Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/f17722-e58b-4452-8135-eaa5acf35fd1/1/nNZ9EDPKRytbuA_VlruDbRLiImE.mft
File:                     nNZ9EDPKRytbuA_VlruDbRLiImE.mft (raw, json)
Hash identifier:          zvTiqamO7Ay27JJmkG6w5VkxKyIpnLyW1UlwgTd9ZCA=
Subject key identifier:   6B:85:9F:FD:ED:C2:5D:51:D1:DE:D7:1E:3A:01:D7:BA:A9:36:9F:B0
Authority key identifier: 9C:D6:7D:10:33:CA:47:2B:5B:B8:0F:D5:96:BB:83:6D:12:E2:22:61
Certificate issuer:       /CN=9cd67d1033ca472b5bb80fd596bb836d12e22261
Certificate serial:       0199225543EB73EAB4947F7D2124E94521E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nNZ9EDPKRytbuA_VlruDbRLiImE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/f17722-e58b-4452-8135-eaa5acf35fd1/1/nNZ9EDPKRytbuA_VlruDbRLiImE.mft
Manifest number:          0C62
Signing time:             Sun 07 Sep 2025 04:00:37 +0000
Manifest this update:     Sun 07 Sep 2025 04:00:37 +0000
Manifest next update:     Mon 08 Sep 2025 04:00:37 +0000
Files and hashes:         1: nNZ9EDPKRytbuA_VlruDbRLiImE.crl (hash: Cu9daTxkTNpIeyBxO7p6fLvcRlQSKJnHajEYSza3Ock=)
                          2: vJEpt2EZ5UHOHzXUt6_FIB9pq2c.roa (hash: wfxwNWs85u9qLCuI6Hzz2FjX0JN3uzdqSv3NQ+LC9RE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/f17722-e58b-4452-8135-eaa5acf35fd1/1/nNZ9EDPKRytbuA_VlruDbRLiImE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/f17722-e58b-4452-8135-eaa5acf35fd1/1/nNZ9EDPKRytbuA_VlruDbRLiImE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nNZ9EDPKRytbuA_VlruDbRLiImE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 04:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:55:43:eb:73:ea:b4:94:7f:7d:21:24:e9:45:21:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cd67d1033ca472b5bb80fd596bb836d12e22261
        Validity
            Not Before: Sep  7 04:00:37 2025 GMT
            Not After : Sep  8 04:00:37 2025 GMT
        Subject: CN=6b859ffdedc25d51d1ded71e3a01d7baa9369fb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:16:1b:b1:50:43:d7:94:7f:55:69:e3:f3:87:
                    de:b3:72:56:05:9a:4c:c8:ed:8c:a9:fc:a8:3a:74:
                    8b:d9:63:c1:3e:46:bb:cf:59:1d:bb:e0:8b:95:d0:
                    d3:67:d4:b2:bb:01:2b:3e:61:a5:fc:7a:a3:f9:3b:
                    2b:ab:c5:b7:87:00:00:3f:7e:ef:d9:b3:0a:8d:56:
                    97:34:de:f1:11:70:72:de:5a:06:51:d8:53:be:8e:
                    5e:20:c0:53:d7:d9:b2:63:8c:3c:86:8e:b4:e3:5a:
                    e5:d8:01:52:89:70:be:18:e2:3e:d1:2a:17:18:fa:
                    06:fa:f6:78:09:b0:71:05:94:63:a0:5b:1c:b7:f9:
                    ab:ab:d9:01:f2:c0:f9:bb:ad:bb:7d:fd:b7:20:dc:
                    eb:99:ab:a3:e8:48:d6:3c:71:b3:08:be:86:d2:fb:
                    61:6b:0b:d5:a3:58:15:dd:06:a9:52:cc:f4:c0:d5:
                    c7:77:ac:3a:1f:d7:6d:a9:e8:94:48:42:08:56:e3:
                    ee:fd:3e:75:9f:bd:68:40:f9:17:1f:c4:ac:2f:0e:
                    5c:73:9a:8d:95:bd:25:a3:75:f8:06:1f:40:96:4e:
                    65:83:f6:6c:ec:b8:8c:da:7f:c0:12:0c:b0:78:25:
                    58:f5:5d:a4:b8:35:a1:0c:ec:3b:ef:dd:75:8b:65:
                    f4:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:85:9F:FD:ED:C2:5D:51:D1:DE:D7:1E:3A:01:D7:BA:A9:36:9F:B0
            X509v3 Authority Key Identifier:
                keyid:9C:D6:7D:10:33:CA:47:2B:5B:B8:0F:D5:96:BB:83:6D:12:E2:22:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nNZ9EDPKRytbuA_VlruDbRLiImE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f17722-e58b-4452-8135-eaa5acf35fd1/1/nNZ9EDPKRytbuA_VlruDbRLiImE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f17722-e58b-4452-8135-eaa5acf35fd1/1/nNZ9EDPKRytbuA_VlruDbRLiImE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:0d:82:08:e4:c9:25:5d:05:42:14:63:95:d5:48:f3:79:c6:
         69:f9:72:32:1e:59:19:d2:93:aa:4c:19:18:8d:10:2e:5f:b3:
         79:7d:bb:17:6d:85:3d:38:ac:f8:32:f3:db:5a:ec:9a:51:35:
         57:8d:ec:28:14:af:af:dc:dc:6f:1b:6c:2a:b4:43:f6:d1:3d:
         67:cc:bc:80:20:f5:7e:e8:28:4b:20:b8:85:a7:c2:c2:b2:23:
         c1:55:fc:b3:23:6e:61:61:b8:32:9e:f9:9a:12:78:cd:dc:96:
         ad:aa:a1:f4:19:0a:6d:84:26:0c:a1:e8:37:92:b2:e5:3a:70:
         1b:f3:1f:47:e8:e2:96:84:d5:87:1c:42:58:75:42:9a:4b:41:
         43:08:17:97:b2:4e:4e:9f:c1:d2:b5:63:ff:5e:73:b8:6c:4b:
         14:02:f4:7d:26:f6:b3:67:0e:07:67:49:63:23:8f:d3:a7:41:
         72:61:61:d6:22:9f:3d:c3:61:93:bd:c5:0c:ee:d4:61:48:ed:
         06:36:c8:0c:27:48:78:41:54:1b:11:63:1f:e4:16:e1:27:f6:
         9a:10:19:61:3d:9f:88:85:4a:08:4f:c4:bd:47:6e:52:ac:13:
         5d:3f:9d:94:f6:b5:e7:21:39:6b:db:59:41:7d:bf:90:20:ef:
         c9:49:35:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:07:28 2025 by rpki-client