
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/fc7545-c5fa-43bd-8839-d185dec06012/1/NmqdVCKXV3s3qgxCMZWv4qmOE10.mft
File:                     NmqdVCKXV3s3qgxCMZWv4qmOE10.mft (raw, json)
Hash identifier:          25yVVXwFe58AFjri6TajcUYf7o7bmdsa8isQIUHRUA4=
Subject key identifier:   04:DC:7F:BE:C3:69:24:ED:2F:F8:DB:D8:4C:E0:7F:49:53:CF:38:16
Authority key identifier: 36:6A:9D:54:22:97:57:7B:37:AA:0C:42:31:95:AF:E2:A9:8E:13:5D
Certificate issuer:       /CN=366a9d542297577b37aa0c423195afe2a98e135d
Certificate serial:       019A4E86C91A0D3103975A17E02BC538A757
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NmqdVCKXV3s3qgxCMZWv4qmOE10.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/fc7545-c5fa-43bd-8839-d185dec06012/1/NmqdVCKXV3s3qgxCMZWv4qmOE10.mft
Manifest number:          1710
Signing time:             Tue 04 Nov 2025 11:00:47 +0000
Manifest this update:     Tue 04 Nov 2025 11:00:47 +0000
Manifest next update:     Wed 05 Nov 2025 11:00:47 +0000
Files and hashes:         1: NmqdVCKXV3s3qgxCMZWv4qmOE10.crl (hash: W91GMgg8Xr9Tt7AHS769j2uO6g71nH1A9fpaTNS7J5g=)
                          2: bEKsBvD9r6Xyt_P3Ap1ApX4DjcU.roa (hash: 24Br4dwLUP9p+zXB4KMnlxiNc2TbHeks2Jsk87QFi10=)
                          3: kSQ_R5Z-vsBcuOXx6WhdFdmllY0.roa (hash: OhKVJv+g1lqmaayTLliiukgCHTE/MZNzjIGSTC2Zdcw=)
                          4: naFGULOSYvt_ys0vvTSfwr2rqtk.roa (hash: b43Uckjczt2PCUz41jkHhIKmF+uwsILXTS5gZeF8UNU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/fc7545-c5fa-43bd-8839-d185dec06012/1/NmqdVCKXV3s3qgxCMZWv4qmOE10.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/fc7545-c5fa-43bd-8839-d185dec06012/1/NmqdVCKXV3s3qgxCMZWv4qmOE10.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NmqdVCKXV3s3qgxCMZWv4qmOE10.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:86:c9:1a:0d:31:03:97:5a:17:e0:2b:c5:38:a7:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=366a9d542297577b37aa0c423195afe2a98e135d
        Validity
            Not Before: Nov  4 11:00:47 2025 GMT
            Not After : Nov  5 11:00:47 2025 GMT
        Subject: CN=04dc7fbec36924ed2ff8dbd84ce07f4953cf3816
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:1d:07:e6:53:20:3f:5e:51:ec:1e:10:11:8b:
                    57:1f:ca:ea:da:a7:e4:9c:66:8e:5b:38:72:fc:68:
                    46:94:82:84:d3:69:9a:05:0e:59:5d:07:e7:32:39:
                    39:9a:46:e6:5f:0c:09:1c:59:ea:52:fd:7d:8e:48:
                    5d:de:b0:1e:49:f7:e4:66:f8:d0:07:62:c1:21:81:
                    bc:96:be:05:69:9a:98:78:ee:f3:ef:1d:04:da:0c:
                    76:8f:53:0d:f9:b2:50:93:4f:4b:ea:dd:3b:8f:54:
                    73:ea:bc:7e:f6:f5:59:c2:0a:f5:b1:74:8b:41:19:
                    6f:f1:d6:71:15:3e:7b:df:a6:06:38:9c:77:1f:c3:
                    78:25:32:b3:90:3d:9f:e6:b7:5c:16:c1:ce:a7:d6:
                    bc:aa:37:6d:73:40:81:53:bc:08:ac:dd:36:2a:a9:
                    91:b8:39:a4:eb:21:6e:81:85:8b:f8:d3:3c:d5:38:
                    fc:d9:ff:33:8d:7c:c7:01:dd:55:9b:ce:e6:eb:86:
                    7d:bc:6f:01:b4:24:ca:91:b9:84:b4:1f:c4:80:50:
                    20:30:89:1b:db:4c:01:ed:34:9b:0e:ee:a1:c0:9e:
                    74:95:00:8e:cb:94:0e:7f:c7:98:71:9d:a9:f1:d2:
                    a1:41:f6:89:b1:6d:b4:0f:55:9c:b9:6b:be:e3:d6:
                    b3:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:DC:7F:BE:C3:69:24:ED:2F:F8:DB:D8:4C:E0:7F:49:53:CF:38:16
            X509v3 Authority Key Identifier:
                keyid:36:6A:9D:54:22:97:57:7B:37:AA:0C:42:31:95:AF:E2:A9:8E:13:5D
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NmqdVCKXV3s3qgxCMZWv4qmOE10.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fc7545-c5fa-43bd-8839-d185dec06012/1/NmqdVCKXV3s3qgxCMZWv4qmOE10.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fc7545-c5fa-43bd-8839-d185dec06012/1/NmqdVCKXV3s3qgxCMZWv4qmOE10.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         1f:19:5e:d9:fd:64:07:32:7a:d4:f6:52:b8:db:e5:ca:8e:1c:
         bb:96:d4:cf:48:16:8b:cc:f2:12:04:02:c6:56:8a:b0:e3:ed:
         0c:45:04:ae:1d:26:55:3a:b6:f5:32:61:a7:fe:4d:f8:ef:fc:
         9c:50:1b:03:4b:f4:86:7a:18:30:4a:2b:1f:be:af:6c:95:f8:
         65:9b:42:25:44:e3:3d:2e:aa:94:31:0c:89:44:42:73:33:4a:
         62:45:ba:b1:22:45:e0:54:35:63:cd:8d:73:b2:d8:6c:59:3c:
         29:c1:ba:89:27:c0:e9:07:d4:b5:ea:16:29:5d:3c:a2:ca:22:
         73:1f:fa:ad:01:87:5f:f8:2a:6f:7b:38:b8:0c:86:6e:30:5a:
         67:9b:ba:71:fb:e5:73:c0:65:e5:b0:bf:ba:17:36:3b:d3:e0:
         11:4f:e7:b5:97:c3:87:2f:56:21:e0:92:b1:a5:28:e7:f4:f2:
         cd:eb:de:ba:08:b0:48:5a:d1:6e:e5:d5:27:d1:4f:3b:c9:57:
         c4:78:2f:82:3b:68:0f:92:b2:ec:0e:be:df:5f:81:6b:ef:f4:
         9d:a5:f1:1d:b1:8e:84:46:63:9a:9b:0d:03:16:66:2a:59:34:
         d5:c0:c2:88:df:7c:1e:c5:0e:f4:79:71:f7:10:b0:8e:8e:c2:
         de:8c:0c:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 14:42:12 2025 by rpki-client