Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/NhrfV8jct7_TTprs2D42NC7Do8k.mft
File:                     NhrfV8jct7_TTprs2D42NC7Do8k.mft (raw, json)
Hash identifier:          RWgzWIFswyRd4buJcsRRTpfE/KbtSFfTuQxr6JxToYI=
Subject key identifier:   A6:AE:82:07:7A:73:9F:C9:96:1C:7C:4E:9B:FF:09:AA:47:09:DA:07
Authority key identifier: 36:1A:DF:57:C8:DC:B7:BF:D3:4E:9A:EC:D8:3E:36:34:2E:C3:A3:C9
Certificate issuer:       /CN=361adf57c8dcb7bfd34e9aecd83e36342ec3a3c9
Certificate serial:       019A51BE7BD322A00C50C711BCB7F368AF3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NhrfV8jct7_TTprs2D42NC7Do8k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/NhrfV8jct7_TTprs2D42NC7Do8k.mft
Manifest number:          14CB
Signing time:             Wed 05 Nov 2025 02:00:29 +0000
Manifest this update:     Wed 05 Nov 2025 02:00:29 +0000
Manifest next update:     Thu 06 Nov 2025 02:00:29 +0000
Files and hashes:         1: 8GuN-54fOOWK-SbVRHbvHD1t258.roa (hash: +JAgmZYVHbTg/tn7L+SSKAVcpZBlqMe4rbmvvs3DmTY=)
                          2: KFmrVFMv5VvGN18H4jdGIeWGvn8.roa (hash: /z+1/Ei//uOKicmtTi2XHrdGdq2SuXHHljqI7g0rhfE=)
                          3: NhrfV8jct7_TTprs2D42NC7Do8k.crl (hash: yY4JPUsyiDTKyqg4dZVXE1lu7xhIO5VT4hH+01/oxzs=)
                          4: gaApv-P3VWnlKNagOLOw5elCXUg.roa (hash: uJOMrg9lvM87wMjmTs9ZCZY0pZU1l+jJJKNSBI4+HgI=)
                          5: mldZ02SgByZkxb9-hN-tKmR0o0s.roa (hash: DrkW1wHvYpTjqDlBZkGq/sAaUPB7borOxMsYKMVFock=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/NhrfV8jct7_TTprs2D42NC7Do8k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/NhrfV8jct7_TTprs2D42NC7Do8k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NhrfV8jct7_TTprs2D42NC7Do8k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 22:37:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:51:be:7b:d3:22:a0:0c:50:c7:11:bc:b7:f3:68:af:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=361adf57c8dcb7bfd34e9aecd83e36342ec3a3c9
        Validity
            Not Before: Nov  5 02:00:29 2025 GMT
            Not After : Nov  6 02:00:29 2025 GMT
        Subject: CN=a6ae82077a739fc9961c7c4e9bff09aa4709da07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:21:13:a2:79:09:11:10:1b:4a:a6:d7:a9:43:
                    fa:8f:91:b0:a2:8d:f1:17:57:19:3e:f0:c8:cf:01:
                    15:97:76:9a:91:e8:b1:26:33:1c:6f:79:0b:17:53:
                    7e:0e:a9:b5:6b:6f:89:9d:52:82:76:17:c7:72:f6:
                    ba:3e:84:0f:04:94:9f:3f:ba:d1:1b:2b:b9:ac:68:
                    37:c0:61:b6:f3:4e:70:ae:20:15:2b:52:0e:a1:34:
                    47:5b:71:bd:84:af:72:a4:02:55:f8:3e:24:f0:9d:
                    bb:f2:af:30:0c:66:b6:6c:ba:b4:90:c6:78:36:bf:
                    75:df:36:73:3f:ca:3d:f5:ad:69:3d:88:46:2e:00:
                    d1:22:89:d8:0c:14:65:39:a0:57:75:8e:83:2b:2f:
                    13:21:3e:74:38:f0:c0:57:86:bc:24:ee:fb:f3:26:
                    d8:0e:4f:a7:a3:20:69:9c:e9:bc:46:52:b3:1b:e9:
                    09:24:d3:ef:b1:91:9f:a2:74:f2:62:4f:94:c1:f5:
                    7e:04:3d:2e:71:73:db:3f:98:86:96:8b:55:cb:eb:
                    18:52:db:f2:c1:a1:d8:5f:af:f4:10:f5:72:94:da:
                    85:fa:1b:23:c3:b9:af:6d:52:51:6f:70:8b:7d:68:
                    f1:c2:0f:4f:ca:73:34:2b:e6:8c:a0:7f:d8:9f:d4:
                    15:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:AE:82:07:7A:73:9F:C9:96:1C:7C:4E:9B:FF:09:AA:47:09:DA:07
            X509v3 Authority Key Identifier:
                keyid:36:1A:DF:57:C8:DC:B7:BF:D3:4E:9A:EC:D8:3E:36:34:2E:C3:A3:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhrfV8jct7_TTprs2D42NC7Do8k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/NhrfV8jct7_TTprs2D42NC7Do8k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/NhrfV8jct7_TTprs2D42NC7Do8k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:65:b6:6e:1d:86:3f:c1:f0:64:78:57:8b:56:92:63:49:c8:
         7d:a1:4f:24:41:eb:2e:7a:e1:db:88:90:ce:b9:ca:52:24:0d:
         97:fa:40:80:63:32:fb:13:56:51:8e:09:da:bc:ba:75:c0:76:
         a4:8a:6c:61:44:e8:5e:0d:f1:0d:f8:a2:3a:32:37:0f:c4:89:
         6a:ab:94:74:b6:e3:69:a5:d1:49:b8:a8:58:cb:52:81:12:2b:
         fe:46:e9:3d:4f:20:52:a4:68:1a:5e:6f:eb:88:ec:b1:ff:83:
         de:f9:d0:b3:38:6c:32:c3:6f:5e:d6:55:ed:0a:a7:c4:d8:3e:
         c6:7b:b2:c4:7b:96:2d:59:c0:bb:39:33:9c:d1:5a:45:e3:79:
         b3:ae:f7:a8:94:17:03:b1:a4:61:1a:50:86:50:e2:70:71:d1:
         d7:c5:bb:8d:87:d9:3c:75:2a:fa:0e:1b:b5:d6:ff:6e:c8:af:
         aa:87:ac:47:d9:f7:f4:a4:18:07:6a:3a:a5:25:2a:5c:82:6f:
         2c:5f:fa:2b:ad:bc:17:25:b7:84:23:7e:c4:94:79:46:3b:92:
         8c:10:56:18:74:d6:52:39:0a:0e:c6:9e:a5:15:b6:20:85:24:
         fe:75:25:45:ca:42:f3:fe:fa:6c:83:34:9c:12:9c:4a:31:a5:
         dc:62:bd:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:16:23 2025 by rpki-client