Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/e0059f-b910-4bb7-9341-7750972265aa/1/N_9VuVdDqRW3k9ct5xrJbOYZipc.mft
File:                     N_9VuVdDqRW3k9ct5xrJbOYZipc.mft (raw, json)
Hash identifier:          hjzZLO9g53phg7cWE1CWHMRjF8rege6wtWUsQjzrZpM=
Subject key identifier:   CE:3E:17:8B:16:3F:42:0F:14:9E:71:16:3F:FD:9B:5A:7B:48:C3:17
Authority key identifier: 37:FF:55:B9:57:43:A9:15:B7:93:D7:2D:E7:1A:C9:6C:E6:19:8A:97
Certificate issuer:       /CN=37ff55b95743a915b793d72de71ac96ce6198a97
Certificate serial:       019A4E86543CA8FF41AE3481F815E885AFF0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N_9VuVdDqRW3k9ct5xrJbOYZipc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/e0059f-b910-4bb7-9341-7750972265aa/1/N_9VuVdDqRW3k9ct5xrJbOYZipc.mft
Manifest number:          169E
Signing time:             Tue 04 Nov 2025 11:00:17 +0000
Manifest this update:     Tue 04 Nov 2025 11:00:17 +0000
Manifest next update:     Wed 05 Nov 2025 11:00:17 +0000
Files and hashes:         1: N_9VuVdDqRW3k9ct5xrJbOYZipc.crl (hash: RVjIYEY0o58fSm/7z7pl9dMrzU0O9yfx9ECZMzO0aGs=)
                          2: UOgjlDZ-hlIE51uRVoyR7KP99NE.roa (hash: 1AY5DsB6GoL7krCLNb7v1DdRQDuAlUbr226PuiYccH4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/e0059f-b910-4bb7-9341-7750972265aa/1/N_9VuVdDqRW3k9ct5xrJbOYZipc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/e0059f-b910-4bb7-9341-7750972265aa/1/N_9VuVdDqRW3k9ct5xrJbOYZipc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N_9VuVdDqRW3k9ct5xrJbOYZipc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:86:54:3c:a8:ff:41:ae:34:81:f8:15:e8:85:af:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37ff55b95743a915b793d72de71ac96ce6198a97
        Validity
            Not Before: Nov  4 11:00:17 2025 GMT
            Not After : Nov  5 11:00:17 2025 GMT
        Subject: CN=ce3e178b163f420f149e71163ffd9b5a7b48c317
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:30:79:70:0b:f4:d4:2b:12:f8:d3:70:42:4d:
                    32:4a:6f:d7:00:fc:5d:eb:f3:0d:09:41:40:20:2a:
                    60:39:d5:62:ea:38:c5:55:fd:12:92:65:72:a3:33:
                    7c:dd:7f:b2:5f:6c:3e:f1:85:71:1d:33:27:02:9a:
                    b3:8c:13:b5:a6:fc:4e:05:85:47:0f:ea:02:95:1e:
                    5e:32:16:e2:ae:a9:df:72:af:e4:5c:9a:c6:47:e4:
                    2c:6d:62:57:45:37:64:3f:0f:81:16:1b:6f:49:b5:
                    f8:d7:2b:0b:09:bb:d0:9e:41:80:16:50:07:de:6b:
                    c3:34:cb:9d:da:7a:c2:2b:c3:05:fa:ce:01:82:2a:
                    6f:45:59:76:c8:c8:e1:fe:b0:8b:78:b0:d9:80:b4:
                    d3:62:23:4b:af:f9:d6:fe:56:d6:c9:54:02:1b:bc:
                    48:a6:95:0c:5f:fa:ff:59:b6:08:69:37:54:49:ce:
                    df:82:d4:a1:df:6f:18:63:e1:be:5a:e1:4e:5f:c7:
                    2b:ea:8f:85:db:f6:79:3e:e4:c9:90:e2:51:02:05:
                    27:f4:33:8b:52:23:1c:99:71:03:b6:dd:45:ab:6a:
                    44:50:7a:ea:29:ce:e5:0c:02:65:73:fe:d3:43:ba:
                    48:ed:94:18:84:0a:08:e7:42:17:ad:08:5a:b0:5e:
                    1b:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:3E:17:8B:16:3F:42:0F:14:9E:71:16:3F:FD:9B:5A:7B:48:C3:17
            X509v3 Authority Key Identifier:
                keyid:37:FF:55:B9:57:43:A9:15:B7:93:D7:2D:E7:1A:C9:6C:E6:19:8A:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N_9VuVdDqRW3k9ct5xrJbOYZipc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/e0059f-b910-4bb7-9341-7750972265aa/1/N_9VuVdDqRW3k9ct5xrJbOYZipc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/e0059f-b910-4bb7-9341-7750972265aa/1/N_9VuVdDqRW3k9ct5xrJbOYZipc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:b1:88:aa:39:8e:cd:d5:10:dd:e9:c7:24:3e:24:24:a2:3f:
         8d:bd:00:e7:3f:98:db:ad:68:7c:1c:8c:22:6a:c5:2f:a5:bb:
         a4:45:41:66:95:6c:d5:1e:89:33:45:91:25:25:ec:48:29:ae:
         1a:1b:e0:b4:a4:26:3f:31:1d:9b:c8:4c:19:cd:fc:0c:ca:de:
         1f:c3:3d:4c:cb:bb:77:a6:e8:a9:c7:7f:6a:e9:13:e2:a0:00:
         76:c5:b2:8d:ff:63:31:92:10:72:c6:9b:17:50:14:36:9e:3b:
         57:37:88:c4:e8:58:c2:ee:c9:58:36:ad:c2:41:ed:da:ba:8b:
         67:45:b3:5a:1c:73:be:3c:1e:96:13:65:d7:ff:2d:47:65:78:
         71:00:67:ed:42:69:36:d8:7e:ed:9d:21:c0:ca:76:f3:2a:69:
         a6:23:03:6c:a0:75:a0:5d:fd:49:88:71:b5:01:3b:f7:0c:38:
         4c:60:bd:02:56:f1:64:a6:b3:d7:89:db:d7:df:95:f4:d7:9c:
         20:db:9e:fb:b4:99:13:46:3e:bc:e5:21:f4:22:d4:9e:9f:8b:
         36:b7:d4:27:f7:0a:91:5d:7b:8c:1c:18:a0:de:19:c4:c3:46:
         3d:b4:90:6e:0e:78:22:6d:29:73:c0:e7:1d:5e:fb:79:99:15:
         03:8c:9e:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:01:31 2025 by rpki-client