Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft
File:                     XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft (raw, json)
Hash identifier:          QPA9EfM0WJqh79hiotuPGrXNSAFcWAW3G67JpzoFntg=
Subject key identifier:   C4:97:72:2C:10:DF:86:C3:FD:55:CF:E0:AF:BD:0D:3E:91:24:5A:01
Authority key identifier: 5C:57:C8:F8:D9:EE:5E:2C:E7:04:3E:1E:C2:6B:B1:69:3F:7F:12:1F
Certificate issuer:       /CN=5c57c8f8d9ee5e2ce7043e1ec26bb1693f7f121f
Certificate serial:       0199FC8F988547F7603B3E71C40E65E87458
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XFfI-NnuXiznBD4ewmuxaT9_Eh8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft
Manifest number:          16E7
Signing time:             Sun 19 Oct 2025 13:01:33 +0000
Manifest this update:     Sun 19 Oct 2025 13:01:33 +0000
Manifest next update:     Mon 20 Oct 2025 13:01:33 +0000
Files and hashes:         1: BF6kk7Ioe_IANLRocL5TB8rFDXg.roa (hash: I9vdVPlJI90+Jqde5mcaJ83frB+5PPL50CTnL2GyUcg=)
                          2: XFfI-NnuXiznBD4ewmuxaT9_Eh8.crl (hash: +rkDXTMFzYZY4QZuC0wqwIioJh56RIWgURtOJurT6bU=)
                          3: ciH-ly2HETPUQCD4TRirLR18GQo.roa (hash: 71uXiXu0mczhWCwGxw73zRSUQufVbuKwkYWRQfbodEo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XFfI-NnuXiznBD4ewmuxaT9_Eh8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:8f:98:85:47:f7:60:3b:3e:71:c4:0e:65:e8:74:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c57c8f8d9ee5e2ce7043e1ec26bb1693f7f121f
        Validity
            Not Before: Oct 19 13:01:33 2025 GMT
            Not After : Oct 20 13:01:33 2025 GMT
        Subject: CN=c497722c10df86c3fd55cfe0afbd0d3e91245a01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:05:b8:04:60:d9:c1:0f:97:c4:27:8a:12:b9:
                    74:fc:2b:27:13:a6:fb:85:24:3a:1c:f3:95:b5:de:
                    7a:55:2a:41:cc:f5:3a:ad:c0:43:76:3b:3a:af:54:
                    6c:24:91:19:f9:c5:e7:dd:69:75:40:bb:1a:5a:64:
                    a8:e5:df:3c:45:28:04:56:21:88:6a:0a:22:78:27:
                    f9:ac:b2:78:d4:57:73:48:b9:f5:37:0c:8e:ee:b3:
                    e6:55:fa:42:41:d3:fa:ad:0c:c1:8c:7a:b5:c6:eb:
                    45:06:92:8c:60:f2:e2:72:f3:6e:f4:86:a1:d8:33:
                    cb:6b:7e:7f:4b:76:d1:79:27:97:f9:4d:2f:3e:dc:
                    06:3e:f1:7b:86:69:b7:d5:d4:b6:00:6f:4b:52:d8:
                    40:50:5f:5c:5c:4f:74:cd:2d:69:a0:5c:e2:f9:8a:
                    15:40:9e:76:21:c7:9c:45:a2:df:9a:59:54:c2:a0:
                    90:9b:ae:85:4b:d9:32:09:0c:89:dc:7a:c9:22:eb:
                    f8:dc:a6:2b:8a:cf:a2:2d:29:51:c4:20:19:db:82:
                    34:4b:17:cd:6b:03:ab:0d:92:28:f1:e8:3e:b3:84:
                    18:e7:53:90:16:16:d6:65:9a:a9:b7:42:17:6c:ef:
                    53:23:b7:d6:19:bd:7a:70:93:e7:87:af:04:4c:90:
                    11:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:97:72:2C:10:DF:86:C3:FD:55:CF:E0:AF:BD:0D:3E:91:24:5A:01
            X509v3 Authority Key Identifier:
                keyid:5C:57:C8:F8:D9:EE:5E:2C:E7:04:3E:1E:C2:6B:B1:69:3F:7F:12:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XFfI-NnuXiznBD4ewmuxaT9_Eh8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:53:70:18:a3:ae:f6:c6:91:38:28:11:f2:04:d2:2b:05:be:
         16:bd:fb:b9:55:c0:fe:8e:71:c9:eb:1d:a4:98:d7:89:ed:59:
         61:34:69:d3:00:16:69:61:dd:aa:f0:57:be:f8:07:0a:b7:f0:
         58:8b:6a:6a:a9:71:74:9b:b0:12:3a:4b:cb:f4:08:11:f5:34:
         82:d4:af:d7:9f:28:d3:5b:e0:69:43:fe:51:29:5b:ec:85:70:
         92:a9:33:6f:b1:11:d8:25:8e:5a:50:23:0a:83:dd:7a:2d:1c:
         95:af:3a:49:73:ab:e2:80:b9:33:60:b7:22:2a:14:8e:5e:7e:
         5c:87:3a:e6:15:aa:a8:9d:cc:ea:e2:65:df:f7:92:51:e6:2a:
         a6:d2:7f:4b:76:2d:8c:ea:65:8f:08:cc:73:a8:e8:61:fa:5f:
         e5:dc:e4:25:cd:5a:ec:82:00:c1:2e:13:b7:0c:cc:aa:e5:bb:
         8b:52:b5:0e:c1:69:0f:a8:5e:26:72:d5:d1:77:a6:53:c2:1f:
         da:58:69:f6:0e:54:7b:df:36:6d:2c:4d:03:59:dd:81:46:9b:
         90:ca:85:1e:e8:c6:16:00:5e:97:47:be:4f:72:c5:c7:bb:6c:
         75:89:c1:76:f1:44:72:f4:ee:ed:a7:1a:11:eb:20:28:85:f2:
         05:47:62:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:57 2025 by rpki-client