Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.mft
File:                     n4IkN_Se1TiGaJAir93aWfefinE.mft (raw, json)
Hash identifier:          OudwZxAdSGG8d4vcPsmqbhwpJfayIL5LNkLTDSAF2zw=
Subject key identifier:   E1:10:0C:81:01:EA:17:1E:23:19:B5:F7:25:36:E0:ED:87:49:AD:F3
Authority key identifier: 9F:82:24:37:F4:9E:D5:38:86:68:90:22:AF:DD:DA:59:F7:9F:8A:71
Certificate issuer:       /CN=9f822437f49ed53886689022afddda59f79f8a71
Certificate serial:       019A00DA1F0A62C6DE0EF661990770789C95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n4IkN_Se1TiGaJAir93aWfefinE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.mft
Manifest number:          09DB
Signing time:             Mon 20 Oct 2025 09:01:26 +0000
Manifest this update:     Mon 20 Oct 2025 09:01:26 +0000
Manifest next update:     Tue 21 Oct 2025 09:01:26 +0000
Files and hashes:         1: IdEYIsWCps3Gl-CPOJNmXVY_KDA.roa (hash: V5/YEnbALkGDiezb6/4H3zOCBx4UZLrATG4CYdBNlRA=)
                          2: n4IkN_Se1TiGaJAir93aWfefinE.crl (hash: 1OaOY1j03pBhVhIeXe1GDBmeGCHVPTjTi5ApcJcQBbA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n4IkN_Se1TiGaJAir93aWfefinE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 09:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:00:da:1f:0a:62:c6:de:0e:f6:61:99:07:70:78:9c:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f822437f49ed53886689022afddda59f79f8a71
        Validity
            Not Before: Oct 20 09:01:26 2025 GMT
            Not After : Oct 21 09:01:26 2025 GMT
        Subject: CN=e1100c8101ea171e2319b5f72536e0ed8749adf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:37:f1:1d:ac:7e:9f:b5:af:27:00:de:13:54:
                    e0:d9:ac:5f:48:00:b2:42:46:0e:d7:9d:a3:2f:53:
                    77:e7:84:9c:e0:1e:d7:ac:44:58:66:ef:7a:8b:ae:
                    60:09:9b:d1:f2:fd:fc:d9:12:7c:ed:75:98:d8:26:
                    6f:3a:17:4a:6a:a7:32:6f:3d:55:53:05:70:01:61:
                    41:4d:a0:01:a5:dc:69:43:e7:28:15:82:0a:1f:ab:
                    a4:7e:98:16:7e:8d:1d:2c:2d:c5:d4:70:9d:bd:2d:
                    07:30:0d:e3:0c:ca:f5:a9:5b:a4:85:18:e5:b5:0e:
                    20:72:8f:70:da:a3:dd:85:50:51:96:36:43:ea:72:
                    68:31:85:6f:ff:37:c3:70:e7:af:76:4e:dc:d1:f3:
                    3f:d3:bf:95:8f:06:2d:b7:6b:dd:ec:18:7c:5e:67:
                    a8:7f:d7:6d:a4:f5:df:46:b9:3e:d4:92:20:0f:40:
                    6b:61:c0:d4:01:7e:c0:1e:2b:9e:0c:a3:a5:49:98:
                    eb:4f:52:2f:3a:75:49:c6:a0:9d:e1:dd:a8:61:99:
                    42:5a:56:e9:80:56:53:61:2f:8e:93:4a:9b:9d:86:
                    3f:f2:e8:f7:98:d0:50:d3:7f:c0:03:b0:e3:a6:53:
                    b8:84:23:a3:e7:95:da:e3:46:64:e5:5b:a2:3e:8e:
                    31:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:10:0C:81:01:EA:17:1E:23:19:B5:F7:25:36:E0:ED:87:49:AD:F3
            X509v3 Authority Key Identifier:
                keyid:9F:82:24:37:F4:9E:D5:38:86:68:90:22:AF:DD:DA:59:F7:9F:8A:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n4IkN_Se1TiGaJAir93aWfefinE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:cd:98:8b:12:c5:29:97:d1:b1:c0:d9:25:81:64:72:e2:a1:
         7d:4b:8b:c2:91:21:cb:43:de:33:1f:e3:37:04:e2:07:c3:84:
         84:28:5f:53:5c:99:cc:c5:e7:6c:eb:66:65:85:3d:38:d8:d9:
         7e:f5:3d:59:14:0b:56:a6:58:c0:7b:75:14:21:50:99:4f:fd:
         cc:bc:af:72:af:99:b5:1d:31:e2:81:e7:bd:a6:51:f0:7b:ee:
         d7:83:61:9c:d5:20:2b:9c:14:ee:be:4d:46:e2:9c:7f:a4:d6:
         96:73:e9:bc:18:e5:94:11:3e:1a:f9:57:2e:ee:eb:0a:fd:83:
         58:3e:e8:d3:34:6b:ea:45:21:29:f7:f1:80:c1:7a:bb:35:3f:
         71:4a:2c:50:af:68:4f:a1:fa:a3:48:48:59:55:bc:a8:5f:90:
         7f:a0:17:1b:c7:f3:c7:59:e5:7e:ac:4b:20:5e:b6:ee:d6:89:
         9b:ed:93:d5:e9:1d:35:2f:dd:2b:cc:e8:e7:c5:88:d8:5a:e8:
         55:98:13:30:c2:46:05:13:e3:a9:85:e0:bc:7d:cf:8a:12:23:
         13:74:ed:a0:45:22:06:98:51:c3:2c:5f:d8:df:0b:91:fc:9b:
         af:e4:98:0a:38:58:69:44:dd:8b:47:4e:5d:ce:dc:28:5a:99:
         c4:d6:31:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoA2h8KYsbeDvZhmQdweJyVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmODIyNDM3ZjQ5ZWQ1Mzg4NjY4OTAyMmFmZGRkYTU5Zjc5
ZjhhNzEwHhcNMjUxMDIwMDkwMTI2WhcNMjUxMDIxMDkwMTI2WjAzMTEwLwYDVQQD
EyhlMTEwMGM4MTAxZWExNzFlMjMxOWI1ZjcyNTM2ZTBlZDg3NDlhZGYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDfxHax+n7WvJwDeE1Tg2axfSACy
QkYO152jL1N354Sc4B7XrERYZu96i65gCZvR8v382RJ87XWY2CZvOhdKaqcybz1V
UwVwAWFBTaABpdxpQ+coFYIKH6ukfpgWfo0dLC3F1HCdvS0HMA3jDMr1qVukhRjl
tQ4gco9w2qPdhVBRljZD6nJoMYVv/zfDcOevdk7c0fM/07+VjwYtt2vd7Bh8Xmeo
f9dtpPXfRrk+1JIgD0BrYcDUAX7AHiueDKOlSZjrT1IvOnVJxqCd4d2oYZlCWlbp
gFZTYS+Ok0qbnYY/8uj3mNBQ03/AA7DjplO4hCOj55Xa40Zk5VuiPo4xiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOEQDIEB6hceIxm19yU24O2HSa3zMB8GA1UdIwQY
MBaAFJ+CJDf0ntU4hmiQIq/d2ln3n4pxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjRJa05fU2UxVGlHYUpBaXI5M2FXZmVmaW5FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9jYmQzMzItYThkYi00NjA2LWFjOWIt
MTRlYzQxZDRjMGE2LzEvbjRJa05fU2UxVGlHYUpBaXI5M2FXZmVmaW5FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi9jYmQzMzItYThkYi00NjA2LWFjOWItMTRlYzQxZDRjMGE2
LzEvbjRJa05fU2UxVGlHYUpBaXI5M2FXZmVmaW5FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAc2YixLF
KZfRscDZJYFkcuKhfUuLwpEhy0PeMx/jNwTiB8OEhChfU1yZzMXnbOtmZYU9ONjZ
fvU9WRQLVqZYwHt1FCFQmU/9zLyvcq+ZtR0x4oHnvaZR8Hvu14NhnNUgK5wU7r5N
RuKcf6TWlnPpvBjllBE+GvlXLu7rCv2DWD7o0zRr6kUhKffxgMF6uzU/cUosUK9o
T6H6o0hIWVW8qF+Qf6AXG8fzx1nlfqxLIF627taJm+2T1ekdNS/dK8zo58WI2Fro
VZgTMMJGBRPjqYXgvH3PihIjE3TtoEUiBphRwyxf2N8Lkfybr+SYCjhYaUTdi0dO
Xc7cKFqZxNYxNA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 13:16:14 2025 by rpki-client