mLD8Na7HmkvP6tte6OCTCg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/njUz1mLD8Na7HmkvP6tte6OCTCg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/njUz1mLD8Na7HmkvP6tte6OCTCg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 09 Oct 2025 05:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:c2:31:94:83:a7:5f:0c:77:d3:62:5b:c9:4e:57:e4:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e3533d662c3f0d6bb1e692f3fab6d7ba3824c28
        Validity
            Not Before: Oct  8 05:00:53 2025 GMT
            Not After : Oct  9 05:00:53 2025 GMT
        Subject: CN=6a824d525a54d773ed29b9c5d16ee1554eb0d2f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:7a:a4:a4:83:75:5b:3a:e4:29:af:26:15:ee:
                    9a:90:a9:36:c6:a3:30:94:7f:53:dd:f9:5d:9b:a3:
                    c7:7b:2a:f5:f6:c3:88:9a:d8:e6:30:65:ac:93:98:
                    68:7d:c7:f2:aa:01:81:2a:51:02:9c:7f:9d:7e:2c:
                    53:2d:60:1f:02:11:6f:7a:59:f8:13:52:0d:29:2b:
                    90:8f:de:6a:41:dd:82:aa:ae:70:85:5e:ce:a1:12:
                    d6:19:13:c3:b1:d7:90:dc:f7:e1:d3:6f:39:a4:31:
                    1f:33:c6:66:f5:35:9f:0a:26:54:d5:f7:fa:1e:f4:
                    c1:a2:6e:a4:95:42:85:40:60:79:9d:3c:4b:4e:9c:
                    4c:66:6a:22:f4:3a:93:1d:48:67:d5:d1:ed:a9:3b:
                    11:3b:7e:a9:72:c7:18:bc:43:f5:fd:38:ef:35:d0:
                    75:87:9a:ed:a0:6a:36:af:ec:8a:6a:d7:1e:64:ee:
                    93:66:6a:60:6e:b0:6f:04:14:13:2f:3d:16:ac:c2:
                    e8:32:3b:ea:7d:a1:28:b4:b0:a3:d0:f5:f9:3c:bb:
                    48:8e:13:d2:ff:df:20:25:a3:38:4d:84:09:cc:6d:
                    67:4f:f8:bd:ee:d8:72:2e:5c:84:0f:61:10:3f:0c:
                    7c:cd:f2:20:94:5e:8c:4c:0e:aa:b8:ac:b9:65:8a:
                    35:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:82:4D:52:5A:54:D7:73:ED:29:B9:C5:D1:6E:E1:55:4E:B0:D2:F3
            X509v3 Authority Key Identifier:
                keyid:9E:35:33:D6:62:C3:F0:D6:BB:1E:69:2F:3F:AB:6D:7B:A3:82:4C:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njUz1mLD8Na7HmkvP6tte6OCTCg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/njUz1mLD8Na7HmkvP6tte6OCTCg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/njUz1mLD8Na7HmkvP6tte6OCTCg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:f3:5e:3c:5b:e9:ed:9c:bc:90:d7:08:a7:08:a5:8e:47:e7:
         c6:3a:a6:92:2a:18:a2:52:9e:0a:31:ea:c6:f2:d6:69:54:9c:
         dc:51:e6:96:28:1f:68:08:c9:93:59:42:d8:44:bf:9c:ab:0b:
         92:ed:e8:4a:ad:0a:5d:09:89:be:29:49:0e:92:58:59:81:35:
         89:bb:4c:3b:b0:b2:57:be:d2:62:4a:e0:2d:74:bc:67:a3:71:
         4b:bc:ac:55:b3:23:c1:12:30:8e:ff:12:a1:53:80:1c:20:c0:
         bc:ce:86:bb:a7:7f:c5:c0:ce:81:93:5b:5b:36:97:ac:d7:0d:
         20:96:19:0b:fd:8c:d0:48:85:c8:18:25:50:57:29:ed:b4:45:
         df:3b:c6:81:b0:b5:bb:03:25:1e:b8:7a:51:b5:9b:ab:be:b9:
         50:40:a0:4f:c9:53:56:cd:35:a1:6c:43:57:bc:de:5a:81:b4:
         f6:6b:d0:c3:8b:3a:d6:58:f5:d7:96:36:71:0b:a6:59:1c:43:
         74:c3:54:03:2b:0a:4d:51:32:5d:9c:d6:04:b8:ed:52:06:4a:
         f7:6a:e1:9e:3e:da:31:7f:3d:25:c3:19:e0:05:2d:94:a2:a3:
         b9:6a:6d:56:5c:32:b7:4f:b9:1e:89:d1:c6:a8:0a:08:c7:c2:
         45:b4:91:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 13:39:49 2025 by rpki-client