Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft
File:                     NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft (raw, json)
Hash identifier:          veWh4gkK00oT5OD1FT2hMFlCPSZSkBrt/dapmu22Zl4=
Subject key identifier:   F2:65:F4:C9:5A:05:D3:75:79:55:20:37:D6:A9:61:23:E4:1A:2D:1B
Authority key identifier: 35:45:A7:20:01:64:91:20:41:BB:93:1E:FB:1F:EA:C1:23:B4:3A:18
Certificate issuer:       /CN=3545a7200164912041bb931efb1feac123b43a18
Certificate serial:       019A52D12EB1D02EA5171A0D3ADBA305466B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft
Manifest number:          1715
Signing time:             Wed 05 Nov 2025 07:00:31 +0000
Manifest this update:     Wed 05 Nov 2025 07:00:31 +0000
Manifest next update:     Thu 06 Nov 2025 07:00:31 +0000
Files and hashes:         1: 8s1U0KmUYb897VvjMdVaiCCBr8Y.roa (hash: 5qEC8e4y3KYPBzPpD5dv/300fB0lSnNjSuXLoow+Q8w=)
                          2: LaYkRMNeto2OFZ9VBnU48w_HGgs.roa (hash: 16B1JfqcXDvmz5pVWUS+KsHYpQRrCgD9R9Tg6uXacIA=)
                          3: NUWnIAFkkSBBu5Me-x_qwSO0Ohg.crl (hash: 8W17U9Wrthx5Cg9G7U1eahx0CMN4+K6vfvWqTy7JaoI=)
                          4: W8oJrry2382XyDpwYu9d1fRM57k.roa (hash: vgOtreWyL8SSvp1wiImWd0ZzLXQJtP4n+ctgbIbJd6I=)
                          5: ZPnSp5toQpthOZvn7vrTi1PIJ0A.roa (hash: 2xJoiopsp/aP4IfMiv71h2CCh2maxmce9cHqGdAd1jM=)
                          6: hDuQO-2O-6Lo8qgrhYqNM0G4P24.roa (hash: WUDxmKQLeVQHlfqkPeKYvZqVqvTuBp11Xfwh/S2zHnQ=)
                          7: rJESdqv17knzJ4wNzfBk8WWWnw0.roa (hash: BdHgAA5eA1A53dV1mMcPmgdF0S7eP4oFR6WHvpTEZ/k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 06 Nov 2025 03:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:52:d1:2e:b1:d0:2e:a5:17:1a:0d:3a:db:a3:05:46:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3545a7200164912041bb931efb1feac123b43a18
        Validity
            Not Before: Nov  5 07:00:31 2025 GMT
            Not After : Nov  6 07:00:31 2025 GMT
        Subject: CN=f265f4c95a05d37579552037d6a96123e41a2d1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:5f:84:ac:50:3c:41:93:12:16:b6:c9:c9:37:
                    1a:8c:41:ad:0f:a6:be:85:da:19:89:ce:8c:78:2e:
                    d2:16:05:bb:7d:18:09:ac:cb:1f:d2:ed:e3:f5:0a:
                    90:9b:fd:a8:48:0d:1c:6a:5c:16:d7:b9:98:1e:b3:
                    92:01:0f:7e:5a:0f:c9:eb:89:aa:86:c0:c9:96:de:
                    9d:87:0c:d6:18:c6:15:e3:c2:09:4d:e3:9f:01:1e:
                    1b:48:68:4a:74:4e:f7:7a:be:f3:29:99:31:90:e9:
                    37:89:6a:70:59:07:b1:32:13:99:3f:67:65:0c:2a:
                    78:7e:3c:19:e8:60:ea:72:15:43:a1:85:3c:8c:11:
                    bb:c0:57:14:eb:43:5c:c5:d1:6f:8e:39:da:c6:34:
                    e7:8f:d2:dd:8b:0c:e4:28:9f:7f:d1:5f:4e:e3:ab:
                    0c:1b:90:ea:be:1f:6d:30:12:38:e3:84:bc:0e:34:
                    17:be:3d:2a:d8:a1:44:17:1f:50:40:96:af:c0:5f:
                    7c:a6:5e:d8:db:98:cf:42:1e:7a:72:35:65:aa:3a:
                    2d:36:94:ff:42:eb:5c:41:11:e2:ee:b4:db:b1:b4:
                    43:4c:65:13:0f:1d:00:c3:17:22:3d:22:07:b5:c3:
                    77:cc:d0:0b:06:71:65:f3:27:9f:a5:eb:de:0d:b7:
                    22:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:65:F4:C9:5A:05:D3:75:79:55:20:37:D6:A9:61:23:E4:1A:2D:1B
            X509v3 Authority Key Identifier:
                keyid:35:45:A7:20:01:64:91:20:41:BB:93:1E:FB:1F:EA:C1:23:B4:3A:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:65:af:65:06:a2:a6:e5:99:0d:25:78:8d:24:68:56:4c:95:
         44:0f:23:6b:3c:c5:c1:d5:03:52:a6:62:73:a0:ed:ec:b0:66:
         1b:d2:69:e9:17:8e:2d:af:c3:71:ce:ce:2f:0d:fd:8c:c7:26:
         d9:fe:28:61:06:ac:f3:4f:24:66:d5:6e:aa:cf:02:d1:2d:6b:
         7b:56:d5:b5:77:28:98:fe:07:8a:01:f6:2d:cd:36:92:66:b8:
         35:82:09:7b:f1:ed:9e:6d:94:90:a4:3d:ac:3f:9b:57:58:8b:
         19:61:a5:f8:29:f3:49:cd:65:5b:0c:31:a5:39:b9:07:cb:73:
         13:9a:e9:f3:6a:00:53:97:a5:9f:8c:df:9c:64:49:c5:51:9c:
         7d:ed:a4:1e:b0:7c:65:20:90:65:3b:41:73:23:80:29:58:36:
         2c:37:b1:93:58:45:37:37:bc:f3:6d:68:12:63:05:c1:12:3a:
         50:2d:53:e5:38:b8:79:ce:58:4c:f8:5e:1d:18:eb:79:05:ee:
         a3:81:fc:a9:84:95:2a:b4:ca:0f:c7:27:df:ff:2c:47:41:01:
         3b:67:c4:eb:76:95:e2:e6:c9:6b:d0:fb:c9:2a:9e:20:ac:47:
         d6:38:74:01:60:14:95:96:f2:5e:ed:3d:72:a3:ca:45:a7:58:
         0a:66:26:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:56:10 2025 by rpki-client