Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.mft
File:                     CNedINdqndsHW5T58ABSqyGCdrc.mft (raw, json)
Hash identifier:          x54PNJMrINlS4O5Azr1Q0ILoQ71xxUpoG8XS/zxMDHY=
Subject key identifier:   7D:89:BB:7E:9F:98:A4:99:AE:F3:9C:A7:6F:84:F9:C8:B9:1E:2F:F1
Authority key identifier: 08:D7:9D:20:D7:6A:9D:DB:07:5B:94:F9:F0:00:52:AB:21:82:76:B7
Certificate issuer:       /CN=08d79d20d76a9ddb075b94f9f00052ab218276b7
Certificate serial:       0199FC5838FB34BF938FBB88D0C537DDC9B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CNedINdqndsHW5T58ABSqyGCdrc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.mft
Manifest number:          10AD
Signing time:             Sun 19 Oct 2025 12:01:04 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:04 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:04 +0000
Files and hashes:         1: CNedINdqndsHW5T58ABSqyGCdrc.crl (hash: ii2NlBWaHXG36QIljz0G5W4ATS8fy4J3JS2fsVfg4HE=)
                          2: NxR6rjQYDvK-6beKZqhb21Ma0h0.roa (hash: eDS+0w8Ojc9YalXnJemejPGahb1kTWYCKBq2prUt9qg=)
                          3: _BQI9-Z6Ir5h5KACcOfrToSjkeU.roa (hash: +8QwmWebGpDaCA9AoYcnSa24keLkeW7OwUobTrC8xMY=)
                          4: ytooMvIrVe1UKIoWb2AsvqDHusU.roa (hash: FNi924Rn+Q0YpiKfx0DUW4i6K1Um3nkEm9RbN6FN7Eg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CNedINdqndsHW5T58ABSqyGCdrc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:58:38:fb:34:bf:93:8f:bb:88:d0:c5:37:dd:c9:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08d79d20d76a9ddb075b94f9f00052ab218276b7
        Validity
            Not Before: Oct 19 12:01:04 2025 GMT
            Not After : Oct 20 12:01:04 2025 GMT
        Subject: CN=7d89bb7e9f98a499aef39ca76f84f9c8b91e2ff1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:7c:80:34:22:25:14:05:25:66:7f:06:f8:dc:
                    9e:7c:8a:52:75:b0:c5:cf:b8:53:49:58:b4:f2:bb:
                    0d:44:a6:e1:ec:6e:8b:e6:e6:5e:22:1a:96:50:ba:
                    c9:a7:53:b1:af:f8:7b:6a:e9:cd:0b:11:b9:99:e3:
                    3e:d1:5c:5c:3f:e0:15:84:32:54:a4:cb:0a:35:0a:
                    66:cf:d2:da:ae:3f:fb:12:c2:0f:de:f4:da:82:eb:
                    8c:1b:7f:a6:53:81:df:1e:33:36:1d:bd:92:3e:1f:
                    65:61:8b:68:92:52:28:0d:2e:10:80:95:58:2f:82:
                    97:79:94:ef:f2:34:1f:0d:42:71:f2:29:dd:27:fa:
                    e8:71:c6:f0:d8:3f:87:71:76:88:07:31:d3:55:91:
                    02:c5:4e:d4:6d:b3:02:03:07:ee:2c:67:7d:4a:6e:
                    f7:27:79:ec:fc:4a:51:cc:90:6a:56:7e:bd:e2:62:
                    1d:e7:72:c1:fa:37:67:c5:a2:36:c2:45:7b:a1:5f:
                    71:3f:95:b4:a7:d6:5d:f7:68:c2:22:37:cd:90:29:
                    52:3f:87:06:af:bc:4a:1b:02:7c:93:1e:2f:ca:34:
                    1c:eb:9f:de:9c:23:27:07:b8:cb:fc:db:23:16:9c:
                    bc:1e:18:9a:f5:ee:70:8b:7e:95:d3:98:55:f1:c4:
                    c7:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:89:BB:7E:9F:98:A4:99:AE:F3:9C:A7:6F:84:F9:C8:B9:1E:2F:F1
            X509v3 Authority Key Identifier:
                keyid:08:D7:9D:20:D7:6A:9D:DB:07:5B:94:F9:F0:00:52:AB:21:82:76:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNedINdqndsHW5T58ABSqyGCdrc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:3c:ac:e5:f0:75:1d:f9:48:28:a7:85:d8:0e:ae:a3:f4:3e:
         02:ba:c5:48:17:12:3b:25:36:74:96:8e:2a:7b:74:20:4f:81:
         49:13:85:11:83:54:ba:be:f6:0d:3b:f2:02:f6:08:3d:32:87:
         68:fa:a8:a6:e8:35:0f:f3:7a:20:32:bb:b2:c8:d3:2a:ef:2c:
         84:05:80:02:c8:99:95:65:3e:be:1e:2c:31:7c:38:4e:53:59:
         55:7a:5f:e2:13:da:c7:6e:59:a0:5a:5b:8d:61:fa:6d:f9:8f:
         f9:70:a9:2f:7b:70:be:00:77:6c:e1:ea:19:a7:71:20:da:59:
         83:85:8e:55:39:14:32:00:4e:6e:5d:a2:d5:52:21:46:94:6c:
         44:76:be:c2:d4:4d:74:b3:7d:b9:40:dd:b9:7e:3a:24:09:e5:
         de:09:0b:c2:9e:30:c6:02:ce:0a:a9:8e:94:31:04:71:4c:b8:
         89:8f:c1:8a:3a:8f:53:4d:8c:02:a3:6a:c7:08:c8:74:cc:32:
         ca:5b:dd:48:07:ec:eb:5e:aa:20:1a:c0:96:90:41:d1:f7:4f:
         8b:fe:15:08:91:1d:e8:57:58:35:c2:79:e7:68:20:a4:cf:5c:
         a3:4a:03:62:dd:b6:6e:53:52:e0:ea:dc:7a:8c:69:54:4e:a3:
         9c:f0:ab:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:44:49 2025 by rpki-client