Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/a0faca-db7f-4ed8-b11a-eec46ca82a33/1/NVi7R941Tgng_CyywfoU1x2Sbug.mft
File:                     NVi7R941Tgng_CyywfoU1x2Sbug.mft (raw, json)
Hash identifier:          NGoSHP+HNZGzOs4PFZepn0IZ1nJwB32/lAXQrExiBEM=
Subject key identifier:   75:15:E8:79:75:FD:D9:88:30:7D:66:A0:2D:EC:9C:67:C4:70:C1:C5
Authority key identifier: 35:58:BB:47:DE:35:4E:09:E0:FC:2C:B2:C1:FA:14:D7:1D:92:6E:E8
Certificate issuer:       /CN=3558bb47de354e09e0fc2cb2c1fa14d71d926ee8
Certificate serial:       019A706E69D3AC8AA927E783D4CCD71FE61F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NVi7R941Tgng_CyywfoU1x2Sbug.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/a0faca-db7f-4ed8-b11a-eec46ca82a33/1/NVi7R941Tgng_CyywfoU1x2Sbug.mft
Manifest number:          1726
Signing time:             Tue 11 Nov 2025 01:01:15 +0000
Manifest this update:     Tue 11 Nov 2025 01:01:15 +0000
Manifest next update:     Wed 12 Nov 2025 01:01:15 +0000
Files and hashes:         1: 0iLUxeXNyLeCeJPOBWFetpkhzr8.roa (hash: GzvKjvrXUQtFRvTqnLO3SZbgmgXYnbU1huTzG2YJ5xg=)
                          2: NVi7R941Tgng_CyywfoU1x2Sbug.crl (hash: Er4vAx7wQueg6CBfqr218Elh5wj3XGKy4pcTsCUCnBo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/a0faca-db7f-4ed8-b11a-eec46ca82a33/1/NVi7R941Tgng_CyywfoU1x2Sbug.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/a0faca-db7f-4ed8-b11a-eec46ca82a33/1/NVi7R941Tgng_CyywfoU1x2Sbug.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NVi7R941Tgng_CyywfoU1x2Sbug.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 01:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:70:6e:69:d3:ac:8a:a9:27:e7:83:d4:cc:d7:1f:e6:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3558bb47de354e09e0fc2cb2c1fa14d71d926ee8
        Validity
            Not Before: Nov 11 01:01:15 2025 GMT
            Not After : Nov 12 01:01:15 2025 GMT
        Subject: CN=7515e87975fdd988307d66a02dec9c67c470c1c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:24:25:d1:3d:0f:07:2a:83:70:bf:66:f6:12:
                    f2:b3:b8:cf:19:9d:7b:f9:92:c0:0a:93:38:88:ac:
                    72:41:f6:d1:05:51:e9:aa:9f:1b:ae:a3:f1:5b:a2:
                    55:92:af:be:9e:1e:f7:72:7f:74:26:1b:71:a9:de:
                    c4:8d:66:02:95:4b:f5:2d:42:c0:26:43:08:7f:fe:
                    f2:a7:ff:3c:9a:55:7b:5a:18:78:85:81:9d:a9:a9:
                    09:bd:d3:bf:90:3c:d8:79:be:72:e9:3d:48:b2:e1:
                    ca:ec:ad:68:1e:63:fc:c3:e9:a9:ac:c4:66:54:4a:
                    af:9b:b5:2d:a7:ab:d5:43:5f:50:cb:31:bd:a7:14:
                    e5:3d:de:68:9d:a2:7b:25:70:73:66:6f:f4:b6:16:
                    9d:da:dd:29:86:ce:4f:a8:c9:34:16:39:a1:7b:d3:
                    6f:65:ce:6b:59:87:f8:11:65:76:e1:26:96:25:75:
                    f2:49:91:a4:1e:5d:93:ab:03:80:01:c8:f3:33:85:
                    e7:3e:c8:54:39:02:11:90:7d:19:e0:ad:68:68:ee:
                    3c:9a:49:63:cf:fe:e7:3e:87:f0:93:fa:17:9d:a5:
                    55:ce:a7:57:75:fe:d3:a7:1c:05:fe:57:16:ae:b1:
                    a3:b1:28:84:fc:27:6d:bf:fd:fe:9c:40:34:72:62:
                    53:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:15:E8:79:75:FD:D9:88:30:7D:66:A0:2D:EC:9C:67:C4:70:C1:C5
            X509v3 Authority Key Identifier:
                keyid:35:58:BB:47:DE:35:4E:09:E0:FC:2C:B2:C1:FA:14:D7:1D:92:6E:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NVi7R941Tgng_CyywfoU1x2Sbug.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a0faca-db7f-4ed8-b11a-eec46ca82a33/1/NVi7R941Tgng_CyywfoU1x2Sbug.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a0faca-db7f-4ed8-b11a-eec46ca82a33/1/NVi7R941Tgng_CyywfoU1x2Sbug.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:69:7e:e0:5d:63:d2:02:2f:66:e0:18:b2:4c:df:a0:1c:b5:
         e8:df:88:11:00:20:34:41:83:53:f9:da:be:17:5b:dc:64:9d:
         d8:94:50:b8:64:f1:f2:b2:84:cb:39:6a:ed:9c:d4:90:9a:95:
         a3:0c:7c:bc:fe:d4:f2:1d:f6:76:76:42:f4:a6:70:d6:11:91:
         1f:36:75:42:98:65:ba:97:68:90:a1:dd:85:dd:f6:ef:b0:1a:
         8b:53:e7:d9:52:34:43:14:ea:32:72:45:64:cf:86:6a:be:bc:
         a4:d7:65:d6:f6:f5:62:0b:74:29:41:a5:d5:1f:a9:f1:4c:78:
         ea:19:10:97:8d:77:01:43:2a:96:89:b8:d6:a1:0e:03:3f:1a:
         7e:a0:d9:49:63:4c:a9:2f:5a:8b:b6:27:37:8b:d5:bb:66:68:
         91:5d:09:56:9f:5c:62:44:82:ed:da:93:10:cc:0a:30:94:e6:
         60:ea:e1:6b:1d:22:d1:64:5f:2c:1d:73:d1:18:3c:33:39:64:
         83:06:f4:61:93:72:bc:d6:8e:f6:2a:39:c9:27:3d:af:c4:b2:
         58:be:e7:93:db:32:f4:85:64:2f:09:df:0c:f2:2f:9e:80:7c:
         ae:fb:e6:3a:4b:76:2b:ea:2c:32:d4:92:db:8c:bd:93:dc:1e:
         a3:ac:8d:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:51 2025 by rpki-client