Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.mft
File:                     JI9eJvHAj0SGyZEci2Cerotst00.mft (raw, json)
Hash identifier:          ULnmgDCMuU43wk5bqEDU8eLOo1L4R/gku8QWy/L5WrE=
Subject key identifier:   91:78:14:7D:22:22:03:AA:17:DF:3E:A2:3D:DE:AC:B2:C7:53:31:B6
Authority key identifier: 24:8F:5E:26:F1:C0:8F:44:86:C9:91:1C:8B:60:9E:AE:8B:6C:B7:4D
Certificate issuer:       /CN=248f5e26f1c08f4486c9911c8b609eae8b6cb74d
Certificate serial:       019A24794C56192157624E8F7DC350C1DA2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JI9eJvHAj0SGyZEci2Cerotst00.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.mft
Manifest number:          16FC
Signing time:             Mon 27 Oct 2025 07:02:00 +0000
Manifest this update:     Mon 27 Oct 2025 07:02:00 +0000
Manifest next update:     Tue 28 Oct 2025 07:02:00 +0000
Files and hashes:         1: 4-VMs7WjnHapNWAogJtHgkJT3FU.roa (hash: gSDXueJPuBUvKo0WOnGXmd8a/t7YwU/fLnYXo72JtQQ=)
                          2: Iqxcd_fV1QsWB5O74ZAh4NM18cs.roa (hash: 6qhxk3bJhMiZ9tGHAGhJE2mV7NKSco7uvbYg30YDR94=)
                          3: JI9eJvHAj0SGyZEci2Cerotst00.crl (hash: clc0hw7/pISMOkcIOqr1FCklKQzwyaulqrJGNPtYM1c=)
                          4: XFRqozBjRCDgkRfk1bxKNY0dgFg.roa (hash: u1yLOLEkwAxOilmwTuOs1qXXdE33hg/Nh8HsoI+27dM=)
                          5: _bqODjPn-Rd4cBmxTx3qtm9oavg.roa (hash: y2y1qSWU+HMBsyjHGzEQQZsskHsqz5iR/DyAxLMfaoM=)
                          6: p68H3uMjio8Wt8Lw5I34yYxIxUU.roa (hash: Cl/bx139AnmJ9IE64HvUFHSswl0yNbebsilLqxaX8Po=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JI9eJvHAj0SGyZEci2Cerotst00.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Oct 2025 07:02:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:24:79:4c:56:19:21:57:62:4e:8f:7d:c3:50:c1:da:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=248f5e26f1c08f4486c9911c8b609eae8b6cb74d
        Validity
            Not Before: Oct 27 07:02:00 2025 GMT
            Not After : Oct 28 07:02:00 2025 GMT
        Subject: CN=9178147d222203aa17df3ea23ddeacb2c75331b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f0:3d:a9:c4:3d:50:3e:fa:c5:9e:ce:3c:8d:
                    19:e2:81:77:3a:e5:7b:27:55:dd:2e:57:d0:40:82:
                    73:2a:70:b9:0c:58:71:43:51:70:b2:8a:7b:ff:28:
                    dd:39:a9:bf:aa:86:55:61:2d:d8:d3:8d:5b:af:3f:
                    34:06:24:c2:84:28:bf:e7:66:27:ca:ee:d6:e3:db:
                    94:34:a7:51:83:8d:57:70:18:c2:b7:db:8b:ee:74:
                    12:c3:63:a3:fb:32:f9:fb:62:5e:2c:09:04:b1:f0:
                    53:d5:c2:a2:66:31:9a:5c:34:02:4c:11:ed:62:86:
                    8d:4c:9f:ef:b5:c2:91:79:85:f9:23:e6:e9:6d:bf:
                    f5:41:a3:79:58:86:38:ab:93:5d:c5:6d:cf:d0:00:
                    44:a5:4d:2d:17:dd:99:84:70:d6:0f:06:af:39:06:
                    62:a9:45:dc:94:26:d9:ef:0b:ae:74:05:14:64:ab:
                    a9:a1:34:21:19:38:67:9e:27:11:02:3d:49:db:15:
                    3e:1b:57:ec:ff:20:61:b2:e7:ea:fe:30:a7:5e:96:
                    1a:32:c1:83:05:3a:3a:bf:26:b9:99:61:cc:8a:5a:
                    5d:cc:f9:74:6a:9e:0b:e3:d8:fd:d1:03:fc:cc:62:
                    60:5a:d5:2d:39:91:9c:d1:df:34:b0:c6:43:a7:bc:
                    c7:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:78:14:7D:22:22:03:AA:17:DF:3E:A2:3D:DE:AC:B2:C7:53:31:B6
            X509v3 Authority Key Identifier:
                keyid:24:8F:5E:26:F1:C0:8F:44:86:C9:91:1C:8B:60:9E:AE:8B:6C:B7:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JI9eJvHAj0SGyZEci2Cerotst00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:b8:d5:c1:39:4f:61:04:de:7c:20:95:16:71:11:71:2f:ec:
         af:4c:51:ae:89:de:86:37:cb:86:e0:77:8b:a8:e9:60:aa:98:
         5d:f7:44:b2:37:6b:01:d3:e8:17:5a:1b:1c:f7:59:d0:d4:55:
         3a:1a:45:a0:b2:a7:d1:82:2f:06:4f:77:7b:d4:05:1e:64:7a:
         b4:69:7d:b6:9f:f1:6c:d4:62:50:42:ed:71:35:4f:8a:00:f8:
         ea:aa:df:49:b4:ab:1b:ce:4a:9f:59:d9:63:1b:83:c9:2a:d2:
         7e:65:9e:71:29:e9:d4:01:f8:d6:60:9d:90:d4:7d:a9:c0:fb:
         2c:ad:20:e8:52:59:86:ad:10:86:4e:99:57:40:d1:ee:15:6e:
         7c:f2:91:f9:9f:8b:62:c3:51:c8:05:8e:4d:50:1a:ae:c7:bb:
         39:37:2d:99:30:7a:06:0c:88:eb:03:2f:a3:69:4b:3c:20:94:
         27:10:70:2c:e0:f3:a7:60:dc:e6:76:2c:32:0d:17:6d:4f:e5:
         8a:4d:ba:e0:89:9a:2a:6a:5b:28:9c:7c:a5:97:82:02:a8:e9:
         99:0d:db:af:09:d6:44:1e:36:f5:63:c3:fb:2c:38:43:15:58:
         a8:82:f2:94:24:4c:c2:a2:c4:b6:19:a4:73:a9:5e:a4:2e:f4:
         45:d1:55:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 11:41:29 2025 by rpki-client