Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
File:                     A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft (raw, json)
Hash identifier:          FRcsMK9jCIWEnOWSAx1fGK9O8zjniF608ZMm6SKfs94=
Subject key identifier:   EB:31:73:1E:61:42:98:57:EC:C8:D8:D8:8D:BE:C3:E8:59:4C:C3:70
Authority key identifier: 03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51
Certificate issuer:       /CN=03c33e43ef56527a169d6ac6d7e62c63d1973051
Certificate serial:       019950E62A8CEAB5F68350167FB449461EE1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
Manifest number:          16AB
Signing time:             Tue 16 Sep 2025 05:01:25 +0000
Manifest this update:     Tue 16 Sep 2025 05:01:25 +0000
Manifest next update:     Wed 17 Sep 2025 05:01:25 +0000
Files and hashes:         1: 19QpkXgghLM3Nv0nEMVJTVhhYlk.roa (hash: J5AzJxFSrkUz6NEqgZpKHFp1Qkuuq+hf2j4tyd26uK8=)
                          2: A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl (hash: 2nycBPLVFPoXM7sUiqw018dHNadV07xo/4NjLBtMjMc=)
                          3: aUt9STDYB4WpJzoIeOhkBXlmRGY.roa (hash: OBmceRN0cnIIMX2WS5mLBG1wMtaz4OUFUqNkNJhbrA8=)
                          4: c9sXvnnFKQwKh05j0TaYAQugLQM.roa (hash: eyB+ysjYhGow5lnf5FUGFEiyTh1wZN2qzaaHi/6zhTQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Sep 2025 05:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:50:e6:2a:8c:ea:b5:f6:83:50:16:7f:b4:49:46:1e:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03c33e43ef56527a169d6ac6d7e62c63d1973051
        Validity
            Not Before: Sep 16 05:01:25 2025 GMT
            Not After : Sep 17 05:01:25 2025 GMT
        Subject: CN=eb31731e61429857ecc8d8d88dbec3e8594cc370
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:85:0b:6c:85:79:9a:dd:07:04:2e:61:30:c4:
                    d0:50:a9:d6:b4:9f:a8:e2:ad:0b:85:b2:6f:38:66:
                    86:8a:37:1a:31:2b:3c:31:28:2d:c4:74:83:f5:b3:
                    5a:29:22:b9:b3:69:54:ae:be:fc:1c:6e:70:af:20:
                    f3:31:e6:a9:8b:61:09:8a:91:d2:90:24:aa:50:1b:
                    6c:ed:d3:31:c3:17:7e:ef:b6:d1:a3:ae:74:fa:cd:
                    3a:8d:2f:c5:5f:d8:74:5e:97:1f:74:5a:ef:f6:68:
                    c1:21:65:47:cd:d9:33:88:81:0b:8d:2e:99:bb:19:
                    92:31:1e:d1:ba:73:b3:4c:7f:52:81:2c:ff:3b:00:
                    36:97:55:05:f7:af:98:69:07:25:7d:9d:f2:12:27:
                    7f:14:6e:f0:48:26:44:91:77:cf:bb:03:92:e2:27:
                    d3:bf:19:bd:b0:c7:14:4b:c0:0e:27:7a:e7:52:b5:
                    7c:2c:7b:75:a1:f5:50:82:63:b1:8e:ae:c1:b0:87:
                    25:a2:89:19:2e:31:ab:71:d3:a5:da:71:58:64:9e:
                    5b:8a:0e:a0:b5:61:5f:00:b0:e0:d4:11:cb:a0:39:
                    53:2c:2a:c5:2e:cc:02:c7:70:13:da:67:08:5f:92:
                    ae:37:f9:1c:7d:2e:65:5b:0c:3c:05:3c:be:91:81:
                    48:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:31:73:1E:61:42:98:57:EC:C8:D8:D8:8D:BE:C3:E8:59:4C:C3:70
            X509v3 Authority Key Identifier:
                keyid:03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:38:da:f9:7e:a0:0f:f9:cd:27:0b:9b:04:57:c5:55:67:ca:
         67:70:63:36:cb:e3:3b:fb:92:59:f6:aa:8f:b6:ea:0f:e6:08:
         6d:44:b1:dc:ff:a1:81:65:98:14:b3:85:3c:19:15:b6:df:42:
         cf:97:8b:11:7f:5f:1c:c4:cd:87:0b:b3:43:54:c0:cf:e1:17:
         7e:48:e8:ae:2a:83:bb:80:a6:12:a5:0a:23:68:bf:be:8f:a3:
         08:0b:53:c8:7d:0c:26:56:fa:df:a3:ed:05:ee:7d:37:53:fa:
         eb:74:4c:46:1e:06:3f:9b:c7:2f:62:82:1e:c6:31:6a:06:fb:
         2b:25:48:b4:6e:6c:81:45:5a:b3:d6:40:e8:2e:61:d8:64:79:
         a2:07:c1:d5:0c:d7:89:b1:0d:d8:18:09:05:e2:62:78:76:19:
         f2:4d:fa:bb:cf:84:e9:53:0d:5c:04:b6:45:13:91:66:90:4f:
         20:a4:53:92:7b:eb:cc:7b:14:6c:78:3b:b6:d3:74:2a:86:1e:
         c4:45:3c:c7:e6:a5:a8:52:aa:7f:a7:ad:03:5b:dc:f5:f8:e4:
         2e:b5:57:cf:db:61:cd:4f:bd:b6:5f:34:a4:23:41:5c:81:ae:
         15:de:7d:27:68:ad:6f:b1:44:ca:26:f2:76:b4:e1:df:da:fe:
         f2:52:4d:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 09:17:18 2025 by rpki-client