Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft
File:                     nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft (raw, json)
Hash identifier:          X02Myb9Z++Loe0UsAs+JVldEiy/5d8pINP15MYhTOvw=
Subject key identifier:   D2:8B:B1:57:70:1F:8A:FD:96:A6:12:75:18:8D:20:A8:82:09:14:E5
Authority key identifier: 9D:5E:CC:E8:C8:7C:4F:0A:75:BA:21:E5:C8:4F:62:41:21:E0:8E:32
Certificate issuer:       /CN=9d5ecce8c87c4f0a75ba21e5c84f624121e08e32
Certificate serial:       019A556453622189F02E839D9B0D4C473286
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft
Manifest number:          0235
Signing time:             Wed 05 Nov 2025 19:00:29 +0000
Manifest this update:     Wed 05 Nov 2025 19:00:29 +0000
Manifest next update:     Thu 06 Nov 2025 19:00:29 +0000
Files and hashes:         1: W1gtHYOxkSQKrOdwkNpP1ZoMoUY.roa (hash: 5S4JEcGJktduCewz9POQY0aRBOXQzpGOLodHYl3CjqI=)
                          2: nV7M6Mh8Twp1uiHlyE9iQSHgjjI.crl (hash: 9nzO+TJ4s4xtLnP+UMCJU0cyD4+WW0euLTSZeMuGeh8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 06 Nov 2025 12:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:55:64:53:62:21:89:f0:2e:83:9d:9b:0d:4c:47:32:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d5ecce8c87c4f0a75ba21e5c84f624121e08e32
        Validity
            Not Before: Nov  5 19:00:29 2025 GMT
            Not After : Nov  6 19:00:29 2025 GMT
        Subject: CN=d28bb157701f8afd96a61275188d20a8820914e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d7:45:17:70:60:0b:26:46:b2:ef:de:c0:35:
                    e1:e3:51:fb:c2:7b:dd:ea:28:0e:b2:a4:c3:a0:ba:
                    d5:bf:ed:5a:2f:25:bd:c7:e5:34:43:e4:96:89:a6:
                    8b:96:d8:2f:d8:22:60:b0:88:07:50:89:3c:9e:27:
                    32:2f:c2:0a:39:03:eb:52:01:d1:69:ba:48:86:0e:
                    ac:1c:73:c3:b6:81:f8:d9:c9:30:a5:10:2b:8c:2c:
                    17:cf:9e:a3:85:81:48:06:21:90:9a:39:02:64:ab:
                    4a:f3:7a:96:45:06:f3:ce:b4:9d:21:20:dc:96:a6:
                    dc:e9:df:cb:0a:15:3c:c2:3b:b2:03:44:13:a3:26:
                    14:68:63:31:97:f2:2d:98:c1:a7:65:89:0f:7c:a2:
                    c6:28:3c:53:f9:02:94:e8:d3:84:90:7d:21:3d:ca:
                    55:6e:a5:07:28:34:69:de:68:f3:84:91:29:d5:13:
                    aa:75:2c:3d:2f:4b:5c:3e:83:cd:f6:eb:71:de:20:
                    e4:17:8f:a4:f8:44:8f:2d:ba:08:0b:94:3a:49:2f:
                    f5:67:da:60:f7:a4:74:7a:e7:dc:32:a6:25:a6:70:
                    47:32:9d:71:44:70:a0:dc:12:8d:4d:2b:05:17:86:
                    61:8e:e6:4e:c8:23:dd:87:c3:fc:70:db:1b:dc:8b:
                    3c:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:8B:B1:57:70:1F:8A:FD:96:A6:12:75:18:8D:20:A8:82:09:14:E5
            X509v3 Authority Key Identifier:
                keyid:9D:5E:CC:E8:C8:7C:4F:0A:75:BA:21:E5:C8:4F:62:41:21:E0:8E:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:84:4d:ca:fc:08:f8:f5:ab:9d:6a:f6:aa:61:39:b6:d7:c3:
         b2:ca:80:8f:7b:ff:42:65:6b:3c:ba:ff:d2:83:c7:b8:e4:7b:
         fe:b0:29:df:eb:a1:9c:33:7f:f5:c4:1f:cf:d9:19:3a:b4:63:
         1d:e9:ab:a0:17:e4:3c:c4:c9:ee:74:6a:59:f7:ab:c3:cf:84:
         f3:05:1f:18:f0:14:08:a2:e1:c1:59:14:cf:a1:0e:f3:48:14:
         cc:59:62:f0:a4:3b:77:70:e1:7e:38:1e:90:71:a6:92:ac:9f:
         b6:5e:c9:fb:93:9c:16:e2:5f:dd:5a:b6:05:b5:28:5d:1e:a6:
         05:c9:db:ee:6b:cb:e7:e7:67:fc:98:a1:0b:19:a0:36:9f:84:
         4e:1d:e9:e1:89:c3:4c:f8:75:23:30:4e:bc:8b:3e:da:8b:fa:
         48:6d:89:f2:c0:1f:61:1d:8c:d0:28:01:ac:85:93:34:4a:86:
         6d:8c:fc:a7:a3:29:39:0d:cb:3e:8a:a1:82:07:f5:6d:38:a2:
         f6:04:33:1f:1a:4d:39:3c:9d:05:1f:f9:23:77:3c:89:12:54:
         18:63:48:f4:c3:88:14:ad:b4:e5:57:54:52:91:ee:87:ea:34:
         ba:ae:6d:bb:c1:be:72:ac:38:4c:2d:62:f9:76:c7:2c:7a:83:
         b8:04:59:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:15:12 2025 by rpki-client