
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/abe37e-ed6f-47f2-b33f-9b592b337bc3/1/n6TechyAssnnbOAVqErHDv_F7YY.mft
File:                     n6TechyAssnnbOAVqErHDv_F7YY.mft (raw, json)
Hash identifier:          MVUraakRr+dIPRLdV4MuLJn1I9WM0CZlq+I6VD1c8zk=
Subject key identifier:   7D:45:D9:7B:DF:A9:C0:B5:83:52:18:60:97:E7:0F:24:3E:6B:2C:8E
Authority key identifier: 9F:A4:DE:72:1C:80:B2:C9:E7:6C:E0:15:A8:4A:C7:0E:FF:C5:ED:86
Certificate issuer:       /CN=9fa4de721c80b2c9e76ce015a84ac70effc5ed86
Certificate serial:       019A4DE209B20FA4922D134245574A4304FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n6TechyAssnnbOAVqErHDv_F7YY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/abe37e-ed6f-47f2-b33f-9b592b337bc3/1/n6TechyAssnnbOAVqErHDv_F7YY.mft
Manifest number:          0502
Signing time:             Tue 04 Nov 2025 08:00:50 +0000
Manifest this update:     Tue 04 Nov 2025 08:00:50 +0000
Manifest next update:     Wed 05 Nov 2025 08:00:50 +0000
Files and hashes:         1: P2nym14bXf7-o3TKnA8wqlQINc0.roa (hash: BvMnx8gB03E4RRWOX7ePyO4fuU7mD1CMfMsL+iFDUsM=)
                          2: n6TechyAssnnbOAVqErHDv_F7YY.crl (hash: iibmuFD/6a/IsvEj1QqcmKWzd/vNOhd7QhBmbvB7If4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/abe37e-ed6f-47f2-b33f-9b592b337bc3/1/n6TechyAssnnbOAVqErHDv_F7YY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/abe37e-ed6f-47f2-b33f-9b592b337bc3/1/n6TechyAssnnbOAVqErHDv_F7YY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n6TechyAssnnbOAVqErHDv_F7YY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 08:00:50 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4d:e2:09:b2:0f:a4:92:2d:13:42:45:57:4a:43:04:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fa4de721c80b2c9e76ce015a84ac70effc5ed86
        Validity
            Not Before: Nov  4 08:00:50 2025 GMT
            Not After : Nov  5 08:00:50 2025 GMT
        Subject: CN=7d45d97bdfa9c0b58352186097e70f243e6b2c8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:33:58:48:56:7b:e6:52:a5:19:2f:c9:5d:7b:
                    63:5c:5f:d3:dc:bb:7e:df:de:d6:c3:ae:6c:24:e2:
                    10:10:a0:88:7f:cb:0c:96:29:cb:63:6b:68:ca:1e:
                    bb:73:8d:c7:1a:f1:d9:e3:0f:9d:10:2b:b5:3c:08:
                    7a:58:10:3f:47:ad:8f:b0:55:eb:3a:33:2f:50:a8:
                    6b:1c:d9:5d:11:7a:e6:4d:e9:a8:73:a4:d4:e2:1a:
                    39:dd:1b:da:59:89:84:1b:39:64:6e:29:27:a5:d0:
                    c3:a2:05:c6:53:ae:fd:eb:3e:95:de:ce:09:29:d7:
                    7f:aa:2e:fe:fc:b3:d9:b0:ed:79:6b:ff:43:f1:5b:
                    20:e1:ed:13:16:36:0e:23:62:66:d7:6a:f8:26:47:
                    9d:06:5c:07:be:ef:4c:bd:05:9d:af:79:8c:d2:6a:
                    67:1f:7c:40:05:9c:57:ac:80:09:95:dd:b0:af:5a:
                    ec:3c:1a:4a:c7:00:25:97:dd:d2:68:fe:8a:7d:81:
                    4e:0a:a5:6d:94:24:ba:ac:10:e8:3b:bb:f4:93:c1:
                    1c:3f:81:32:80:d0:0e:50:8c:4e:51:08:c9:81:2f:
                    b7:03:22:92:c5:7d:08:4e:34:0e:9b:a5:c2:21:6c:
                    c4:b9:72:38:2f:90:bb:a5:6d:8f:97:7f:4d:62:61:
                    1d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:45:D9:7B:DF:A9:C0:B5:83:52:18:60:97:E7:0F:24:3E:6B:2C:8E
            X509v3 Authority Key Identifier:
                keyid:9F:A4:DE:72:1C:80:B2:C9:E7:6C:E0:15:A8:4A:C7:0E:FF:C5:ED:86
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n6TechyAssnnbOAVqErHDv_F7YY.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/abe37e-ed6f-47f2-b33f-9b592b337bc3/1/n6TechyAssnnbOAVqErHDv_F7YY.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/abe37e-ed6f-47f2-b33f-9b592b337bc3/1/n6TechyAssnnbOAVqErHDv_F7YY.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         59:00:9e:98:c7:5b:98:3a:7b:35:8d:0c:09:9d:fb:ba:c1:b5:
         d3:4c:91:b6:05:b1:0f:32:aa:15:65:96:5a:68:af:9e:0b:d9:
         79:a4:47:20:b9:91:bf:bf:86:fd:27:63:1c:4c:d5:46:92:4c:
         32:18:dd:9b:5a:ff:30:61:35:03:77:fe:da:80:d4:ca:6e:8e:
         b2:75:85:60:7a:85:f1:59:5d:e5:50:f3:44:10:25:8f:22:c0:
         93:f5:15:f2:0f:0f:79:8d:49:d0:fa:31:7a:f9:30:2d:51:0d:
         f9:09:07:b2:2b:21:b8:ba:fe:dc:ab:60:e6:b5:0f:79:27:c4:
         e2:c0:a0:74:5f:0b:da:2a:d7:47:ce:c0:d9:d0:e9:37:a9:23:
         d6:9e:79:2c:54:f8:7c:2d:b0:e0:50:4d:59:76:7d:a4:b2:49:
         58:c0:80:4d:b0:b5:f0:a6:51:cc:65:32:34:c5:bd:59:b4:85:
         96:e4:a0:19:fc:c9:7e:bd:b4:19:4c:84:d9:d2:e8:e1:27:65:
         74:01:29:71:53:f4:76:cd:e7:6b:ab:58:70:6e:fe:b0:8c:30:
         dd:5a:c9:7b:20:0a:19:92:60:51:95:12:a7:8e:8b:59:ca:86:
         2e:57:49:1e:f8:6e:d0:03:d2:93:97:23:9f:77:07:5c:93:3e:
         ba:98:f0:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 14:51:10 2025 by rpki-client