Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/93901a-043b-49c8-ad37-ac7f21b6b74d/1/jyrkXFCQQaeWqWiVNYH1HUW_zlU.mft
File:                     jyrkXFCQQaeWqWiVNYH1HUW_zlU.mft (raw, json)
Hash identifier:          5EK+XbihYb6I0vrVjLy31af8XCXBHiH+X9d1/Y6VVJA=
Subject key identifier:   8A:8A:41:D2:63:06:11:46:08:E8:9D:82:40:6A:A7:ED:3B:12:B1:FD
Authority key identifier: 8F:2A:E4:5C:50:90:41:A7:96:A9:68:95:35:81:F5:1D:45:BF:CE:55
Certificate issuer:       /CN=8f2ae45c509041a796a968953581f51d45bfce55
Certificate serial:       019A09A55C7200A3D2CE85544B8DD6BA6514
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jyrkXFCQQaeWqWiVNYH1HUW_zlU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/93901a-043b-49c8-ad37-ac7f21b6b74d/1/jyrkXFCQQaeWqWiVNYH1HUW_zlU.mft
Manifest number:          16E9
Signing time:             Wed 22 Oct 2025 02:00:23 +0000
Manifest this update:     Wed 22 Oct 2025 02:00:23 +0000
Manifest next update:     Thu 23 Oct 2025 02:00:23 +0000
Files and hashes:         1: 5QH7uoE58dfucr5l0cknmb5_6nM.roa (hash: am7mbJzCmfdx1pMjvSb/IknD/TSfo87lHt1mL7pdZCQ=)
                          2: U9TChuEsKrileu5LPlClTPiblHw.roa (hash: iW3rj/qTsfRQaeDi2vFF7FLZOCFmBBPXZ/tRsBWwt4A=)
                          3: botr4mqTB6e3Z366JpSN6qT4H4s.roa (hash: aKjhoPVp3MyiJCkQJ3KF625JVgfmfjs5tdeStuyIYnY=)
                          4: jyrkXFCQQaeWqWiVNYH1HUW_zlU.crl (hash: gJam4fiIXMfjXd0AtaADRoDxV8u/Ior76r+pyFORXGQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/93901a-043b-49c8-ad37-ac7f21b6b74d/1/jyrkXFCQQaeWqWiVNYH1HUW_zlU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/93901a-043b-49c8-ad37-ac7f21b6b74d/1/jyrkXFCQQaeWqWiVNYH1HUW_zlU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jyrkXFCQQaeWqWiVNYH1HUW_zlU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 23 Oct 2025 02:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:09:a5:5c:72:00:a3:d2:ce:85:54:4b:8d:d6:ba:65:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f2ae45c509041a796a968953581f51d45bfce55
        Validity
            Not Before: Oct 22 02:00:23 2025 GMT
            Not After : Oct 23 02:00:23 2025 GMT
        Subject: CN=8a8a41d26306114608e89d82406aa7ed3b12b1fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:5d:17:41:cb:52:8a:cf:ea:42:28:e6:cc:47:
                    82:7e:92:c8:86:43:ab:9c:83:6f:e5:27:4c:c4:fa:
                    8c:b8:3a:3d:06:94:a7:30:b3:0a:5d:22:a6:a9:99:
                    0c:b7:50:c6:76:ba:a9:fc:6c:79:62:36:28:4d:81:
                    3c:c4:70:12:50:b9:36:12:23:20:64:ce:6d:56:a2:
                    b0:7c:67:73:7e:b0:52:ef:69:af:d4:14:e3:83:16:
                    c2:69:e9:0f:bd:76:3e:83:36:1e:2b:cf:c2:bd:b6:
                    3b:25:f7:60:3e:0b:20:c1:c7:17:09:5e:7d:63:03:
                    d4:c2:aa:18:d3:57:e1:7a:69:12:df:03:b3:c2:0f:
                    29:ba:63:07:63:ff:cd:9f:9d:38:cc:da:79:c0:ca:
                    38:53:64:5b:e5:cc:b4:6d:25:4a:fc:7e:0a:fa:41:
                    6b:e8:f4:67:9d:05:81:bc:c9:5f:63:ad:97:84:e9:
                    cf:b4:e1:1e:0e:45:b6:5a:0b:2e:2d:0a:4b:f0:7c:
                    3a:a9:16:66:76:e9:bf:3a:a3:bf:65:37:22:36:c4:
                    f3:0e:89:b7:52:ed:94:82:d0:3e:d5:ed:a3:8a:33:
                    00:af:1e:ca:c9:9a:ae:52:cf:dd:20:cc:be:d4:bb:
                    16:12:67:00:2b:b9:ef:c1:6b:bf:cf:f2:2c:d6:25:
                    d3:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:8A:41:D2:63:06:11:46:08:E8:9D:82:40:6A:A7:ED:3B:12:B1:FD
            X509v3 Authority Key Identifier:
                keyid:8F:2A:E4:5C:50:90:41:A7:96:A9:68:95:35:81:F5:1D:45:BF:CE:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jyrkXFCQQaeWqWiVNYH1HUW_zlU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/93901a-043b-49c8-ad37-ac7f21b6b74d/1/jyrkXFCQQaeWqWiVNYH1HUW_zlU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/93901a-043b-49c8-ad37-ac7f21b6b74d/1/jyrkXFCQQaeWqWiVNYH1HUW_zlU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:31:dc:a6:d4:d3:3b:b5:3e:c0:66:df:e4:a9:51:9c:d8:0b:
         fb:09:ec:56:2b:56:15:af:0d:0e:3a:35:37:b8:2e:8f:64:78:
         a0:d1:4c:6e:cd:93:81:f5:94:42:59:f0:1c:7d:93:1e:8b:77:
         c5:42:65:ad:e4:8e:fb:cc:93:6a:be:b1:88:83:d0:64:cd:6d:
         a1:88:21:76:e2:d8:81:65:de:b3:7c:a5:e4:ff:0c:7a:9b:50:
         b1:c9:54:f2:83:2a:f5:df:8c:c0:13:16:a2:00:bb:14:57:14:
         aa:9c:40:a3:13:8f:a4:c0:f0:15:27:0a:66:f6:3a:d9:7c:cf:
         80:d7:2e:8d:0d:e0:74:a4:e7:1d:d4:62:17:be:65:e7:59:f0:
         18:cf:ec:5c:ce:cf:3f:b1:f5:38:78:7d:42:3c:12:5a:72:08:
         4e:46:97:dc:19:b1:04:87:f4:15:1b:55:09:fa:ac:78:c1:bf:
         5d:46:9c:38:b5:43:99:86:31:ce:7d:b3:83:d4:94:8d:7a:db:
         18:e4:34:28:51:62:7e:53:53:b8:cb:4d:37:12:59:d9:7a:98:
         ec:30:66:02:71:86:5f:f9:52:68:3e:be:be:24:b8:bf:9e:57:
         61:9b:91:ec:9b:01:96:ff:65:b4:f6:3b:6c:28:17:4b:cc:6b:
         1b:a1:19:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 12:15:34 2025 by rpki-client