Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.mft
File:                     NyX3VABO2-MKuMr-759xMssMJBc.mft (raw, json)
Hash identifier:          bDzku/1BthsFgY4kMVuQumcdL7BtWPR1m0plYrKhSUQ=
Subject key identifier:   F7:45:8E:DE:8D:A5:61:9D:AB:A6:28:F0:D2:23:04:EF:B4:A8:DD:4E
Authority key identifier: 37:25:F7:54:00:4E:DB:E3:0A:B8:CA:FE:EF:9F:71:32:CB:0C:24:17
Certificate issuer:       /CN=3725f754004edbe30ab8cafeef9f7132cb0c2417
Certificate serial:       0199FAD805530F05F58F6A0AD5D9990BB3CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NyX3VABO2-MKuMr-759xMssMJBc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.mft
Manifest number:          0E7E
Signing time:             Sun 19 Oct 2025 05:01:25 +0000
Manifest this update:     Sun 19 Oct 2025 05:01:25 +0000
Manifest next update:     Mon 20 Oct 2025 05:01:25 +0000
Files and hashes:         1: NyX3VABO2-MKuMr-759xMssMJBc.crl (hash: ++5oVXCS/rypKei+0y1tT1+KhcUF3HPwjjtIdaDJ3e4=)
                          2: ttg5VkQmE-CT_UTENF07n7R2sRQ.roa (hash: lKSbwZMZC4wBO8BqdScrx370SDVIcLXaY1lpku8KmlA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NyX3VABO2-MKuMr-759xMssMJBc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 05:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:d8:05:53:0f:05:f5:8f:6a:0a:d5:d9:99:0b:b3:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3725f754004edbe30ab8cafeef9f7132cb0c2417
        Validity
            Not Before: Oct 19 05:01:25 2025 GMT
            Not After : Oct 20 05:01:25 2025 GMT
        Subject: CN=f7458ede8da5619daba628f0d22304efb4a8dd4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:97:4e:0c:f4:0d:51:ef:ca:ff:c7:cf:83:66:
                    99:ea:c3:d2:75:d1:ae:95:58:33:ce:66:24:76:87:
                    0d:4c:96:70:4f:40:55:dd:93:3c:23:13:9b:53:72:
                    d5:51:ec:fa:c6:2d:f4:db:c1:11:fa:cf:38:a4:15:
                    81:e3:6c:43:3b:d2:8b:30:64:c0:08:ed:3b:5d:1c:
                    cb:87:19:57:3e:c0:d9:99:e9:b6:fb:59:89:78:d5:
                    82:74:a1:fb:c4:a2:90:b6:1d:f8:6d:72:e4:8e:b4:
                    24:9d:2e:23:f2:25:65:f3:bc:fb:85:9b:ea:ca:e1:
                    d1:7a:78:46:3d:ac:3a:7a:d9:ab:e7:a2:90:9c:b2:
                    14:a2:c9:9e:2a:f2:5f:31:f3:b8:0d:ac:95:c8:fe:
                    dd:3b:1b:6f:8c:7e:94:62:40:57:02:9c:ec:09:f7:
                    9e:3e:6f:31:bf:93:af:24:42:14:7b:d1:01:06:ac:
                    a3:3d:10:be:20:66:7e:f2:18:61:7c:20:72:f9:52:
                    2d:a1:1b:8d:06:9d:ba:e2:20:7a:31:d4:a6:43:71:
                    9e:ff:e5:cf:44:46:87:3d:a9:62:99:b6:be:1d:22:
                    1e:a8:d6:41:78:6d:cc:9f:b2:d1:5e:10:f7:1a:99:
                    da:37:09:ee:c6:1a:42:8f:d4:88:67:35:88:6f:24:
                    bd:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:45:8E:DE:8D:A5:61:9D:AB:A6:28:F0:D2:23:04:EF:B4:A8:DD:4E
            X509v3 Authority Key Identifier:
                keyid:37:25:F7:54:00:4E:DB:E3:0A:B8:CA:FE:EF:9F:71:32:CB:0C:24:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyX3VABO2-MKuMr-759xMssMJBc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/3c91a8-080b-4e5a-b8c3-74afc3043b78/1/NyX3VABO2-MKuMr-759xMssMJBc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:e1:e6:a1:c7:8d:9b:2f:99:6d:16:72:c0:29:52:05:5b:45:
         8b:d1:67:b7:c1:fd:2e:62:c1:0c:8e:c0:c4:8f:c6:ba:50:70:
         8c:06:75:fb:e9:f1:a6:e1:30:31:b2:b6:fb:cf:59:53:9f:7b:
         b2:91:8e:21:e5:10:4f:9d:e8:94:6f:d1:5d:d4:92:0f:a6:18:
         6f:82:d1:1d:4d:ea:fd:0b:58:13:6b:f1:4e:07:20:df:09:9b:
         02:f4:22:69:f7:17:e8:f9:23:27:8f:af:0f:e6:8f:aa:4f:e6:
         cf:20:52:7a:00:90:34:62:bd:c0:4e:e7:ef:b4:bd:06:45:b7:
         34:8e:ed:ea:42:89:ac:66:b5:c5:18:16:06:e5:65:a4:1a:16:
         1a:5c:0a:70:a4:98:84:33:b8:72:22:0d:cd:c0:a8:f5:38:51:
         31:01:6e:3b:da:d2:26:d6:53:ae:ed:20:bc:0f:5e:53:67:26:
         b8:d7:90:0d:35:1e:36:2a:54:3e:5d:54:bb:a8:59:bd:04:fe:
         23:9c:c3:72:de:30:4d:41:02:ae:68:f1:6f:7c:d0:58:e0:f0:
         64:7b:f0:df:28:80:60:af:10:80:54:8c:0a:6e:0d:c3:11:19:
         0e:73:88:aa:f4:ce:63:6b:b0:3e:95:4a:5b:c2:c0:ec:95:d2:
         c9:65:51:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:18:54 2025 by rpki-client