Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/7e1d94-1854-473d-8753-18ded80b4b5d/1/NldL5q52zVI7M3h8-9tpJkJj0HQ.mft
File:                     NldL5q52zVI7M3h8-9tpJkJj0HQ.mft (raw, json)
Hash identifier:          Wz6ifKHEsGMiA9/No0TbQ3pPGY1bcSY4+mkJcbXJiUI=
Subject key identifier:   90:88:D2:39:B7:A5:C6:D1:FE:D8:B6:DA:34:04:8F:84:0D:F0:D3:15
Authority key identifier: 36:57:4B:E6:AE:76:CD:52:3B:33:78:7C:FB:DB:69:26:42:63:D0:74
Certificate issuer:       /CN=36574be6ae76cd523b33787cfbdb69264263d074
Certificate serial:       0199FC58EF5532A2A6361593C1E5B572042D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NldL5q52zVI7M3h8-9tpJkJj0HQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/7e1d94-1854-473d-8753-18ded80b4b5d/1/NldL5q52zVI7M3h8-9tpJkJj0HQ.mft
Manifest number:          16E6
Signing time:             Sun 19 Oct 2025 12:01:50 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:50 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:50 +0000
Files and hashes:         1: 1-gyxFvtsdFvYTZX0Y9fbT2PSGFM.roa (hash: EABdk5cioKlboVX+5roxKxOS78qf+VdGIdGNtobQ0pE=)
                          2: KArVYyPO9fBEhTTRJ1tDthlJCOw.roa (hash: a0gp1BPnbKmQpx9TqJhgPqer5KuegL1mEbSjNdCn0ek=)
                          3: NldL5q52zVI7M3h8-9tpJkJj0HQ.crl (hash: tqVHUds/YM58JjS33I+PmOdmSArxdgW/uH5b0D8xWt8=)
                          4: SErRHgSbJegvTKQp5_vKPuL-I0M.roa (hash: 5izdqURGD+Gcq0q1le3LSPtQmkAtZ+szcc8AfWWlrxM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/7e1d94-1854-473d-8753-18ded80b4b5d/1/NldL5q52zVI7M3h8-9tpJkJj0HQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/7e1d94-1854-473d-8753-18ded80b4b5d/1/NldL5q52zVI7M3h8-9tpJkJj0HQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NldL5q52zVI7M3h8-9tpJkJj0HQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:58:ef:55:32:a2:a6:36:15:93:c1:e5:b5:72:04:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36574be6ae76cd523b33787cfbdb69264263d074
        Validity
            Not Before: Oct 19 12:01:50 2025 GMT
            Not After : Oct 20 12:01:50 2025 GMT
        Subject: CN=9088d239b7a5c6d1fed8b6da34048f840df0d315
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:8a:86:2a:da:f9:33:48:69:03:0e:b7:cf:89:
                    51:38:dc:7b:a6:71:4f:d0:b5:d1:aa:55:c7:a9:05:
                    b7:27:14:8d:83:b7:33:ad:bf:0b:81:9a:05:5b:35:
                    b4:1a:d6:c9:d7:de:3e:ac:5f:86:ba:91:54:f4:9c:
                    23:8e:3a:b7:01:ca:48:5d:76:f2:b3:71:1c:e9:f5:
                    9b:af:f7:fa:c8:c0:56:c3:13:47:30:6a:b6:ea:71:
                    75:35:78:03:71:b0:2d:60:44:1b:ad:ff:2e:62:31:
                    9e:b5:39:4c:9a:d6:94:8a:4c:f4:c3:44:de:d2:df:
                    24:e0:81:c0:a1:dc:d1:33:2c:a0:2b:1b:f4:f2:e2:
                    ba:39:09:c3:ad:ea:77:55:16:13:6c:53:0e:69:56:
                    38:cc:d4:80:ce:19:49:5b:67:ee:1d:6a:8d:3e:db:
                    5c:2c:89:93:e1:59:e5:e4:70:96:0c:95:7a:80:a8:
                    48:6f:8c:be:6f:d9:e9:7c:ba:80:92:13:a8:58:4f:
                    92:42:61:81:df:0a:54:11:a3:52:ea:a6:85:48:4b:
                    e1:e2:bc:a4:82:88:1f:c3:e8:b9:85:8e:ce:65:01:
                    a2:78:96:02:0f:76:96:8f:be:c9:48:dd:e6:0c:68:
                    ae:81:1e:27:12:85:3b:da:de:1f:0c:3d:f0:ef:0a:
                    ea:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:88:D2:39:B7:A5:C6:D1:FE:D8:B6:DA:34:04:8F:84:0D:F0:D3:15
            X509v3 Authority Key Identifier:
                keyid:36:57:4B:E6:AE:76:CD:52:3B:33:78:7C:FB:DB:69:26:42:63:D0:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NldL5q52zVI7M3h8-9tpJkJj0HQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/7e1d94-1854-473d-8753-18ded80b4b5d/1/NldL5q52zVI7M3h8-9tpJkJj0HQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/7e1d94-1854-473d-8753-18ded80b4b5d/1/NldL5q52zVI7M3h8-9tpJkJj0HQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:49:4a:b6:be:20:29:39:85:b0:07:8a:de:f7:21:d7:b9:35:
         fd:81:d4:a6:b8:4d:c1:da:06:1d:64:ef:ac:69:1f:21:77:44:
         7c:fb:73:9d:e1:1a:31:68:d2:c2:e4:66:2b:e8:fa:1d:15:80:
         e2:c7:25:dc:2f:69:e7:d9:48:d2:c1:5f:44:ae:a7:92:ab:fa:
         ef:7a:90:f4:39:97:28:6b:2c:83:f9:6a:93:a9:3a:ee:3a:c7:
         fa:46:f1:55:4f:cb:06:1d:1c:37:84:e6:4a:d2:8e:7c:73:2c:
         65:62:2d:4e:93:74:b7:55:86:e1:f7:51:e5:72:55:f6:ab:2a:
         f9:76:cc:d6:0d:3f:26:b7:43:5a:0e:e7:da:bf:b7:69:99:d5:
         28:a8:1c:03:4c:f0:af:73:7a:be:97:0a:26:a8:42:17:4c:c3:
         d2:22:a4:10:3f:91:db:c8:21:93:d9:43:5e:6d:32:6d:da:3e:
         1c:25:fa:1a:94:be:88:cc:69:bb:db:b1:a3:25:49:b5:2b:51:
         0a:b9:37:9d:39:bb:f4:66:0d:ba:d2:1b:d5:30:d2:3b:60:3b:
         c8:69:74:e5:eb:bd:6e:1d:28:95:bc:21:9f:37:3f:de:ef:6d:
         ea:c7:d8:e9:87:ba:6b:f6:a8:06:48:25:bd:53:19:ac:f2:d0:
         77:bd:d4:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:39:33 2025 by rpki-client