Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/898741-eda4-4c5d-af9f-8d68eb20fbdd/1/n7SouTr56pzxiqyk5z8RbsJus1c.mft
File:                     n7SouTr56pzxiqyk5z8RbsJus1c.mft (raw, json)
Hash identifier:          9sGHCitGhdSp7cvIkl/Nl+lsCzDgkCTRJ9/xabJEiDQ=
Subject key identifier:   D3:81:BF:83:F6:84:CE:F0:B3:C6:0C:BC:4E:5F:AF:FE:CE:E1:AE:F1
Authority key identifier: 9F:B4:A8:B9:3A:F9:EA:9C:F1:8A:AC:A4:E7:3F:11:6E:C2:6E:B3:57
Certificate issuer:       /CN=9fb4a8b93af9ea9cf18aaca4e73f116ec26eb357
Certificate serial:       0199FDA1D62833DABACAEA27F50F07163054
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n7SouTr56pzxiqyk5z8RbsJus1c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/898741-eda4-4c5d-af9f-8d68eb20fbdd/1/n7SouTr56pzxiqyk5z8RbsJus1c.mft
Manifest number:          16EC
Signing time:             Sun 19 Oct 2025 18:01:05 +0000
Manifest this update:     Sun 19 Oct 2025 18:01:05 +0000
Manifest next update:     Mon 20 Oct 2025 18:01:05 +0000
Files and hashes:         1: 1PkG4fEwdXoMD-WH6ZRxyY8sELw.roa (hash: a0iYtGmAHDkDdbaG2u7+3yZnQS7AVnDIsCyUz86fNxA=)
                          2: 5jasWjlS1Ump0nRGI3DK46AyE-M.roa (hash: sMi9gwP2+D/zUCH8wz+ohSeZWvK9a9umXNsRtIbAM0g=)
                          3: GNiJG3xpkW82o4W1yrImKoG5MJU.roa (hash: BvuebS9Of4HLpNtbxkNjqKwp5lwh+0N5sWdkwgefagE=)
                          4: hqWfNQU94aa67UD14uMEBc6ivzY.roa (hash: vnr5FfmrkEI+u9/SFiQ11TolMxSSlt2O7OtHyllTQ+I=)
                          5: n7SouTr56pzxiqyk5z8RbsJus1c.crl (hash: EW4ASzU3ZP9YKV8dcDy83Syk1YyVT9X2/DHmU2mpEWU=)
                          6: obRnA2DOaX1f1N0VaLSK561MsFg.roa (hash: xpha7L01dte1GwtkALu5D1iKZZKGT07iZI/1woD8rMs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/898741-eda4-4c5d-af9f-8d68eb20fbdd/1/n7SouTr56pzxiqyk5z8RbsJus1c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/898741-eda4-4c5d-af9f-8d68eb20fbdd/1/n7SouTr56pzxiqyk5z8RbsJus1c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n7SouTr56pzxiqyk5z8RbsJus1c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:a1:d6:28:33:da:ba:ca:ea:27:f5:0f:07:16:30:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fb4a8b93af9ea9cf18aaca4e73f116ec26eb357
        Validity
            Not Before: Oct 19 18:01:05 2025 GMT
            Not After : Oct 20 18:01:05 2025 GMT
        Subject: CN=d381bf83f684cef0b3c60cbc4e5faffecee1aef1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:fd:9e:6e:a9:73:64:e5:73:4c:50:fe:03:84:
                    ba:1e:f4:6f:f0:f8:04:1d:e5:f3:9b:d9:d6:cd:10:
                    2e:5a:46:79:76:f4:be:1d:f3:0d:09:1b:d9:6f:73:
                    4c:57:df:73:4f:28:df:ef:65:4e:78:f9:e6:f3:42:
                    e1:34:e4:d0:75:ef:1e:3a:03:ac:06:b7:8c:ca:62:
                    bf:7a:b3:7c:ab:c1:fb:38:1f:d5:5b:5b:20:5c:08:
                    4f:18:2c:62:7d:d5:61:90:5f:c4:6f:bb:50:6d:f3:
                    19:fa:9f:f9:0a:a2:2c:e1:f9:9c:1f:92:de:f7:79:
                    72:dd:11:7f:b0:ac:b1:57:62:f1:a9:bf:65:35:a6:
                    02:6e:dd:2e:82:13:08:6a:c5:fd:ea:d7:69:43:08:
                    ca:63:a2:09:ef:9e:f9:3a:b9:b6:7e:37:34:ae:91:
                    6b:9c:db:45:69:fb:f1:11:fc:19:ac:b1:96:13:8d:
                    a7:10:f7:15:bb:e7:ee:89:46:3f:4f:5c:38:40:f3:
                    71:65:64:01:3d:5b:5b:a1:e8:29:f1:09:a5:d0:b0:
                    00:14:8a:42:7b:e3:dc:fb:0b:36:f7:07:87:0b:2a:
                    2c:59:c0:97:27:b0:38:f6:12:7a:1d:66:45:14:36:
                    09:e6:c7:89:c6:f5:9a:9f:3e:56:6d:1f:be:51:5d:
                    c6:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:81:BF:83:F6:84:CE:F0:B3:C6:0C:BC:4E:5F:AF:FE:CE:E1:AE:F1
            X509v3 Authority Key Identifier:
                keyid:9F:B4:A8:B9:3A:F9:EA:9C:F1:8A:AC:A4:E7:3F:11:6E:C2:6E:B3:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n7SouTr56pzxiqyk5z8RbsJus1c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/898741-eda4-4c5d-af9f-8d68eb20fbdd/1/n7SouTr56pzxiqyk5z8RbsJus1c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/898741-eda4-4c5d-af9f-8d68eb20fbdd/1/n7SouTr56pzxiqyk5z8RbsJus1c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:99:db:2d:52:f1:a3:83:ef:98:8c:f5:d7:ce:4a:5b:9a:93:
         52:92:31:59:bb:ac:2f:4a:b3:5c:37:d8:13:cd:d0:69:46:8f:
         e3:39:79:c3:a1:98:38:66:a2:b4:85:3c:2a:e6:f0:43:8f:0f:
         43:07:f9:c2:d0:79:f6:0d:01:fc:d6:cf:e0:0f:7e:7e:33:a4:
         e3:08:ff:8a:19:73:4c:0e:d5:1c:57:45:15:37:b9:c2:d8:92:
         a0:3d:54:f1:57:5c:84:27:81:c1:f5:c1:e6:83:3a:f2:20:43:
         4c:aa:af:3a:7f:94:a2:b2:a0:f1:71:27:0b:f3:e0:52:b2:ad:
         46:94:9e:29:0d:d4:99:b4:17:fe:c5:b4:af:d3:66:6b:ef:ed:
         74:aa:ab:9d:51:91:5a:2d:13:36:87:71:5a:04:5f:7c:68:69:
         1f:ee:f0:69:98:2b:2e:33:67:de:fc:57:38:2d:04:38:2c:a3:
         7f:b1:cc:78:24:ee:7a:0b:2a:d7:39:b9:5a:22:4c:d4:5a:4c:
         87:cf:f7:46:a7:17:73:14:c3:ed:d4:71:04:c3:53:e5:63:b6:
         56:70:7c:35:6a:69:bb:a1:b7:d3:0b:88:95:a9:81:93:f8:85:
         53:0c:8c:d9:0a:20:f6:4f:c3:89:b1:f8:29:49:d9:30:5d:63:
         b7:8b:3f:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:36:28 2025 by rpki-client