Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1b8f2a-0abd-4ffb-82f6-ef3bbb05655e/1/m30kQWqopHiz7Tbi5lhV1CJZ2e4.mft
File:                     m30kQWqopHiz7Tbi5lhV1CJZ2e4.mft (raw, json)
Hash identifier:          WfwvQiUSNIs+4XfVdjUtY9aRJLkumHfk+Byo8m5OU5I=
Subject key identifier:   0A:BD:C3:17:18:10:7E:49:E4:31:85:21:CB:B9:0C:99:EC:60:F8:4A
Authority key identifier: 9B:7D:24:41:6A:A8:A4:78:B3:ED:36:E2:E6:58:55:D4:22:59:D9:EE
Certificate issuer:       /CN=9b7d24416aa8a478b3ed36e2e65855d42259d9ee
Certificate serial:       019A21E4C22A6D6BB4CBA824E7040C29FA63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m30kQWqopHiz7Tbi5lhV1CJZ2e4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/1b8f2a-0abd-4ffb-82f6-ef3bbb05655e/1/m30kQWqopHiz7Tbi5lhV1CJZ2e4.mft
Manifest number:          16F9
Signing time:             Sun 26 Oct 2025 19:00:31 +0000
Manifest this update:     Sun 26 Oct 2025 19:00:31 +0000
Manifest next update:     Mon 27 Oct 2025 19:00:31 +0000
Files and hashes:         1: ZYQH8Odgs6j1zgDGSFJsI2Ck79M.roa (hash: kZC3BUi9IJGxujxTtEudY5sD/lL78MLQwa1Gtt8Q7zA=)
                          2: ejmalSfr1tk53rbyCCEzLQB9ZzM.roa (hash: g7L2imx6UGUuOAuG6UHNk4qxo7a783+bs7b/1OA2UdA=)
                          3: l0wAbULeVazPwYlU9T-Fs3m4VN0.roa (hash: DZ6o3hO1cP2UGjoUI60lf4xxGDkyAXhO8s2og9CadCc=)
                          4: m30kQWqopHiz7Tbi5lhV1CJZ2e4.crl (hash: 2yS4I5oGWTzPAvYFXi0SFy/GbMGyg1/jXXCwJD1HNiI=)
                          5: wk5e4hIcd56Z58a_bsc7eOFpvEo.roa (hash: rW3zDMHLagp1fBqXsKbxwNvVG019sDcCbQQDsBMyiNI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/1b8f2a-0abd-4ffb-82f6-ef3bbb05655e/1/m30kQWqopHiz7Tbi5lhV1CJZ2e4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/1b8f2a-0abd-4ffb-82f6-ef3bbb05655e/1/m30kQWqopHiz7Tbi5lhV1CJZ2e4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m30kQWqopHiz7Tbi5lhV1CJZ2e4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Oct 2025 14:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:21:e4:c2:2a:6d:6b:b4:cb:a8:24:e7:04:0c:29:fa:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b7d24416aa8a478b3ed36e2e65855d42259d9ee
        Validity
            Not Before: Oct 26 19:00:31 2025 GMT
            Not After : Oct 27 19:00:31 2025 GMT
        Subject: CN=0abdc31718107e49e4318521cbb90c99ec60f84a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:42:38:3b:54:a9:71:b8:16:61:c4:12:72:4c:
                    71:17:b1:c3:0e:5b:ee:2d:80:0f:6d:5b:09:15:76:
                    9b:a0:0b:4c:6a:58:b1:23:82:a7:cb:b4:08:b7:9e:
                    f7:29:b3:9d:78:e6:80:19:c7:b6:05:39:b7:fd:e5:
                    e1:b0:62:69:54:df:25:f6:9b:6f:e2:0b:c7:6c:5b:
                    b6:93:f3:e8:23:6b:05:aa:16:76:dd:7b:85:c9:f1:
                    d5:c4:35:20:3c:0f:96:04:d7:0e:7f:30:b0:0f:8f:
                    5b:ca:4e:7f:4e:e1:06:3f:c9:14:fa:38:22:37:c3:
                    88:60:48:f6:6d:d3:19:be:f6:2c:28:62:2a:93:81:
                    8a:7c:35:79:56:3d:d6:9b:a0:07:0a:3e:27:59:95:
                    cb:34:1e:af:fd:93:4e:1e:c3:11:f4:b9:b8:79:d8:
                    a8:f5:09:81:bb:2c:e3:a4:c2:0f:c2:da:0c:87:4d:
                    16:5d:7e:34:1b:0d:fd:19:29:b8:ba:cb:9a:7e:15:
                    f7:f3:3c:60:8f:84:f8:ed:f4:f8:e5:8e:0e:68:71:
                    77:b0:7f:e2:6f:93:c0:af:78:cd:3a:bb:63:0e:9a:
                    6b:55:b9:71:fa:cf:dd:bb:ff:cc:e2:31:33:41:b4:
                    ff:4f:06:8b:58:42:a8:6b:de:1e:36:11:68:03:e5:
                    07:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:BD:C3:17:18:10:7E:49:E4:31:85:21:CB:B9:0C:99:EC:60:F8:4A
            X509v3 Authority Key Identifier:
                keyid:9B:7D:24:41:6A:A8:A4:78:B3:ED:36:E2:E6:58:55:D4:22:59:D9:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m30kQWqopHiz7Tbi5lhV1CJZ2e4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1b8f2a-0abd-4ffb-82f6-ef3bbb05655e/1/m30kQWqopHiz7Tbi5lhV1CJZ2e4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1b8f2a-0abd-4ffb-82f6-ef3bbb05655e/1/m30kQWqopHiz7Tbi5lhV1CJZ2e4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:5b:57:05:9e:51:62:65:b0:92:10:89:14:f8:3e:25:cd:b0:
         69:e5:52:bd:72:5f:00:b6:fe:70:6c:47:95:0c:e1:f6:d1:b2:
         63:9d:e9:10:c7:74:d4:9e:09:37:c4:5d:84:d6:c9:7f:ab:78:
         bf:a6:1a:db:c2:cf:83:48:58:5f:4a:17:03:21:51:63:1b:ab:
         b9:5f:e3:67:85:f4:79:01:f3:85:71:a2:e5:73:14:2a:ca:75:
         a1:9a:41:5e:22:9d:a9:c0:df:47:e5:9e:10:a2:df:13:3b:79:
         b7:ea:7c:16:2d:b4:2c:10:38:6c:02:28:7d:06:fb:74:f1:38:
         70:77:89:25:aa:db:68:dc:86:64:2e:29:8e:7f:ea:7f:b2:4b:
         5d:79:52:06:e2:91:36:1a:df:10:40:c3:23:67:f2:f9:19:38:
         d5:d3:15:50:c1:65:3f:b1:ff:b7:6d:de:57:58:ee:55:54:50:
         d9:ea:bd:36:8c:68:32:12:b9:c2:a7:17:4c:bb:3f:e2:e6:e2:
         df:47:81:de:e3:a7:aa:92:f1:64:d5:bd:59:ae:16:35:b1:bb:
         51:a1:2e:a2:3c:c9:5b:8f:6b:17:13:79:84:fc:8e:7f:cf:8b:
         06:22:bf:5a:13:3b:8f:8e:c3:1a:e7:ef:e9:d0:29:67:24:f4:
         bc:08:e4:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 22:38:58 2025 by rpki-client