Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/2a942a-f1bf-43e2-b92a-1dec40584806/1/NpHSlQFF3OrADAyk61NtkoZ7ONM.mft
File:                     NpHSlQFF3OrADAyk61NtkoZ7ONM.mft (raw, json)
Hash identifier:          8+cDdP9k+M8cft2dhUIDRfNSksOizECJxax7QQv/jHY=
Subject key identifier:   6F:48:41:6C:C9:BE:0A:1E:EC:6B:60:A1:16:BA:32:A3:C4:A3:21:5E
Authority key identifier: 36:91:D2:95:01:45:DC:EA:C0:0C:0C:A4:EB:53:6D:92:86:7B:38:D3
Certificate issuer:       /CN=3691d2950145dceac00c0ca4eb536d92867b38d3
Certificate serial:       019A00A303A0BCC383795CF8181CDAA9AE23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NpHSlQFF3OrADAyk61NtkoZ7ONM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/2a942a-f1bf-43e2-b92a-1dec40584806/1/NpHSlQFF3OrADAyk61NtkoZ7ONM.mft
Manifest number:          0D32
Signing time:             Mon 20 Oct 2025 08:01:14 +0000
Manifest this update:     Mon 20 Oct 2025 08:01:14 +0000
Manifest next update:     Tue 21 Oct 2025 08:01:14 +0000
Files and hashes:         1: AYNfqVlSCZxSkottsPIfKriDdHo.roa (hash: DR+WljYSnHEBz/1Nc0C8V29PSzaZP+WZg97TUOW5Zds=)
                          2: I7WvLIen2Qt15jt5djzF4qVwAeA.roa (hash: TDT2LdFRYTW16jzLI/jmwBH74PERZ5uRk6SAxtSvBQc=)
                          3: KX4BdF1jeIPrlBaQXcm4-FxDbVI.roa (hash: Tzk0TQLXuHX7Z8zB6m4PRwPBrghVQJ9zPu5wXgONfUs=)
                          4: Ma-ZL87NKbXOh3PKteMYs4_0CwA.roa (hash: 8ACKMnvKrVu9alfiMw6lXVKm3qwxGI4mZvc+z4si/8c=)
                          5: NpHSlQFF3OrADAyk61NtkoZ7ONM.crl (hash: sjRiKwRcDCBtV7ivHahHGd9Y/C+TU+m5YmDLt9YMwG8=)
                          6: ZdlemGQCA8jrtuYIR9ZFtWke_wc.roa (hash: yL1F1JtC6s6D+a5TG0GVaaYEiJsHRH7GC/1uOa8xe0w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/2a942a-f1bf-43e2-b92a-1dec40584806/1/NpHSlQFF3OrADAyk61NtkoZ7ONM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/2a942a-f1bf-43e2-b92a-1dec40584806/1/NpHSlQFF3OrADAyk61NtkoZ7ONM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NpHSlQFF3OrADAyk61NtkoZ7ONM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 08:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:00:a3:03:a0:bc:c3:83:79:5c:f8:18:1c:da:a9:ae:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3691d2950145dceac00c0ca4eb536d92867b38d3
        Validity
            Not Before: Oct 20 08:01:14 2025 GMT
            Not After : Oct 21 08:01:14 2025 GMT
        Subject: CN=6f48416cc9be0a1eec6b60a116ba32a3c4a3215e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:bf:cc:6c:0a:04:00:e0:c0:af:b6:b3:61:67:
                    ee:13:ea:a6:fd:54:bd:e1:df:04:a2:89:18:05:6b:
                    d8:4c:2a:74:44:6b:d7:25:8a:09:54:c8:56:17:8d:
                    cf:52:df:04:ea:53:73:57:31:b0:9d:69:7c:5b:57:
                    a1:6d:3f:ba:85:b9:32:c8:25:7d:ab:4b:3b:4b:66:
                    98:ae:a5:ae:07:21:e5:5b:f1:8b:94:00:e6:b0:be:
                    21:61:b1:40:fd:18:ce:d5:69:cb:d9:58:7e:64:27:
                    b7:81:7f:85:c2:3c:7a:e9:3d:94:2f:a8:48:05:dd:
                    be:2e:72:1d:15:96:2a:27:bc:2b:93:73:eb:d8:7a:
                    0d:91:a6:58:8c:8a:f2:cd:5b:4c:29:8a:f5:50:4e:
                    25:44:d7:03:86:63:32:f5:c0:a6:08:11:fe:e8:d6:
                    a8:78:53:9c:94:10:05:b9:55:d7:0e:cc:70:57:1d:
                    36:f6:da:7c:9b:62:6b:8d:fb:9b:b5:60:9d:6b:08:
                    cb:e3:34:b8:ee:34:45:58:2c:a6:70:15:f0:ef:08:
                    7d:6f:6f:76:27:8a:34:35:e2:06:c3:5a:b4:0b:35:
                    9f:f7:ac:fa:b6:2d:99:9d:e7:7c:eb:15:f8:e2:1e:
                    75:38:17:e3:f9:75:70:42:65:67:4f:5f:cf:6f:9d:
                    9a:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:48:41:6C:C9:BE:0A:1E:EC:6B:60:A1:16:BA:32:A3:C4:A3:21:5E
            X509v3 Authority Key Identifier:
                keyid:36:91:D2:95:01:45:DC:EA:C0:0C:0C:A4:EB:53:6D:92:86:7B:38:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpHSlQFF3OrADAyk61NtkoZ7ONM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2a942a-f1bf-43e2-b92a-1dec40584806/1/NpHSlQFF3OrADAyk61NtkoZ7ONM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2a942a-f1bf-43e2-b92a-1dec40584806/1/NpHSlQFF3OrADAyk61NtkoZ7ONM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:a0:f0:4f:b8:ff:99:68:43:38:8c:db:7d:ba:73:f9:3c:f4:
         cb:6d:56:43:99:86:73:7f:7e:7b:e8:bd:f0:d8:79:90:5b:8d:
         23:09:2f:bc:72:96:4d:2a:89:c3:79:53:df:b2:b9:48:ab:db:
         51:6b:ec:83:61:8a:2a:50:fe:76:a0:f9:94:6b:b3:7a:27:67:
         68:0f:ad:2b:41:ce:83:fa:09:22:38:31:9e:46:d5:e9:d0:74:
         12:1c:8d:4a:5d:d7:ef:92:b6:06:1c:b4:0e:c7:58:ee:9f:7d:
         91:86:d0:ea:b2:31:2c:f8:e0:de:81:bf:2c:17:fd:b2:49:71:
         9c:bc:be:e6:90:bc:e7:14:e6:54:4d:cb:96:57:af:14:29:da:
         fc:bf:80:af:8c:b9:3e:27:41:c2:bd:d7:60:48:8c:9e:13:4c:
         5f:63:d0:d9:7a:0c:16:08:0c:d1:c3:36:04:b2:68:18:cf:80:
         03:c9:a4:bc:6b:92:44:66:f5:60:73:5a:80:b9:68:8c:2e:c6:
         9c:2c:bb:f4:49:2b:eb:fd:cc:0c:a7:7e:d9:bb:c4:03:04:13:
         bf:7e:79:2e:dc:ea:f3:d3:aa:f6:68:75:bc:40:5d:61:3a:20:
         a4:13:8b:e7:aa:4f:c8:4c:d4:75:43:ca:1c:6c:d8:df:d8:91:
         48:1c:dc:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:35:53 2025 by rpki-client