Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.mft
File:                     nkWapGAr_6LSZQumaBhFjIn8RYI.mft (raw, json)
Hash identifier:          8UqcvuKE4MU09H1LdJFbMN7VatllUA1rFECPBXpKZPQ=
Subject key identifier:   E1:29:E2:05:D7:30:59:66:4D:D9:CA:06:DC:46:92:9B:36:92:17:76
Authority key identifier: 9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82
Certificate issuer:       /CN=9e459aa4602bffa2d2650ba66818458c89fc4582
Certificate serial:       0199FEB4D7EEA2A2B21FD7A08077F40CF502
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.mft
Manifest number:          16F9
Signing time:             Sun 19 Oct 2025 23:01:28 +0000
Manifest this update:     Sun 19 Oct 2025 23:01:28 +0000
Manifest next update:     Mon 20 Oct 2025 23:01:28 +0000
Files and hashes:         1: 1ZViwBwJWukG7x8H8vOJHhjrl20.roa (hash: +aEN4SwtP07CGGNGf2sl0Ng37swdYqF9I3PWCaVNvKY=)
                          2: 5l7_YEP-iDlpzT3jJy_WcDYbdy0.roa (hash: T/EZxm6KOUDbBcP5LoW3SMWMDqFKAPr6qMUb20NyovQ=)
                          3: BZBW5YOkIp9LbtIp95M8WoQVxcY.roa (hash: X42F21g8cnpx/mEkXiPNfQhd+7IgYORDgkACnwHFRjA=)
                          4: BvpS751y8vUXuWqwmfzJfn2h-Rk.roa (hash: KJ/6LdVihbuD7E6JKoxKY+vTCb8HPS492uKXFwv4y1I=)
                          5: EKZDCBFSzTnUZ-1EZg9n8EZ8oqc.roa (hash: xYPqHPCAO/XyHDtjaojjFFvTaUnv2cV0xvZkEmEN/Lc=)
                          6: Nw0MJW1-17GSjmW0I-SeXIKcXZc.roa (hash: bVKXfQW3a25ibMtG9JEwc2vSFy0FIYerrDATet1Yfbc=)
                          7: Q8hPg5UjvdR5qe3RUKGr181TIsc.roa (hash: HQ9muwIQ/VGCuDJxXs8tCzXWThyvXdcPzV4TeZjGo30=)
                          8: Ubb9BSUymwSV4V7pCCtD-AeNfDg.roa (hash: VLj6KeOPsOnaGNTSbliJq5gjR7omChPt0ofE4tlWJ6c=)
                          9: _HwnYOx8loE1jVo8nfivar_tdig.roa (hash: QhMEIV71/g1ejlZrBi4D/Eo8F39EvYYIljovFNhdaUA=)
                          10: adv2I8ohQ_Aaz3Td1g442WIiJb8.roa (hash: Dm02CNuasphr+tPivahhTRsXMIx045kC5rG2wb2fZlE=)
                          11: nkWapGAr_6LSZQumaBhFjIn8RYI.crl (hash: 8vLuMEc6bTI16ZS4lHdObpe3lJhdo/YrcAzktnoYQV8=)
                          12: wRQWlx5VTlfOioAPy2QXY4Uk2Xg.roa (hash: rPHBxj4mRhTnPsN1GhR6ZZjmr/wkKhGGUErpiW2+PN4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:b4:d7:ee:a2:a2:b2:1f:d7:a0:80:77:f4:0c:f5:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e459aa4602bffa2d2650ba66818458c89fc4582
        Validity
            Not Before: Oct 19 23:01:28 2025 GMT
            Not After : Oct 20 23:01:28 2025 GMT
        Subject: CN=e129e205d73059664dd9ca06dc46929b36921776
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:63:8d:bf:ec:46:a7:8b:88:84:c6:2c:80:af:
                    2d:0f:a8:c1:c3:8e:77:2e:2b:de:30:6f:1f:76:9c:
                    af:69:0e:5e:a8:57:7f:25:bb:35:3b:35:1a:32:3c:
                    17:bb:7f:e3:18:83:17:8f:14:70:eb:7e:0f:9a:33:
                    03:c9:3e:50:e9:5d:ad:bb:72:88:29:52:91:bf:2f:
                    3a:78:05:ff:f4:96:2d:d3:e0:4b:3f:e3:4f:e6:19:
                    44:47:5a:a8:22:e5:13:a9:31:7a:e3:08:1d:4f:1a:
                    3b:4a:35:31:16:a5:e9:64:ea:78:92:17:fe:33:2b:
                    2b:0a:bc:e4:60:3a:23:56:43:56:6d:fc:34:9f:68:
                    7d:ad:37:24:68:b8:80:bc:7c:b9:e2:bf:65:1c:5c:
                    a7:8e:8d:a0:1c:77:0a:38:1e:1b:35:a4:a8:65:a7:
                    4a:47:7d:a8:aa:26:0c:e6:99:f9:21:91:ed:98:6d:
                    42:0d:c5:a8:5c:7f:c4:f1:1f:89:09:ba:a8:f9:1a:
                    f7:fd:d2:d0:2d:f6:cc:f9:6a:72:46:3f:ff:48:82:
                    ae:7b:51:34:48:06:92:8b:7f:bb:69:9a:db:64:5e:
                    bb:c2:32:5d:fe:a6:8b:b7:8c:6f:d9:d4:49:3f:5f:
                    bb:5e:5e:5f:fb:26:6a:8c:8e:c4:69:75:8d:81:32:
                    c0:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:29:E2:05:D7:30:59:66:4D:D9:CA:06:DC:46:92:9B:36:92:17:76
            X509v3 Authority Key Identifier:
                keyid:9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:a5:24:6a:b0:85:10:4d:c4:c7:1d:0f:3e:3c:87:e6:70:97:
         3c:58:5b:70:0a:a2:5b:09:aa:3b:e5:98:05:85:42:53:56:ae:
         c8:a4:47:48:94:ce:27:cf:c2:8c:f9:f6:6c:d6:81:1c:fc:2c:
         b1:2b:63:77:93:eb:b1:2e:af:ab:02:be:1c:b8:cb:34:c0:9c:
         bd:95:63:dd:da:7e:a4:c8:13:7f:e3:ab:8b:fd:1a:e7:e7:b0:
         9b:31:71:98:19:70:b2:08:17:ed:66:b8:7b:f2:65:94:48:17:
         60:1c:51:93:1f:fe:79:2b:42:d4:91:50:ec:0b:e1:93:a5:57:
         e8:c5:b6:5b:a1:b7:4b:99:52:c5:a9:8a:65:e2:a4:e3:d5:34:
         07:22:50:cf:83:a0:15:0b:21:dc:ac:5f:86:8d:3e:51:bf:23:
         2a:44:52:ac:86:ca:b5:66:a5:0f:03:e3:ff:7a:1d:55:6a:7b:
         8a:c2:72:7e:a3:b8:2a:9f:9a:ec:f5:a0:bb:59:0a:8a:6a:65:
         01:77:7e:93:24:f3:65:be:24:67:45:8f:a4:17:4c:93:ad:52:
         35:3e:5d:bd:03:c6:05:9c:85:15:81:fe:1b:fb:36:5a:2e:f6:
         c6:0a:ed:b5:67:4c:64:78:73:1e:c9:78:4c:a9:90:69:bd:ce:
         ce:f6:07:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:09:21 2025 by rpki-client