Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/898741-eda4-4c5d-af9f-8d68eb20fbdd/1/n7SouTr56pzxiqyk5z8RbsJus1c.mft
File:                     n7SouTr56pzxiqyk5z8RbsJus1c.mft (raw, json)
Hash identifier:          G8JXtvkV9Thhvygi3C+VIq5RI91AGVcOZhz4IOf5p4c=
Subject key identifier:   C7:09:03:4F:BD:BD:A0:8D:CE:3D:7A:64:5D:26:E9:A3:20:AB:8D:92
Authority key identifier: 9F:B4:A8:B9:3A:F9:EA:9C:F1:8A:AC:A4:E7:3F:11:6E:C2:6E:B3:57
Certificate issuer:       /CN=9fb4a8b93af9ea9cf18aaca4e73f116ec26eb357
Certificate serial:       019A4D7F5AB9E62366DAA8CF3BF3416AFF4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n7SouTr56pzxiqyk5z8RbsJus1c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/898741-eda4-4c5d-af9f-8d68eb20fbdd/1/n7SouTr56pzxiqyk5z8RbsJus1c.mft
Manifest number:          1716
Signing time:             Tue 04 Nov 2025 06:13:03 +0000
Manifest this update:     Tue 04 Nov 2025 06:13:03 +0000
Manifest next update:     Wed 05 Nov 2025 06:13:03 +0000
Files and hashes:         1: 1PkG4fEwdXoMD-WH6ZRxyY8sELw.roa (hash: a0iYtGmAHDkDdbaG2u7+3yZnQS7AVnDIsCyUz86fNxA=)
                          2: GNiJG3xpkW82o4W1yrImKoG5MJU.roa (hash: BvuebS9Of4HLpNtbxkNjqKwp5lwh+0N5sWdkwgefagE=)
                          3: hqWfNQU94aa67UD14uMEBc6ivzY.roa (hash: vnr5FfmrkEI+u9/SFiQ11TolMxSSlt2O7OtHyllTQ+I=)
                          4: n7SouTr56pzxiqyk5z8RbsJus1c.crl (hash: 9xJkHu3OjD+f+JIbhYHNu/5x6zrkK2vlJL/s310/954=)
                          5: obRnA2DOaX1f1N0VaLSK561MsFg.roa (hash: xpha7L01dte1GwtkALu5D1iKZZKGT07iZI/1woD8rMs=)
                          6: tsMi9Spmw9ktRAObPVrMvL_NDfM.roa (hash: vcFMvuKcFVt9l1PFw6awejrlsR9MLAnsGRscDdgFGwI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/898741-eda4-4c5d-af9f-8d68eb20fbdd/1/n7SouTr56pzxiqyk5z8RbsJus1c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/898741-eda4-4c5d-af9f-8d68eb20fbdd/1/n7SouTr56pzxiqyk5z8RbsJus1c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n7SouTr56pzxiqyk5z8RbsJus1c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 06:13:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4d:7f:5a:b9:e6:23:66:da:a8:cf:3b:f3:41:6a:ff:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fb4a8b93af9ea9cf18aaca4e73f116ec26eb357
        Validity
            Not Before: Nov  4 06:13:03 2025 GMT
            Not After : Nov  5 06:13:03 2025 GMT
        Subject: CN=c709034fbdbda08dce3d7a645d26e9a320ab8d92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:04:93:89:b1:e2:0b:e0:35:ae:06:37:ed:2d:
                    7d:30:9e:a9:54:5e:6b:5a:29:5d:96:76:3d:12:70:
                    f2:6c:e1:d1:8b:38:c8:75:83:fe:90:29:bc:9c:a3:
                    33:6b:04:0e:f5:cc:e1:36:20:62:ab:ce:d3:2b:4c:
                    fe:77:61:99:ea:a7:12:82:25:0c:1f:7d:bc:60:55:
                    64:39:eb:18:36:43:f4:f4:cd:59:d8:11:35:b6:7e:
                    12:0b:72:43:78:6b:2a:0b:d7:2a:57:1a:99:93:c4:
                    38:54:94:08:a7:ec:3f:3d:fc:82:e0:94:61:6a:13:
                    a7:b2:35:3b:22:7e:a1:fd:26:26:98:d5:51:2d:83:
                    2f:02:bd:cb:c1:4d:bf:7b:0b:1a:3b:ee:9c:de:9d:
                    7e:42:09:d0:95:98:2b:ad:7f:69:71:9a:03:9b:d4:
                    c1:56:3b:1c:22:a8:08:2d:ff:cb:09:69:de:44:7f:
                    55:43:08:b7:2c:f7:c5:73:6a:7c:49:af:09:de:a6:
                    07:2b:ff:da:ba:92:5e:bc:68:8b:6f:5d:30:12:f6:
                    43:0a:66:da:1d:41:d5:e8:34:df:dd:8b:a4:7c:5f:
                    67:d9:e1:c8:cb:96:07:7a:33:d8:47:d1:44:0e:01:
                    9f:e0:0b:ec:2a:a3:5e:81:f0:f9:a3:ce:3b:ff:d1:
                    28:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:09:03:4F:BD:BD:A0:8D:CE:3D:7A:64:5D:26:E9:A3:20:AB:8D:92
            X509v3 Authority Key Identifier:
                keyid:9F:B4:A8:B9:3A:F9:EA:9C:F1:8A:AC:A4:E7:3F:11:6E:C2:6E:B3:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n7SouTr56pzxiqyk5z8RbsJus1c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/898741-eda4-4c5d-af9f-8d68eb20fbdd/1/n7SouTr56pzxiqyk5z8RbsJus1c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/898741-eda4-4c5d-af9f-8d68eb20fbdd/1/n7SouTr56pzxiqyk5z8RbsJus1c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:dd:a7:fe:48:3d:3a:85:d7:fc:bd:e5:26:a4:a6:74:0c:a7:
         f1:a4:41:af:da:27:10:7b:d3:3e:09:df:6a:90:a3:62:4f:5d:
         d1:1c:5c:48:9e:b1:23:fe:f2:c1:2b:14:c8:47:0c:80:4d:2d:
         a5:dd:f2:19:5e:1e:67:c8:09:e8:0b:cd:6f:76:fc:35:76:36:
         b5:4a:ca:e1:c3:fb:7e:d4:f5:92:ff:14:e6:cb:91:95:a9:1c:
         3b:5a:15:aa:19:3e:76:ef:c3:e5:45:0e:23:b3:84:30:80:1b:
         5a:3c:04:97:82:4f:1f:bb:d0:9f:9c:7d:77:a6:49:10:21:8a:
         b4:bd:0a:f5:7b:17:30:11:32:7b:de:37:8d:0d:6f:87:dd:30:
         74:0b:37:bf:ac:3e:36:1c:3b:90:41:43:79:b6:ed:8e:de:58:
         21:ca:4c:1b:f2:dd:a1:a0:6f:9f:4c:b4:e4:48:90:8a:f3:83:
         29:5c:69:89:6e:68:80:4f:93:c4:2f:aa:ba:84:7a:86:43:d1:
         8c:d5:de:0c:cd:13:5f:28:fb:34:54:18:53:bc:ea:be:0e:3a:
         34:77:8b:74:4b:bd:20:f9:db:20:dd:29:3f:39:62:10:62:ae:
         dd:7d:86:ab:b9:94:df:91:15:32:8a:c1:70:3f:6a:32:99:90:
         0a:6c:0f:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:30:05 2025 by rpki-client