Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/d9aa88-6426-4933-a69a-80b96680f043/1/nuVP2fF_yXpwpb9BW3iJGxW495U.mft
File:                     nuVP2fF_yXpwpb9BW3iJGxW495U.mft (raw, json)
Hash identifier:          2h5ZeRIv4i7Bxop/tY/u57Rcaclf2IwOu9PEyyvG+eQ=
Subject key identifier:   C0:E9:22:38:03:74:62:AB:16:3E:CD:37:5A:DB:6D:26:54:F6:C5:9F
Authority key identifier: 9E:E5:4F:D9:F1:7F:C9:7A:70:A5:BF:41:5B:78:89:1B:15:B8:F7:95
Certificate issuer:       /CN=9ee54fd9f17fc97a70a5bf415b78891b15b8f795
Certificate serial:       01995FB3D82976E8D2B6DDC00C6C62425127
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nuVP2fF_yXpwpb9BW3iJGxW495U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/d9aa88-6426-4933-a69a-80b96680f043/1/nuVP2fF_yXpwpb9BW3iJGxW495U.mft
Manifest number:          0577
Signing time:             Fri 19 Sep 2025 02:00:45 +0000
Manifest this update:     Fri 19 Sep 2025 02:00:45 +0000
Manifest next update:     Sat 20 Sep 2025 02:00:45 +0000
Files and hashes:         1: nuVP2fF_yXpwpb9BW3iJGxW495U.crl (hash: WkxZlsiC7BJuQw3NE0AdZVe4OnR6jcwJDO+JFRTJaoo=)
                          2: oeejnnEaMW40kAD0os79-L9Olv8.roa (hash: Gvc/AI8UECrR+ZR7n6+DgnfVkthLJTkqDD0SmDPbhaE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/d9aa88-6426-4933-a69a-80b96680f043/1/nuVP2fF_yXpwpb9BW3iJGxW495U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/d9aa88-6426-4933-a69a-80b96680f043/1/nuVP2fF_yXpwpb9BW3iJGxW495U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nuVP2fF_yXpwpb9BW3iJGxW495U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Sep 2025 22:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:5f:b3:d8:29:76:e8:d2:b6:dd:c0:0c:6c:62:42:51:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ee54fd9f17fc97a70a5bf415b78891b15b8f795
        Validity
            Not Before: Sep 19 02:00:45 2025 GMT
            Not After : Sep 20 02:00:45 2025 GMT
        Subject: CN=c0e92238037462ab163ecd375adb6d2654f6c59f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:99:c3:ff:cd:7c:58:72:f8:3b:a2:2f:73:d8:
                    29:f2:13:91:b4:fa:95:4c:23:db:ee:72:48:2f:7f:
                    14:ce:2a:4a:85:3a:b9:d3:2f:bb:1f:d4:4a:a3:89:
                    66:5d:d2:cd:a9:57:52:e3:ce:87:d6:47:1f:01:81:
                    7c:63:b8:37:32:a1:83:71:d0:35:c4:81:cf:4a:b9:
                    91:0f:dc:47:d9:4f:6a:1c:59:ef:93:4d:38:8f:a2:
                    ae:23:2f:0e:76:67:f2:5c:f0:49:60:e2:83:2d:fe:
                    c4:8a:b4:2b:f4:d3:8a:97:43:b6:ed:66:9f:4b:d5:
                    c8:df:55:9f:6e:0f:f7:b3:1f:50:11:05:0f:ce:cc:
                    b3:f7:cf:aa:f2:fc:ee:97:9c:42:02:ce:7c:a2:fa:
                    2c:04:19:43:ab:e3:a1:11:56:b2:99:dc:26:a3:77:
                    35:72:1c:67:cf:f0:5e:1e:4f:c5:ea:3c:30:9f:c0:
                    1e:b7:7e:0e:b9:38:09:f8:29:45:8d:e3:c0:8f:92:
                    bb:28:e6:33:09:58:ce:5c:ae:d0:bc:1f:53:79:1c:
                    3d:b5:dd:c2:5b:70:af:a2:ff:3c:78:ef:22:6e:2b:
                    b3:7b:67:bc:14:01:6b:df:f5:86:76:a6:55:96:c7:
                    10:40:3b:e9:7c:05:43:03:13:62:00:4d:3a:cc:44:
                    62:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:E9:22:38:03:74:62:AB:16:3E:CD:37:5A:DB:6D:26:54:F6:C5:9F
            X509v3 Authority Key Identifier:
                keyid:9E:E5:4F:D9:F1:7F:C9:7A:70:A5:BF:41:5B:78:89:1B:15:B8:F7:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nuVP2fF_yXpwpb9BW3iJGxW495U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/d9aa88-6426-4933-a69a-80b96680f043/1/nuVP2fF_yXpwpb9BW3iJGxW495U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/d9aa88-6426-4933-a69a-80b96680f043/1/nuVP2fF_yXpwpb9BW3iJGxW495U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         f0:30:cd:24:e2:17:20:4e:f5:1a:dd:bc:a2:d8:42:fa:92:70:
         86:07:30:ce:78:01:be:af:7a:58:21:b3:5f:26:8c:03:5a:4a:
         e7:51:ca:63:d3:07:a4:ed:f8:3d:ef:f2:19:fd:d7:79:92:d9:
         57:d5:86:9b:8f:7c:27:b5:71:3f:14:5e:f3:1d:94:2f:5d:b0:
         fd:4f:2a:f3:e1:bb:49:fb:dd:e9:52:5a:46:29:cd:bd:6b:7b:
         8a:f5:40:6f:fe:67:e0:ed:db:50:12:a6:10:12:cd:91:e4:56:
         8c:bf:1b:65:db:0f:7f:c6:53:51:95:e8:8d:8e:77:fc:0c:c1:
         78:d0:bd:80:e3:08:24:47:3c:c0:06:43:16:97:d8:db:17:40:
         88:13:63:b0:84:d3:56:6e:ec:c4:ec:8f:98:e3:7b:07:89:3c:
         04:79:87:c4:22:74:9e:bd:ef:4a:c0:05:7a:2c:b0:2d:a8:62:
         ed:f6:ee:3b:87:8c:c7:29:74:fe:ec:47:29:98:99:e1:94:be:
         41:d3:25:fd:8b:63:0b:53:c3:83:6f:cb:5e:dc:a3:7e:97:37:
         cf:34:73:e4:6c:cb:78:24:e6:ac:09:53:91:e2:aa:b8:89:33:
         c4:1e:d3:af:20:60:2c:af:8c:d7:a3:d6:9d:de:0b:d7:ca:aa:
         04:e9:c5:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 07:30:58 2025 by rpki-client