Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/fc87fa-cbfa-4f3c-88d3-ba922bb1ebb4/1/jvZmka06QWUvW9hZYjCzrHQ9Kiw.mft
File:                     jvZmka06QWUvW9hZYjCzrHQ9Kiw.mft (raw, json)
Hash identifier:          QJp2QmEWO7xvpUC6rDuV5Cgc12kDJQhPNg12dT496vE=
Subject key identifier:   81:DC:68:8C:30:B8:97:2F:31:BC:F1:23:74:BB:EE:A2:B8:7C:1B:00
Authority key identifier: 8E:F6:66:91:AD:3A:41:65:2F:5B:D8:59:62:30:B3:AC:74:3D:2A:2C
Certificate issuer:       /CN=8ef66691ad3a41652f5bd8596230b3ac743d2a2c
Certificate serial:       019A06DB1BE36DABA274D24D78D6172E468A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jvZmka06QWUvW9hZYjCzrHQ9Kiw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/fc87fa-cbfa-4f3c-88d3-ba922bb1ebb4/1/jvZmka06QWUvW9hZYjCzrHQ9Kiw.mft
Manifest number:          09B9
Signing time:             Tue 21 Oct 2025 13:00:14 +0000
Manifest this update:     Tue 21 Oct 2025 13:00:14 +0000
Manifest next update:     Wed 22 Oct 2025 13:00:14 +0000
Files and hashes:         1: ZqkZ-ptbKplSamN_ahWuL-lHnJ8.roa (hash: irGPnE0iOTBsb5GQGAY7EsHYbFxfevPkFPknKA/OeLU=)
                          2: jvZmka06QWUvW9hZYjCzrHQ9Kiw.crl (hash: FYlsuKCd991qJDRFco35ralKnEmspuNgWsKONRAYc7Y=)
                          3: m3ntsGfgdnDGCMt-rflzxFG_JnA.roa (hash: q9gBjMOYNP/zGmo2wuYydWBWqzVkvYiKaSBdRO8K4Uw=)
                          4: x_kEH2zJHHewCxquQN5i7Z2Jnvs.roa (hash: I2PK/LRtL0RyVycXgEUMToWLxsYstXAQXdiOl9wEuF4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/fc87fa-cbfa-4f3c-88d3-ba922bb1ebb4/1/jvZmka06QWUvW9hZYjCzrHQ9Kiw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/fc87fa-cbfa-4f3c-88d3-ba922bb1ebb4/1/jvZmka06QWUvW9hZYjCzrHQ9Kiw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jvZmka06QWUvW9hZYjCzrHQ9Kiw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Oct 2025 13:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:06:db:1b:e3:6d:ab:a2:74:d2:4d:78:d6:17:2e:46:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ef66691ad3a41652f5bd8596230b3ac743d2a2c
        Validity
            Not Before: Oct 21 13:00:14 2025 GMT
            Not After : Oct 22 13:00:14 2025 GMT
        Subject: CN=81dc688c30b8972f31bcf12374bbeea2b87c1b00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:8e:e9:09:28:c6:fb:cb:d5:b0:81:b8:26:38:
                    9b:fa:84:ae:b6:e6:35:4b:be:ab:89:3c:84:fb:0d:
                    83:cf:50:76:f0:a1:7b:21:51:ee:bf:f7:db:da:42:
                    38:d0:29:81:71:41:95:9e:39:95:8f:77:86:eb:53:
                    dd:af:d7:2b:04:aa:cf:98:b1:9e:93:32:b8:44:0a:
                    bb:1c:c1:6a:c0:a3:80:b7:8e:96:ea:99:d2:93:e7:
                    6d:4a:b7:78:5b:23:be:a9:16:8c:10:06:7c:68:aa:
                    15:ea:84:ce:be:06:6d:fe:29:94:57:bc:f5:a5:5d:
                    79:e1:09:a7:1c:a6:e8:99:c8:fc:33:4d:44:94:2b:
                    ff:17:2a:cf:b9:ec:a1:1a:00:12:54:55:b4:00:40:
                    b5:58:30:10:ca:d2:4c:18:36:ec:cb:85:8c:e4:48:
                    7d:d0:74:e8:37:4b:55:9c:46:dd:b4:b7:6f:a9:78:
                    b9:a9:95:9b:3a:be:a2:d3:2b:e6:8e:59:fa:82:ed:
                    78:17:77:57:14:86:48:c8:2a:38:ef:b8:ae:48:49:
                    b9:bb:aa:47:90:0a:4c:ed:b7:78:e8:76:25:b5:d5:
                    05:e4:f0:c1:9c:82:c1:bd:db:de:d1:5e:1f:d3:17:
                    5c:ae:57:04:44:3a:98:4f:fb:7a:d8:c1:5e:0a:38:
                    0a:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:DC:68:8C:30:B8:97:2F:31:BC:F1:23:74:BB:EE:A2:B8:7C:1B:00
            X509v3 Authority Key Identifier:
                keyid:8E:F6:66:91:AD:3A:41:65:2F:5B:D8:59:62:30:B3:AC:74:3D:2A:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jvZmka06QWUvW9hZYjCzrHQ9Kiw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/fc87fa-cbfa-4f3c-88d3-ba922bb1ebb4/1/jvZmka06QWUvW9hZYjCzrHQ9Kiw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/fc87fa-cbfa-4f3c-88d3-ba922bb1ebb4/1/jvZmka06QWUvW9hZYjCzrHQ9Kiw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:1e:df:3c:de:5a:ab:13:90:b0:a3:63:96:76:65:d8:de:00:
         5b:4e:81:af:70:26:18:df:4b:51:db:1e:29:19:24:60:fc:92:
         a1:b3:dd:fc:84:8d:40:e7:17:c8:e0:bf:48:86:f1:1c:9b:4e:
         07:78:98:d7:93:ce:17:77:f3:7e:7e:a3:d7:89:9c:cf:a4:06:
         94:fd:32:0a:3c:61:88:e7:6f:69:9b:a5:ee:2e:1e:52:b6:87:
         75:5e:66:6d:2d:f0:73:c2:9f:b0:51:1d:0e:ad:02:c1:d2:1c:
         30:b9:61:6a:49:56:48:cf:60:dd:20:5d:e1:dc:f7:10:93:9b:
         ad:ab:ab:bb:3c:f1:93:0e:13:05:de:af:86:e0:12:04:11:fa:
         18:5e:53:60:b3:45:a1:ea:68:32:60:57:1d:6d:56:cc:26:63:
         a5:4f:ee:01:ce:66:58:9d:c6:4b:90:c7:08:da:e3:20:c5:ac:
         66:d2:44:9b:6b:14:dd:4c:f9:ee:e5:8c:87:7b:e9:62:11:76:
         79:96:65:6f:d1:28:fa:db:74:e3:95:45:2d:3d:0b:30:29:44:
         9f:eb:a8:bc:54:01:c9:0c:11:32:a2:fb:94:00:15:f5:68:cf:
         fa:0d:cc:4b:2b:77:6a:ea:a0:06:f8:ca:0a:0c:65:e5:4e:ce:
         30:27:26:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 20:29:44 2025 by rpki-client