Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/0580b2-f6a4-4de6-9103-a01d729b0a21/1/mjzlxacwzY4v8fVdGA8agbMADMg.mft
File:                     mjzlxacwzY4v8fVdGA8agbMADMg.mft (raw, json)
Hash identifier:          0qPXRN3E9kAZ+65yjmsPEGgC7kIKObjQ5HDb1OxPaK4=
Subject key identifier:   EA:D6:47:42:A1:90:FA:64:8E:94:08:E0:22:20:CB:B4:5F:C1:71:F2
Authority key identifier: 9A:3C:E5:C5:A7:30:CD:8E:2F:F1:F5:5D:18:0F:1A:81:B3:00:0C:C8
Certificate issuer:       /CN=9a3ce5c5a730cd8e2ff1f55d180f1a81b3000cc8
Certificate serial:       019A1F5186A0A1701D3D4F914DA0FB9BCCB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mjzlxacwzY4v8fVdGA8agbMADMg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/0580b2-f6a4-4de6-9103-a01d729b0a21/1/mjzlxacwzY4v8fVdGA8agbMADMg.mft
Manifest number:          16F5
Signing time:             Sun 26 Oct 2025 07:00:27 +0000
Manifest this update:     Sun 26 Oct 2025 07:00:27 +0000
Manifest next update:     Mon 27 Oct 2025 07:00:27 +0000
Files and hashes:         1: Zo_zorl8U6ImkFUqY_ejQRvLJc0.roa (hash: B+UnfNeyWy4qc0L9iLcwdqvfvolglpTpBLhXa2BgbS8=)
                          2: _b-w9LvxuQUdQBFQTPOqft2tDNE.roa (hash: ZeBYUCPyEsrx7JXuItWCAACWIJTP5Z1eTXibb6gzJH8=)
                          3: mjzlxacwzY4v8fVdGA8agbMADMg.crl (hash: BqpBNE3WhmMtl0nvbW7mMV5thnmJJqMLF++YkYELQB0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/0580b2-f6a4-4de6-9103-a01d729b0a21/1/mjzlxacwzY4v8fVdGA8agbMADMg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/0580b2-f6a4-4de6-9103-a01d729b0a21/1/mjzlxacwzY4v8fVdGA8agbMADMg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mjzlxacwzY4v8fVdGA8agbMADMg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Oct 2025 03:42:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:1f:51:86:a0:a1:70:1d:3d:4f:91:4d:a0:fb:9b:cc:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a3ce5c5a730cd8e2ff1f55d180f1a81b3000cc8
        Validity
            Not Before: Oct 26 07:00:27 2025 GMT
            Not After : Oct 27 07:00:27 2025 GMT
        Subject: CN=ead64742a190fa648e9408e02220cbb45fc171f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:0f:92:c1:6c:c2:0c:3b:7a:61:74:d0:eb:cf:
                    4a:1b:ff:0a:3f:81:32:78:09:96:3b:27:45:bd:ee:
                    3d:35:55:92:d8:dd:a9:f9:72:44:26:4e:02:51:ca:
                    d4:a1:60:fe:3c:c4:5d:fb:43:33:c7:23:01:8f:98:
                    86:95:2e:e2:62:24:3f:ca:f3:37:28:0f:8d:f1:0d:
                    e0:bf:c9:c5:ec:c8:d1:f6:b5:06:ce:e8:e7:9c:d6:
                    99:19:af:4e:fa:5e:f0:3f:87:fb:1f:3d:ae:cc:c6:
                    d7:e0:25:ff:34:72:e1:39:31:de:75:33:eb:81:d2:
                    29:e5:cb:cc:4e:3e:d8:f9:9c:fd:18:bc:3b:c4:d8:
                    78:86:00:af:b9:24:d1:f6:7d:67:c2:36:45:ad:b5:
                    c0:e5:06:f2:d9:38:42:76:9f:f4:2d:f5:86:1b:32:
                    f0:e6:c1:79:5b:28:b7:86:c2:8f:91:af:50:1f:0c:
                    54:26:08:05:fa:89:e7:78:0a:59:91:9f:a4:53:ff:
                    87:87:82:d8:0d:1d:fd:f7:92:d5:f8:2a:16:e4:ac:
                    a4:d3:b5:03:30:ec:df:86:eb:56:32:fb:cc:51:0c:
                    1d:3c:e0:22:c6:b3:82:9f:da:49:bf:a3:44:87:ca:
                    67:2d:3b:da:21:eb:84:1e:a9:2c:24:5d:cd:6e:48:
                    51:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:D6:47:42:A1:90:FA:64:8E:94:08:E0:22:20:CB:B4:5F:C1:71:F2
            X509v3 Authority Key Identifier:
                keyid:9A:3C:E5:C5:A7:30:CD:8E:2F:F1:F5:5D:18:0F:1A:81:B3:00:0C:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mjzlxacwzY4v8fVdGA8agbMADMg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/0580b2-f6a4-4de6-9103-a01d729b0a21/1/mjzlxacwzY4v8fVdGA8agbMADMg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/0580b2-f6a4-4de6-9103-a01d729b0a21/1/mjzlxacwzY4v8fVdGA8agbMADMg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:16:53:33:f3:51:02:67:f5:5e:0c:99:3d:5a:01:d2:73:b0:
         62:16:a0:c7:1e:cb:ef:66:f0:b1:cf:33:08:01:31:a0:ea:4b:
         0a:88:ce:81:ec:8b:54:97:c1:f4:db:b9:15:87:6b:59:1c:b0:
         96:f1:0b:96:32:a7:4b:06:d6:37:c3:a5:1e:bd:b9:59:f3:6c:
         dc:63:00:3c:22:27:85:dd:ac:51:43:b2:78:c8:ac:9d:91:74:
         dd:26:f9:d4:05:c8:0c:ca:ab:a5:9b:7d:a9:db:27:ae:93:9f:
         d3:a9:3c:9b:59:b2:8e:1b:c0:89:31:66:c5:4d:e6:9a:b3:7d:
         6e:ea:d2:9c:b0:7d:08:05:76:40:39:88:fb:eb:c2:d6:a9:97:
         f7:3c:24:bb:f9:20:f2:5e:af:08:be:3a:4f:f9:b6:e9:fb:64:
         ba:72:42:9f:9c:cb:3c:f8:9f:cb:3e:bb:11:d6:c3:b8:d6:b5:
         54:cb:bc:56:8f:8e:56:5a:33:92:bb:58:dd:0a:ab:bd:cd:1e:
         d4:3a:c7:a0:8c:4d:5b:d2:f0:96:01:b1:e6:e3:df:8f:7c:c0:
         d9:d4:d0:6d:53:f8:78:82:c0:5e:cd:be:43:fe:dc:fb:a3:96:
         44:94:de:65:b7:d2:3c:4b:a4:78:a1:3d:94:62:9a:be:83:83:
         a9:9b:97:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 10:52:00 2025 by rpki-client