Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/898741-eda4-4c5d-af9f-8d68eb20fbdd/1/n7SouTr56pzxiqyk5z8RbsJus1c.mft
File:                     n7SouTr56pzxiqyk5z8RbsJus1c.mft (raw, json)
Hash identifier:          kxoBJN3d7aLdKFu/e3Q5UpyNOw8Ko0AmFBupxWw1zdU=
Subject key identifier:   EA:E9:E6:F5:33:03:88:92:CD:3F:04:00:AC:F3:E8:FC:B6:BE:B4:FD
Authority key identifier: 9F:B4:A8:B9:3A:F9:EA:9C:F1:8A:AC:A4:E7:3F:11:6E:C2:6E:B3:57
Certificate issuer:       /CN=9fb4a8b93af9ea9cf18aaca4e73f116ec26eb357
Certificate serial:       019A722673B5B9938338B8E6D78D41B36DE8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n7SouTr56pzxiqyk5z8RbsJus1c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/898741-eda4-4c5d-af9f-8d68eb20fbdd/1/n7SouTr56pzxiqyk5z8RbsJus1c.mft
Manifest number:          1729
Signing time:             Tue 11 Nov 2025 09:01:53 +0000
Manifest this update:     Tue 11 Nov 2025 09:01:53 +0000
Manifest next update:     Wed 12 Nov 2025 09:01:53 +0000
Files and hashes:         1: 1PkG4fEwdXoMD-WH6ZRxyY8sELw.roa (hash: a0iYtGmAHDkDdbaG2u7+3yZnQS7AVnDIsCyUz86fNxA=)
                          2: GNiJG3xpkW82o4W1yrImKoG5MJU.roa (hash: BvuebS9Of4HLpNtbxkNjqKwp5lwh+0N5sWdkwgefagE=)
                          3: hqWfNQU94aa67UD14uMEBc6ivzY.roa (hash: vnr5FfmrkEI+u9/SFiQ11TolMxSSlt2O7OtHyllTQ+I=)
                          4: n7SouTr56pzxiqyk5z8RbsJus1c.crl (hash: Xdttl9mU+MQTdczsdWqsh1P7LxaxpxeCbh3cZWetRwc=)
                          5: obRnA2DOaX1f1N0VaLSK561MsFg.roa (hash: xpha7L01dte1GwtkALu5D1iKZZKGT07iZI/1woD8rMs=)
                          6: tsMi9Spmw9ktRAObPVrMvL_NDfM.roa (hash: vcFMvuKcFVt9l1PFw6awejrlsR9MLAnsGRscDdgFGwI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/898741-eda4-4c5d-af9f-8d68eb20fbdd/1/n7SouTr56pzxiqyk5z8RbsJus1c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/898741-eda4-4c5d-af9f-8d68eb20fbdd/1/n7SouTr56pzxiqyk5z8RbsJus1c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n7SouTr56pzxiqyk5z8RbsJus1c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 09:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:72:26:73:b5:b9:93:83:38:b8:e6:d7:8d:41:b3:6d:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fb4a8b93af9ea9cf18aaca4e73f116ec26eb357
        Validity
            Not Before: Nov 11 09:01:53 2025 GMT
            Not After : Nov 12 09:01:53 2025 GMT
        Subject: CN=eae9e6f533038892cd3f0400acf3e8fcb6beb4fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:9e:e9:90:aa:5a:97:5f:21:5c:7c:53:d0:13:
                    0a:6d:6c:88:06:91:db:31:38:99:14:bb:88:f3:f0:
                    28:15:c4:ff:a8:1e:27:e9:c8:5e:f2:d7:ee:8c:12:
                    e1:74:f2:86:11:f5:94:58:51:33:c4:e0:42:c2:5e:
                    1f:93:8b:4e:a0:65:a0:d1:54:59:fe:bb:08:db:2e:
                    7a:c5:e4:be:05:f5:4f:21:b9:91:72:b0:89:2a:f3:
                    6b:60:b9:27:8e:78:df:41:d2:5e:5e:c4:82:a0:5c:
                    6a:af:9a:e7:f2:de:8d:56:a4:81:15:72:a3:d8:e7:
                    dd:e6:4c:75:92:c1:66:8b:7b:f2:ce:b3:60:e3:44:
                    98:87:ac:b0:a2:c6:dd:e8:38:6d:56:0f:53:d8:92:
                    9a:9e:e5:96:25:ef:04:bf:fb:d6:a5:ee:ca:68:4d:
                    63:c9:73:71:a2:70:f3:14:8f:b4:58:b9:55:3c:95:
                    24:0f:c8:d6:ab:8b:6c:23:87:67:6d:52:0d:85:3d:
                    26:bf:7a:32:a6:c7:86:f5:26:59:61:f9:df:bf:de:
                    a2:94:ff:0e:c5:90:fd:85:4a:1c:6e:e7:12:13:d6:
                    71:f3:c1:61:b9:18:8e:6f:62:92:b7:47:2d:25:2a:
                    9c:62:35:f7:61:ba:e2:40:35:62:b9:43:96:60:5e:
                    e3:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:E9:E6:F5:33:03:88:92:CD:3F:04:00:AC:F3:E8:FC:B6:BE:B4:FD
            X509v3 Authority Key Identifier:
                keyid:9F:B4:A8:B9:3A:F9:EA:9C:F1:8A:AC:A4:E7:3F:11:6E:C2:6E:B3:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n7SouTr56pzxiqyk5z8RbsJus1c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/898741-eda4-4c5d-af9f-8d68eb20fbdd/1/n7SouTr56pzxiqyk5z8RbsJus1c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/898741-eda4-4c5d-af9f-8d68eb20fbdd/1/n7SouTr56pzxiqyk5z8RbsJus1c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:6d:b3:9a:d2:85:59:d8:00:26:33:23:66:b4:37:a5:46:3e:
         8b:48:82:3c:6b:57:c7:32:8f:99:49:72:14:28:4b:52:50:b6:
         09:14:61:ed:b1:58:d2:d4:a5:fe:b6:47:b0:04:d9:3d:1d:14:
         84:1a:70:23:d6:05:89:d5:51:24:61:d7:04:1f:63:8a:31:8d:
         28:77:59:cf:fb:77:87:8f:ff:f4:1b:46:e5:5e:65:44:77:0e:
         26:ce:21:37:42:fd:43:4e:1b:93:ba:0e:55:c4:c3:68:62:47:
         e2:73:3b:60:5a:13:59:41:d2:b3:7d:2b:09:ce:1c:c1:13:2f:
         dc:ef:64:cf:d0:32:93:28:9c:87:6e:07:7c:e0:de:77:87:b2:
         e6:9d:f9:8e:2a:07:7a:18:f1:b2:a8:06:3b:03:57:c9:d7:bf:
         54:5b:c9:5e:77:ef:dc:05:2d:df:b5:c7:f3:e6:da:ca:53:e7:
         0c:99:5d:72:8f:ac:a2:2c:27:d2:f1:b3:01:49:d9:e6:2a:56:
         31:f0:d6:35:96:93:d5:e7:63:57:d2:08:7b:e1:91:82:72:1e:
         f0:38:0a:73:09:c9:d2:82:a7:f7:a4:fd:12:cb:0b:23:3d:5e:
         1d:9b:fb:6d:dc:2a:ed:a0:15:9a:33:3c:43:fc:88:d1:90:a7:
         ce:99:55:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:48:00 2025 by rpki-client