Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/308179-be69-4c10-8694-fbd399a4475e/1/NNUZJHQCvPvfDs6QIK1kYi6dO64.mft
File:                     NNUZJHQCvPvfDs6QIK1kYi6dO64.mft (raw, json)
Hash identifier:          jU/tB4twSvnbZTu2Y8znYUYhksF9uRp2Uz0vPGwd+ew=
Subject key identifier:   E3:F9:D2:57:2D:A5:CD:2D:BD:8B:7B:C0:1F:E8:70:35:04:AA:2A:86
Authority key identifier: 34:D5:19:24:74:02:BC:FB:DF:0E:CE:90:20:AD:64:62:2E:9D:3B:AE
Certificate issuer:       /CN=34d519247402bcfbdf0ece9020ad64622e9d3bae
Certificate serial:       0199FBEA7AB4A497CEE4404E003BCFAE6C08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NNUZJHQCvPvfDs6QIK1kYi6dO64.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/308179-be69-4c10-8694-fbd399a4475e/1/NNUZJHQCvPvfDs6QIK1kYi6dO64.mft
Manifest number:          0F74
Signing time:             Sun 19 Oct 2025 10:01:11 +0000
Manifest this update:     Sun 19 Oct 2025 10:01:11 +0000
Manifest next update:     Mon 20 Oct 2025 10:01:11 +0000
Files and hashes:         1: 1-UL9cqmZR86h5znGrLr9rng1OoA.roa (hash: E9P7J2BtII/1SfdjE4hkF/I8cNTQ+7Tkvjo9UHiDiQ4=)
                          2: 16Vx9JFdsAydCBt8o5HI01kMvEY.roa (hash: uE6o+4HCde5Q2IcMEoOR7KpTVTAt1VCw3Ve7SEAAgA8=)
                          3: AVkM8pQNQe4Lv2gygeYw_iwNR8o.roa (hash: eBDfXYDOLbSmgkFxViph+uhEyXOWfI38ugg/5BV4TtY=)
                          4: NNUZJHQCvPvfDs6QIK1kYi6dO64.crl (hash: vQe6LGbfIBrZSHZZaXRDnroykDla+mFqUXWWju13tFw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/308179-be69-4c10-8694-fbd399a4475e/1/NNUZJHQCvPvfDs6QIK1kYi6dO64.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/308179-be69-4c10-8694-fbd399a4475e/1/NNUZJHQCvPvfDs6QIK1kYi6dO64.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NNUZJHQCvPvfDs6QIK1kYi6dO64.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 10:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:ea:7a:b4:a4:97:ce:e4:40:4e:00:3b:cf:ae:6c:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34d519247402bcfbdf0ece9020ad64622e9d3bae
        Validity
            Not Before: Oct 19 10:01:11 2025 GMT
            Not After : Oct 20 10:01:11 2025 GMT
        Subject: CN=e3f9d2572da5cd2dbd8b7bc01fe8703504aa2a86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b2:45:84:b9:f2:27:b3:48:94:c6:d7:8d:bd:
                    5b:2d:10:db:5c:44:1a:56:69:ee:ae:58:3d:99:9e:
                    fb:18:9f:7b:c2:db:e0:58:24:80:1c:bc:98:fc:6b:
                    ca:3d:30:0c:a0:d0:b3:31:c0:89:3c:79:37:82:99:
                    5c:46:4c:46:cc:6b:cf:44:43:fe:5a:77:09:58:52:
                    1b:65:f3:02:6c:1c:16:97:8c:92:e1:1c:73:26:10:
                    04:4e:3a:38:4b:1f:45:4e:99:dc:14:83:87:b8:d3:
                    ca:4b:1a:0f:84:45:bb:4a:5c:0e:c1:f9:99:f2:14:
                    3b:4d:59:d9:da:17:08:06:6c:af:81:c8:7e:8e:29:
                    97:f7:f6:ce:af:57:74:43:73:31:24:b1:46:3c:f8:
                    ed:08:02:21:af:13:a6:36:23:0c:09:0d:40:7a:5c:
                    92:ba:5a:89:cc:c1:1d:36:3f:04:b0:5e:19:a4:6d:
                    3f:d6:c5:7d:8b:10:db:45:87:5a:e8:1d:2b:58:51:
                    01:63:ce:95:4d:b9:87:35:10:19:b9:5f:6e:75:51:
                    ac:f3:00:cb:ce:e7:bb:36:32:4b:f6:e2:b5:ec:ce:
                    4a:38:d2:e8:03:c3:78:9f:07:b6:d3:ac:c4:fc:ec:
                    b0:ef:8d:95:ce:19:74:1a:b1:72:e9:e7:66:b1:8e:
                    09:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:F9:D2:57:2D:A5:CD:2D:BD:8B:7B:C0:1F:E8:70:35:04:AA:2A:86
            X509v3 Authority Key Identifier:
                keyid:34:D5:19:24:74:02:BC:FB:DF:0E:CE:90:20:AD:64:62:2E:9D:3B:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NNUZJHQCvPvfDs6QIK1kYi6dO64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/308179-be69-4c10-8694-fbd399a4475e/1/NNUZJHQCvPvfDs6QIK1kYi6dO64.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/308179-be69-4c10-8694-fbd399a4475e/1/NNUZJHQCvPvfDs6QIK1kYi6dO64.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:53:9a:42:96:c4:61:b9:a7:f4:5c:ba:56:07:2d:65:6b:64:
         d7:85:f4:b3:a7:ca:f7:0b:81:08:4a:ba:8b:83:f5:8e:bc:99:
         c3:b5:24:bd:97:aa:79:b0:45:7b:1c:f9:dc:10:1e:53:02:6e:
         95:d9:61:5a:ac:91:65:4b:f9:0e:89:c2:17:7f:49:13:66:d5:
         45:47:fd:43:c2:63:dc:53:33:86:f8:34:dd:54:5c:0d:0e:5b:
         68:d5:49:8c:71:90:f9:4b:bd:7e:7c:91:42:53:a0:88:f8:bc:
         63:f8:2c:ab:24:0f:c3:a9:34:9e:77:c8:53:06:92:72:12:82:
         ef:19:6c:98:23:8b:44:e7:92:54:38:8a:e5:d9:13:19:ad:4f:
         f0:06:c3:87:bd:8f:3a:fa:25:a8:64:0f:bc:10:cd:d5:a4:39:
         f8:c8:c5:c3:13:47:e2:3e:a3:62:db:42:46:a0:87:93:af:c0:
         e1:e6:f3:6d:be:f8:87:0f:d9:3b:e0:72:8b:c5:ff:8d:0c:68:
         83:b7:34:41:be:64:99:2b:84:cd:ae:33:fd:d1:07:ca:6d:0c:
         4c:55:2a:98:7c:14:7a:df:47:c3:b7:bc:ce:cd:de:bd:68:c0:
         26:c3:34:b1:38:4f:7a:16:85:4b:0c:2e:b3:3b:a8:74:8a:f3:
         0d:f0:f3:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:29:44 2025 by rpki-client