Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/bef200-22c6-4417-a896-24bf40c1308f/1/k4K9_JsbJQAgORI3ef-vJHP4Ubc.mft
File:                     k4K9_JsbJQAgORI3ef-vJHP4Ubc.mft (raw, json)
Hash identifier:          22QDQsvzkgtZiIQ4V10ezm/w7mP/TGzYooPRdWYTV4Y=
Subject key identifier:   3E:C6:76:50:3E:C9:A3:07:3E:06:2C:96:D0:28:25:48:31:F7:1D:E7
Authority key identifier: 93:82:BD:FC:9B:1B:25:00:20:39:12:37:79:FF:AF:24:73:F8:51:B7
Certificate issuer:       /CN=9382bdfc9b1b25002039123779ffaf2473f851b7
Certificate serial:       0199DF607BC1A9705655F64606E10ACD617F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k4K9_JsbJQAgORI3ef-vJHP4Ubc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/bef200-22c6-4417-a896-24bf40c1308f/1/k4K9_JsbJQAgORI3ef-vJHP4Ubc.mft
Manifest number:          16D3
Signing time:             Mon 13 Oct 2025 21:01:06 +0000
Manifest this update:     Mon 13 Oct 2025 21:01:06 +0000
Manifest next update:     Tue 14 Oct 2025 21:01:06 +0000
Files and hashes:         1: flYbOaZUTMSub8BsHu2rfjttzDE.roa (hash: HL0djvSGG70J3+l3P1WRT3IniXpCn0S8s4R5hQdBqTY=)
                          2: k4K9_JsbJQAgORI3ef-vJHP4Ubc.crl (hash: RxdgpJEzu/Po6HlDifi5czSKyMpI0vFZWXKZpfkEyDg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/bef200-22c6-4417-a896-24bf40c1308f/1/k4K9_JsbJQAgORI3ef-vJHP4Ubc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/bef200-22c6-4417-a896-24bf40c1308f/1/k4K9_JsbJQAgORI3ef-vJHP4Ubc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k4K9_JsbJQAgORI3ef-vJHP4Ubc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 14 Oct 2025 17:35:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:df:60:7b:c1:a9:70:56:55:f6:46:06:e1:0a:cd:61:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9382bdfc9b1b25002039123779ffaf2473f851b7
        Validity
            Not Before: Oct 13 21:01:06 2025 GMT
            Not After : Oct 14 21:01:06 2025 GMT
        Subject: CN=3ec676503ec9a3073e062c96d028254831f71de7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:de:0c:54:bf:dc:d9:7a:67:60:0f:f2:75:f0:
                    06:4d:5e:ad:87:7a:6c:9b:93:26:b9:4f:46:53:de:
                    a5:aa:14:d8:a6:11:26:ba:01:fa:b5:90:1f:f2:9e:
                    20:3c:fd:fa:eb:bd:fd:b2:69:37:73:da:8b:51:4e:
                    56:83:7f:4c:0b:3e:4e:95:fb:30:23:77:c2:48:17:
                    48:29:0c:1f:d0:74:18:c4:41:b9:0a:03:59:14:cb:
                    0b:87:9f:76:89:1a:71:d7:a0:61:cd:17:e0:cf:c1:
                    42:89:fd:6f:e0:76:37:5d:10:b0:8c:32:f7:26:04:
                    70:44:f1:cf:e5:c9:64:82:a1:ec:66:02:06:67:20:
                    c9:96:dd:0f:eb:16:83:e2:07:fd:29:2f:4b:1f:1d:
                    35:bd:1d:03:69:f4:8f:ac:ba:fd:36:3c:97:94:f1:
                    10:6f:5d:b6:dd:c7:53:5b:d3:4e:03:d4:23:57:66:
                    ac:5c:74:a9:aa:89:fa:fd:b2:19:39:99:c6:13:53:
                    30:c1:a7:f0:fa:3b:5f:26:bc:6b:c4:37:d9:6e:d6:
                    67:c1:78:cb:a6:65:45:b5:67:f4:eb:a7:db:bf:54:
                    31:3a:17:32:06:f8:35:1f:19:bd:d0:89:80:1e:87:
                    2d:2e:bf:de:cd:d7:ef:7f:cf:21:6f:82:42:ae:e4:
                    71:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:C6:76:50:3E:C9:A3:07:3E:06:2C:96:D0:28:25:48:31:F7:1D:E7
            X509v3 Authority Key Identifier:
                keyid:93:82:BD:FC:9B:1B:25:00:20:39:12:37:79:FF:AF:24:73:F8:51:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k4K9_JsbJQAgORI3ef-vJHP4Ubc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/bef200-22c6-4417-a896-24bf40c1308f/1/k4K9_JsbJQAgORI3ef-vJHP4Ubc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/bef200-22c6-4417-a896-24bf40c1308f/1/k4K9_JsbJQAgORI3ef-vJHP4Ubc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:d6:ee:27:a0:c9:75:39:80:9c:3f:e6:e4:92:9c:1c:89:70:
         01:d9:01:db:59:b9:e5:ce:7d:6e:26:50:1c:43:c7:79:cc:15:
         f1:21:12:7b:c9:4d:02:ad:15:40:f9:68:6b:19:dc:49:28:d8:
         4c:5b:26:e3:91:ba:17:30:83:c8:bf:a4:43:90:00:e4:2a:77:
         61:9d:9e:26:99:48:ee:16:75:82:82:97:b7:bd:03:e6:09:a5:
         db:78:1d:2d:11:06:57:e5:e5:59:cf:01:4f:40:c1:a9:32:65:
         a4:a6:e6:e7:4f:ee:61:ea:2b:b4:1c:b0:b0:6e:9a:f3:a7:83:
         d4:e5:36:fb:ea:2d:f1:e6:13:80:44:65:d6:8c:c0:4f:b9:40:
         30:77:16:fc:cf:ca:fe:c8:7b:a4:93:0a:5b:e3:f8:70:56:76:
         79:8f:a9:a7:63:5f:8f:21:e2:b6:51:db:bd:20:ee:dc:fe:4e:
         58:27:18:da:d1:96:75:69:ff:32:a7:4a:a2:36:37:d1:34:58:
         c5:4b:22:1d:26:b4:cc:79:de:b7:a8:de:09:5d:6f:7d:73:7b:
         77:ab:0a:88:f2:d2:c3:8d:bb:4f:51:a9:68:73:c1:51:d8:a4:
         6b:14:14:4a:85:ce:6a:b2:d3:6c:37:42:31:1b:60:63:36:e4:
         dc:a7:f4:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 14 00:51:27 2025 by rpki-client