Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/12820e-b97e-471c-bbce-92ed1af16b88/1/NXAXpX-ccN-vZpOjJLumhne4ePM.mft
File:                     NXAXpX-ccN-vZpOjJLumhne4ePM.mft (raw, json)
Hash identifier:          9+l0PMp5N2o3X5Ob5Km47RTjCHNebInLPzNWbXw2AgQ=
Subject key identifier:   C7:92:DA:F4:33:2E:B7:CE:63:92:47:A9:AC:93:AF:70:F9:88:28:BC
Authority key identifier: 35:70:17:A5:7F:9C:70:DF:AF:66:93:A3:24:BB:A6:86:77:B8:78:F3
Certificate issuer:       /CN=357017a57f9c70dfaf6693a324bba68677b878f3
Certificate serial:       0199FBEBD4FE8D827E8EF02D01D1A71CCB48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NXAXpX-ccN-vZpOjJLumhne4ePM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/12820e-b97e-471c-bbce-92ed1af16b88/1/NXAXpX-ccN-vZpOjJLumhne4ePM.mft
Manifest number:          16E3
Signing time:             Sun 19 Oct 2025 10:02:40 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:40 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:40 +0000
Files and hashes:         1: NXAXpX-ccN-vZpOjJLumhne4ePM.crl (hash: oOXXE9AAyKnOV6fLZuEqNXZ5lMHwL1qDLLt+nPoVPv8=)
                          2: fw5w9jTTZNnVRi6ltsbrZFMjlng.roa (hash: Spp2bK6sMfFLneeWMwidps5PTWRtnPxGOntgwXViU3Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/12820e-b97e-471c-bbce-92ed1af16b88/1/NXAXpX-ccN-vZpOjJLumhne4ePM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/12820e-b97e-471c-bbce-92ed1af16b88/1/NXAXpX-ccN-vZpOjJLumhne4ePM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NXAXpX-ccN-vZpOjJLumhne4ePM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:d4:fe:8d:82:7e:8e:f0:2d:01:d1:a7:1c:cb:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=357017a57f9c70dfaf6693a324bba68677b878f3
        Validity
            Not Before: Oct 19 10:02:40 2025 GMT
            Not After : Oct 20 10:02:40 2025 GMT
        Subject: CN=c792daf4332eb7ce639247a9ac93af70f98828bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a9:c8:19:8a:fd:0b:97:eb:f8:5e:98:e0:3f:
                    c5:ae:3b:32:ad:e5:45:54:5e:8a:43:02:67:f0:35:
                    5f:cc:83:c2:f1:64:e7:38:f3:5c:f4:23:ea:48:e7:
                    74:54:48:a5:05:7d:8c:b3:33:b5:4d:eb:5f:33:f0:
                    c2:3e:49:58:85:89:ce:d5:08:ba:6a:8c:cf:d7:d9:
                    2c:4f:c7:40:e3:01:5e:24:c6:cf:69:bd:ce:c0:19:
                    0d:3f:ae:3c:27:10:e8:56:76:ba:8c:78:3f:40:ee:
                    f6:4d:b2:55:72:da:2a:09:8f:dc:26:ad:2a:3e:67:
                    6a:23:09:8f:92:c4:f4:66:2d:ab:1b:0d:fe:f3:32:
                    28:28:be:a0:9a:57:d4:65:59:29:64:a7:96:8c:b2:
                    b4:79:7f:6c:64:0a:b1:e5:37:28:32:91:fc:0c:c9:
                    ac:a3:ed:5a:03:36:3a:e8:62:b4:e3:14:f0:ee:61:
                    40:28:ba:85:ab:23:6c:41:a4:29:2b:9b:ee:22:aa:
                    cd:b9:67:f2:c3:20:91:92:73:f3:7b:71:d3:00:d8:
                    13:84:53:e5:84:6f:02:74:bb:6d:85:c7:1a:2c:0d:
                    5e:8d:12:f4:4d:79:b5:26:23:5f:65:04:08:08:b1:
                    06:67:a1:49:c7:af:6f:b7:06:8b:6d:36:ed:0c:5f:
                    d5:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:92:DA:F4:33:2E:B7:CE:63:92:47:A9:AC:93:AF:70:F9:88:28:BC
            X509v3 Authority Key Identifier:
                keyid:35:70:17:A5:7F:9C:70:DF:AF:66:93:A3:24:BB:A6:86:77:B8:78:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NXAXpX-ccN-vZpOjJLumhne4ePM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/12820e-b97e-471c-bbce-92ed1af16b88/1/NXAXpX-ccN-vZpOjJLumhne4ePM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/12820e-b97e-471c-bbce-92ed1af16b88/1/NXAXpX-ccN-vZpOjJLumhne4ePM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:52:47:be:5b:a8:a4:55:7c:b0:eb:76:ab:18:0f:da:80:f5:
         97:bb:c2:9e:d8:1c:2d:5a:af:ec:49:66:a7:91:e7:29:66:66:
         8f:5a:68:e2:3f:08:d9:2a:39:41:eb:fd:1c:89:49:5a:99:cc:
         4f:82:b2:ce:47:5f:1c:91:b0:a1:28:d1:3d:38:56:01:33:5b:
         45:c1:aa:8a:d6:2e:90:a6:4e:bd:ad:ec:4d:bb:9a:d6:dc:f2:
         61:d8:83:d5:26:4f:43:7e:2d:fd:58:7b:cd:3b:99:8b:91:f9:
         23:e8:27:58:2d:fe:1a:d2:bc:c2:51:73:a6:12:76:2c:be:db:
         43:d1:09:c7:6d:a5:d2:22:15:b7:6c:95:93:67:6d:33:7b:b0:
         a8:83:12:21:a7:cf:42:eb:72:9a:e5:1a:c4:7e:03:7a:e9:fb:
         0f:b3:d6:73:3e:48:57:a6:42:29:8a:cb:3b:23:fc:e6:03:0b:
         5e:f5:1e:63:eb:a7:d4:6f:63:35:b1:68:4e:b9:7a:5e:51:4b:
         ad:82:71:74:59:86:9b:8d:97:8b:52:21:81:4f:8d:dd:67:f8:
         47:2a:ec:8b:c4:03:1c:a6:2f:77:0b:94:a6:3d:4b:2d:85:9d:
         e5:c3:a2:70:af:da:20:b7:3a:49:c7:1c:d7:b3:cb:46:e5:d5:
         dc:da:d3:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:14:41 2025 by rpki-client