Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/F8ID4_NlkjqEPTIgMXocaM903g8.mft
File:                     F8ID4_NlkjqEPTIgMXocaM903g8.mft (raw, json)
Hash identifier:          BWzE6LYWk4yuXlzy+ZNotxK8SytkDV+BjENiSPTlMDE=
Subject key identifier:   30:F4:7F:81:A9:FA:58:AA:E4:F2:A0:0C:8C:1E:80:43:25:58:EA:61
Authority key identifier: 17:C2:03:E3:F3:65:92:3A:84:3D:32:20:31:7A:1C:68:CF:74:DE:0F
Certificate issuer:       /CN=17c203e3f365923a843d3220317a1c68cf74de0f
Certificate serial:       0199FCC68C0655E48D0A0AE1376B20A13069
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F8ID4_NlkjqEPTIgMXocaM903g8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/F8ID4_NlkjqEPTIgMXocaM903g8.mft
Manifest number:          16E8
Signing time:             Sun 19 Oct 2025 14:01:34 +0000
Manifest this update:     Sun 19 Oct 2025 14:01:34 +0000
Manifest next update:     Mon 20 Oct 2025 14:01:34 +0000
Files and hashes:         1: AbDDieAjiM47QPI38uwxhNFokMk.roa (hash: KjxwOHLyj1c1EEBagKLxM0Nr+10mBGuGj4d5BS85kno=)
                          2: F8ID4_NlkjqEPTIgMXocaM903g8.crl (hash: zSo+VpdV6f4dj6Q7HwR0qWy77m48bZpgPVQLGB87Y7I=)
                          3: H5y3Q_dV-Hzo-AC0frra9lLxNUY.roa (hash: dJMeL3gMhdqpU5vNKVA+0HKM1TGv6/U20F1ajMJbf5s=)
                          4: W66fAxMpRHUTy0LH4NsEkImgDCE.roa (hash: AD4DNdRniTHPJR9jh88wIKBDDr7wVfxEb8cYqqVIi8s=)
                          5: cxzV2uhK2NjuqjPJkHztk_poT8Y.roa (hash: mIo2YLuA/BZYjPz5OJ+ykf0uhzsa7DcTrJfwsJ7dA50=)
                          6: g2ksWtxpPbPFQrOSviBQAOSUcSs.roa (hash: S1SF/AyZjw5ZhUKFDKMzcO8zhjr04XXNLLkxtApWuio=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/F8ID4_NlkjqEPTIgMXocaM903g8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/F8ID4_NlkjqEPTIgMXocaM903g8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F8ID4_NlkjqEPTIgMXocaM903g8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:c6:8c:06:55:e4:8d:0a:0a:e1:37:6b:20:a1:30:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17c203e3f365923a843d3220317a1c68cf74de0f
        Validity
            Not Before: Oct 19 14:01:34 2025 GMT
            Not After : Oct 20 14:01:34 2025 GMT
        Subject: CN=30f47f81a9fa58aae4f2a00c8c1e80432558ea61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:f8:df:6b:36:5b:59:b0:2e:4c:5f:1f:ee:51:
                    f7:6d:d7:41:69:d6:92:29:ac:00:e0:d3:5b:f6:4e:
                    9c:76:b0:54:25:fe:59:98:01:5d:de:24:55:57:24:
                    29:94:ca:ae:ca:11:7e:3a:29:a5:63:0e:13:c2:0f:
                    26:0c:fd:3f:8b:ab:ec:7d:2a:84:c7:80:9d:cf:0b:
                    22:3e:68:37:97:87:36:fb:74:77:0c:20:cc:d0:da:
                    ce:3b:e8:36:0a:60:79:ce:32:d9:34:ef:7b:13:7f:
                    99:3f:1f:47:72:92:26:c4:47:b6:6a:64:74:ef:fb:
                    fa:b5:a5:7f:d3:18:db:29:e9:96:39:ab:bf:d7:ee:
                    40:f5:df:ab:24:46:59:16:a4:ba:ab:b0:53:46:dc:
                    36:d4:e8:5e:91:6e:bf:9d:a3:73:2c:29:10:2a:34:
                    b2:f9:eb:c6:19:91:83:88:8e:96:00:e8:d9:46:1d:
                    4b:89:8b:a0:07:35:0a:92:f0:27:74:d0:ef:c5:bb:
                    3f:38:b7:39:78:74:3b:49:23:cd:bd:62:27:88:77:
                    0c:b5:3f:0b:22:1b:66:78:a0:8e:9a:d3:a3:90:9d:
                    87:8a:76:6f:5f:c9:07:f7:a8:cb:53:e8:0b:58:2c:
                    55:c1:35:97:0d:3d:e4:06:fb:07:b0:fa:8d:a5:76:
                    5d:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:F4:7F:81:A9:FA:58:AA:E4:F2:A0:0C:8C:1E:80:43:25:58:EA:61
            X509v3 Authority Key Identifier:
                keyid:17:C2:03:E3:F3:65:92:3A:84:3D:32:20:31:7A:1C:68:CF:74:DE:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F8ID4_NlkjqEPTIgMXocaM903g8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/F8ID4_NlkjqEPTIgMXocaM903g8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/F8ID4_NlkjqEPTIgMXocaM903g8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:0b:d5:38:10:c9:f7:8a:ca:32:8c:85:ab:bc:7d:22:9d:c7:
         30:c0:87:f3:3a:bf:55:c9:f3:19:4e:5c:a6:74:60:fb:c1:1d:
         b8:dd:c8:da:97:ff:a6:8c:2e:67:a1:1b:aa:e3:0c:06:6c:53:
         81:b3:74:c6:24:bf:2d:b1:20:43:2b:a5:1e:b1:0e:79:89:70:
         95:04:54:e4:17:d1:48:c1:c2:7c:cc:50:1d:67:d0:ab:ae:03:
         67:21:7c:f8:4c:08:dc:83:b3:69:36:29:f8:7a:77:57:e8:4f:
         2c:2d:40:c2:af:33:93:4f:60:4f:90:f9:d3:d2:f9:9b:05:3b:
         fd:d4:cb:e1:95:3e:ad:07:ba:39:b4:78:65:4f:23:dc:33:28:
         94:75:09:0f:fc:33:d9:d3:ce:30:7e:40:78:05:1c:e9:c7:91:
         43:97:d6:7f:e1:d6:c3:41:a3:39:d3:6c:01:6f:e4:0e:60:2d:
         b6:8d:82:11:c8:8d:d5:73:02:8d:2c:79:62:08:4b:dc:a8:5d:
         14:73:06:a0:80:f1:61:30:49:ff:d5:90:98:80:5a:0a:98:8f:
         e5:45:ce:88:13:44:b7:17:73:f8:39:ad:1c:08:0b:08:b5:49:
         1c:23:88:49:08:3e:fa:71:7a:62:32:39:2e:49:da:19:53:cc:
         ab:35:71:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:49:34 2025 by rpki-client