Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft
File:                     nCGl5M9uni5wM4ruv6DRWI1ztu8.mft (raw, json)
Hash identifier:          mCERZq72I+weiXK4e5gJW4+tG76A4khpwYEuo3KVKtE=
Subject key identifier:   E0:17:80:D3:81:68:40:65:41:30:3D:7C:59:44:B1:6B:B3:D1:6C:03
Authority key identifier: 9C:21:A5:E4:CF:6E:9E:2E:70:33:8A:EE:BF:A0:D1:58:8D:73:B6:EF
Certificate issuer:       /CN=9c21a5e4cf6e9e2e70338aeebfa0d1588d73b6ef
Certificate serial:       019A085B813561CB1C1E42EC35C6498BE2A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nCGl5M9uni5wM4ruv6DRWI1ztu8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft
Manifest number:          0A1B
Signing time:             Tue 21 Oct 2025 20:00:05 +0000
Manifest this update:     Tue 21 Oct 2025 20:00:05 +0000
Manifest next update:     Wed 22 Oct 2025 20:00:05 +0000
Files and hashes:         1: TyWL3xFpNven7KrNlaJ8v9k5JK8.roa (hash: E2+AhRY0pqwsVnmj4TP+MVDZiHT3sKt+kF6lunLkhqE=)
                          2: nCGl5M9uni5wM4ruv6DRWI1ztu8.crl (hash: oJlv9fnNb4aWTs4Vy9lqxBfs7W+1H7hs1xzIoqEMSkg=)
                          3: rQIqx2DMPN6bSwaHOzgkZ_qEsQE.roa (hash: Swuw4n85YJ/hs+bpmj8GLz668D6BJf6uL+FQMZ1q+FY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nCGl5M9uni5wM4ruv6DRWI1ztu8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Oct 2025 19:12:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:08:5b:81:35:61:cb:1c:1e:42:ec:35:c6:49:8b:e2:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c21a5e4cf6e9e2e70338aeebfa0d1588d73b6ef
        Validity
            Not Before: Oct 21 20:00:05 2025 GMT
            Not After : Oct 22 20:00:05 2025 GMT
        Subject: CN=e01780d38168406541303d7c5944b16bb3d16c03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:d2:0c:64:53:d0:f1:4a:fa:68:be:c8:2b:e2:
                    0d:8b:e9:bb:44:24:09:fb:de:8b:5e:79:8b:90:2c:
                    74:b2:9b:43:f8:22:01:5a:ba:f2:80:18:08:23:83:
                    02:61:a1:c9:aa:b9:8b:f1:46:e1:ff:0c:fb:14:0d:
                    e0:d6:69:1a:07:ef:b6:b9:5a:27:1f:29:c7:ab:56:
                    77:b2:bd:1d:79:2a:b6:97:54:ec:16:2d:c5:d2:99:
                    c9:41:b0:bf:3e:0c:29:00:6b:cb:2b:de:61:81:47:
                    97:03:98:72:27:ac:35:d1:ec:08:35:e0:ff:de:73:
                    54:7e:3e:28:b3:de:6b:4d:a8:3e:32:da:13:b0:79:
                    db:fd:73:bf:0f:e0:14:53:1a:b7:8a:42:cb:13:0d:
                    4b:82:de:e9:be:29:40:d2:fd:4e:f9:ee:5c:30:bb:
                    89:21:70:4c:eb:a3:98:10:be:f8:a0:91:1f:a3:6d:
                    89:6c:c3:e1:4a:a6:52:ed:20:85:30:1b:de:f1:b6:
                    25:72:ba:f2:e8:29:42:f1:81:6d:98:5f:a0:07:2b:
                    24:8f:04:9b:b1:43:d3:da:bd:8c:b0:c2:3e:da:9b:
                    7d:47:aa:48:fa:42:43:f5:ec:26:cd:94:17:25:23:
                    03:e2:94:98:cb:62:c0:c8:b7:4d:14:2e:46:2a:d6:
                    0a:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:17:80:D3:81:68:40:65:41:30:3D:7C:59:44:B1:6B:B3:D1:6C:03
            X509v3 Authority Key Identifier:
                keyid:9C:21:A5:E4:CF:6E:9E:2E:70:33:8A:EE:BF:A0:D1:58:8D:73:B6:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nCGl5M9uni5wM4ruv6DRWI1ztu8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:73:3a:18:05:48:5f:c0:3c:58:b7:c5:f1:e5:40:0a:7e:4d:
         78:d4:84:39:7f:cb:88:1e:00:b3:52:47:5e:7a:30:fd:da:c1:
         ed:37:b9:6a:e0:61:6a:2d:b9:58:6d:e9:74:0a:91:1a:b4:15:
         be:b2:4a:db:70:6c:24:7c:aa:73:94:d3:85:0b:1d:cd:31:aa:
         d5:51:60:61:d8:4b:e0:10:35:18:38:7e:6e:8c:e0:0a:8d:6c:
         4c:d9:cd:cd:59:f0:33:ce:f3:c1:5d:93:46:5e:1f:77:31:b7:
         f2:ee:33:84:ab:87:e7:42:4d:0f:c8:55:f4:48:da:85:47:f7:
         d9:ad:3e:0b:7d:f9:5f:b7:fe:f8:2f:5e:40:e4:e0:43:ad:ad:
         27:1f:43:dd:3d:c1:a7:c2:d1:a7:2a:13:3a:93:3e:db:9d:d0:
         fe:c3:bc:81:48:3c:00:ff:04:a7:96:a5:a5:95:e9:a1:ac:89:
         f1:9e:e7:4b:77:ad:28:3b:ca:cb:4f:29:07:a6:ef:2f:63:0c:
         e1:24:d0:5a:e4:08:24:2d:8f:43:60:5c:b2:f9:93:d8:97:1b:
         25:ae:ba:c0:44:d2:93:86:50:83:85:88:77:c6:77:2a:79:fd:
         b8:3f:0a:a8:aa:87:aa:2f:71:1f:99:03:1a:87:c7:a7:ae:13:
         82:ce:c3:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 01:10:53 2025 by rpki-client