Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.mft
File:                     znBIWLZDJm98cQdyHJjyupPdUmU.mft (raw, json)
Hash identifier:          iNF9w/nfgieCVh1A+G02K92FQss4LwHHd/7mT6P/jJs=
Subject key identifier:   59:9F:CC:12:3D:9E:15:24:AB:F2:E3:37:35:CB:C4:CF:9D:6F:7D:3B
Authority key identifier: CE:70:48:58:B6:43:26:6F:7C:71:07:72:1C:98:F2:BA:93:DD:52:65
Certificate issuer:       /CN=ce704858b643266f7c7107721c98f2ba93dd5265
Certificate serial:       019A029120FFF0544B13E41239F7FA6373F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/znBIWLZDJm98cQdyHJjyupPdUmU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.mft
Manifest number:          16E9
Signing time:             Mon 20 Oct 2025 17:00:56 +0000
Manifest this update:     Mon 20 Oct 2025 17:00:56 +0000
Manifest next update:     Tue 21 Oct 2025 17:00:56 +0000
Files and hashes:         1: AlHpyxCGMtfizbttFRiRDBrpWE8.roa (hash: HEta5iZuaZfWfkQQtCG/hwIx007nSp0VAlOWKt9bqno=)
                          2: YnxGCtZHjBins_u7hbvZvkt5GP0.roa (hash: h0irCh3dXAANqMbOKNJ1CMyoogPZbPx+cpJ+hvCcEkU=)
                          3: sCibVmGvlfhOnP7xuISl7fg77mg.roa (hash: zU3gdGka1CEw6yQdMuB6aUaLsTOoMwjYj0HnH6sxIvc=)
                          4: znBIWLZDJm98cQdyHJjyupPdUmU.crl (hash: mJaPXY9BOkXcMtvwyfRLND1BLyeSkyktihp8q6fjoCg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/znBIWLZDJm98cQdyHJjyupPdUmU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:42:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:02:91:20:ff:f0:54:4b:13:e4:12:39:f7:fa:63:73:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce704858b643266f7c7107721c98f2ba93dd5265
        Validity
            Not Before: Oct 20 17:00:56 2025 GMT
            Not After : Oct 21 17:00:56 2025 GMT
        Subject: CN=599fcc123d9e1524abf2e33735cbc4cf9d6f7d3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:18:5c:ff:c1:0b:d0:43:64:c9:ee:a3:82:15:
                    41:2d:02:ec:9f:fc:fc:04:6d:a7:dd:02:70:71:df:
                    49:75:4e:f4:ec:ce:3d:b5:40:0b:99:f3:15:28:9e:
                    53:3a:80:af:b9:ac:25:a4:52:ce:9e:60:54:f2:89:
                    67:b1:64:25:12:84:3b:29:e3:7f:16:1b:43:62:3b:
                    40:ce:50:1b:c9:17:b0:0c:e8:98:23:8c:2d:2b:cc:
                    70:77:83:71:06:7c:c3:cf:16:33:94:82:21:67:26:
                    b2:dd:cd:af:3f:1a:e7:3f:7b:9c:e4:01:a7:e5:8c:
                    ce:39:5c:56:4f:c6:7c:89:b0:5c:66:4c:8e:1f:33:
                    7c:6f:15:bf:e3:0a:1c:56:36:bf:11:c4:47:bc:16:
                    14:b6:24:b3:89:4f:4f:55:f3:15:68:71:a9:f7:a2:
                    63:37:40:e1:f3:99:fd:bf:69:e7:1f:9b:a8:30:92:
                    12:0d:12:25:2b:b6:ac:23:46:c7:c2:8a:f5:9e:bf:
                    1f:9b:bc:51:06:24:62:48:d2:4e:a1:e5:d1:5f:3a:
                    eb:c9:85:95:fe:0c:e8:42:45:49:b9:2a:e6:e0:06:
                    4d:c5:56:54:9c:4d:7f:dc:4f:98:68:cf:ca:4c:45:
                    79:14:99:f0:a3:b7:9b:03:82:46:48:0e:a4:dc:98:
                    95:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:9F:CC:12:3D:9E:15:24:AB:F2:E3:37:35:CB:C4:CF:9D:6F:7D:3B
            X509v3 Authority Key Identifier:
                keyid:CE:70:48:58:B6:43:26:6F:7C:71:07:72:1C:98:F2:BA:93:DD:52:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/znBIWLZDJm98cQdyHJjyupPdUmU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:92:7a:b9:da:5f:91:92:1e:d2:d2:0f:b8:48:24:2f:a4:f5:
         79:e6:0b:b1:ec:ef:b7:9b:9c:72:10:d8:f1:a2:52:3d:36:77:
         e2:bd:d1:99:f2:95:59:d9:9f:98:d7:64:51:e0:fb:98:f1:c0:
         f6:11:f1:3a:79:6c:61:79:4c:50:6e:19:50:59:35:5c:34:7a:
         f4:56:6a:09:69:36:67:30:82:ea:aa:1c:5a:ad:4e:2f:4a:c9:
         95:fb:91:aa:e3:a8:e2:8b:45:f1:ea:4c:75:10:01:21:69:c9:
         96:d8:5d:12:ed:ec:1f:2a:fc:8c:e6:ba:dd:d2:23:4c:06:ef:
         73:17:fd:bf:22:95:00:51:5c:c0:ee:c6:05:fc:b2:c2:99:79:
         e2:31:5e:49:56:b2:85:b3:bb:d2:2b:86:b1:f4:46:a0:2f:1a:
         c1:a4:72:76:ae:9b:10:87:af:4b:7a:83:c9:b4:bf:30:5b:ab:
         f8:e2:29:e4:04:c6:97:87:8d:e0:14:51:6e:75:3c:e2:b2:e0:
         e6:d6:78:2a:92:79:f6:95:1b:67:9a:46:e8:34:04:2b:89:10:
         92:51:1e:28:34:8e:6a:0e:8c:db:e7:49:85:96:8b:d9:5f:fb:
         dc:54:50:30:72:1a:b3:53:4c:30:56:04:11:98:b7:c3:05:65:
         55:5c:d1:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:11:05 2025 by rpki-client