Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/bbb782-39f5-4d24-91d2-3e5ee4a8f388/1/na669vl-yTdN9sFJL1nV8Tqd0Ag.mft
File:                     na669vl-yTdN9sFJL1nV8Tqd0Ag.mft (raw, json)
Hash identifier:          hpuXIKySWuXLpzCZLNNhMfV1iaZR+QZLDN5VAA6Ogso=
Subject key identifier:   61:5A:3D:94:DC:BF:EA:84:EE:89:DE:77:43:5B:CC:18:D7:DA:D4:1E
Authority key identifier: 9D:AE:BA:F6:F9:7E:C9:37:4D:F6:C1:49:2F:59:D5:F1:3A:9D:D0:08
Certificate issuer:       /CN=9daebaf6f97ec9374df6c1492f59d5f13a9dd008
Certificate serial:       0199FAA112ED3C0F732355B432267F125B58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/na669vl-yTdN9sFJL1nV8Tqd0Ag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/bbb782-39f5-4d24-91d2-3e5ee4a8f388/1/na669vl-yTdN9sFJL1nV8Tqd0Ag.mft
Manifest number:          069B
Signing time:             Sun 19 Oct 2025 04:01:24 +0000
Manifest this update:     Sun 19 Oct 2025 04:01:24 +0000
Manifest next update:     Mon 20 Oct 2025 04:01:24 +0000
Files and hashes:         1: na669vl-yTdN9sFJL1nV8Tqd0Ag.crl (hash: Qv/zCFuG/I6EL2mFlpU5k9K5eBlwgeWnu4xWfsFSXtk=)
                          2: olL7czVWLNgm7W1_IvIVMdMAMJQ.roa (hash: E2ePc2MjZUE+sDvLqhAeZtvQFjQHcecfsCWi8c1v1uE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/bbb782-39f5-4d24-91d2-3e5ee4a8f388/1/na669vl-yTdN9sFJL1nV8Tqd0Ag.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/bbb782-39f5-4d24-91d2-3e5ee4a8f388/1/na669vl-yTdN9sFJL1nV8Tqd0Ag.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/na669vl-yTdN9sFJL1nV8Tqd0Ag.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 04:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:a1:12:ed:3c:0f:73:23:55:b4:32:26:7f:12:5b:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9daebaf6f97ec9374df6c1492f59d5f13a9dd008
        Validity
            Not Before: Oct 19 04:01:24 2025 GMT
            Not After : Oct 20 04:01:24 2025 GMT
        Subject: CN=615a3d94dcbfea84ee89de77435bcc18d7dad41e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:11:11:8a:db:f1:b4:34:dd:e2:6d:84:3f:50:
                    f7:d8:ba:7a:2f:08:1a:f1:c9:37:d7:25:4c:1f:6d:
                    7c:27:e8:d1:ac:0c:ad:f1:e5:0d:1e:ae:8e:71:3a:
                    e8:4c:be:af:02:eb:7d:26:46:7f:7c:94:ea:22:86:
                    89:3c:d3:a1:5e:11:78:ba:d3:55:9f:bd:8e:b5:55:
                    66:8d:0e:11:b6:be:90:4a:c7:2a:32:05:19:5f:3d:
                    79:b9:18:e3:d6:98:e9:7f:04:8b:34:95:0d:d7:bd:
                    f1:ac:75:63:f8:3c:cb:71:06:33:ad:f3:44:d0:9c:
                    ef:27:b2:66:8f:1a:92:29:4c:35:de:0a:fe:29:f0:
                    12:99:ce:bc:b7:5c:72:54:eb:cd:d4:24:7f:5e:28:
                    61:14:fd:c7:5a:e5:f5:3c:bd:8f:20:75:20:45:d0:
                    0f:91:1b:4b:31:5f:89:ce:e5:4e:6f:06:5f:3a:a0:
                    62:d7:6b:b8:df:b3:ad:20:1c:ae:fa:6b:03:f0:fa:
                    b7:33:5f:56:13:7d:14:f0:c0:b5:13:4b:a1:7d:d1:
                    30:78:10:cd:b8:11:ff:d5:19:77:87:44:c9:6a:35:
                    d8:03:d7:92:da:73:eb:9a:4b:ec:12:97:97:ca:49:
                    ca:34:ec:5c:f0:78:c6:a2:9e:19:af:1a:7d:d4:7a:
                    21:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:5A:3D:94:DC:BF:EA:84:EE:89:DE:77:43:5B:CC:18:D7:DA:D4:1E
            X509v3 Authority Key Identifier:
                keyid:9D:AE:BA:F6:F9:7E:C9:37:4D:F6:C1:49:2F:59:D5:F1:3A:9D:D0:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/na669vl-yTdN9sFJL1nV8Tqd0Ag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/bbb782-39f5-4d24-91d2-3e5ee4a8f388/1/na669vl-yTdN9sFJL1nV8Tqd0Ag.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/bbb782-39f5-4d24-91d2-3e5ee4a8f388/1/na669vl-yTdN9sFJL1nV8Tqd0Ag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:3d:1a:2c:ea:47:f7:27:6b:b5:b2:b4:29:e6:bd:06:11:5f:
         34:eb:64:b7:a6:4c:19:32:17:82:b1:90:ed:1e:b0:31:6e:a9:
         a0:d4:31:09:ce:3a:96:38:2a:bb:40:a1:4d:5b:cb:5a:a3:ae:
         41:62:f9:6f:07:15:c8:a3:97:1a:57:ad:02:8d:52:bb:00:e2:
         0c:ea:87:c3:36:0f:0f:93:34:3f:a7:2a:bc:98:d0:47:f6:2e:
         56:c1:01:36:4d:59:31:11:f8:14:04:23:57:4c:f0:dd:db:0b:
         22:19:75:a6:06:e3:8f:6e:fd:2a:b6:05:38:c7:d6:fe:ed:f8:
         a9:47:0b:82:e8:5d:35:7e:59:04:02:9a:34:2e:68:fb:fe:75:
         fa:46:19:62:4c:47:81:dd:f6:2e:0a:1f:30:34:d0:58:3d:7e:
         3e:9e:02:c7:1d:37:c1:08:c0:51:34:d4:5e:da:54:9c:3d:b3:
         83:6c:a6:ab:1a:a3:51:73:07:fd:a0:8f:ea:ad:38:84:8b:8d:
         ac:d3:71:4f:98:0d:04:4c:c3:1c:e8:b0:14:5c:f3:02:71:0e:
         14:b3:71:2b:56:b8:1c:53:89:f5:13:3b:42:d0:d6:0e:f7:09:
         ba:da:b1:a5:13:de:e6:18:41:1c:f1:48:d7:79:71:bf:02:f3:
         8c:11:c3:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:53 2025 by rpki-client