Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/4ffcb0-bc57-4602-ad3d-524d144301ff/1/ntw_8WYVXmmIvoCV_LQgAB2L4h0.mft
File:                     ntw_8WYVXmmIvoCV_LQgAB2L4h0.mft (raw, json)
Hash identifier:          JUhtzVjh7ouKJtP0jdqeQa77kROz143bMNqr0N9b2mA=
Subject key identifier:   91:82:28:AF:41:AA:50:1D:FF:24:1B:4D:FB:33:4E:0E:B3:E2:A5:80
Authority key identifier: 9E:DC:3F:F1:66:15:5E:69:88:BE:80:95:FC:B4:20:00:1D:8B:E2:1D
Certificate issuer:       /CN=9edc3ff166155e6988be8095fcb420001d8be21d
Certificate serial:       0199FCFD9FB9E84AD2638FC3BCA810609AAA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ntw_8WYVXmmIvoCV_LQgAB2L4h0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/4ffcb0-bc57-4602-ad3d-524d144301ff/1/ntw_8WYVXmmIvoCV_LQgAB2L4h0.mft
Manifest number:          16E0
Signing time:             Sun 19 Oct 2025 15:01:43 +0000
Manifest this update:     Sun 19 Oct 2025 15:01:43 +0000
Manifest next update:     Mon 20 Oct 2025 15:01:43 +0000
Files and hashes:         1: 9f1wfLMKGBE8v9MkOS4m3itL3mw.roa (hash: bPIUPhKEdbriAsko7Y4dw04AFw67jLRfl2Ngnf52fJ8=)
                          2: ntw_8WYVXmmIvoCV_LQgAB2L4h0.crl (hash: 0ofXKzWzTf+5s70zYxnZ74jVxL6GsgrFvkrf5S0aRuI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/4ffcb0-bc57-4602-ad3d-524d144301ff/1/ntw_8WYVXmmIvoCV_LQgAB2L4h0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/4ffcb0-bc57-4602-ad3d-524d144301ff/1/ntw_8WYVXmmIvoCV_LQgAB2L4h0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ntw_8WYVXmmIvoCV_LQgAB2L4h0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:fd:9f:b9:e8:4a:d2:63:8f:c3:bc:a8:10:60:9a:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9edc3ff166155e6988be8095fcb420001d8be21d
        Validity
            Not Before: Oct 19 15:01:43 2025 GMT
            Not After : Oct 20 15:01:43 2025 GMT
        Subject: CN=918228af41aa501dff241b4dfb334e0eb3e2a580
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:89:8d:45:89:d0:cd:3c:30:e9:c9:a5:5a:29:
                    5f:fc:0b:34:0b:69:b3:73:02:69:36:bd:49:8b:25:
                    6c:bb:c1:bc:5c:29:37:8a:9f:ef:4a:52:36:d3:e3:
                    14:3c:b9:e1:2e:a6:51:0a:45:8a:51:bb:1f:f2:a8:
                    9b:9c:46:92:c1:ab:4b:10:7e:c8:b2:48:25:67:ca:
                    62:43:93:5d:ba:b0:ed:1e:d7:d6:06:b3:e9:0d:a9:
                    0d:55:79:8c:b7:df:57:79:73:0d:df:87:a9:25:7f:
                    76:1e:af:87:6c:07:15:ae:55:63:f6:90:bc:73:45:
                    a8:a4:ee:ab:98:56:50:d4:4c:8a:0b:29:cd:29:7e:
                    8a:a7:e1:44:d7:6e:99:32:53:78:57:2e:a4:92:f8:
                    f0:a1:5c:02:e4:03:04:c7:ce:e8:2e:00:4c:a4:5e:
                    e4:17:ec:b2:df:b0:15:de:cc:88:ab:41:43:3f:ef:
                    50:8e:82:38:f5:23:be:94:1a:d3:96:b1:dd:86:5d:
                    7d:50:3d:11:1c:ea:5b:35:4f:17:c2:5c:6e:f7:d6:
                    d0:13:1c:46:c7:11:cb:f2:1e:c0:74:d7:2b:3a:cb:
                    18:29:d3:d6:1b:7e:09:0b:b8:28:ec:fd:39:77:40:
                    5b:99:8d:2c:df:31:2b:b6:bd:0f:bf:68:28:0f:71:
                    3c:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:82:28:AF:41:AA:50:1D:FF:24:1B:4D:FB:33:4E:0E:B3:E2:A5:80
            X509v3 Authority Key Identifier:
                keyid:9E:DC:3F:F1:66:15:5E:69:88:BE:80:95:FC:B4:20:00:1D:8B:E2:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ntw_8WYVXmmIvoCV_LQgAB2L4h0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/4ffcb0-bc57-4602-ad3d-524d144301ff/1/ntw_8WYVXmmIvoCV_LQgAB2L4h0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/4ffcb0-bc57-4602-ad3d-524d144301ff/1/ntw_8WYVXmmIvoCV_LQgAB2L4h0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:5e:c9:4d:6c:a4:37:65:14:5d:9c:27:8c:c1:cf:f2:2d:e5:
         a8:dc:3f:29:48:48:ae:30:9d:dc:5d:33:de:98:db:c7:6b:bd:
         cb:36:9a:d7:a9:13:ef:20:d2:12:8c:f5:bf:6c:ff:ec:22:a2:
         ea:7c:40:5c:18:78:b2:43:84:18:d8:ed:a2:18:f0:51:3a:41:
         6d:e6:ae:93:1c:3c:c9:62:f7:96:72:92:03:fb:65:fe:45:06:
         84:62:f1:22:38:1f:c3:48:42:b5:12:2c:30:02:82:6a:8e:7d:
         f9:95:8f:84:4a:e3:61:38:10:23:6a:50:97:9d:3b:ee:c2:63:
         8f:2f:d7:29:42:80:f5:fd:7f:6b:e7:06:b2:29:e3:4f:67:e6:
         be:5c:22:9e:d2:bb:88:1f:5b:e4:88:5b:2d:48:94:64:71:d9:
         d8:95:a6:a2:77:92:d8:9a:03:d6:82:7d:9c:c4:85:4a:3d:bc:
         5c:e7:b9:ec:97:a7:80:e0:90:1b:7c:d6:35:bf:4e:1e:2b:58:
         2b:df:1e:98:68:09:98:a8:94:12:5e:1d:53:4f:de:36:16:59:
         15:0f:9a:2c:97:5d:d6:98:98:a5:39:6f:47:7e:cf:f5:11:d7:
         0c:26:7c:9c:a1:94:cb:d5:74:de:97:e4:65:1b:24:31:20:bc:
         42:7f:40:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:17:49 2025 by rpki-client