Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/802e9e-f982-449d-8b70-76c05cf5f2e6/1/NpxxPFGYfh_6VIInf18cjLci9Es.mft
File:                     NpxxPFGYfh_6VIInf18cjLci9Es.mft (raw, json)
Hash identifier:          eZfM7YJq2jZkdWzAB7L+5/GZZPETmS4o1LnOJZ3Rnak=
Subject key identifier:   05:48:61:1D:C2:7F:B8:F3:74:DB:80:1C:EF:BD:51:CE:FA:5C:41:04
Authority key identifier: 36:9C:71:3C:51:98:7E:1F:FA:54:82:27:7F:5F:1C:8C:B7:22:F4:4B
Certificate issuer:       /CN=369c713c51987e1ffa5482277f5f1c8cb722f44b
Certificate serial:       019A71B95D65DD21232F43615BF4B27BECBD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NpxxPFGYfh_6VIInf18cjLci9Es.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/802e9e-f982-449d-8b70-76c05cf5f2e6/1/NpxxPFGYfh_6VIInf18cjLci9Es.mft
Manifest number:          0B22
Signing time:             Tue 11 Nov 2025 07:02:44 +0000
Manifest this update:     Tue 11 Nov 2025 07:02:44 +0000
Manifest next update:     Wed 12 Nov 2025 07:02:44 +0000
Files and hashes:         1: 6dTT-rARhT9SKaU0Q5LyIvW6cuU.roa (hash: AGsDOWQR4BMJI4oi03KYaFPz/MqqxHtOCzcXxJU+zUU=)
                          2: 9fxVVEARajC-2ASXFi0_DFGSBc8.roa (hash: hXfrG37neyCRh8L2PA4JPhumP6PxcdmlSO8PbLD9FY4=)
                          3: FW_JqLhHC7LyHZmaeSFALgStml0.roa (hash: pWsELGWJQyn59BiBQF9FnS772zDDCwVPNTG6tAAe2Fg=)
                          4: NpxxPFGYfh_6VIInf18cjLci9Es.crl (hash: x+mHYS5dBX/xYgR6Zavmled+UcjH1oXKX/49BYzbX3Y=)
                          5: rwCQmNOuZE_kryjC8QIDqyzBek8.roa (hash: OHzMcdBam5j/wfHUyz5DszdE5+OjpxcpG78RADThpWo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/802e9e-f982-449d-8b70-76c05cf5f2e6/1/NpxxPFGYfh_6VIInf18cjLci9Es.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/802e9e-f982-449d-8b70-76c05cf5f2e6/1/NpxxPFGYfh_6VIInf18cjLci9Es.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NpxxPFGYfh_6VIInf18cjLci9Es.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 07:02:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:71:b9:5d:65:dd:21:23:2f:43:61:5b:f4:b2:7b:ec:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=369c713c51987e1ffa5482277f5f1c8cb722f44b
        Validity
            Not Before: Nov 11 07:02:44 2025 GMT
            Not After : Nov 12 07:02:44 2025 GMT
        Subject: CN=0548611dc27fb8f374db801cefbd51cefa5c4104
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ae:2f:39:08:6e:16:5f:e7:05:73:f8:58:fe:
                    9e:85:e8:e0:21:21:ff:e4:19:31:4d:5e:ae:f7:36:
                    e0:82:f1:ae:f5:68:f1:d7:13:a5:50:ba:49:f5:fe:
                    11:8c:a0:a9:fa:a4:1f:8f:f2:16:cf:04:ce:67:b1:
                    b8:3f:24:8a:90:d6:5c:91:95:3d:e9:65:d8:2b:7b:
                    e0:46:e2:a8:b2:1a:95:37:1c:b8:2e:d6:c4:6d:3c:
                    35:33:b0:eb:03:78:7f:92:54:e1:07:79:66:89:cc:
                    68:6e:17:48:7e:c7:18:86:16:0a:70:13:9a:47:91:
                    69:86:db:82:88:b5:9e:c0:e5:b4:b1:2f:bd:1b:a5:
                    fd:29:f6:d4:52:1b:79:50:9e:80:5a:b1:d5:53:c3:
                    08:09:3a:63:ca:9b:b0:74:40:ab:54:87:24:78:58:
                    69:d3:17:a7:25:99:76:f7:fb:b3:cb:fa:b6:b2:b2:
                    44:d0:b4:f7:f5:d6:f2:31:54:21:f5:fd:59:99:1b:
                    e7:42:89:66:f6:d7:7e:83:29:1d:15:86:ea:1a:6c:
                    55:23:58:2b:b3:71:3c:25:f2:95:bc:1f:19:9b:70:
                    93:0f:6f:45:cb:40:49:8e:9f:f1:38:65:ea:cb:1a:
                    6a:0e:1e:9a:eb:85:0e:3f:73:dd:99:16:e3:ff:bf:
                    24:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:48:61:1D:C2:7F:B8:F3:74:DB:80:1C:EF:BD:51:CE:FA:5C:41:04
            X509v3 Authority Key Identifier:
                keyid:36:9C:71:3C:51:98:7E:1F:FA:54:82:27:7F:5F:1C:8C:B7:22:F4:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpxxPFGYfh_6VIInf18cjLci9Es.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/802e9e-f982-449d-8b70-76c05cf5f2e6/1/NpxxPFGYfh_6VIInf18cjLci9Es.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/802e9e-f982-449d-8b70-76c05cf5f2e6/1/NpxxPFGYfh_6VIInf18cjLci9Es.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:ed:75:88:bd:75:96:9a:0d:55:ce:b4:94:ec:d9:16:6b:1f:
         9e:a3:a8:b0:87:be:28:ab:ff:f5:e4:48:10:15:8f:e4:37:d1:
         5d:57:11:a2:6a:4d:61:a4:14:27:8a:ed:9e:36:32:a6:7e:35:
         83:bd:6c:ff:8d:f0:df:23:ee:28:72:69:c1:e1:3c:06:05:75:
         98:a6:86:20:f4:e6:22:73:5e:75:41:00:5d:19:0e:64:79:44:
         18:c3:dc:ff:a5:a2:ae:c6:6b:21:08:b5:ee:27:d7:31:33:af:
         97:4c:ad:1a:ac:52:55:68:be:28:c8:08:1e:37:8a:38:32:da:
         95:0a:9c:c1:6a:b8:3f:56:85:9e:12:e5:4e:bd:56:23:58:e4:
         b9:5b:f0:d3:1c:d6:cd:4c:a4:59:37:20:c4:cc:0c:94:f1:16:
         8b:ea:ce:84:74:da:da:a5:1c:90:b6:39:22:23:1f:f9:4d:3d:
         93:55:88:61:74:a3:7c:d5:3b:0c:2a:82:6b:2b:8a:d5:b0:21:
         d0:a9:e1:b5:16:88:ca:c5:e0:71:df:c9:70:49:f9:03:47:5c:
         ef:dd:e1:1d:52:d7:6e:8d:0b:24:3e:9d:6b:05:55:18:11:3b:
         67:32:3a:09:81:fd:91:97:fc:a2:eb:ad:d1:bb:01:b7:e3:10:
         09:c5:5d:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:44:23 2025 by rpki-client