Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/j9V6dd1-lSvuKDk11t8pJdKCoHA.mft
File:                     j9V6dd1-lSvuKDk11t8pJdKCoHA.mft (raw, json)
Hash identifier:          bUpNXVGL5/AfmRPvZZKrM6lqUvmMGwms2x4GS1d6/V0=
Subject key identifier:   F1:53:4E:14:20:BE:58:AB:99:74:0C:03:06:82:4C:2A:F8:18:8C:9A
Authority key identifier: 8F:D5:7A:75:DD:7E:95:2B:EE:28:39:35:D6:DF:29:25:D2:82:A0:70
Certificate issuer:       /CN=8fd57a75dd7e952bee283935d6df2925d282a070
Certificate serial:       019A4BBC22087639A0EB6C8ADBEB73BDE970
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j9V6dd1-lSvuKDk11t8pJdKCoHA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/j9V6dd1-lSvuKDk11t8pJdKCoHA.mft
Manifest number:          1693
Signing time:             Mon 03 Nov 2025 22:00:11 +0000
Manifest this update:     Mon 03 Nov 2025 22:00:11 +0000
Manifest next update:     Tue 04 Nov 2025 22:00:11 +0000
Files and hashes:         1: A5Jsn1QSnz-hxnUHcHxtoBZXHyo.roa (hash: klrrdXVAOvLHpaQGMknKIRZ8jovgw0eH+IforAZMakg=)
                          2: _prKn4bJAQ2Jee3ta1lkMe8_sQo.roa (hash: 8Cw2sdwKWxygydE0VIIscbH3iidJfqh/XAxj8LV8IDE=)
                          3: j9V6dd1-lSvuKDk11t8pJdKCoHA.crl (hash: biplLB+GeNVtaIMeYTzNTRQK11oEUqdzYgOIxJPKe2s=)
                          4: lbjTPVJ8kMvq3D8tJBgeH8kXbO8.roa (hash: BXtNNVlgkc0/uCoLqqdZlugtN8CvJ987BUdYlHkO6J4=)
                          5: rM1Y2sEPJhDAcT03hS-KCRgpepQ.roa (hash: wYDQoNr38fN2VMwFRW0HV9EWF7i5Q9UBwcXGGYjLePQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/j9V6dd1-lSvuKDk11t8pJdKCoHA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/j9V6dd1-lSvuKDk11t8pJdKCoHA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j9V6dd1-lSvuKDk11t8pJdKCoHA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 04 Nov 2025 20:30:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4b:bc:22:08:76:39:a0:eb:6c:8a:db:eb:73:bd:e9:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fd57a75dd7e952bee283935d6df2925d282a070
        Validity
            Not Before: Nov  3 22:00:11 2025 GMT
            Not After : Nov  4 22:00:11 2025 GMT
        Subject: CN=f1534e1420be58ab99740c0306824c2af8188c9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:be:ff:0d:c6:1c:a1:72:98:cc:65:0b:39:ba:
                    14:8f:26:79:37:02:44:8e:31:31:4c:5a:c7:54:2b:
                    74:da:e3:73:8b:4f:6b:ec:a7:c9:6a:e4:75:67:5d:
                    21:01:61:42:e5:54:b5:35:8c:c0:c8:8f:1e:af:83:
                    cf:13:ff:be:92:95:a0:7d:87:89:28:98:36:16:ae:
                    ed:c8:3b:53:79:32:48:5b:de:02:83:ea:ab:f9:c5:
                    50:2b:56:82:c3:3a:1c:93:34:ba:33:4f:b0:5d:19:
                    87:1a:9d:da:8a:2c:95:3e:e3:b1:6a:6f:d6:06:5a:
                    18:c7:f7:9c:b4:4c:44:98:0a:16:1e:9c:cf:7c:04:
                    37:89:d9:f1:4d:91:18:32:a1:8b:c8:23:24:de:be:
                    8b:da:65:c1:05:e4:5c:37:9c:29:0c:ba:f5:a3:b2:
                    95:f8:b1:d4:d8:44:b4:da:d2:66:0f:01:07:4d:16:
                    d2:6d:ef:3d:a1:43:d9:75:7c:63:ff:11:ec:98:8a:
                    d3:d5:8b:88:5e:a8:57:1a:1f:78:88:4e:3b:97:e4:
                    ba:96:7a:33:6b:34:d2:04:e8:5e:08:24:12:34:78:
                    2c:30:91:b2:e4:0d:23:9e:c7:fc:83:7d:3d:f2:cb:
                    e6:c1:3e:6f:80:60:b6:9a:44:45:18:03:e3:38:46:
                    a9:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:53:4E:14:20:BE:58:AB:99:74:0C:03:06:82:4C:2A:F8:18:8C:9A
            X509v3 Authority Key Identifier:
                keyid:8F:D5:7A:75:DD:7E:95:2B:EE:28:39:35:D6:DF:29:25:D2:82:A0:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j9V6dd1-lSvuKDk11t8pJdKCoHA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/j9V6dd1-lSvuKDk11t8pJdKCoHA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/j9V6dd1-lSvuKDk11t8pJdKCoHA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:f2:1d:21:54:71:91:ad:f9:f5:9c:a4:33:3b:9a:35:0a:dc:
         80:86:7d:79:0e:21:96:0b:c9:98:48:3a:55:4a:9e:47:9a:92:
         61:52:5f:03:56:a5:b1:87:48:0a:2f:fe:a7:d5:68:66:01:2d:
         a6:a0:cc:b0:af:48:06:39:64:3b:66:c2:d8:fd:8b:c9:a7:5e:
         3d:46:13:e0:1e:81:db:42:2c:84:74:b7:0a:22:b9:5c:07:ed:
         65:7f:7e:d9:ee:29:e0:65:45:c6:83:6c:59:14:cc:bd:52:25:
         4b:af:2d:56:e3:a5:94:0c:b1:3f:04:ee:32:34:99:9a:70:f5:
         de:13:97:48:f0:44:b1:81:25:6d:fc:6d:ea:6f:a5:aa:a0:07:
         3e:05:2f:0c:41:6b:99:f8:14:aa:a2:54:a9:55:36:80:80:1b:
         a9:5b:4e:d2:32:03:a9:85:d2:1c:26:e2:d7:4c:eb:4c:ef:63:
         43:4a:56:5e:27:e4:ed:89:24:cd:86:62:d3:e9:37:7d:a4:3b:
         92:4f:33:62:80:2a:31:a7:10:15:91:f0:14:8a:c5:06:37:b2:
         87:0a:ad:9e:0b:ab:b0:d6:33:a8:5c:0a:a1:06:55:28:9f:68:
         b2:4d:7c:21:9e:4c:ad:a1:3d:d3:3d:5c:11:1a:74:1d:2f:ae:
         4c:ff:62:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 04:02:32 2025 by rpki-client