Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.mft
File:                     nksygbCOa17B_esNBEBSjtk03D8.mft (raw, json)
Hash identifier:          NHZPUoIrUIwuZSI7sH76CojhCvCMKA0iMThLVtx1DM8=
Subject key identifier:   03:C5:7A:A0:B9:97:FC:72:0D:D8:EC:C5:6F:DF:85:A7:AE:60:D5:7B
Authority key identifier: 9E:4B:32:81:B0:8E:6B:5E:C1:FD:EB:0D:04:40:52:8E:D9:34:DC:3F
Certificate issuer:       /CN=9e4b3281b08e6b5ec1fdeb0d0440528ed934dc3f
Certificate serial:       0199FCC606C648E57DB639DEC8BE8C44598A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nksygbCOa17B_esNBEBSjtk03D8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.mft
Manifest number:          16ED
Signing time:             Sun 19 Oct 2025 14:01:00 +0000
Manifest this update:     Sun 19 Oct 2025 14:01:00 +0000
Manifest next update:     Mon 20 Oct 2025 14:01:00 +0000
Files and hashes:         1: L1HdFt_deyOuIyEh6ohLDMoi2Hk.roa (hash: 5OEmyz/JOCY7uzs6X4meQ1O5LJEXih2dkz+QsDhsQ6g=)
                          2: atuec3UTPwJqa2nbFVc6PceCm_U.roa (hash: mxjn4P2BAxt4/rhflGcv4gtLgmXNo6T8LNPaEGy8CeQ=)
                          3: kg9t18MET9vHkp7c3ZCFI-WKvIA.roa (hash: ATnWiMlDUB6UoUtR8mC5SAsRs5s+5t+PXg+EI7niqTU=)
                          4: lnxBICiuOhb0S2Ss6UKdeHcB0oo.roa (hash: hdI3xj2P7Sjw6pCwaS0Na+6UrppqSPkWbMvSGZ4mxkQ=)
                          5: nksygbCOa17B_esNBEBSjtk03D8.crl (hash: epL06Rom8eu1zz7ZyZed4nVsc5z92zbpuu8qqJsQUoY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nksygbCOa17B_esNBEBSjtk03D8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:c6:06:c6:48:e5:7d:b6:39:de:c8:be:8c:44:59:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e4b3281b08e6b5ec1fdeb0d0440528ed934dc3f
        Validity
            Not Before: Oct 19 14:01:00 2025 GMT
            Not After : Oct 20 14:01:00 2025 GMT
        Subject: CN=03c57aa0b997fc720dd8ecc56fdf85a7ae60d57b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b5:b5:98:77:5f:37:9b:f6:1d:12:ac:05:f3:
                    9d:73:af:9b:66:0e:07:96:f1:91:f6:56:e3:db:b3:
                    38:5f:06:23:85:e1:63:07:69:00:11:49:1b:a2:80:
                    9a:6f:b7:26:37:34:79:88:3c:9b:5e:17:46:ab:5b:
                    e4:cf:8f:43:32:f3:10:b1:0c:03:ea:0f:cf:35:be:
                    bf:8b:ef:0d:12:5b:cb:41:63:91:ae:b3:53:6c:fc:
                    b1:99:16:49:2d:25:f3:a9:60:b5:4a:e2:51:dd:e5:
                    bb:84:28:4a:7d:7e:f3:ad:a8:ea:57:b7:69:aa:9a:
                    2a:20:80:64:e5:71:9c:23:9a:34:e1:51:96:8a:98:
                    14:3f:8f:c5:6b:7e:71:72:c4:cf:71:60:76:de:e7:
                    ab:15:9c:59:bf:b0:f8:5a:1e:56:da:0f:52:fb:68:
                    cb:b0:4d:4d:6b:81:89:f3:bf:26:7a:c2:34:30:fa:
                    78:a4:a0:4e:47:6d:0d:c3:64:4d:39:c5:45:97:72:
                    f0:75:c8:64:bb:cc:78:44:f1:0a:45:26:ee:7f:d9:
                    aa:67:02:a9:2a:be:3b:63:78:48:d5:f1:61:c2:6d:
                    a1:e3:49:3c:f1:39:3a:56:bc:4c:c4:2d:21:e3:a0:
                    28:b9:a5:ba:7a:77:0f:3e:aa:ee:81:7b:ed:f4:bc:
                    3e:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:C5:7A:A0:B9:97:FC:72:0D:D8:EC:C5:6F:DF:85:A7:AE:60:D5:7B
            X509v3 Authority Key Identifier:
                keyid:9E:4B:32:81:B0:8E:6B:5E:C1:FD:EB:0D:04:40:52:8E:D9:34:DC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nksygbCOa17B_esNBEBSjtk03D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ff7d33-e4f7-43c0-924b-6b2d46924c6f/1/nksygbCOa17B_esNBEBSjtk03D8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:e0:3d:70:20:bd:8e:c1:6a:60:63:cc:02:d7:d6:8a:ad:d5:
         ac:73:dc:59:d2:2e:9c:85:97:c5:a2:dd:c7:4f:86:73:a7:79:
         89:88:92:b7:11:84:48:74:f5:55:e6:46:2b:53:d3:a2:d8:d7:
         6b:2c:2d:19:88:5b:e2:04:17:8d:21:9e:32:bd:09:83:e3:f8:
         8d:49:30:0e:37:06:58:6f:ee:c3:40:47:76:98:4b:8d:43:55:
         23:e0:ae:41:eb:45:ea:80:f6:4d:0b:d1:a7:dc:bf:4f:59:e2:
         0e:ab:e0:f7:3a:82:8e:82:43:5c:99:be:06:2f:a9:38:2a:fb:
         aa:fe:64:ba:f7:8e:08:5e:7a:25:d2:a2:4f:ec:ed:4c:47:7f:
         4b:da:88:ba:84:12:ff:08:f9:3d:23:cb:a3:4f:38:5c:1e:9c:
         4a:57:4e:d2:21:dd:2f:d5:ed:ff:dc:e1:79:2c:24:e7:83:43:
         a4:8d:b5:94:bc:2c:5a:29:b3:1e:ad:a2:77:33:25:c5:0d:e2:
         ce:2c:c2:d7:01:41:64:a4:f1:cf:d8:d9:b9:b0:1a:e2:86:84:
         32:8b:4b:71:be:32:19:0e:56:92:23:bc:1a:63:53:b8:8c:01:
         37:37:cd:dc:be:23:0d:58:28:dd:5a:cd:61:a3:76:76:b2:a1:
         b5:eb:20:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:07:23 2025 by rpki-client