Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.mft
File:                     9LdppT3YY1LTRA8iK9-QfPCcLbo.mft (raw, json)
Hash identifier:          aFycy8wlZduvUqRanah6LDb/a5bIlkMXeKxU7qTPRcU=
Subject key identifier:   A7:02:DB:89:4C:D4:1C:58:7E:58:87:8A:C0:88:8E:B9:38:77:2A:C6
Authority key identifier: F4:B7:69:A5:3D:D8:63:52:D3:44:0F:22:2B:DF:90:7C:F0:9C:2D:BA
Certificate issuer:       /CN=f4b769a53dd86352d3440f222bdf907cf09c2dba
Certificate serial:       0199FF593F5F730EFBB03AE7194ED8A2AFFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9LdppT3YY1LTRA8iK9-QfPCcLbo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.mft
Manifest number:          16FF
Signing time:             Mon 20 Oct 2025 02:01:02 +0000
Manifest this update:     Mon 20 Oct 2025 02:01:02 +0000
Manifest next update:     Tue 21 Oct 2025 02:01:02 +0000
Files and hashes:         1: 07X0hen1-KbW9Uhkt7xjA-PCLGU.roa (hash: 8+QD86bIku1q5HIr9iB6Xu8OCMzU+b8rQ15QGWkM/rs=)
                          2: 9LdppT3YY1LTRA8iK9-QfPCcLbo.crl (hash: ZijrGYFnj1BmZJb25QOqdmGwGm/ubQYq3EmaSTLwRAQ=)
                          3: Ue3VZrB8a4EG4I_RXK87Uw3OtZs.roa (hash: UZno3qoAs6BNi7dyZDbKw3CxcQ+pse82BKcQlZP0pfM=)
                          4: XljC5T-tfn8kyp8IckkuxduArlE.roa (hash: GpetnE8RGdPeAs90fgd9VHf6P54N2jU+6iw/T8HuxAQ=)
                          5: azUb986KPmjNBXNI1GEnnjHJfR8.roa (hash: 0Eh3zrlfIiIGJgQrMOsGTA9FYjfTizw8KSjWE+UgRQA=)
                          6: gcGX0RK_gzGDW3EhLuEc_DmOeRw.roa (hash: eZFbzavcThmBCXfK06842GFdBQ3cFnn53xBoz77IdHs=)
                          7: urbklb_tMgWulJwput0Uvsn9CsE.roa (hash: WllQD7vTFpOMjfn+nif/0eXgJY9cIhU7nttx45/fv5w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9LdppT3YY1LTRA8iK9-QfPCcLbo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ff:59:3f:5f:73:0e:fb:b0:3a:e7:19:4e:d8:a2:af:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4b769a53dd86352d3440f222bdf907cf09c2dba
        Validity
            Not Before: Oct 20 02:01:02 2025 GMT
            Not After : Oct 21 02:01:02 2025 GMT
        Subject: CN=a702db894cd41c587e58878ac0888eb938772ac6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:3f:88:73:40:ac:4d:0e:eb:de:3c:e6:51:12:
                    94:23:22:d3:74:93:63:81:b2:fd:d0:cb:68:e5:de:
                    c4:e7:db:7b:c0:f6:d4:04:c6:2e:ec:66:a1:ee:60:
                    9b:d9:3f:18:42:cd:fb:30:1a:cf:de:98:d5:9f:58:
                    01:1f:fb:05:c9:11:4d:1a:6d:80:47:0b:5b:ff:41:
                    09:d5:a1:cc:6c:cb:62:be:d4:fe:ab:3e:f7:82:de:
                    6d:bf:a3:09:ec:64:c3:6c:48:6c:21:9c:e7:67:42:
                    ac:e3:7e:2a:04:d2:45:39:2d:28:52:71:9e:d8:ce:
                    3b:87:c9:d7:de:7d:18:ea:0d:65:43:ca:d4:8e:87:
                    34:66:45:23:7e:ca:cc:6a:fb:ac:07:dd:5a:05:52:
                    54:bb:9d:fe:88:49:49:d3:4d:01:f7:de:67:49:98:
                    0e:2d:ef:0d:bc:87:2b:06:07:48:59:7c:6b:34:d1:
                    7d:3c:fa:1c:ac:7a:2c:72:76:00:02:d5:32:8d:ef:
                    b7:e0:4e:46:97:d7:18:81:49:79:5a:f2:fe:a9:97:
                    2a:c6:fd:a3:80:3d:39:09:4b:d3:14:24:24:8b:02:
                    a7:84:ad:46:06:60:b1:d9:8b:2f:26:39:ea:b1:52:
                    77:d1:29:55:c7:f1:48:fe:3c:d9:20:fb:b1:f3:6d:
                    d7:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:02:DB:89:4C:D4:1C:58:7E:58:87:8A:C0:88:8E:B9:38:77:2A:C6
            X509v3 Authority Key Identifier:
                keyid:F4:B7:69:A5:3D:D8:63:52:D3:44:0F:22:2B:DF:90:7C:F0:9C:2D:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LdppT3YY1LTRA8iK9-QfPCcLbo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:55:8d:76:eb:47:e3:ee:17:27:6a:e4:5a:d1:62:d1:87:25:
         07:1f:55:c0:60:61:9e:c8:ee:ef:b2:32:75:83:c4:67:ec:55:
         e7:ce:c1:ce:dd:eb:69:6a:e8:a4:e2:8c:83:ce:84:29:8d:60:
         27:72:46:40:c8:88:38:fb:3f:3e:e5:13:c9:a2:e8:b2:dd:8c:
         88:e2:71:57:23:fa:a3:b8:7e:52:9d:2f:0b:2a:fd:9e:a9:77:
         7c:10:34:a0:1a:58:0f:6c:da:6a:a1:40:cd:f9:3f:f5:1b:f0:
         a5:c4:a6:e0:8a:c0:14:43:92:95:25:32:71:2d:81:a8:2a:f9:
         69:db:cd:f0:4f:1d:32:43:d6:53:9a:fa:e0:27:d8:2c:fa:dc:
         04:55:8b:d1:5b:be:2a:96:90:65:10:be:2a:17:ee:d8:4c:07:
         03:fb:27:d2:c0:2a:74:6c:76:11:2c:35:3a:0a:4f:9e:ab:44:
         7c:f7:7b:e4:6f:51:d0:37:79:35:28:73:90:cd:06:bf:d5:47:
         48:51:ca:e7:90:e0:4c:96:6f:1a:98:73:7c:78:b3:77:8b:c8:
         ec:20:1a:59:e7:46:f6:71:46:60:1e:87:58:76:ba:02:ee:44:
         b3:6c:68:73:bd:9f:4b:ff:23:2d:1e:5b:2c:ed:7f:4f:b3:e0:
         0a:88:f7:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----