Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/eca327-d58f-491c-94c8-e3d045483412/1/nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.mft
File:                     nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.mft (raw, json)
Hash identifier:          T91XJSR12HoiHuOzOb/AO12CwShZ3MBmT7WppslxA8E=
Subject key identifier:   DB:22:BB:4B:9F:09:5E:E0:36:14:E0:FB:C0:EB:A6:06:10:47:D8:D0
Authority key identifier: 9E:61:40:3A:C6:9E:28:74:F5:62:2D:7E:E5:68:E8:E4:9F:06:4C:2E
Certificate issuer:       /CN=9e61403ac69e2874f5622d7ee568e8e49f064c2e
Certificate serial:       0199FB45B8A736F3CE9B401912CB2B885CB1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/eca327-d58f-491c-94c8-e3d045483412/1/nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.mft
Manifest number:          16E4
Signing time:             Sun 19 Oct 2025 07:01:14 +0000
Manifest this update:     Sun 19 Oct 2025 07:01:14 +0000
Manifest next update:     Mon 20 Oct 2025 07:01:14 +0000
Files and hashes:         1: k80BCKNHzgDvKK_3k-MEya8lNoM.roa (hash: XRBQsFrhhLJ6RMDFPAKpPWk13Lc3Ws+YcSUdoLvIOo8=)
                          2: nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.crl (hash: qH6X8iYzjeZn3JiVLRbhXT/u2Duxut7Z18d4Tn5VMuk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/eca327-d58f-491c-94c8-e3d045483412/1/nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/eca327-d58f-491c-94c8-e3d045483412/1/nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:45:b8:a7:36:f3:ce:9b:40:19:12:cb:2b:88:5c:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e61403ac69e2874f5622d7ee568e8e49f064c2e
        Validity
            Not Before: Oct 19 07:01:14 2025 GMT
            Not After : Oct 20 07:01:14 2025 GMT
        Subject: CN=db22bb4b9f095ee03614e0fbc0eba6061047d8d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:eb:26:c9:14:d8:e7:c0:65:32:4f:0c:7a:7d:
                    28:23:f3:62:48:e7:14:9d:c0:10:9d:eb:cc:78:c1:
                    25:01:7f:0f:8b:88:2a:66:60:fd:27:58:43:5c:75:
                    29:ae:ba:ad:26:66:d5:48:a9:ef:60:26:cf:06:26:
                    bf:1d:9e:42:6b:16:f1:31:4b:ba:3a:1f:9a:32:90:
                    5b:a9:cc:b1:c9:09:fa:d3:f3:f4:73:35:82:75:7c:
                    73:e8:60:69:d9:b1:4d:8d:d5:8e:f3:62:b3:71:93:
                    8e:f6:75:0b:5c:f6:39:2b:cc:ef:8e:69:a4:21:11:
                    0e:d1:73:93:55:6c:b6:3d:bf:3b:bb:cd:85:17:d1:
                    d3:e9:1f:14:42:10:70:e1:d0:ce:5d:5d:d6:b2:66:
                    cc:89:dd:4f:e8:08:d6:26:27:7a:6f:1e:82:db:3f:
                    6e:ef:b2:43:b3:4b:3a:80:2a:18:1a:1c:28:4b:52:
                    48:ee:be:49:79:91:b0:22:19:73:1c:09:5e:2f:fd:
                    91:88:28:94:8c:b6:34:0b:0a:bc:e2:b4:3a:ae:b8:
                    33:b0:ca:b5:c3:27:40:e2:2d:f1:19:4e:0b:59:2a:
                    c8:98:8c:3d:d2:3b:44:76:b8:90:fb:ca:e2:c7:32:
                    1f:0c:c0:2b:d3:73:cb:0d:73:26:91:6b:fc:09:ab:
                    7c:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:22:BB:4B:9F:09:5E:E0:36:14:E0:FB:C0:EB:A6:06:10:47:D8:D0
            X509v3 Authority Key Identifier:
                keyid:9E:61:40:3A:C6:9E:28:74:F5:62:2D:7E:E5:68:E8:E4:9F:06:4C:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/eca327-d58f-491c-94c8-e3d045483412/1/nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/eca327-d58f-491c-94c8-e3d045483412/1/nmFAOsaeKHT1Yi1-5Wjo5J8GTC4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:76:04:08:35:36:3e:c8:06:20:2e:81:aa:37:7a:b3:04:c5:
         70:0c:57:cf:4a:b3:8a:07:d0:11:10:5e:91:08:bc:44:12:49:
         13:b0:cd:98:73:bb:36:1b:3f:3f:e9:f5:be:3e:1b:83:a2:f8:
         7a:d6:59:c5:37:b5:d9:35:94:75:0d:eb:24:e4:0e:97:50:d4:
         70:a6:69:e0:7c:1d:47:e5:92:c8:84:27:8c:57:c1:36:38:05:
         80:87:7c:6c:0e:f6:7d:a7:65:26:c2:28:36:e9:c1:2c:4c:da:
         f8:70:43:41:b2:62:9f:ed:15:95:8c:27:3e:39:b3:69:13:ef:
         e9:27:b0:3e:43:5f:d6:62:50:17:09:54:9b:4a:b4:8a:2f:ee:
         30:40:b6:8f:0b:66:90:79:2d:bf:7d:46:d0:fb:99:c6:d1:f0:
         10:7f:b2:0e:55:dc:08:f2:7c:9b:43:13:ca:96:e3:82:e6:b1:
         e8:89:d2:b5:0a:f0:38:fd:71:b2:55:3f:26:46:e7:41:cf:36:
         29:23:f4:c5:e0:ad:77:29:6e:c5:38:1b:b8:e1:25:3b:41:cc:
         d0:cd:74:cd:df:b2:2a:fc:95:72:dc:5d:74:a0:eb:fd:1c:03:
         61:67:87:ce:e0:56:3a:1d:3f:85:7c:69:c8:6f:2b:8c:5c:9c:
         b6:18:0d:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:19:08 2025 by rpki-client