Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/d2233c-a741-4bd9-b6db-7ed998ddb85a/1/nmw2D-XITxlWHHrpu89PnPpHi08.mft
File:                     nmw2D-XITxlWHHrpu89PnPpHi08.mft (raw, json)
Hash identifier:          txusF3vqj8eQQYHSC/NQlhECHXy8u7NF2kr5PVRKOlg=
Subject key identifier:   D5:11:B4:77:1E:91:99:6D:C1:8F:49:8A:A2:B5:37:02:D3:86:68:C6
Authority key identifier: 9E:6C:36:0F:E5:C8:4F:19:56:1C:7A:E9:BB:CF:4F:9C:FA:47:8B:4F
Certificate issuer:       /CN=9e6c360fe5c84f19561c7ae9bbcf4f9cfa478b4f
Certificate serial:       0199FB45E537984CB836744EC690F24C6E4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nmw2D-XITxlWHHrpu89PnPpHi08.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/d2233c-a741-4bd9-b6db-7ed998ddb85a/1/nmw2D-XITxlWHHrpu89PnPpHi08.mft
Manifest number:          0999
Signing time:             Sun 19 Oct 2025 07:01:25 +0000
Manifest this update:     Sun 19 Oct 2025 07:01:25 +0000
Manifest next update:     Mon 20 Oct 2025 07:01:25 +0000
Files and hashes:         1: nmw2D-XITxlWHHrpu89PnPpHi08.crl (hash: MNrrG26q6SBE2mKlxe3G3HR0EShf3GmUaDRNWNehypI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/d2233c-a741-4bd9-b6db-7ed998ddb85a/1/nmw2D-XITxlWHHrpu89PnPpHi08.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/d2233c-a741-4bd9-b6db-7ed998ddb85a/1/nmw2D-XITxlWHHrpu89PnPpHi08.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nmw2D-XITxlWHHrpu89PnPpHi08.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:45:e5:37:98:4c:b8:36:74:4e:c6:90:f2:4c:6e:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e6c360fe5c84f19561c7ae9bbcf4f9cfa478b4f
        Validity
            Not Before: Oct 19 07:01:25 2025 GMT
            Not After : Oct 20 07:01:25 2025 GMT
        Subject: CN=d511b4771e91996dc18f498aa2b53702d38668c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:97:fe:84:6e:3a:a3:81:9a:ee:7e:bd:d8:6c:
                    f9:6d:66:51:db:f7:48:fd:0f:49:5f:38:bf:1e:c2:
                    c3:53:e7:34:1f:02:ea:da:61:ac:da:7f:bb:f5:75:
                    39:8e:4e:f0:07:b2:94:0d:5c:ca:d7:f9:ab:ed:a2:
                    57:ac:a3:08:50:cf:05:4d:c0:81:65:6e:75:d3:af:
                    58:84:3c:8e:17:52:91:2a:d9:32:4d:fb:e5:67:81:
                    ad:02:5c:e0:c0:46:fc:27:5f:07:70:07:b6:d6:50:
                    fb:06:28:2e:58:8c:34:1f:ce:47:df:9a:8f:71:73:
                    46:dc:15:17:83:a8:b2:05:7d:bb:61:66:49:4f:4d:
                    e4:cf:ad:c5:f3:91:22:70:20:39:91:88:a1:fd:7f:
                    5a:36:e3:cf:a5:80:e1:00:07:8d:5f:4f:fd:fa:c6:
                    ce:5f:57:3e:e8:8e:1c:33:be:c7:24:c1:96:dc:f6:
                    74:fd:3c:18:05:69:3c:06:4d:e5:01:9a:7c:90:27:
                    11:8e:99:a3:73:53:85:2b:7e:5c:0d:18:30:68:b6:
                    b8:46:17:7f:4d:43:45:71:58:36:5a:62:77:53:fb:
                    2a:7e:01:76:17:6a:93:ba:63:c2:58:13:90:6b:1d:
                    cf:79:ec:3f:85:56:9e:34:34:c6:a1:00:ca:5b:f2:
                    e4:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:11:B4:77:1E:91:99:6D:C1:8F:49:8A:A2:B5:37:02:D3:86:68:C6
            X509v3 Authority Key Identifier:
                keyid:9E:6C:36:0F:E5:C8:4F:19:56:1C:7A:E9:BB:CF:4F:9C:FA:47:8B:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nmw2D-XITxlWHHrpu89PnPpHi08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/d2233c-a741-4bd9-b6db-7ed998ddb85a/1/nmw2D-XITxlWHHrpu89PnPpHi08.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/d2233c-a741-4bd9-b6db-7ed998ddb85a/1/nmw2D-XITxlWHHrpu89PnPpHi08.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:fc:0e:92:2b:fb:fb:ca:03:73:4f:d5:21:b3:99:d3:13:15:
         3b:75:c8:38:48:38:6c:49:50:78:03:76:56:5d:90:10:be:6b:
         41:a1:b8:a8:cf:4f:e1:5d:5a:15:2b:21:48:04:ae:9e:28:01:
         35:ec:7d:6c:69:2c:24:0e:45:22:9d:c8:77:73:8e:09:56:70:
         c2:9f:33:d7:bf:b3:a9:d7:62:37:d5:64:0d:24:ba:04:19:d4:
         27:f5:23:a6:de:a0:3a:c1:6e:a7:94:34:b3:a3:0a:01:97:ae:
         9d:6a:d4:3a:31:69:40:5d:02:dc:01:86:e4:75:0f:2e:74:13:
         80:4c:86:20:5d:1c:a3:28:c1:82:a4:7d:75:98:00:8b:c8:e7:
         25:ed:65:ba:f8:1e:f4:b5:fd:e7:30:3c:40:f2:2c:47:33:5b:
         58:cb:04:80:13:b5:19:db:71:6a:90:ec:ee:fd:39:88:f1:a5:
         30:46:76:15:32:6d:ea:38:05:b7:c2:a6:fb:de:e5:99:e3:10:
         ed:ab:11:1d:79:d4:bb:cd:c7:56:ff:61:4c:0f:44:ca:9a:b4:
         fe:1e:eb:43:75:06:e0:19:89:ea:86:35:2e:31:8f:14:b3:e4:
         ae:12:b4:20:7a:f3:b3:83:9e:d1:d4:79:9b:46:cd:d3:be:50:
         b9:78:2f:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:07:46 2025 by rpki-client