Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/NOEQtZNi9nPq4ztm7nrqPEAoKU4.mft
File:                     NOEQtZNi9nPq4ztm7nrqPEAoKU4.mft (raw, json)
Hash identifier:          NlA+PuXqzCJ6j6AsuGVoSfdCJbXuePpO3yJURYcQ+28=
Subject key identifier:   E1:7E:7D:64:D6:7A:C1:7E:EE:00:7A:6F:22:58:8E:48:59:5D:CB:CE
Authority key identifier: 34:E1:10:B5:93:62:F6:73:EA:E3:3B:66:EE:7A:EA:3C:40:28:29:4E
Certificate issuer:       /CN=34e110b59362f673eae33b66ee7aea3c4028294e
Certificate serial:       0199FB0F18E93E1837F6FAB4F85169F55877
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NOEQtZNi9nPq4ztm7nrqPEAoKU4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/NOEQtZNi9nPq4ztm7nrqPEAoKU4.mft
Manifest number:          0E59
Signing time:             Sun 19 Oct 2025 06:01:34 +0000
Manifest this update:     Sun 19 Oct 2025 06:01:34 +0000
Manifest next update:     Mon 20 Oct 2025 06:01:34 +0000
Files and hashes:         1: NOEQtZNi9nPq4ztm7nrqPEAoKU4.crl (hash: wzlkNHv1avncrgUjYYuWcPk8DsKTivt1NXwgF3A0qVo=)
                          2: XtfUxUGkjCJuklebiN54Yxg8R5M.roa (hash: 6ylTl3fnc+Bg9Pz92d7wJrvdCwc0XcQ4KZdtR4bRI4k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/NOEQtZNi9nPq4ztm7nrqPEAoKU4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/NOEQtZNi9nPq4ztm7nrqPEAoKU4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NOEQtZNi9nPq4ztm7nrqPEAoKU4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:0f:18:e9:3e:18:37:f6:fa:b4:f8:51:69:f5:58:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34e110b59362f673eae33b66ee7aea3c4028294e
        Validity
            Not Before: Oct 19 06:01:34 2025 GMT
            Not After : Oct 20 06:01:34 2025 GMT
        Subject: CN=e17e7d64d67ac17eee007a6f22588e48595dcbce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b4:77:7d:35:a8:99:b8:83:ce:40:52:9b:07:
                    a3:02:a6:24:32:c1:38:71:35:5b:75:80:70:8d:b0:
                    0a:5e:10:21:da:cf:ec:5b:25:07:02:cb:d7:d8:4f:
                    ad:e7:d6:36:2d:15:83:d0:5d:12:92:36:4d:99:de:
                    4d:ff:1b:51:95:09:ca:71:0d:1a:3a:b9:63:79:41:
                    5a:1b:fe:97:d3:17:6e:29:8a:57:cd:03:0a:4a:57:
                    b8:45:fb:26:6f:80:72:65:8d:bd:ca:aa:c0:a1:2e:
                    f2:89:40:03:67:94:55:61:e1:19:30:83:50:c3:2e:
                    92:a0:0d:74:13:52:72:9f:a5:11:f6:74:37:b3:0d:
                    47:a1:56:cf:8c:a5:94:92:68:72:e5:29:f2:b4:61:
                    70:3b:6a:79:21:eb:58:c0:c7:0c:23:fc:b3:32:23:
                    e4:d2:f9:b4:c6:b0:24:54:74:aa:d7:7c:40:96:a3:
                    9f:f5:3b:23:b5:bd:f7:40:d1:cd:34:32:31:a3:be:
                    3e:6f:12:c7:6b:5b:59:5c:a4:b9:49:27:29:06:81:
                    4b:1e:c8:77:ec:be:1e:e9:e9:03:f9:f4:a2:ef:fa:
                    4b:e7:26:2e:4e:4b:45:cc:8a:f0:df:a9:ed:a5:26:
                    45:49:78:ff:fe:8d:6d:f5:ec:10:bc:0d:0a:78:5f:
                    30:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:7E:7D:64:D6:7A:C1:7E:EE:00:7A:6F:22:58:8E:48:59:5D:CB:CE
            X509v3 Authority Key Identifier:
                keyid:34:E1:10:B5:93:62:F6:73:EA:E3:3B:66:EE:7A:EA:3C:40:28:29:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NOEQtZNi9nPq4ztm7nrqPEAoKU4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/NOEQtZNi9nPq4ztm7nrqPEAoKU4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0bf8fb-1604-4cd1-9da6-1bb27c5d397e/1/NOEQtZNi9nPq4ztm7nrqPEAoKU4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:78:ac:85:53:fc:e6:63:50:29:7e:50:5b:76:3a:50:1e:a3:
         fa:7a:72:50:09:12:b5:96:9f:ef:8a:45:de:84:66:24:5f:5f:
         dd:b7:7e:84:66:3c:a1:37:0b:b1:46:7b:11:c0:d3:a5:f4:6e:
         a4:1a:a7:6e:e0:5e:eb:77:0a:58:00:9d:93:2f:d1:60:86:45:
         c5:ea:13:8a:8e:19:c8:6d:81:42:c3:2d:66:3c:35:06:18:46:
         7f:94:2d:27:8b:72:c1:19:52:fd:f4:bf:a1:5a:1c:92:f1:87:
         0b:2f:17:31:a1:92:29:75:e6:c1:59:b5:b8:b8:56:7f:aa:3b:
         0b:37:96:a4:fb:d2:f4:9c:fe:b3:20:35:63:eb:89:84:83:f9:
         65:65:7d:a4:ab:f8:f6:60:15:9b:15:82:50:04:50:7d:c9:83:
         07:26:18:33:48:c8:17:29:55:e8:30:2a:be:55:15:4d:ed:5d:
         8b:e2:95:3e:bd:8d:f9:c7:d3:c3:8b:7c:8d:00:f7:60:dd:99:
         3b:e6:aa:f9:d4:ce:db:29:5f:c2:83:78:ca:48:e7:4b:63:88:
         cd:e3:1c:30:e5:4d:1d:a6:54:58:47:99:ed:68:27:c5:40:0b:
         c2:50:a1:b9:ea:61:77:1f:43:2d:02:6f:c6:71:d6:67:c0:35:
         2e:8a:9c:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:07:04 2025 by rpki-client