Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.mft
File:                     NCUppgkAWDTcELW4AP5TEMWMxH4.mft (raw, json)
Hash identifier:          SsFfoa0KUmmnsUWLOpOvZZEgBYXoCXeLBGTSqD0zcvU=
Subject key identifier:   0C:CF:6F:D7:76:CF:A8:53:0A:78:AF:CC:0F:E7:09:9D:04:6B:A3:8A
Authority key identifier: 34:25:29:A6:09:00:58:34:DC:10:B5:B8:00:FE:53:10:C5:8C:C4:7E
Certificate issuer:       /CN=342529a609005834dc10b5b800fe5310c58cc47e
Certificate serial:       0199FAD85E5247CBE0B4BBB1D6F17D5C6234
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NCUppgkAWDTcELW4AP5TEMWMxH4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.mft
Manifest number:          02C9
Signing time:             Sun 19 Oct 2025 05:01:47 +0000
Manifest this update:     Sun 19 Oct 2025 05:01:47 +0000
Manifest next update:     Mon 20 Oct 2025 05:01:47 +0000
Files and hashes:         1: NCUppgkAWDTcELW4AP5TEMWMxH4.crl (hash: wz27RbTAzMmDu8fzZsY+NCd4QxWCx/mCbdQjpwsW8sE=)
                          2: Z_eZrq0pMGEuCobzf2HGLgxhvHM.roa (hash: L/Qhu9gR3mWIDrVB/JXQbyHDSmMMhTwgUj0OQ/bpGK8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NCUppgkAWDTcELW4AP5TEMWMxH4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 05:01:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:d8:5e:52:47:cb:e0:b4:bb:b1:d6:f1:7d:5c:62:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=342529a609005834dc10b5b800fe5310c58cc47e
        Validity
            Not Before: Oct 19 05:01:47 2025 GMT
            Not After : Oct 20 05:01:47 2025 GMT
        Subject: CN=0ccf6fd776cfa8530a78afcc0fe7099d046ba38a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a4:59:59:10:f8:52:ae:84:72:78:a4:b0:53:
                    c3:8b:6f:dc:4d:94:95:1f:a0:86:84:9b:64:27:36:
                    76:36:f0:4d:f6:5d:83:ff:38:79:06:9e:58:38:9f:
                    50:1e:3a:3a:e6:b0:49:1e:59:18:a7:29:a7:b8:08:
                    8a:6e:0c:fb:d5:e9:d7:c1:a4:09:93:7a:b2:f5:ea:
                    ce:3a:59:2f:8a:bf:b5:df:79:24:91:f2:f2:58:17:
                    93:d7:ba:6d:8e:3b:93:e6:a4:34:a9:01:34:50:74:
                    67:09:23:48:5d:57:76:db:5e:b8:13:06:df:c0:b6:
                    10:c2:c5:e9:dd:a5:d0:d6:18:90:70:c4:ca:0b:eb:
                    74:a6:82:5d:97:55:86:fb:0b:15:f6:aa:ba:aa:d1:
                    50:d3:6c:33:43:b0:e0:cd:f8:b6:cb:ee:4b:df:9d:
                    eb:69:c6:d9:f5:a9:e8:e6:a8:67:f5:eb:7c:6e:bd:
                    07:9e:82:ac:84:b1:23:ae:e1:b2:46:13:9e:97:0b:
                    61:59:dc:75:8d:80:59:d1:4d:7a:b3:85:66:d2:3f:
                    33:d2:96:e6:f2:68:10:b4:85:b9:d5:36:28:bf:80:
                    87:cf:8b:28:be:81:a3:ba:bb:be:6b:39:38:6c:c7:
                    92:1f:1a:01:c0:a5:5c:bf:11:af:c0:2d:e6:ff:18:
                    cd:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:CF:6F:D7:76:CF:A8:53:0A:78:AF:CC:0F:E7:09:9D:04:6B:A3:8A
            X509v3 Authority Key Identifier:
                keyid:34:25:29:A6:09:00:58:34:DC:10:B5:B8:00:FE:53:10:C5:8C:C4:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NCUppgkAWDTcELW4AP5TEMWMxH4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:68:fe:8d:e0:1c:9f:b4:19:bf:f8:86:3f:c2:6f:47:18:f4:
         cb:94:e0:7b:49:4e:ae:d3:83:db:f9:35:1d:3b:cf:1d:8a:0a:
         46:d2:e4:61:34:e2:6f:c3:ad:d5:08:dc:c4:87:e7:7a:38:b6:
         e7:9a:c1:88:be:9f:4d:30:e9:2c:06:bb:db:1b:8f:53:b1:0d:
         c5:d9:3c:54:84:f8:1d:39:e4:16:22:d5:b5:cd:3d:18:78:0c:
         d4:08:1e:6a:42:d2:bd:98:af:33:a2:03:81:1b:e7:dc:0c:d4:
         74:e9:79:06:cc:b7:23:98:e3:49:cf:99:11:79:76:e3:cd:07:
         89:ff:3a:69:f2:6a:7f:c3:69:90:38:44:95:86:16:4d:1c:16:
         7b:c8:74:e1:7e:04:43:e5:3f:6e:ec:75:01:80:19:9d:8f:f7:
         b7:3a:42:c2:53:20:e5:d8:4b:86:e6:7f:ca:6d:d1:9a:14:af:
         57:98:bb:c5:87:91:50:70:46:bc:04:37:be:25:e5:85:e8:a4:
         3f:48:63:c7:e7:3e:8b:c0:47:4b:94:39:a0:44:31:ab:6e:ea:
         8c:ee:3d:6a:11:fb:06:b1:24:c7:03:5e:11:d2:b5:1f:18:16:
         09:18:de:b4:3e:a0:f2:c1:3e:ed:69:8f:a8:0c:96:cb:e8:f7:
         25:ff:cc:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:06:06 2025 by rpki-client