Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.mft
File:                     9LnqTZ2DpyjdQQKehq-KEw04ntQ.mft (raw, json)
Hash identifier:          5KVzMGn/AvtUMCO82RiAUl9eCSGS5h3cWSmc1w1yJo8=
Subject key identifier:   3F:96:74:22:66:0A:7E:BF:BA:F1:89:92:EE:C9:67:BB:B3:C4:F3:6C
Authority key identifier: F4:B9:EA:4D:9D:83:A7:28:DD:41:02:9E:86:AF:8A:13:0D:38:9E:D4
Certificate issuer:       /CN=f4b9ea4d9d83a728dd41029e86af8a130d389ed4
Certificate serial:       0199FCC683A635AFCAF7FC34712F258F52B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.mft
Manifest number:          1709
Signing time:             Sun 19 Oct 2025 14:01:32 +0000
Manifest this update:     Sun 19 Oct 2025 14:01:32 +0000
Manifest next update:     Mon 20 Oct 2025 14:01:32 +0000
Files and hashes:         1: 9LnqTZ2DpyjdQQKehq-KEw04ntQ.crl (hash: PwBZn5BbqbPN/wxlWt4ouiqAz+WtCoaK5JV5rsnmvv0=)
                          2: GOVDOPz4Ey4aJOQYnZSfbM77b2Y.roa (hash: Tb323u5y8X/hUWvmAhaCMbIdIMzM33n+P05lv44LlyY=)
                          3: MXaN9ynuTzCz5I3XeArng1Txuxc.roa (hash: Cdg3iBSuAVJDj2wnydmyG0jU78/z4Seqn38MNANYyjA=)
                          4: Y4GVnljDwyWTOfTGee3OzDonhig.roa (hash: ySFB8PlG1u+FbnjOQ2dXurRiUOKMmJGUoxmhKEyRUKg=)
                          5: eysMLCnP0aTsaOxEKY1PrTev3gM.roa (hash: hlV2/IUhDlwp241/nuu6G4gV6iGsUWBU0XsfTWbah/w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:c6:83:a6:35:af:ca:f7:fc:34:71:2f:25:8f:52:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4b9ea4d9d83a728dd41029e86af8a130d389ed4
        Validity
            Not Before: Oct 19 14:01:32 2025 GMT
            Not After : Oct 20 14:01:32 2025 GMT
        Subject: CN=3f967422660a7ebfbaf18992eec967bbb3c4f36c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e3:dc:b1:9f:28:b5:59:95:de:28:23:56:00:
                    91:1e:d9:2e:bb:85:ca:19:99:88:8a:7f:67:52:13:
                    c7:0c:43:50:bd:80:7a:f7:be:3c:2b:0b:01:32:1f:
                    76:94:a8:34:29:ad:22:8d:07:6f:0d:fc:74:1f:d1:
                    40:90:d0:8a:11:d5:cf:2f:55:09:3c:78:3f:de:ee:
                    01:bc:a1:93:45:89:39:aa:01:76:55:7d:10:17:0c:
                    ba:03:87:ce:29:9d:c1:3c:08:7f:ff:5d:54:ca:3d:
                    25:17:55:ce:b4:dd:0f:32:1a:78:57:e5:36:c2:1c:
                    46:f2:e2:fa:eb:49:32:05:16:66:66:f8:f7:af:b8:
                    01:d7:57:0c:dc:87:83:ae:4f:60:93:b4:a2:36:62:
                    9d:a0:ab:0a:a8:b8:93:c8:5e:85:ee:2c:8d:a1:e3:
                    88:70:d3:a0:e6:8f:d8:a0:47:91:fc:97:d6:d0:51:
                    47:5e:77:c8:1d:82:2c:2a:c5:f9:ea:ce:cb:22:05:
                    14:c2:7c:78:be:08:7a:3d:18:fa:be:c2:7c:84:43:
                    a4:dd:91:dd:24:67:03:4d:a5:23:57:99:52:5b:ba:
                    7a:8d:b0:34:6b:92:42:a8:e8:cb:46:9e:fc:cd:b2:
                    e2:72:50:0c:b5:2c:26:ab:9b:3b:ab:52:e1:e7:43:
                    65:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:96:74:22:66:0A:7E:BF:BA:F1:89:92:EE:C9:67:BB:B3:C4:F3:6C
            X509v3 Authority Key Identifier:
                keyid:F4:B9:EA:4D:9D:83:A7:28:DD:41:02:9E:86:AF:8A:13:0D:38:9E:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:74:f3:3c:cb:f9:bb:2b:a0:74:19:22:be:9c:5c:19:4b:04:
         7d:3b:c6:48:a0:52:d2:29:ed:c3:7a:75:be:52:c1:07:10:ab:
         95:2a:98:6f:59:d9:26:61:79:f4:9d:1c:ab:eb:c3:03:fc:db:
         f2:d7:50:ae:6b:d2:f8:cb:a2:e1:3c:6b:b4:b4:80:84:84:46:
         af:2b:ba:f4:d1:f8:e8:01:07:fd:9d:6a:3e:45:d6:53:63:99:
         07:8f:4e:85:4a:37:00:f2:32:6b:95:cc:0f:9e:1b:83:f5:63:
         53:e5:87:13:bb:91:b5:d0:34:f5:57:14:4b:36:ad:94:74:a5:
         80:f0:1b:c5:43:8c:64:c8:a1:b1:ec:21:81:f4:e7:ca:28:46:
         a8:42:40:f3:07:81:6e:be:fc:55:1e:b0:b9:31:a5:14:33:e9:
         f1:61:36:60:98:13:f5:da:60:cb:b0:66:b3:68:a2:2c:f2:bb:
         ae:69:5f:7b:bf:a5:69:72:37:9d:0c:6a:1d:27:e6:2d:45:87:
         8d:01:04:1c:c0:a6:fe:0b:a1:f0:ff:1a:a7:69:dc:af:8f:64:
         fd:af:89:60:b7:39:c6:bb:81:68:4b:69:10:ad:74:c0:00:1d:
         b7:ed:22:ad:7a:be:ec:49:8c:f9:7c:69:b6:8d:6b:5b:2c:c5:
         db:60:92:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:30:09 2025 by rpki-client