
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.mft
File:                     9-Z55Y5Li_Y-lQArVL5HHWNLlQY.mft (raw, json)
Hash identifier:          eTDCdvTr4NkdGDAHCj2A+k34fTyTEMq4/JPxBIqPbpI=
Subject key identifier:   95:1B:C8:29:96:90:94:83:FC:51:67:40:FD:99:A9:82:91:6F:A3:61
Authority key identifier: F7:E6:79:E5:8E:4B:8B:F6:3E:95:00:2B:54:BE:47:1D:63:4B:95:06
Certificate issuer:       /CN=f7e679e58e4b8bf63e95002b54be471d634b9506
Certificate serial:       019A4EF3FEA79A7D047545E2B55C9427A9CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.mft
Manifest number:          16F6
Signing time:             Tue 04 Nov 2025 13:00:04 +0000
Manifest this update:     Tue 04 Nov 2025 13:00:04 +0000
Manifest next update:     Wed 05 Nov 2025 13:00:04 +0000
Files and hashes:         1: 9-Z55Y5Li_Y-lQArVL5HHWNLlQY.crl (hash: mZNfkeKUbuzT4+amBNXGw/SpPA3FNm2SDo5tf3yUqqs=)
                          2: SJe0yiKrFFgre-LwlA373na16-M.roa (hash: W+lZ86QtGfH27JSeGBvOgaus0tZU6nh0IODmn6TYevo=)
                          3: rXYQihXZcHzDYDPfOCw2uf0QxOs.roa (hash: mgxpGPq3j8kcIVwK/lsmtpT+En8AA3E9GG8LueVY7g4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:f3:fe:a7:9a:7d:04:75:45:e2:b5:5c:94:27:a9:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7e679e58e4b8bf63e95002b54be471d634b9506
        Validity
            Not Before: Nov  4 13:00:04 2025 GMT
            Not After : Nov  5 13:00:04 2025 GMT
        Subject: CN=951bc82996909483fc516740fd99a982916fa361
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:4a:73:69:47:49:d4:3a:4b:15:09:81:c9:ce:
                    51:46:ad:c8:d9:43:3f:9f:74:fd:8e:f7:24:84:05:
                    fb:1a:f9:8e:9f:23:7b:22:a5:16:69:2c:28:34:00:
                    b4:0a:65:37:a4:ac:ae:1c:16:48:7d:6d:3e:1d:52:
                    43:4c:e5:9c:fe:fa:2a:06:03:83:61:18:6e:19:3e:
                    22:82:ea:04:15:a2:41:e0:c0:5f:72:23:e5:41:65:
                    d2:87:7d:f8:9f:f4:9b:0f:4d:29:27:fd:e7:ce:49:
                    eb:30:03:e9:7a:03:7c:28:ec:1e:82:85:b6:2f:6e:
                    dc:1f:e5:bb:22:ea:c6:55:1d:d9:98:15:49:90:b1:
                    ff:95:e5:e6:b4:31:fb:d0:96:de:de:23:7e:ba:8f:
                    fc:ca:05:6d:80:a0:09:06:32:f0:c8:6c:83:8c:6d:
                    96:9e:9f:df:9b:0c:28:ec:b9:35:03:d3:a5:89:b1:
                    3f:9e:20:84:5f:64:d5:c8:f8:a5:d1:f2:c9:d6:37:
                    3b:7b:a1:30:74:31:15:32:54:69:a4:bf:a5:6c:a1:
                    c5:c2:bd:b8:d8:4e:de:b5:d5:6e:d7:a5:cf:b7:fe:
                    09:a7:2a:9f:05:66:b8:fa:1b:d4:67:74:a8:59:a0:
                    cc:ef:cc:3d:a7:58:6a:d7:f2:bf:ad:f1:4d:c0:34:
                    f7:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:1B:C8:29:96:90:94:83:FC:51:67:40:FD:99:A9:82:91:6F:A3:61
            X509v3 Authority Key Identifier:
                keyid:F7:E6:79:E5:8E:4B:8B:F6:3E:95:00:2B:54:BE:47:1D:63:4B:95:06
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         92:07:8d:99:df:6c:0b:10:f9:8c:aa:42:bc:5d:4a:ad:52:05:
         4d:48:5f:6b:72:d7:4f:09:9f:ff:22:05:fd:d3:51:ac:a4:6f:
         73:b8:b7:cc:f0:7f:c9:19:e3:f0:49:f9:9d:70:71:9a:83:a9:
         23:e0:87:a2:c3:83:9c:79:34:a2:5d:73:c8:a7:e3:14:e2:fb:
         95:28:94:d3:e5:53:f3:58:b5:08:04:48:16:c9:05:62:ce:72:
         de:48:ac:5c:a0:1c:27:ff:01:49:8a:a0:e0:1a:7d:7b:2a:03:
         e6:73:14:49:6f:82:44:c6:b7:69:a6:f8:26:b9:b2:84:0a:b0:
         1a:6e:5c:86:23:56:8b:9d:08:dd:0c:3c:c2:eb:38:e0:f8:cc:
         63:a2:d0:d0:8a:92:23:21:ba:25:de:0c:1a:ba:f0:a6:70:4a:
         30:06:df:83:d2:fc:56:a4:c2:33:a3:76:95:2a:bf:7a:bd:54:
         b1:b9:4f:18:bc:8e:e0:62:d1:49:f0:49:ce:7d:80:0b:d5:4f:
         cb:f0:60:ba:a8:6e:a2:bf:a8:f5:d2:c5:d7:b0:14:c6:9d:49:
         a2:f3:93:b3:e9:1c:2b:86:c4:2b:dd:e9:ec:39:55:40:e9:e4:
         c2:b8:04:6d:ce:1c:7a:f6:4f:2d:ad:2e:71:ce:ea:c8:06:e4:
         16:2e:df:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO8/6nmn0EdUXitVyUJ6nNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3ZTY3OWU1OGU0YjhiZjYzZTk1MDAyYjU0YmU0NzFkNjM0
Yjk1MDYwHhcNMjUxMTA0MTMwMDA0WhcNMjUxMTA1MTMwMDA0WjAzMTEwLwYDVQQD
Eyg5NTFiYzgyOTk2OTA5NDgzZmM1MTY3NDBmZDk5YTk4MjkxNmZhMzYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUpzaUdJ1DpLFQmByc5RRq3I2UM/
n3T9jvckhAX7GvmOnyN7IqUWaSwoNAC0CmU3pKyuHBZIfW0+HVJDTOWc/voqBgOD
YRhuGT4iguoEFaJB4MBfciPlQWXSh334n/SbD00pJ/3nzknrMAPpegN8KOwegoW2
L27cH+W7IurGVR3ZmBVJkLH/leXmtDH70Jbe3iN+uo/8ygVtgKAJBjLwyGyDjG2W
np/fmwwo7Lk1A9OlibE/niCEX2TVyPil0fLJ1jc7e6EwdDEVMlRppL+lbKHFwr24
2E7etdVu16XPt/4JpyqfBWa4+hvUZ3SoWaDM78w9p1hq1/K/rfFNwDT3dwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJUbyCmWkJSD/FFnQP2ZqYKRb6NhMB8GA1UdIwQY
MBaAFPfmeeWOS4v2PpUAK1S+Rx1jS5UGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOS1aNTVZNUxpX1ktbFFBclZMNUhIV05MbFFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC80ZmM3ODctZTY4MS00ZTE2LWIxZWMt
YTFjNWQ3ZWI0YmQ3LzEvOS1aNTVZNUxpX1ktbFFBclZMNUhIV05MbFFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC80ZmM3ODctZTY4MS00ZTE2LWIxZWMtYTFjNWQ3ZWI0YmQ3
LzEvOS1aNTVZNUxpX1ktbFFBclZMNUhIV05MbFFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkgeNmd9s
CxD5jKpCvF1KrVIFTUhfa3LXTwmf/yIF/dNRrKRvc7i3zPB/yRnj8En5nXBxmoOp
I+CHosODnHk0ol1zyKfjFOL7lSiU0+VT81i1CARIFskFYs5y3kisXKAcJ/8BSYqg
4Bp9eyoD5nMUSW+CRMa3aab4JrmyhAqwGm5chiNWi50I3Qw8wus44PjMY6LQ0IqS
IyG6Jd4MGrrwpnBKMAbfg9L8VqTCM6N2lSq/er1UsblPGLyO4GLRSfBJzn2AC9VP
y/Bguqhuor+o9dLF17AUxp1JovOTs+kcK4bEK93p7DlVQOnkwrgEbc4cevZPLa0u
cc7qyAbkFi7fNw==
-----END CERTIFICATE-----
Generated at Tue Nov  4 14:20:20 2025 by rpki-client