Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
File:                     A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft (raw, json)
Hash identifier:          1muJAALwIA83ipzaFMDqchBxwScoX+BGZMAhrLHg+ZY=
Subject key identifier:   CD:F1:1C:18:33:1F:67:36:54:F8:1F:A1:D4:33:DF:C5:27:C1:A7:83
Authority key identifier: 03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51
Certificate issuer:       /CN=03c33e43ef56527a169d6ac6d7e62c63d1973051
Certificate serial:       01994EF799700B2F2EFB7E8E789E1942D49F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
Manifest number:          16AA
Signing time:             Mon 15 Sep 2025 20:01:13 +0000
Manifest this update:     Mon 15 Sep 2025 20:01:13 +0000
Manifest next update:     Tue 16 Sep 2025 20:01:13 +0000
Files and hashes:         1: 19QpkXgghLM3Nv0nEMVJTVhhYlk.roa (hash: J5AzJxFSrkUz6NEqgZpKHFp1Qkuuq+hf2j4tyd26uK8=)
                          2: A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl (hash: Rxm3jZeNltfT25RsO4h3LnFvW6vtYe2G6r/MtKPgogM=)
                          3: aUt9STDYB4WpJzoIeOhkBXlmRGY.roa (hash: OBmceRN0cnIIMX2WS5mLBG1wMtaz4OUFUqNkNJhbrA8=)
                          4: c9sXvnnFKQwKh05j0TaYAQugLQM.roa (hash: eyB+ysjYhGow5lnf5FUGFEiyTh1wZN2qzaaHi/6zhTQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 16 Sep 2025 17:04:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:4e:f7:99:70:0b:2f:2e:fb:7e:8e:78:9e:19:42:d4:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03c33e43ef56527a169d6ac6d7e62c63d1973051
        Validity
            Not Before: Sep 15 20:01:13 2025 GMT
            Not After : Sep 16 20:01:13 2025 GMT
        Subject: CN=cdf11c18331f673654f81fa1d433dfc527c1a783
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:82:22:3e:18:dd:ac:bd:f7:f2:71:ed:e5:a5:
                    10:1c:ff:60:4b:fa:98:af:8d:8d:f9:06:86:8a:53:
                    f0:27:ec:c5:8b:28:61:22:16:43:43:74:37:3f:d2:
                    c7:f6:6f:5c:81:a2:c1:04:6d:a1:5c:27:be:2b:d3:
                    c8:31:76:ef:0a:40:6f:be:92:9e:ee:17:d6:23:6b:
                    0c:bf:23:04:91:a6:d4:b1:dc:dd:ea:49:3a:1c:ce:
                    15:e1:ef:81:63:42:18:2c:6a:a1:2e:7f:fc:a1:68:
                    11:21:0d:e5:88:2e:fa:f9:f3:ed:08:9e:cc:37:ea:
                    ad:6b:3c:47:0f:10:a3:d1:3d:c0:e6:81:d4:72:bb:
                    57:96:af:f3:0a:b6:ac:bd:66:6d:9f:80:00:44:2b:
                    9d:09:6d:87:11:72:d4:5f:6c:8d:a6:74:21:69:56:
                    1d:f2:4f:57:c8:f4:d8:12:a8:53:4f:84:f8:e2:16:
                    12:99:26:70:15:76:c5:7f:0a:e2:7f:51:6c:14:84:
                    b6:99:a6:1f:45:59:ff:ab:0d:08:46:88:65:c7:b5:
                    b6:21:a8:6c:36:5a:fc:3b:5e:7f:c3:af:ae:dc:65:
                    34:77:d7:58:c8:d6:0b:96:ec:4b:f0:f4:5d:c1:75:
                    73:53:02:08:57:a1:72:fa:63:6a:f5:ce:d5:f6:2c:
                    c7:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:F1:1C:18:33:1F:67:36:54:F8:1F:A1:D4:33:DF:C5:27:C1:A7:83
            X509v3 Authority Key Identifier:
                keyid:03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:c0:45:70:2d:fa:50:ad:7e:4a:6a:eb:44:95:dd:00:2c:a7:
         41:93:c6:49:c7:c3:60:ea:5d:87:7f:59:96:f0:d8:17:6c:70:
         b8:e4:9d:0d:5b:f4:db:b5:f4:90:9c:bd:42:93:06:92:79:df:
         10:f6:1a:83:34:c4:fc:8e:51:27:a3:bb:7c:7c:64:ce:e9:9c:
         d7:d0:81:ea:31:8d:13:74:7c:5e:2f:21:da:b3:1f:23:f3:61:
         d1:0e:98:1b:dd:f5:0e:ac:83:65:6e:e0:0d:c6:9c:23:74:18:
         d2:35:6a:f8:20:36:a1:b7:a5:d6:4b:d8:7a:6a:a9:6b:8c:91:
         97:9a:13:74:55:1f:6b:e1:f9:e1:25:8e:75:34:39:c8:fa:4d:
         53:20:03:a2:99:17:d0:36:a5:c8:0b:0c:e5:20:8b:03:74:36:
         19:37:2e:fa:dd:89:84:e6:fd:8b:62:4f:72:42:6e:2a:8a:94:
         cc:16:fd:c9:bf:e7:e6:80:2f:e0:99:e5:b0:b6:1e:5a:d3:28:
         89:8a:08:79:14:b8:ed:a9:58:7b:8d:86:dd:42:80:39:e3:10:
         04:db:bc:65:f1:e7:6c:a8:44:19:98:62:9c:a1:e8:cb:5e:62:
         28:07:4d:06:5a:2e:a0:d5:3f:72:d1:86:d0:fd:23:80:5a:2c:
         75:a2:63:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 02:40:33 2025 by rpki-client