Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/75baf6-724f-4c0b-be89-2fd63a12d66c/1/N6VPsHvqPfVW41k0VNMg5PAO7yw.mft
File:                     N6VPsHvqPfVW41k0VNMg5PAO7yw.mft (raw, json)
Hash identifier:          uXT/5lUi9pYS5I3C/DsFVdTTBGhhR5qjm/iFHjfqfgE=
Subject key identifier:   1A:60:75:29:53:E1:00:AB:B7:92:47:23:2B:FC:39:D3:19:DC:BF:DE
Authority key identifier: 37:A5:4F:B0:7B:EA:3D:F5:56:E3:59:34:54:D3:20:E4:F0:0E:EF:2C
Certificate issuer:       /CN=37a54fb07bea3df556e3593454d320e4f00eef2c
Certificate serial:       019A522C9D7921ABC7C0190C64E7EE79F230
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N6VPsHvqPfVW41k0VNMg5PAO7yw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/75baf6-724f-4c0b-be89-2fd63a12d66c/1/N6VPsHvqPfVW41k0VNMg5PAO7yw.mft
Manifest number:          0526
Signing time:             Wed 05 Nov 2025 04:00:46 +0000
Manifest this update:     Wed 05 Nov 2025 04:00:46 +0000
Manifest next update:     Thu 06 Nov 2025 04:00:46 +0000
Files and hashes:         1: N6VPsHvqPfVW41k0VNMg5PAO7yw.crl (hash: rl2SEE/Eo20vRowtOjb5S3sAtJZ/zhwCQu7Hf5jH58s=)
                          2: Z9jKPG-aJrl0Zezz0qMB35u4yX4.roa (hash: 2A8HZxxRaB1bgoi8TMjFDPNN3FGgJuX9XCmcDH5eYKg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/75baf6-724f-4c0b-be89-2fd63a12d66c/1/N6VPsHvqPfVW41k0VNMg5PAO7yw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/75baf6-724f-4c0b-be89-2fd63a12d66c/1/N6VPsHvqPfVW41k0VNMg5PAO7yw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N6VPsHvqPfVW41k0VNMg5PAO7yw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 06 Nov 2025 03:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:52:2c:9d:79:21:ab:c7:c0:19:0c:64:e7:ee:79:f2:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37a54fb07bea3df556e3593454d320e4f00eef2c
        Validity
            Not Before: Nov  5 04:00:46 2025 GMT
            Not After : Nov  6 04:00:46 2025 GMT
        Subject: CN=1a60752953e100abb79247232bfc39d319dcbfde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:af:05:d5:8d:e4:1a:da:06:c2:1d:26:0b:a1:
                    70:f9:44:4b:ef:40:6b:eb:38:ef:c1:9c:bd:1c:4c:
                    12:6f:77:d3:be:11:7e:e0:7b:37:a3:89:e2:0b:0e:
                    7d:e5:4e:72:6b:df:9e:35:8f:34:fb:78:e2:0d:3e:
                    94:ac:5a:2f:57:6a:b8:ca:df:59:37:47:92:7e:4e:
                    d2:df:9c:2e:77:d4:0c:41:c8:01:9e:fe:1d:91:d3:
                    f0:c5:b9:61:96:72:20:63:76:b2:f3:e5:d1:c5:94:
                    76:21:fb:0a:5c:b1:32:26:0a:02:c9:c3:34:00:73:
                    0c:46:42:1e:95:96:ad:57:f3:6c:56:8b:e6:eb:64:
                    66:cd:d5:41:76:4f:8e:37:6d:82:83:a9:83:21:c2:
                    05:84:7c:52:57:de:ae:f6:a7:85:49:1b:d1:6f:4a:
                    e4:77:56:34:af:37:95:a5:46:ad:8f:ed:a6:12:eb:
                    ea:cd:0c:7b:48:03:5b:af:c0:85:02:9a:95:48:25:
                    43:07:1b:35:04:4f:d1:f7:1f:fb:7e:ba:bb:e9:77:
                    c4:3a:1e:a0:bb:3f:e2:56:e8:44:73:b7:05:a9:ed:
                    0f:34:34:e6:5e:12:b2:f8:13:10:43:ca:0e:78:e6:
                    56:0a:ba:e7:9d:44:21:e6:bd:fe:63:23:be:61:9d:
                    bc:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:60:75:29:53:E1:00:AB:B7:92:47:23:2B:FC:39:D3:19:DC:BF:DE
            X509v3 Authority Key Identifier:
                keyid:37:A5:4F:B0:7B:EA:3D:F5:56:E3:59:34:54:D3:20:E4:F0:0E:EF:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N6VPsHvqPfVW41k0VNMg5PAO7yw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/75baf6-724f-4c0b-be89-2fd63a12d66c/1/N6VPsHvqPfVW41k0VNMg5PAO7yw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/75baf6-724f-4c0b-be89-2fd63a12d66c/1/N6VPsHvqPfVW41k0VNMg5PAO7yw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:eb:72:a9:98:63:a8:69:9a:51:67:9c:74:1a:2f:0c:16:7d:
         0f:17:4b:3d:90:18:10:5a:97:b7:b6:5b:2d:70:a0:79:16:b7:
         87:4f:11:ac:dd:d7:a5:05:fd:6c:a5:f8:71:91:c7:fe:fa:8c:
         11:a6:4e:99:5e:8c:81:21:cf:46:7a:7b:4f:3b:5b:47:cc:c4:
         be:c1:df:38:51:2a:1a:84:9d:3f:c5:97:6e:a5:e2:b6:e6:5c:
         d5:ed:e2:1a:25:17:49:77:e9:ff:55:e6:fe:c6:45:2c:0d:b3:
         17:92:2e:e9:2c:e3:6d:ac:1d:65:94:39:c8:f9:37:83:3c:cc:
         10:40:b3:8c:ea:cf:47:d6:f3:a9:32:85:7e:85:a5:da:a9:97:
         7d:b4:d0:3b:a5:89:21:48:53:73:51:8e:3b:5a:7f:0e:78:8d:
         9e:ea:2a:88:2e:bb:5d:12:9b:fe:75:c6:14:57:ee:2f:82:03:
         48:20:87:ef:38:43:2a:c1:91:b2:b9:23:d5:95:2d:04:c1:5b:
         bf:7c:31:36:e7:ac:41:a4:87:15:72:1d:12:fb:6d:4c:43:58:
         f5:ff:d5:9b:bb:2f:28:7e:25:73:77:52:63:5a:c5:d5:8b:fa:
         14:78:8d:84:fc:58:25:8f:c6:82:42:91:41:47:20:12:08:00:
         ae:d4:16:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:56:00 2025 by rpki-client