Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.mft
File:                     9QuuYJcKLfyG3WB8W5Fa1cU0tBM.mft (raw, json)
Hash identifier:          Iik0fW05s2jjy83RYr8wU4ULs2mjbz7q42D8AfSTJL4=
Subject key identifier:   9C:6A:5D:33:A9:C9:E5:28:CA:14:6A:4C:CF:34:15:94:6B:07:F6:BE
Authority key identifier: F5:0B:AE:60:97:0A:2D:FC:86:DD:60:7C:5B:91:5A:D5:C5:34:B4:13
Certificate issuer:       /CN=f50bae60970a2dfc86dd607c5b915ad5c534b413
Certificate serial:       019A1FF65F822ED3A2183F858D5AC8078175
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.mft
Manifest number:          16F8
Signing time:             Sun 26 Oct 2025 10:00:31 +0000
Manifest this update:     Sun 26 Oct 2025 10:00:31 +0000
Manifest next update:     Mon 27 Oct 2025 10:00:31 +0000
Files and hashes:         1: 9QuuYJcKLfyG3WB8W5Fa1cU0tBM.crl (hash: qAWjVdzbT/KBCwDMzNJzrHeL3R2GcUD/qgPHf0IayV8=)
                          2: CisyPBICFzRGOCGtK3vxthiuGEs.roa (hash: 23mIhFxKDvJAL2KMAVi2LJugT4q2VWIVs7Cdef8DgOI=)
                          3: FkuC_69RdWLx1Y0srRO2lTt2Qn8.roa (hash: V2QfXGuoABf0nSRm/Oq1C+rnj29jR40BHTTOPTu5Dlw=)
                          4: XT0-w6dqifmy2ffwrG4-p0z6yak.roa (hash: qA90Am+RQnnMQJCKqDmSo8CLarebFr+1kMjhOvQOjTU=)
                          5: qoE5vRhVOR8bmi1fj4V8xsxJVVU.roa (hash: OxgWBiFLszYpiPd1r9svRtI7919M0gEvC+i3wC1jk18=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Oct 2025 05:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:1f:f6:5f:82:2e:d3:a2:18:3f:85:8d:5a:c8:07:81:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f50bae60970a2dfc86dd607c5b915ad5c534b413
        Validity
            Not Before: Oct 26 10:00:31 2025 GMT
            Not After : Oct 27 10:00:31 2025 GMT
        Subject: CN=9c6a5d33a9c9e528ca146a4ccf3415946b07f6be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:fe:19:7a:64:e5:62:1c:9e:8d:72:1e:9b:bf:
                    5e:2e:69:6c:f9:ea:2d:21:5b:0e:fd:ac:45:c6:fc:
                    54:b2:31:ee:23:ac:3c:ff:59:73:fb:63:cc:76:72:
                    27:4c:d6:ab:83:ec:02:a6:0c:5b:76:55:e0:14:9e:
                    bb:b2:4f:1e:6c:a5:9c:9f:15:81:f2:a5:0a:8b:d3:
                    b3:fa:e0:ed:f7:be:b3:c2:36:bf:71:42:4d:1e:53:
                    e3:3a:b5:ac:2e:af:7f:cf:09:98:df:48:65:d5:8c:
                    7a:ce:04:3b:ba:fc:48:d4:ad:dc:25:50:1f:09:86:
                    d0:47:a2:ae:2e:3c:ab:23:c4:15:b7:ad:e8:d1:5a:
                    36:cd:94:df:57:d3:b5:44:a6:25:23:72:ed:3a:23:
                    6b:bc:a0:67:50:2e:fe:cd:e3:c6:c4:53:ed:e1:63:
                    bf:ec:78:ca:c3:af:24:3c:e8:14:61:d3:ff:8e:c2:
                    a7:e2:fc:82:42:e3:02:91:56:35:46:8a:75:92:38:
                    8b:f8:8b:d9:87:03:f4:8c:e1:83:2e:62:60:ac:51:
                    01:53:53:fd:db:22:93:dc:a2:42:e0:91:d9:8a:9d:
                    31:21:5b:6b:87:f7:97:60:11:6a:74:c7:bb:19:55:
                    21:8c:f6:7e:4d:cd:7e:3e:2a:e5:99:c0:4b:9e:80:
                    32:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:6A:5D:33:A9:C9:E5:28:CA:14:6A:4C:CF:34:15:94:6B:07:F6:BE
            X509v3 Authority Key Identifier:
                keyid:F5:0B:AE:60:97:0A:2D:FC:86:DD:60:7C:5B:91:5A:D5:C5:34:B4:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:64:a6:f7:ef:09:2c:88:a0:4c:c2:3b:31:28:8b:65:28:a1:
         07:d6:60:58:7d:51:da:96:e7:a6:97:1d:61:f0:18:1d:a9:2d:
         e5:b4:2e:8b:94:fa:32:be:9f:f5:db:10:1c:b9:61:b8:5d:ba:
         06:41:c8:a9:a5:cd:a2:de:58:88:98:15:73:57:29:21:82:e2:
         ea:b3:e2:27:b9:4e:20:ae:b4:da:d2:71:25:28:a9:ae:b4:dc:
         9e:0e:b5:2f:e5:4a:9e:9d:49:5d:1d:7c:23:5e:6f:1a:71:b9:
         f1:ae:8f:78:16:0f:07:61:e3:16:36:ab:b3:52:57:ad:33:83:
         13:54:75:ba:70:39:fb:dd:14:b1:51:05:47:7f:1d:d5:6d:97:
         f3:4f:a8:80:24:d4:22:d5:90:a9:87:77:8b:1c:a6:71:80:ad:
         18:36:b6:d0:0f:ff:32:c3:f4:37:e7:42:36:d5:a9:7c:66:9a:
         c9:82:c4:ca:95:3d:c7:7c:40:95:eb:0e:ac:09:62:5b:bd:cb:
         62:6c:ea:34:37:a7:f7:77:e3:c5:c1:7b:d9:86:13:30:d8:53:
         4d:34:d3:89:ec:17:1f:e7:d8:7b:08:05:98:b4:57:de:68:6e:
         1b:e1:f9:9a:b4:d2:ef:ba:04:7f:9c:87:95:5c:90:02:b1:23:
         4c:e1:6f:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZof9l+CLtOiGD+FjVrIB4F1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1MGJhZTYwOTcwYTJkZmM4NmRkNjA3YzViOTE1YWQ1YzUz
NGI0MTMwHhcNMjUxMDI2MTAwMDMxWhcNMjUxMDI3MTAwMDMxWjAzMTEwLwYDVQQD
Eyg5YzZhNWQzM2E5YzllNTI4Y2ExNDZhNGNjZjM0MTU5NDZiMDdmNmJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/4ZemTlYhyejXIem79eLmls+eot
IVsO/axFxvxUsjHuI6w8/1lz+2PMdnInTNarg+wCpgxbdlXgFJ67sk8ebKWcnxWB
8qUKi9Oz+uDt976zwja/cUJNHlPjOrWsLq9/zwmY30hl1Yx6zgQ7uvxI1K3cJVAf
CYbQR6KuLjyrI8QVt63o0Vo2zZTfV9O1RKYlI3LtOiNrvKBnUC7+zePGxFPt4WO/
7HjKw68kPOgUYdP/jsKn4vyCQuMCkVY1Rop1kjiL+IvZhwP0jOGDLmJgrFEBU1P9
2yKT3KJC4JHZip0xIVtrh/eXYBFqdMe7GVUhjPZ+Tc1+PirlmcBLnoAyoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJxqXTOpyeUoyhRqTM80FZRrB/a+MB8GA1UdIwQY
MBaAFPULrmCXCi38ht1gfFuRWtXFNLQTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVF1dVlKY0tMZnlHM1dCOFc1RmExY1UwdEJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9mNzFkY2ItOWU5Mi00NGU3LWIwNDIt
MzY2NTA2N2RiMjU2LzEvOVF1dVlKY0tMZnlHM1dCOFc1RmExY1UwdEJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS9mNzFkY2ItOWU5Mi00NGU3LWIwNDItMzY2NTA2N2RiMjU2
LzEvOVF1dVlKY0tMZnlHM1dCOFc1RmExY1UwdEJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi2Sm9+8J
LIigTMI7MSiLZSihB9ZgWH1R2pbnppcdYfAYHakt5bQui5T6Mr6f9dsQHLlhuF26
BkHIqaXNot5YiJgVc1cpIYLi6rPiJ7lOIK602tJxJSiprrTcng61L+VKnp1JXR18
I15vGnG58a6PeBYPB2HjFjars1JXrTODE1R1unA5+90UsVEFR38d1W2X80+ogCTU
ItWQqYd3ixymcYCtGDa20A//MsP0N+dCNtWpfGaayYLEypU9x3xAlesOrAliW73L
YmzqNDen93fjxcF72YYTMNhTTTTTiewXH+fYewgFmLRX3mhuG+H5mrTS77oEf5yH
lVyQArEjTOFvNw==
-----END CERTIFICATE-----
Generated at Sun Oct 26 14:03:27 2025 by rpki-client