Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/0660e4-8d5d-43b9-8c89-b5a428b7d14c/1/Nv7f7M_QD1d8t5H45DqmWSYuk9s.mft
File:                     Nv7f7M_QD1d8t5H45DqmWSYuk9s.mft (raw, json)
Hash identifier:          V8E0ky/YsXUCDkrbQfqNWIbCh8j2k78WjH2K4bYF12E=
Subject key identifier:   02:99:D6:93:3A:16:1E:07:B0:03:D3:40:FC:56:52:90:7E:73:08:2D
Authority key identifier: 36:FE:DF:EC:CF:D0:0F:57:7C:B7:91:F8:E4:3A:A6:59:26:2E:93:DB
Certificate issuer:       /CN=36fedfeccfd00f577cb791f8e43aa659262e93db
Certificate serial:       0199FBB368700D8F646141D571936531B0D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nv7f7M_QD1d8t5H45DqmWSYuk9s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/0660e4-8d5d-43b9-8c89-b5a428b7d14c/1/Nv7f7M_QD1d8t5H45DqmWSYuk9s.mft
Manifest number:          010F
Signing time:             Sun 19 Oct 2025 09:01:02 +0000
Manifest this update:     Sun 19 Oct 2025 09:01:02 +0000
Manifest next update:     Mon 20 Oct 2025 09:01:02 +0000
Files and hashes:         1: Nv7f7M_QD1d8t5H45DqmWSYuk9s.crl (hash: O2Fw4XE3rK8by4jzFLEBISrKKolhwMBNLx0ev6gpulc=)
                          2: _Yf7Te2uvhwWX_l1JN9UjpNgrZY.roa (hash: f5+J7yt13fqQYgFUTN4kcse4XeHLgbH6pOCZG6b6MbQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/0660e4-8d5d-43b9-8c89-b5a428b7d14c/1/Nv7f7M_QD1d8t5H45DqmWSYuk9s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/0660e4-8d5d-43b9-8c89-b5a428b7d14c/1/Nv7f7M_QD1d8t5H45DqmWSYuk9s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Nv7f7M_QD1d8t5H45DqmWSYuk9s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:b3:68:70:0d:8f:64:61:41:d5:71:93:65:31:b0:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36fedfeccfd00f577cb791f8e43aa659262e93db
        Validity
            Not Before: Oct 19 09:01:02 2025 GMT
            Not After : Oct 20 09:01:02 2025 GMT
        Subject: CN=0299d6933a161e07b003d340fc5652907e73082d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:3c:ea:41:f7:d6:15:7a:8b:cf:18:d3:1b:1a:
                    a9:28:19:c0:45:ca:81:ea:f2:74:1a:e5:5e:11:fd:
                    1b:0b:8b:db:25:31:14:43:e7:49:f4:ff:02:6f:34:
                    da:70:a0:38:a6:db:15:bd:72:d8:a7:bc:7b:2d:84:
                    a1:a7:a2:f9:5f:78:6f:2e:fc:df:3c:24:cd:6d:d4:
                    de:62:a5:0b:b1:83:ef:6c:ca:55:8e:da:07:98:90:
                    9c:99:27:a3:de:80:c1:c4:06:6b:34:1e:5a:0d:00:
                    6d:c6:50:f1:45:c8:65:ba:70:57:53:89:e7:2c:8a:
                    4d:3e:00:8d:91:40:54:bc:2a:a3:73:15:ca:3d:1b:
                    92:ed:3f:54:9e:d9:00:30:9e:69:e6:81:9a:36:94:
                    6e:62:1d:c1:80:85:8a:1d:e4:d7:fe:bc:18:7f:6f:
                    a2:c0:ad:2b:01:c3:06:32:43:63:23:5b:6d:67:56:
                    a8:c0:a8:69:ea:95:06:56:92:84:69:0d:97:e7:9b:
                    5a:fb:85:5d:7e:52:1e:ff:c1:b7:ac:7f:93:7d:e5:
                    e8:76:87:ec:b7:11:09:52:16:dc:1c:da:2b:04:7f:
                    94:75:e2:27:d4:b2:a6:20:ea:d9:45:7a:5f:2e:f2:
                    95:8a:33:68:4e:6e:42:56:e0:c6:e2:a2:f7:c0:3c:
                    da:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:99:D6:93:3A:16:1E:07:B0:03:D3:40:FC:56:52:90:7E:73:08:2D
            X509v3 Authority Key Identifier:
                keyid:36:FE:DF:EC:CF:D0:0F:57:7C:B7:91:F8:E4:3A:A6:59:26:2E:93:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nv7f7M_QD1d8t5H45DqmWSYuk9s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/0660e4-8d5d-43b9-8c89-b5a428b7d14c/1/Nv7f7M_QD1d8t5H45DqmWSYuk9s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/0660e4-8d5d-43b9-8c89-b5a428b7d14c/1/Nv7f7M_QD1d8t5H45DqmWSYuk9s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:a7:c6:49:02:02:e6:3b:af:c8:da:c2:98:62:4d:3a:a1:f9:
         6a:17:05:6b:56:ee:69:bb:5b:15:42:ef:2e:52:ae:06:95:dd:
         fc:f2:60:81:53:38:eb:fe:fa:71:cc:9b:64:2b:c0:f6:d2:b9:
         87:63:f5:b6:65:7c:75:49:3f:b0:9c:3c:69:a2:b8:bd:5c:92:
         5f:18:6a:5d:34:93:69:2d:2e:c5:28:d8:18:0b:bd:21:b5:1b:
         22:f4:78:ed:91:81:78:f5:71:6c:ce:a7:91:5e:4d:66:82:ac:
         73:78:0c:85:7e:e0:94:72:d2:52:2c:78:9e:e7:79:d2:82:38:
         d8:f1:d4:52:75:fb:93:02:0e:93:d6:d3:77:f7:f3:07:64:bf:
         1b:a4:5e:40:01:8b:0a:7f:13:89:d6:06:fe:bf:00:3a:bb:18:
         7f:f5:7c:8f:83:bb:31:93:8c:92:77:27:38:d0:c5:e8:d4:94:
         5f:09:42:92:24:5e:df:aa:35:8f:97:81:21:d4:5f:12:b2:5b:
         d8:86:2d:07:a3:ed:1e:de:cb:de:bb:be:2d:4b:9d:c1:54:84:
         0e:c6:16:29:6d:43:4b:14:06:9e:9e:ba:3b:fc:e6:8d:a8:82:
         9d:0d:86:b7:0a:10:46:28:b0:02:31:1a:0a:e3:ff:06:03:ba:
         3f:8d:a7:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:13:16 2025 by rpki-client