Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.mft
File:                     9i7rh5CFyUGUKX3Z5M0knNJRZRU.mft (raw, json)
Hash identifier:          UzQgNbvmSLvhePzVBEciAIu6SZvN2+SGvYveJ7HfsMA=
Subject key identifier:   54:77:39:A0:90:5C:35:F2:31:E3:8F:9E:68:67:CA:13:72:9D:CA:7C
Authority key identifier: F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15
Certificate issuer:       /CN=f62eeb879085c94194297dd9e4cd249cd2516515
Certificate serial:       019A21AD6DFCAB48BFB1A4270012B2DF6D17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.mft
Manifest number:          170F
Signing time:             Sun 26 Oct 2025 18:00:05 +0000
Manifest this update:     Sun 26 Oct 2025 18:00:05 +0000
Manifest next update:     Mon 27 Oct 2025 18:00:05 +0000
Files and hashes:         1: 3Y6q4SSOfKvMWqt7nkK6iJHZcFg.roa (hash: nQJrfkgs7cckEJG4TEbt+aYboyegrJmZ5zK0surmR+g=)
                          2: 5Bu_YG_RUdf11Gi9aWxt35RgAkg.roa (hash: OuFLQ19VvlkednlA1/7PaMFzyU9MEyhAzgW7jgfHrRQ=)
                          3: 9i7rh5CFyUGUKX3Z5M0knNJRZRU.crl (hash: HU4xOQeD8xKqwjuQkF0H79TDSbVlaoT+DWhDAA7F0Ks=)
                          4: Z4ff2msRKcb6YMtm9rlrjleZxQM.roa (hash: R/U2SPlro8qocLQcB9G60tY7YkY0sJXo2Wic6VrrpPw=)
                          5: kak3JE8MRfofu1BSVUfu_YJGlcE.roa (hash: HkWTQuIKcR63cILN0f/PpdEpTJgbslNQYLXom+Eyudg=)
                          6: xVnLVOBy85hPjWChXGOs1mXkd-4.roa (hash: H4UNkYq2EsNVhyFTgJNfNg3ZFOfjf3kIC2h2Ua9v2C8=)
                          7: ytVsYJEUm-gh8qZueY3uGM9VYCc.roa (hash: vsoERD1sts9niF8X7mt0u+HpNFQeD0eLoVfGJBvKlMQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Oct 2025 12:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:21:ad:6d:fc:ab:48:bf:b1:a4:27:00:12:b2:df:6d:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f62eeb879085c94194297dd9e4cd249cd2516515
        Validity
            Not Before: Oct 26 18:00:05 2025 GMT
            Not After : Oct 27 18:00:05 2025 GMT
        Subject: CN=547739a0905c35f231e38f9e6867ca13729dca7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e2:46:94:1d:9d:45:1f:04:03:a9:37:31:2d:
                    64:7b:68:1c:eb:69:29:c4:99:c7:ee:6a:d8:cb:0e:
                    9f:02:2f:e2:5e:40:72:69:29:82:8c:a1:5a:96:65:
                    88:ea:60:2d:99:18:12:23:89:f2:1a:6d:28:44:f4:
                    ee:40:60:f3:85:e3:f9:dc:d7:70:d2:b3:29:d8:f0:
                    a9:b9:e3:35:4a:de:bb:b4:2c:71:c6:5a:bd:d3:3f:
                    19:80:ee:1a:fe:47:f9:06:a3:64:98:ad:0e:83:1f:
                    f5:55:30:c2:39:94:9b:a0:b1:aa:68:bd:b2:24:ce:
                    82:d0:05:09:ac:84:6f:ef:d3:27:62:32:34:aa:af:
                    a5:a1:47:6b:99:f7:15:2d:87:00:a5:7a:38:ca:50:
                    66:da:ac:b8:ee:95:cb:62:85:48:a2:fd:a1:03:b9:
                    14:ca:9c:35:8f:ac:d6:53:1d:ba:78:9d:49:52:06:
                    7a:9f:8b:0a:09:15:42:fb:bd:37:b3:43:46:86:66:
                    fd:d0:ae:90:7f:0d:e6:35:75:aa:e6:00:95:e2:53:
                    bc:54:46:bb:29:18:8f:76:cd:80:d5:ba:9d:30:24:
                    9c:9a:e8:b2:dc:09:52:52:f8:1d:49:84:6f:6b:c5:
                    62:80:ad:67:cb:53:54:6e:36:4b:6f:9e:4f:78:fd:
                    d6:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:77:39:A0:90:5C:35:F2:31:E3:8F:9E:68:67:CA:13:72:9D:CA:7C
            X509v3 Authority Key Identifier:
                keyid:F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:1e:aa:af:6f:11:f8:0f:3f:b6:ca:77:0d:fc:8b:cc:bc:e2:
         bc:ae:e9:77:95:d1:42:a0:ad:70:5a:fe:d4:cf:58:4f:09:a1:
         78:32:bf:66:de:f6:ee:a4:73:0c:6c:18:e6:52:eb:0c:18:ae:
         a0:a0:b4:a8:bd:39:53:ac:96:42:9e:ea:37:86:3f:13:1a:67:
         e6:71:4d:04:7d:8d:03:b7:07:5d:1a:4c:56:51:6a:48:df:03:
         6c:5c:cc:2a:af:d0:34:a4:f1:5a:26:a2:31:cd:41:76:51:7e:
         b2:bb:21:0f:ef:1b:37:fd:88:48:e2:60:bc:5e:9c:d1:d9:1c:
         33:df:bf:80:1d:10:ad:a7:72:38:92:9d:b2:aa:2f:c7:e0:da:
         bc:f0:a7:47:30:c8:25:2f:0a:29:40:d3:9d:52:53:13:75:ed:
         a7:95:92:95:d4:b8:d0:c2:df:c8:c3:2e:42:27:eb:a3:dd:8c:
         da:43:b1:d7:6d:e1:47:e2:03:52:05:7a:86:a6:9b:c4:a9:16:
         de:e3:7b:34:32:bb:32:b4:ba:da:5a:ac:93:8c:f4:3b:1d:66:
         0b:08:71:e0:d4:08:1d:d2:17:c7:7f:d8:9f:c9:70:e1:0a:b0:
         00:3d:e6:f3:08:24:7f:6b:c2:79:d8:8d:17:e8:66:3b:a5:25:
         e9:20:ac:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 20:04:00 2025 by rpki-client