Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/cdad8f-b919-45d1-af18-63742d19a012/1/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.mft
File:                     j9Jq1vkbpEcoFLrkhKjfH2NMM0E.mft (raw, json)
Hash identifier:          f1j6pucrmpXTPkS4xesEbtee7mMCZXmOY7RMPzZAXS4=
Subject key identifier:   02:36:28:48:72:B7:9D:08:46:1B:BE:77:AF:53:80:5C:BA:46:BE:D1
Authority key identifier: 8F:D2:6A:D6:F9:1B:A4:47:28:14:BA:E4:84:A8:DF:1F:63:4C:33:41
Certificate issuer:       /CN=8fd26ad6f91ba4472814bae484a8df1f634c3341
Certificate serial:       019A08C9B32E84E2FFEB90E268E241135799
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/cdad8f-b919-45d1-af18-63742d19a012/1/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.mft
Manifest number:          16EB
Signing time:             Tue 21 Oct 2025 22:00:27 +0000
Manifest this update:     Tue 21 Oct 2025 22:00:27 +0000
Manifest next update:     Wed 22 Oct 2025 22:00:27 +0000
Files and hashes:         1: Ouc3RvEDnyO6PZ6J8vBTm0umZLo.roa (hash: O9/4o6Al8uD1wslgbyQKwgMo1+JOp/WhUeraCAmbd1Q=)
                          2: j9Jq1vkbpEcoFLrkhKjfH2NMM0E.crl (hash: OzFpS//lZhkP4X8UtT1/ozKUsTbXSYjGbLxbKb/GD0k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/cdad8f-b919-45d1-af18-63742d19a012/1/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/cdad8f-b919-45d1-af18-63742d19a012/1/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Oct 2025 22:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:08:c9:b3:2e:84:e2:ff:eb:90:e2:68:e2:41:13:57:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fd26ad6f91ba4472814bae484a8df1f634c3341
        Validity
            Not Before: Oct 21 22:00:27 2025 GMT
            Not After : Oct 22 22:00:27 2025 GMT
        Subject: CN=0236284872b79d08461bbe77af53805cba46bed1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:43:37:4b:84:75:7f:02:0b:ec:89:88:0b:28:
                    15:fb:89:4a:fd:b8:3e:2c:9f:1b:d5:f2:61:70:80:
                    2a:f1:aa:90:98:1a:0e:a0:8f:35:69:52:43:99:e5:
                    b7:0c:e5:3e:da:0d:08:2f:4d:35:2f:e4:6b:a5:bc:
                    c2:e9:ac:e4:e0:15:b8:6f:28:84:28:30:b2:91:ca:
                    b8:b0:7d:0e:c5:7b:6d:6c:84:23:81:fd:db:36:16:
                    25:d3:8c:77:65:1c:87:53:ba:20:5e:19:4f:29:56:
                    37:09:e6:06:0f:96:bc:ea:11:9d:d3:66:53:15:c5:
                    66:5e:a6:da:2b:cc:bc:41:e6:f2:2a:e5:23:cd:a6:
                    d3:38:08:c2:4d:b3:96:15:bf:b6:07:25:30:e6:c9:
                    03:5c:44:dd:6e:db:16:5b:34:c1:09:3a:58:f6:6b:
                    f3:ce:b0:89:7a:3c:21:69:db:8e:47:8c:8c:ea:a2:
                    3d:47:a5:68:c2:e0:7e:74:c9:50:f2:56:6b:66:b9:
                    27:4d:ee:2f:70:bb:7c:70:5e:8c:47:88:51:68:70:
                    c2:b6:4c:6e:e9:78:ad:4d:dc:da:90:a2:31:ef:5b:
                    89:69:06:82:fd:ba:ac:e7:bb:26:5b:0c:4f:59:f7:
                    15:77:99:68:92:5d:ed:51:da:23:bd:e5:be:95:e2:
                    74:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:36:28:48:72:B7:9D:08:46:1B:BE:77:AF:53:80:5C:BA:46:BE:D1
            X509v3 Authority Key Identifier:
                keyid:8F:D2:6A:D6:F9:1B:A4:47:28:14:BA:E4:84:A8:DF:1F:63:4C:33:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/cdad8f-b919-45d1-af18-63742d19a012/1/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/cdad8f-b919-45d1-af18-63742d19a012/1/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:4f:15:65:63:7e:34:92:4e:01:7c:47:16:40:94:bd:bf:1f:
         60:07:a0:aa:5d:a0:a0:52:7d:4f:14:c8:00:4f:ce:14:3a:50:
         93:19:c8:e8:4c:4a:7d:61:12:87:83:19:cc:49:13:c0:3b:5e:
         40:68:d4:bf:53:b9:68:50:92:33:30:34:5b:e4:3b:a8:32:d7:
         d0:ba:03:02:78:5e:a5:f6:f7:1b:d1:98:61:c1:f4:ab:bd:b1:
         eb:ea:75:55:21:81:b1:79:f0:72:2b:9e:61:07:eb:ac:71:6c:
         58:2b:f7:87:b3:8b:76:34:00:96:b0:13:c4:df:4d:7a:41:85:
         5a:c6:a1:1f:82:eb:05:02:75:11:79:16:46:98:99:ae:4d:f6:
         ac:87:76:b2:51:0f:96:40:99:17:77:89:b7:05:a6:53:60:f6:
         fa:f1:67:46:0a:f3:0f:22:ce:d3:fd:80:1d:d8:7d:69:83:3c:
         4a:e0:d1:31:ff:85:e0:aa:49:af:35:11:34:65:91:a5:a0:19:
         4a:13:92:de:fd:c8:9b:b0:30:59:85:d3:1c:23:9a:d2:db:04:
         32:81:bc:a8:89:b6:72:a3:93:70:0d:ce:6f:53:ab:19:70:14:
         f9:77:cc:b6:bf:6f:52:2d:da:34:e5:3a:e8:17:22:dd:e7:e5:
         00:42:6c:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 07:28:00 2025 by rpki-client