
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/a0faca-db7f-4ed8-b11a-eec46ca82a33/1/NVi7R941Tgng_CyywfoU1x2Sbug.mft
File:                     NVi7R941Tgng_CyywfoU1x2Sbug.mft (raw, json)
Hash identifier:          u6DBByOSCIZl2XSfwA7kyNeEBUHVIp2UzieMnngtK3I=
Subject key identifier:   E9:DE:FF:DF:B4:EC:20:40:79:C7:8A:EF:C6:B1:73:27:6A:B6:46:75
Authority key identifier: 35:58:BB:47:DE:35:4E:09:E0:FC:2C:B2:C1:FA:14:D7:1D:92:6E:E8
Certificate issuer:       /CN=3558bb47de354e09e0fc2cb2c1fa14d71d926ee8
Certificate serial:       019A4DAAF59877C552FD532E2A999E18E0B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NVi7R941Tgng_CyywfoU1x2Sbug.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/a0faca-db7f-4ed8-b11a-eec46ca82a33/1/NVi7R941Tgng_CyywfoU1x2Sbug.mft
Manifest number:          1714
Signing time:             Tue 04 Nov 2025 07:00:40 +0000
Manifest this update:     Tue 04 Nov 2025 07:00:40 +0000
Manifest next update:     Wed 05 Nov 2025 07:00:40 +0000
Files and hashes:         1: 0iLUxeXNyLeCeJPOBWFetpkhzr8.roa (hash: GzvKjvrXUQtFRvTqnLO3SZbgmgXYnbU1huTzG2YJ5xg=)
                          2: NVi7R941Tgng_CyywfoU1x2Sbug.crl (hash: V9dH7UI0aTyLyuXvmSO2A8vL5fpYzGS5pXmMLTb/etY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/a0faca-db7f-4ed8-b11a-eec46ca82a33/1/NVi7R941Tgng_CyywfoU1x2Sbug.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/a0faca-db7f-4ed8-b11a-eec46ca82a33/1/NVi7R941Tgng_CyywfoU1x2Sbug.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NVi7R941Tgng_CyywfoU1x2Sbug.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 07:00:40 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4d:aa:f5:98:77:c5:52:fd:53:2e:2a:99:9e:18:e0:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3558bb47de354e09e0fc2cb2c1fa14d71d926ee8
        Validity
            Not Before: Nov  4 07:00:40 2025 GMT
            Not After : Nov  5 07:00:40 2025 GMT
        Subject: CN=e9deffdfb4ec204079c78aefc6b173276ab64675
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:3a:2a:8d:d2:2a:cd:a6:67:12:8a:2e:b7:b0:
                    3b:01:97:1c:c4:79:d4:88:2f:af:66:70:0d:2b:c0:
                    fd:bb:5a:de:88:d1:de:9e:45:40:35:ac:ab:a0:61:
                    be:e6:6b:b9:2e:68:fb:ca:b4:3b:5d:80:58:59:6e:
                    b1:1b:b3:52:08:5a:bf:08:25:fc:58:32:0d:62:4c:
                    ab:f0:d6:ec:de:73:51:8e:6b:53:f0:d5:95:52:3a:
                    85:ea:07:5f:4c:b8:fd:1c:b6:e1:ee:b0:78:44:04:
                    e9:ec:a7:0a:9b:21:c5:f3:ab:0b:c1:cd:7c:7d:87:
                    54:fc:0a:c9:f7:85:26:ee:d1:ee:06:ce:d2:9e:bd:
                    ae:e5:76:4e:00:18:6c:93:a3:cc:e2:ef:52:24:0c:
                    a5:60:07:37:bf:e4:b5:f2:fe:43:e0:e4:13:56:7c:
                    c1:b3:18:be:67:d2:99:4b:57:13:df:05:45:c0:53:
                    e4:02:3c:2a:4b:d7:c5:30:64:7e:07:94:49:c1:06:
                    ef:66:a3:9e:87:70:9f:72:06:51:56:bc:09:f8:33:
                    92:d6:57:69:7e:f1:ed:9c:9d:04:78:66:73:2d:0f:
                    5c:99:b9:e5:08:fe:a4:6d:b9:7b:25:91:83:ce:e4:
                    9f:e7:63:c4:c4:6f:58:eb:c0:65:d2:ea:60:36:94:
                    96:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:DE:FF:DF:B4:EC:20:40:79:C7:8A:EF:C6:B1:73:27:6A:B6:46:75
            X509v3 Authority Key Identifier:
                keyid:35:58:BB:47:DE:35:4E:09:E0:FC:2C:B2:C1:FA:14:D7:1D:92:6E:E8
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NVi7R941Tgng_CyywfoU1x2Sbug.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a0faca-db7f-4ed8-b11a-eec46ca82a33/1/NVi7R941Tgng_CyywfoU1x2Sbug.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a0faca-db7f-4ed8-b11a-eec46ca82a33/1/NVi7R941Tgng_CyywfoU1x2Sbug.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         9b:36:fd:16:72:70:f2:8e:90:1a:32:67:aa:18:22:60:7d:81:
         08:ab:01:b5:cc:46:71:de:de:cd:2d:f2:27:13:5c:09:64:ab:
         98:a1:c3:e6:9a:39:23:21:0b:13:5e:88:40:55:74:23:e9:91:
         46:54:03:47:ee:08:44:ef:18:41:64:1d:fa:5d:64:01:25:27:
         a6:0c:ac:6d:92:6e:d2:68:b2:46:d5:c1:6f:f5:06:81:12:a6:
         d2:b9:88:51:f8:84:a4:3b:5f:14:c0:cd:a5:14:60:86:ba:26:
         a3:a9:24:14:8b:02:dc:35:bf:de:94:5e:cb:4a:9b:5f:8c:e3:
         63:00:30:67:1e:a1:66:9f:97:81:76:a8:50:32:91:0b:47:3e:
         e2:76:ed:00:ba:48:84:a4:ed:4f:ba:e5:1d:ce:58:0b:13:99:
         ac:fb:52:b4:7d:2b:7c:a3:f0:42:03:e3:67:28:94:65:af:3c:
         51:28:eb:ca:68:d5:80:e9:f1:c8:42:75:45:16:ad:78:19:64:
         55:86:43:56:16:ab:8c:2f:3b:c2:86:2c:34:d0:89:37:26:8a:
         d8:c6:9e:6a:b4:39:30:f4:c0:49:ab:0d:bd:c7:05:7d:49:0b:
         85:5a:9b:a0:44:40:19:2f:9d:6d:84:cc:40:f9:61:3f:ce:d4:
         5d:81:31:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 14:51:05 2025 by rpki-client