Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/F8ID4_NlkjqEPTIgMXocaM903g8.mft
File:                     F8ID4_NlkjqEPTIgMXocaM903g8.mft (raw, json)
Hash identifier:          1tEUG01NnmbWN7NL4KOVpDP8bOi3vNvAGtvHUqIQwgU=
Subject key identifier:   2E:CA:B3:DA:70:EE:11:1E:6A:8D:41:93:81:20:E7:3F:D6:B6:E8:29
Authority key identifier: 17:C2:03:E3:F3:65:92:3A:84:3D:32:20:31:7A:1C:68:CF:74:DE:0F
Certificate issuer:       /CN=17c203e3f365923a843d3220317a1c68cf74de0f
Certificate serial:       0199616C1268DD7DA0BF110D5182919A0C1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F8ID4_NlkjqEPTIgMXocaM903g8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/F8ID4_NlkjqEPTIgMXocaM903g8.mft
Manifest number:          1697
Signing time:             Fri 19 Sep 2025 10:01:36 +0000
Manifest this update:     Fri 19 Sep 2025 10:01:36 +0000
Manifest next update:     Sat 20 Sep 2025 10:01:36 +0000
Files and hashes:         1: AbDDieAjiM47QPI38uwxhNFokMk.roa (hash: KjxwOHLyj1c1EEBagKLxM0Nr+10mBGuGj4d5BS85kno=)
                          2: F8ID4_NlkjqEPTIgMXocaM903g8.crl (hash: Uef9cSgN7LZyOT1G58+VpgNwd78Vy89yW5VeW+Xx3Bc=)
                          3: H5y3Q_dV-Hzo-AC0frra9lLxNUY.roa (hash: dJMeL3gMhdqpU5vNKVA+0HKM1TGv6/U20F1ajMJbf5s=)
                          4: W66fAxMpRHUTy0LH4NsEkImgDCE.roa (hash: AD4DNdRniTHPJR9jh88wIKBDDr7wVfxEb8cYqqVIi8s=)
                          5: WnFnK8VXpQQxUL_OgQ8OW_w5oIM.roa (hash: vXZiyClY8rXg02fKUHT/FiY5l7q8slO9Y7yGKufOZXw=)
                          6: g2ksWtxpPbPFQrOSviBQAOSUcSs.roa (hash: S1SF/AyZjw5ZhUKFDKMzcO8zhjr04XXNLLkxtApWuio=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/F8ID4_NlkjqEPTIgMXocaM903g8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/F8ID4_NlkjqEPTIgMXocaM903g8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F8ID4_NlkjqEPTIgMXocaM903g8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Sep 2025 07:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:61:6c:12:68:dd:7d:a0:bf:11:0d:51:82:91:9a:0c:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17c203e3f365923a843d3220317a1c68cf74de0f
        Validity
            Not Before: Sep 19 10:01:36 2025 GMT
            Not After : Sep 20 10:01:36 2025 GMT
        Subject: CN=2ecab3da70ee111e6a8d41938120e73fd6b6e829
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:00:eb:c7:cd:15:7b:b6:3f:4c:da:42:c4:d6:
                    c8:e1:38:29:f6:86:02:a3:10:4a:f8:1b:a4:ef:20:
                    85:56:ba:e9:1e:70:b1:ee:00:5a:bf:7a:9e:bc:c4:
                    c2:de:dd:df:de:65:e9:8b:dd:de:46:74:30:eb:00:
                    c7:43:0e:59:da:ca:9b:7d:ee:62:8a:50:00:ae:72:
                    40:b4:7e:1d:c3:4c:15:7b:a6:fe:9a:ea:2f:de:68:
                    2a:2b:7c:6c:35:73:e3:e9:15:16:12:e2:12:9b:ad:
                    1d:18:67:b9:db:49:1d:ae:06:53:55:b3:9e:70:d4:
                    74:b8:53:26:62:81:ab:3c:04:11:b8:da:bc:26:42:
                    3f:e7:17:5b:bf:98:bf:cc:24:16:b5:b2:df:1b:4c:
                    a3:82:da:1e:36:32:80:7b:5a:de:a6:0f:b0:d9:35:
                    38:1e:4d:06:9e:fa:ab:93:34:db:6b:7d:d9:4c:64:
                    46:31:2e:ef:9e:c9:39:b6:00:fe:39:06:a9:e5:4e:
                    14:8d:50:27:3b:13:6a:6d:03:51:84:35:cf:3e:b9:
                    a3:4d:eb:bb:5b:51:5b:e2:e6:25:b5:63:d4:c6:f9:
                    61:ab:72:42:40:ef:98:bb:54:a1:ba:7b:70:06:bf:
                    c5:99:35:56:b9:1f:f3:e2:5f:8a:fa:bd:13:f8:4e:
                    58:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:CA:B3:DA:70:EE:11:1E:6A:8D:41:93:81:20:E7:3F:D6:B6:E8:29
            X509v3 Authority Key Identifier:
                keyid:17:C2:03:E3:F3:65:92:3A:84:3D:32:20:31:7A:1C:68:CF:74:DE:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F8ID4_NlkjqEPTIgMXocaM903g8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/F8ID4_NlkjqEPTIgMXocaM903g8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/F8ID4_NlkjqEPTIgMXocaM903g8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:38:b5:b6:31:46:8e:75:37:1a:e5:8a:ee:ba:59:fc:ef:8a:
         9e:64:a6:ba:13:b7:ec:73:41:89:f2:c0:9a:8d:ec:2d:06:f0:
         fe:1d:ab:43:bb:1e:44:b3:19:00:6c:b5:33:c5:26:bd:53:b4:
         d6:c4:18:d5:00:f5:04:17:19:ae:8b:0a:e5:92:64:85:8d:51:
         1d:55:35:6c:f4:63:60:4e:e2:8f:7e:fd:2d:7f:8a:01:1e:9b:
         c6:d1:d8:01:13:ab:10:75:e4:74:cc:8e:28:dc:ca:55:4f:5f:
         80:5d:d4:24:a4:54:6c:83:a1:c0:10:46:cb:27:e2:24:d5:9e:
         1d:92:b8:d4:57:16:f5:36:3b:84:21:a5:88:cc:01:85:83:91:
         ba:07:74:e2:b2:6b:6d:ad:53:f4:51:f3:62:a7:1f:69:05:27:
         72:da:ad:b7:d9:cc:13:ca:e4:08:f8:f6:6f:69:81:13:0f:b5:
         4a:0c:03:d4:6a:4c:01:6c:b1:49:4b:92:87:22:d4:f5:42:13:
         cc:bc:b8:36:b4:0e:c9:8d:85:6b:16:34:2e:71:4e:10:88:b5:
         80:ab:9f:31:27:df:a6:af:f1:7e:ef:3d:17:2c:33:63:3b:48:
         c0:6f:ee:51:e3:6a:9f:22:6c:ec:0a:89:19:b9:f7:ec:81:c9:
         e3:b9:0b:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 13:37:34 2025 by rpki-client