Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5f14ea-ebbb-4c8e-be31-9c1e13e0e578/1/nlzy-Led9mJBfsllbtEWbpGquAg.mft
File:                     nlzy-Led9mJBfsllbtEWbpGquAg.mft (raw, json)
Hash identifier:          gBxfJ0sQw/WwF6q2fj4GAhj+vawBGMPjaAXMPF25nt4=
Subject key identifier:   DD:B8:C5:13:34:E3:FE:D5:06:91:68:D8:1B:AB:17:0F:2A:DB:4C:9A
Authority key identifier: 9E:5C:F2:F8:B7:9D:F6:62:41:7E:C9:65:6E:D1:16:6E:91:AA:B8:08
Certificate issuer:       /CN=9e5cf2f8b79df662417ec9656ed1166e91aab808
Certificate serial:       019881D51A490F2E88CDB93803F80D554B61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nlzy-Led9mJBfsllbtEWbpGquAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/5f14ea-ebbb-4c8e-be31-9c1e13e0e578/1/nlzy-Led9mJBfsllbtEWbpGquAg.mft
Manifest number:          0E9F
Signing time:             Thu 07 Aug 2025 00:01:23 +0000
Manifest this update:     Thu 07 Aug 2025 00:01:23 +0000
Manifest next update:     Fri 08 Aug 2025 00:01:23 +0000
Files and hashes:         1: Qa3IwStcz_sWRz0L6oud4ZOJOR8.roa (hash: WbvR7lgO/S3QOwy/R14Yl51OkTUajPVQcMXibufV2RY=)
                          2: nlzy-Led9mJBfsllbtEWbpGquAg.crl (hash: HVV4h2TfGc9iyreJhPo5cCMt0bt+fK564qk3w0nKSh0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/5f14ea-ebbb-4c8e-be31-9c1e13e0e578/1/nlzy-Led9mJBfsllbtEWbpGquAg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/5f14ea-ebbb-4c8e-be31-9c1e13e0e578/1/nlzy-Led9mJBfsllbtEWbpGquAg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nlzy-Led9mJBfsllbtEWbpGquAg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:81:d5:1a:49:0f:2e:88:cd:b9:38:03:f8:0d:55:4b:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e5cf2f8b79df662417ec9656ed1166e91aab808
        Validity
            Not Before: Aug  7 00:01:23 2025 GMT
            Not After : Aug  8 00:01:23 2025 GMT
        Subject: CN=ddb8c51334e3fed5069168d81bab170f2adb4c9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:98:b9:ec:df:56:f1:ee:d7:43:b3:bc:57:58:
                    55:71:f6:f1:e6:d4:9c:92:e1:a1:f3:c5:86:b9:97:
                    15:91:09:3d:72:de:9a:d0:8a:be:6e:7b:f9:da:f4:
                    93:0a:67:68:87:9a:48:30:54:a6:97:2c:58:2d:00:
                    18:02:55:7b:38:34:b1:73:10:58:55:7a:c6:b3:4c:
                    ba:47:de:ff:9f:8c:44:12:26:cc:8b:22:84:d0:80:
                    18:8c:5a:7e:af:9e:24:38:81:f8:ef:bd:24:63:f4:
                    55:e1:93:97:58:5d:12:d8:d0:92:25:95:11:63:5c:
                    79:3e:6c:41:db:92:e6:01:87:2f:4a:57:ca:56:20:
                    96:bc:38:d5:12:3b:dd:54:42:97:67:12:20:01:7e:
                    77:8c:d6:55:ad:a2:c0:83:f7:e9:b5:ff:63:ff:86:
                    65:a1:10:2e:a6:b1:e5:0d:fe:b0:51:04:7e:c1:c6:
                    c1:e7:c8:7f:2e:dd:28:b6:1e:9b:93:3e:06:ea:92:
                    7f:fd:82:85:39:a0:aa:a8:ae:19:9c:2f:a3:2c:65:
                    37:00:d1:ce:2b:cb:39:88:c8:17:9c:77:9f:f7:4c:
                    47:87:48:8f:ae:13:5b:c9:ef:3c:d4:04:4a:e7:ec:
                    bd:53:ae:04:1b:16:a4:9b:6a:6c:1b:e4:08:fa:b6:
                    42:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:B8:C5:13:34:E3:FE:D5:06:91:68:D8:1B:AB:17:0F:2A:DB:4C:9A
            X509v3 Authority Key Identifier:
                keyid:9E:5C:F2:F8:B7:9D:F6:62:41:7E:C9:65:6E:D1:16:6E:91:AA:B8:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nlzy-Led9mJBfsllbtEWbpGquAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5f14ea-ebbb-4c8e-be31-9c1e13e0e578/1/nlzy-Led9mJBfsllbtEWbpGquAg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5f14ea-ebbb-4c8e-be31-9c1e13e0e578/1/nlzy-Led9mJBfsllbtEWbpGquAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:87:bf:89:b3:ba:ea:83:53:c6:1a:03:05:c3:c5:d6:95:ca:
         76:ee:7a:92:2b:36:3b:38:9c:a7:70:03:95:90:f4:8f:f2:30:
         64:bd:a6:48:ef:22:fd:ec:4c:8d:4b:74:41:72:55:48:ad:ab:
         d1:bd:43:df:44:6b:1c:51:11:46:d3:98:3a:00:8f:bd:66:96:
         c6:52:22:94:42:e0:04:c3:d6:c7:78:f4:63:3a:ec:e1:27:99:
         f3:70:c7:98:27:f9:8f:c2:0a:d0:c1:10:65:94:3d:36:d1:c9:
         76:c6:f6:aa:d3:df:2c:83:50:db:c8:83:92:32:d9:92:be:fc:
         46:34:3e:b3:01:82:bb:40:1c:5b:b4:ec:e8:51:3c:31:f0:06:
         c2:8b:9c:8a:83:39:a2:c6:9b:42:bd:7d:d1:0b:a4:e1:53:5f:
         17:50:fe:ac:c3:e1:d9:67:55:c4:90:90:83:1f:68:7e:d4:a4:
         54:f5:97:27:5f:c3:95:2b:6f:6b:71:35:f7:29:f2:1d:43:01:
         29:fb:05:f3:44:eb:a7:71:72:ee:dd:e4:8c:fc:6a:29:67:47:
         37:a6:cb:ae:4e:00:09:0f:51:94:f6:04:64:06:3f:f1:f5:9b:
         c1:8e:42:60:47:a7:a7:8a:ac:69:7f:3d:ee:93:9e:cd:ac:c6:
         0e:7a:b9:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:49:20 2025 by rpki-client