Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.mft
File:                     U_NZCAnRh_ezYfskzUP5P2ZLILM.mft (raw, json)
Hash identifier:          H3FwdyZTzu5pRgMSRVDCqu/upDM+fzFCaTDbkJHTImQ=
Subject key identifier:   C9:AD:D2:D6:FF:CD:88:3E:A3:5D:FF:C5:84:D3:99:9A:17:26:CE:92
Authority key identifier: 53:F3:59:08:09:D1:87:F7:B3:61:FB:24:CD:43:F9:3F:66:4B:20:B3
Certificate issuer:       /CN=53f3590809d187f7b361fb24cd43f93f664b20b3
Certificate serial:       0199FC217AE0596B578986B3EDB43AF0D01F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U_NZCAnRh_ezYfskzUP5P2ZLILM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.mft
Manifest number:          16E7
Signing time:             Sun 19 Oct 2025 11:01:16 +0000
Manifest this update:     Sun 19 Oct 2025 11:01:16 +0000
Manifest next update:     Mon 20 Oct 2025 11:01:16 +0000
Files and hashes:         1: 4yhrEPquDWqMWiUEurgxgpe4Z64.roa (hash: GAPEp0iDkhSK0QKol83Ga2o50iNkeUXCz5jUqWOb9Ow=)
                          2: 5piZhUc6B_Q8SXnCvmVdLn755tk.roa (hash: 1kX1fTcGnU3vqt6H68WNwGSWbpk3Ul9d3oLOLIk5xOI=)
                          3: 8nljJg7c24IFr_Sv-LV4LOMZqPI.roa (hash: deVXwXvj6xoqe5dfSwVOJXQZSoWKbMhfJNni40tWyZY=)
                          4: U_NZCAnRh_ezYfskzUP5P2ZLILM.crl (hash: otwEoA0wfg4IAQfI+LpqqiV9LPIEZB4gzU+DFnbUkrs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U_NZCAnRh_ezYfskzUP5P2ZLILM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:21:7a:e0:59:6b:57:89:86:b3:ed:b4:3a:f0:d0:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53f3590809d187f7b361fb24cd43f93f664b20b3
        Validity
            Not Before: Oct 19 11:01:16 2025 GMT
            Not After : Oct 20 11:01:16 2025 GMT
        Subject: CN=c9add2d6ffcd883ea35dffc584d3999a1726ce92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:cf:87:12:f1:f7:fa:4a:e2:62:89:71:ef:22:
                    11:6c:70:7e:6a:82:2e:2a:58:7e:8e:76:58:59:75:
                    89:14:2f:72:4e:20:ba:85:09:7f:b6:bd:d5:d4:a3:
                    4b:ad:c9:f9:65:72:72:68:65:bb:84:02:33:50:30:
                    04:99:80:28:a9:10:4b:e3:63:10:dd:6e:02:dc:b0:
                    17:1f:5d:22:11:74:99:76:94:66:61:74:fa:f7:e7:
                    48:d8:02:fd:15:f5:30:4e:de:40:22:20:51:bc:40:
                    e2:58:67:b2:f6:92:22:b0:5a:28:73:a7:73:03:0d:
                    50:8b:d3:17:26:cd:e8:96:ae:97:30:8d:3a:62:ea:
                    e3:eb:16:3f:92:2b:31:70:9b:17:6b:3d:20:df:ff:
                    6e:d9:6a:27:9e:f3:76:19:59:9d:f6:66:ba:47:3d:
                    4d:74:b4:9c:b1:0d:01:59:9b:bc:5b:1b:7d:25:3a:
                    ef:50:4d:0f:48:aa:48:69:cb:8f:2b:8b:0e:9d:29:
                    b2:d9:0d:a9:93:10:50:af:75:04:45:0c:a6:14:c3:
                    46:a4:43:9f:34:8a:43:fb:43:99:31:3e:57:8a:2b:
                    33:af:39:58:88:f5:a0:3a:cb:cf:77:78:0b:f6:0f:
                    47:96:f4:42:3b:38:f8:bf:60:83:3a:13:18:d7:ce:
                    c0:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:AD:D2:D6:FF:CD:88:3E:A3:5D:FF:C5:84:D3:99:9A:17:26:CE:92
            X509v3 Authority Key Identifier:
                keyid:53:F3:59:08:09:D1:87:F7:B3:61:FB:24:CD:43:F9:3F:66:4B:20:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_NZCAnRh_ezYfskzUP5P2ZLILM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:57:6c:2e:e0:c9:c1:4a:d4:c9:00:72:1c:f2:d9:b0:54:15:
         91:2e:64:7b:ca:26:5f:21:6a:c1:93:12:27:5f:34:43:45:b2:
         67:13:5b:02:c2:03:a2:49:23:d5:dd:d1:55:c0:50:8f:65:17:
         74:9e:97:63:ce:87:fe:e9:2e:c7:b5:a6:82:72:ae:8c:c8:08:
         4a:64:a7:95:a2:30:21:bb:7e:0d:c4:f7:44:69:ae:82:82:fb:
         94:a2:a9:43:bf:ae:15:c8:e4:e9:9b:67:a6:82:a2:19:c0:db:
         1a:56:3e:13:31:d9:94:c3:02:ec:04:b5:45:9f:97:5c:8e:4e:
         51:f6:a9:48:6a:18:15:31:31:ed:f5:a5:11:36:e4:ca:6c:b1:
         df:7b:51:91:e2:32:45:af:8b:91:81:99:90:b9:2f:48:95:7f:
         65:fb:0a:d9:51:9e:af:cd:78:70:d0:4c:87:61:c4:13:3c:f2:
         ba:27:7b:14:38:b3:6c:e5:9a:bb:83:be:0b:ea:ba:95:39:3f:
         04:0f:6e:8c:71:08:34:98:9d:02:01:9c:aa:3e:a5:78:23:e8:
         d0:43:75:62:15:74:84:07:41:74:d5:12:50:24:32:43:4e:ef:
         1d:de:6b:c2:0f:40:1a:10:b6:8a:21:29:ab:7a:51:e5:bf:cf:
         ca:19:04:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:40 2025 by rpki-client