Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/Jm4MQOTpNw25mtJ6lymNfQVZj3M.mft
File:                     Jm4MQOTpNw25mtJ6lymNfQVZj3M.mft (raw, json)
Hash identifier:          l+RaKqZ+VhiNowBemKHgu4Hpd7gtGOWIZr+cIWzYvZA=
Subject key identifier:   25:66:40:93:5E:FA:2D:14:60:63:3C:ED:5C:D0:EC:DD:46:51:B8:53
Authority key identifier: 26:6E:0C:40:E4:E9:37:0D:B9:9A:D2:7A:97:29:8D:7D:05:59:8F:73
Certificate issuer:       /CN=266e0c40e4e9370db99ad27a97298d7d05598f73
Certificate serial:       019A0DB8FE967F987214F33A813D49F12D60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jm4MQOTpNw25mtJ6lymNfQVZj3M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/Jm4MQOTpNw25mtJ6lymNfQVZj3M.mft
Manifest number:          16ED
Signing time:             Wed 22 Oct 2025 21:00:18 +0000
Manifest this update:     Wed 22 Oct 2025 21:00:18 +0000
Manifest next update:     Thu 23 Oct 2025 21:00:18 +0000
Files and hashes:         1: 8uqjL1Q7jgFdAvMEecW_AW4apnU.roa (hash: IZPA4o1k55p7lULIvDMGq6iadu+UZEquYpH4pdM728U=)
                          2: Jm4MQOTpNw25mtJ6lymNfQVZj3M.crl (hash: xls1nr+u64rxMZVJdU8eV7/q8tQs5mxN1h+M3qhUxBk=)
                          3: LrkB9dXr22HFK0At5t4rrNYD7PQ.roa (hash: pK+9flLjEvjRYAQ3vaW216H5wdCjdNXzoh5ryOe38KA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/Jm4MQOTpNw25mtJ6lymNfQVZj3M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/Jm4MQOTpNw25mtJ6lymNfQVZj3M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Jm4MQOTpNw25mtJ6lymNfQVZj3M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 23 Oct 2025 13:42:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:0d:b8:fe:96:7f:98:72:14:f3:3a:81:3d:49:f1:2d:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=266e0c40e4e9370db99ad27a97298d7d05598f73
        Validity
            Not Before: Oct 22 21:00:18 2025 GMT
            Not After : Oct 23 21:00:18 2025 GMT
        Subject: CN=256640935efa2d1460633ced5cd0ecdd4651b853
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:17:22:43:94:bf:cd:30:d8:f4:bb:59:10:96:
                    02:5c:46:e3:74:d7:08:8a:b5:bd:99:15:05:62:7d:
                    b6:cf:e2:00:b6:f5:de:aa:52:aa:2b:20:ad:64:48:
                    1c:b6:6b:46:d1:da:72:05:b4:43:19:17:a0:d4:4f:
                    66:84:98:f3:8b:1d:84:27:59:55:d5:18:1d:80:97:
                    a3:42:e7:98:51:b3:53:ea:a2:0b:9f:96:a3:c5:12:
                    85:71:08:99:e5:21:1b:15:eb:19:03:65:e6:f6:16:
                    65:89:3d:3a:a1:ab:a3:11:1a:5d:bc:20:83:0e:55:
                    8d:12:bf:86:42:2a:48:0b:99:ed:42:d8:c9:73:27:
                    d7:33:3c:3a:c9:98:3c:ac:4c:b4:6f:f2:21:30:05:
                    e5:13:42:3c:6e:20:ac:02:a3:53:88:19:43:83:18:
                    45:c8:37:2d:1c:f1:5f:c6:97:fe:41:0c:98:71:fd:
                    0c:21:93:48:02:4b:d1:e3:c7:e9:17:ae:a2:44:ce:
                    ef:ec:d5:4b:98:b4:29:ae:f9:5f:0a:f2:bd:1b:8a:
                    51:0b:2b:58:71:69:5a:e8:2b:78:5a:f3:47:76:d2:
                    d3:92:f1:94:d2:0e:51:fa:b8:71:be:6d:5a:c3:cd:
                    7b:63:50:b0:28:f4:ce:be:25:00:a0:ec:0f:89:3a:
                    a4:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:66:40:93:5E:FA:2D:14:60:63:3C:ED:5C:D0:EC:DD:46:51:B8:53
            X509v3 Authority Key Identifier:
                keyid:26:6E:0C:40:E4:E9:37:0D:B9:9A:D2:7A:97:29:8D:7D:05:59:8F:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jm4MQOTpNw25mtJ6lymNfQVZj3M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/Jm4MQOTpNw25mtJ6lymNfQVZj3M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/Jm4MQOTpNw25mtJ6lymNfQVZj3M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:36:38:c2:2e:0c:16:74:b1:4f:60:eb:bc:ac:5a:73:55:f0:
         25:24:45:ad:b4:7a:68:b3:b0:91:7b:01:b2:6f:ec:1d:e9:c9:
         0a:98:bc:b7:95:c6:b1:39:b2:1f:78:b5:72:12:a8:2f:21:1c:
         74:20:53:66:91:79:f7:02:32:be:62:8a:05:43:3a:d7:6f:fc:
         b6:f1:3c:c0:8e:47:b7:8b:bf:df:a2:c9:31:98:02:bf:2c:6e:
         6e:92:89:f0:f5:b8:c0:d2:6c:f0:c2:bc:57:79:b1:46:26:c6:
         db:23:f6:b8:08:16:ea:10:0e:7c:67:fa:c8:44:3e:cc:73:29:
         12:af:bd:22:4d:10:f6:61:d7:6f:f8:ba:de:64:85:dd:8e:88:
         a5:ae:37:82:77:56:8e:9a:21:02:5a:90:f8:02:be:b8:83:f3:
         62:85:4a:36:7a:80:c4:4d:2e:50:94:65:78:f4:53:b0:1a:62:
         84:b9:03:be:64:c6:0d:27:0e:4d:1b:55:63:1e:2e:68:bf:87:
         e6:48:20:af:b3:96:5b:6c:63:c1:77:56:d9:63:c1:98:c4:28:
         ef:59:b8:ea:a8:1a:87:5b:cd:3d:5d:9a:e0:42:e1:43:2b:09:
         d4:12:0e:fc:29:a1:2d:a8:86:30:1a:44:b3:54:4a:5b:a1:3e:
         74:c4:00:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 23:17:37 2025 by rpki-client