Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/31081a-8b5a-49ec-9036-862e99973fc3/1/94ItRZflST0VF4v7EOaEHdF-WJc.mft
File:                     94ItRZflST0VF4v7EOaEHdF-WJc.mft (raw, json)
Hash identifier:          dtfkwFWCHAYKGjhu9D3silCwvdZW23f6AkBvs2ImEC8=
Subject key identifier:   37:B2:55:71:1F:17:37:A9:A8:EA:D1:98:27:54:F9:58:58:37:7A:90
Authority key identifier: F7:82:2D:45:97:E5:49:3D:15:17:8B:FB:10:E6:84:1D:D1:7E:58:97
Certificate issuer:       /CN=f7822d4597e5493d15178bfb10e6841dd17e5897
Certificate serial:       0199FC219871A4B777415CFBD9034DC143F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/94ItRZflST0VF4v7EOaEHdF-WJc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/31081a-8b5a-49ec-9036-862e99973fc3/1/94ItRZflST0VF4v7EOaEHdF-WJc.mft
Manifest number:          16E6
Signing time:             Sun 19 Oct 2025 11:01:23 +0000
Manifest this update:     Sun 19 Oct 2025 11:01:23 +0000
Manifest next update:     Mon 20 Oct 2025 11:01:23 +0000
Files and hashes:         1: 1YmAF7f_m5KPGo_OwiMLBR1JW5M.roa (hash: UAkDP6iNOKZ++HkTLAbL+chM5gUSSrJ7CaImjH0oho8=)
                          2: 94ItRZflST0VF4v7EOaEHdF-WJc.crl (hash: SSE8ipfmk1g31yXWlgbKZ8Ju5VR9kbdYFuW6g05x9qQ=)
                          3: 97KmMU-io56QACTp1Zd1_FHTqgw.roa (hash: uCAMfglxmwOpuKBmRAadF3cN1VLfWXLJnP20OsEzzUE=)
                          4: En9vXJm7XWjYXN5tMXgE82FcYWY.roa (hash: U0ZcoSNs7yuylkfmvka9vQooaxrwx4TKjkqWeYLwaY8=)
                          5: VD6wEJYNAt-3ccOgOQEtYbRpD0A.roa (hash: 8S53UWk8y2kICWluONZMk3V/wk1nRogIOqOUIQmbX3U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/31081a-8b5a-49ec-9036-862e99973fc3/1/94ItRZflST0VF4v7EOaEHdF-WJc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/31081a-8b5a-49ec-9036-862e99973fc3/1/94ItRZflST0VF4v7EOaEHdF-WJc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/94ItRZflST0VF4v7EOaEHdF-WJc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:21:98:71:a4:b7:77:41:5c:fb:d9:03:4d:c1:43:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7822d4597e5493d15178bfb10e6841dd17e5897
        Validity
            Not Before: Oct 19 11:01:23 2025 GMT
            Not After : Oct 20 11:01:23 2025 GMT
        Subject: CN=37b255711f1737a9a8ead1982754f95858377a90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:18:67:e7:04:40:ea:15:07:30:4b:96:bc:31:
                    42:2f:65:60:b7:1b:25:2d:6d:ca:17:d4:d4:49:33:
                    66:2e:bf:ae:02:b4:58:76:8f:72:7b:a3:c1:1d:86:
                    2e:3d:78:7e:7c:94:fa:c3:32:10:bc:ae:91:69:da:
                    0b:81:7c:bc:3c:9b:09:42:c3:fb:e2:bf:1e:1f:4b:
                    d2:e2:5c:9f:5a:e6:c9:dc:0e:32:e0:37:4b:db:72:
                    82:ab:d2:b6:22:c3:15:4c:b9:57:f0:bc:4b:7f:fe:
                    4b:0e:a7:a3:35:3b:22:5e:56:2f:52:8f:dc:3f:42:
                    51:44:bf:ac:6f:3a:77:20:54:32:0b:f8:bb:19:12:
                    4f:55:7a:3c:49:13:b6:59:52:d6:88:3f:1a:bc:5c:
                    b5:74:2d:46:d0:a8:78:71:45:6e:82:8d:fa:96:8d:
                    d8:71:cd:0a:e8:39:a7:ed:ea:92:7e:8a:cc:54:a1:
                    ad:87:fc:dd:df:58:10:eb:ae:c8:d6:87:13:04:05:
                    b6:5d:ca:58:39:7f:97:89:9f:74:6a:f8:d1:66:1b:
                    f7:9a:b5:5e:4c:1c:97:45:76:06:93:64:f2:3d:a6:
                    3c:d0:1a:2c:65:fd:83:40:ab:8c:05:52:53:7d:39:
                    85:96:4c:18:61:02:8a:46:d9:7e:ea:22:57:9c:68:
                    bb:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:B2:55:71:1F:17:37:A9:A8:EA:D1:98:27:54:F9:58:58:37:7A:90
            X509v3 Authority Key Identifier:
                keyid:F7:82:2D:45:97:E5:49:3D:15:17:8B:FB:10:E6:84:1D:D1:7E:58:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/94ItRZflST0VF4v7EOaEHdF-WJc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/31081a-8b5a-49ec-9036-862e99973fc3/1/94ItRZflST0VF4v7EOaEHdF-WJc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/31081a-8b5a-49ec-9036-862e99973fc3/1/94ItRZflST0VF4v7EOaEHdF-WJc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:3a:f4:83:f6:3a:2b:26:f3:bf:3e:33:87:1f:a7:36:17:07:
         f7:b1:2c:78:b5:69:0b:9d:b3:2f:4c:45:6d:1a:7c:ef:b6:87:
         37:06:79:e1:17:31:fd:d7:36:00:fc:28:3f:0b:72:e2:36:8d:
         27:e7:d7:02:d6:63:46:7c:92:31:10:e3:f2:4b:b1:45:d5:4d:
         e8:22:4f:f0:48:69:b7:d5:1d:fe:49:ab:88:c9:f2:c9:80:8b:
         69:37:f5:be:db:9a:ef:b6:06:32:f3:2a:aa:c5:7b:14:33:10:
         76:e5:bb:29:11:71:4c:e0:83:2a:1a:da:9f:26:b5:5b:e6:01:
         43:ad:10:72:76:89:fe:41:81:83:7b:f8:04:94:b9:c0:9a:52:
         d1:76:b9:b6:7b:62:f2:5e:45:cb:8b:0d:19:d9:76:00:b3:31:
         a7:7f:d3:47:88:8f:07:7e:00:87:a2:84:e3:b0:a3:9c:3d:bf:
         bc:62:00:54:dd:1f:3a:2e:37:22:3d:13:80:fb:e5:5a:5f:5f:
         6b:c7:ea:72:c2:68:91:a2:96:8d:45:a8:39:55:52:24:8d:75:
         80:dd:d9:df:a2:7e:93:b6:c3:f9:3c:16:87:89:b4:46:a6:97:
         83:7d:19:1e:46:66:c6:8f:51:54:69:ec:f7:f2:50:cd:6b:c0:
         b8:ed:c5:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:10:21 2025 by rpki-client