Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.mft
File:                     nqFCUiVBDJMhHQh1j82vD3qhzKo.mft (raw, json)
Hash identifier:          hO7VXCLTlMB49aVYjpUdkkFLvDjM50aKmeC2Z5JZ/8g=
Subject key identifier:   C0:DE:1F:7F:01:41:87:D8:AA:15:EF:02:F3:E1:2C:B9:8C:EC:E7:FF
Authority key identifier: 9E:A1:42:52:25:41:0C:93:21:1D:08:75:8F:CD:AF:0F:7A:A1:CC:AA
Certificate issuer:       /CN=9ea1425225410c93211d08758fcdaf0f7aa1ccaa
Certificate serial:       019A73A7908E868FA51215EC3FE16095FE2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nqFCUiVBDJMhHQh1j82vD3qhzKo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.mft
Manifest number:          1096
Signing time:             Tue 11 Nov 2025 16:02:32 +0000
Manifest this update:     Tue 11 Nov 2025 16:02:32 +0000
Manifest next update:     Wed 12 Nov 2025 16:02:32 +0000
Files and hashes:         1: Cy35oxIBw3su2liG61xuPEUmvjI.roa (hash: 2IrXlMCQpECjm4Y6ZOTZrh47ViIm4Ji7SwFI+6InbKc=)
                          2: nqFCUiVBDJMhHQh1j82vD3qhzKo.crl (hash: FcUDJBxUnnWfpdK2qXPKPD1F0Stj4dhDsJVK/EpDCg4=)
                          3: sUbGHvxaPc1G1E3lSBfIJzcROEU.roa (hash: 5uZ2a8tZ0H9NijCrdgd56gsgVSZf0YOuYCFhbDVjRg4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nqFCUiVBDJMhHQh1j82vD3qhzKo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 09:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:73:a7:90:8e:86:8f:a5:12:15:ec:3f:e1:60:95:fe:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ea1425225410c93211d08758fcdaf0f7aa1ccaa
        Validity
            Not Before: Nov 11 16:02:32 2025 GMT
            Not After : Nov 12 16:02:32 2025 GMT
        Subject: CN=c0de1f7f014187d8aa15ef02f3e12cb98cece7ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:9d:34:57:9d:fb:48:76:dc:20:68:fc:52:73:
                    24:03:56:e6:3b:b8:4c:5d:1f:ef:7b:d6:72:a5:5c:
                    2b:62:5b:ed:c7:db:8b:9c:25:ee:55:e6:2d:31:97:
                    a4:93:83:c2:08:99:d6:21:06:eb:b6:e3:6e:30:2b:
                    c6:f3:1f:f4:77:8a:e0:bf:95:4d:f4:7b:1f:7c:db:
                    71:80:b9:d5:63:78:88:9a:b9:e6:16:8a:75:49:a4:
                    8b:87:45:e0:b2:dc:bb:15:af:86:6f:01:20:62:77:
                    d0:26:b8:37:d3:c0:3c:d5:2b:fb:62:7d:88:c1:35:
                    8c:fc:06:37:a6:fd:13:0a:8b:19:1f:b3:50:7b:d4:
                    85:6d:67:b5:39:8f:25:ce:1b:71:75:06:3e:90:1b:
                    60:8b:41:5d:b6:b1:3e:b0:e2:1c:b4:de:56:f7:3e:
                    81:34:f1:18:84:cc:46:11:37:ba:1d:02:2e:56:59:
                    e3:0b:22:da:6b:dc:f8:38:17:a6:66:f7:c7:c3:68:
                    0f:06:6c:1c:67:ba:2f:ec:8e:81:f3:a7:92:29:e0:
                    e4:49:7d:87:f9:b4:aa:63:81:8e:ae:5f:19:d3:f3:
                    73:18:5c:0f:73:f0:ef:01:44:dd:d8:68:4a:64:ca:
                    73:7b:83:a8:69:26:4a:7f:fe:78:03:06:7e:cf:1e:
                    43:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:DE:1F:7F:01:41:87:D8:AA:15:EF:02:F3:E1:2C:B9:8C:EC:E7:FF
            X509v3 Authority Key Identifier:
                keyid:9E:A1:42:52:25:41:0C:93:21:1D:08:75:8F:CD:AF:0F:7A:A1:CC:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nqFCUiVBDJMhHQh1j82vD3qhzKo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:b2:cf:c6:97:3f:bb:43:79:6a:5e:c9:43:18:52:88:54:cb:
         d4:15:46:3a:0a:b5:08:3b:a8:3f:14:de:60:f7:42:3a:9f:c3:
         ca:28:63:82:c8:89:cd:30:f4:09:46:04:96:7a:63:db:a5:24:
         0c:67:a9:53:b8:9d:e4:54:8b:29:b3:70:b7:1e:d5:aa:db:7f:
         46:17:8f:c7:99:1c:ea:e2:eb:73:de:9f:d8:fd:85:73:a6:96:
         9c:82:87:2c:7c:1b:2b:96:fa:9f:c5:c8:7a:2b:1e:c4:e9:71:
         8f:61:22:93:84:8d:4a:77:b0:8a:e3:14:74:22:19:2e:94:be:
         cc:67:6c:81:55:36:cd:bc:eb:95:7f:75:eb:c8:f6:3b:e1:e9:
         8a:b7:45:83:63:bd:c8:aa:cf:8d:62:58:49:1e:81:5b:ed:34:
         39:fc:1d:9f:ec:84:aa:ef:13:9a:8d:aa:d4:42:83:45:2e:6e:
         a0:d1:c5:67:58:90:7a:d5:b5:c8:cd:73:f5:b1:4c:91:b1:e6:
         9b:53:5e:df:f0:46:d1:17:02:5b:20:d5:2c:32:aa:be:2d:05:
         d7:9b:12:00:00:56:41:65:87:77:ed:4f:2c:c3:df:a0:07:e0:
         f0:b8:66:a5:56:20:04:09:4e:24:08:ef:6d:27:0b:ea:61:f4:
         a5:5d:2e:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:44:22 2025 by rpki-client