Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/2d0e8f-cd8a-4d38-ac51-6f523f960073/1/nyhBEXAEkqsL4RDoIaG85z-ApWU.mft
File:                     nyhBEXAEkqsL4RDoIaG85z-ApWU.mft (raw, json)
Hash identifier:          UfjOcds7dvoL5fSEXS1w0FGfHT6mIblvNYRDeewTfn0=
Subject key identifier:   62:88:0B:58:4B:5D:6C:5C:BF:40:31:85:7E:62:AD:43:A3:2F:6A:0E
Authority key identifier: 9F:28:41:11:70:04:92:AB:0B:E1:10:E8:21:A1:BC:E7:3F:80:A5:65
Certificate issuer:       /CN=9f284111700492ab0be110e821a1bce73f80a565
Certificate serial:       0199FC8F3FCFB90A3FBD524C31DBB73AD560
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nyhBEXAEkqsL4RDoIaG85z-ApWU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/2d0e8f-cd8a-4d38-ac51-6f523f960073/1/nyhBEXAEkqsL4RDoIaG85z-ApWU.mft
Manifest number:          13C1
Signing time:             Sun 19 Oct 2025 13:01:10 +0000
Manifest this update:     Sun 19 Oct 2025 13:01:10 +0000
Manifest next update:     Mon 20 Oct 2025 13:01:10 +0000
Files and hashes:         1: T7vd5c8yN7dKoGTcsEPGaB0GoJI.roa (hash: RdeAevZDp8XmGqqAvK8gJZd85NjETWsjIIExe3sxUXY=)
                          2: nyhBEXAEkqsL4RDoIaG85z-ApWU.crl (hash: dsPCAHiU4WxfdpH5b+5iw7FlLsELPlwK2q6Efav8ixI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/2d0e8f-cd8a-4d38-ac51-6f523f960073/1/nyhBEXAEkqsL4RDoIaG85z-ApWU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/2d0e8f-cd8a-4d38-ac51-6f523f960073/1/nyhBEXAEkqsL4RDoIaG85z-ApWU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nyhBEXAEkqsL4RDoIaG85z-ApWU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:8f:3f:cf:b9:0a:3f:bd:52:4c:31:db:b7:3a:d5:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f284111700492ab0be110e821a1bce73f80a565
        Validity
            Not Before: Oct 19 13:01:10 2025 GMT
            Not After : Oct 20 13:01:10 2025 GMT
        Subject: CN=62880b584b5d6c5cbf4031857e62ad43a32f6a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:74:38:fd:0c:ea:d5:6d:02:9d:b4:47:e9:8e:
                    a0:a8:b4:9a:e1:27:5c:61:a2:77:81:55:63:fe:21:
                    3e:c2:9c:dd:8e:44:29:21:c8:74:97:90:aa:40:55:
                    ab:ab:d2:15:28:44:54:d3:f4:fd:d2:24:37:c9:95:
                    e9:d9:29:62:09:2c:27:c7:4e:3f:06:4a:ff:c0:2b:
                    25:07:db:44:f6:f8:a8:be:4b:d8:c5:c6:93:56:ec:
                    ec:0b:27:86:05:26:4c:5c:9a:cb:55:57:70:ad:41:
                    f7:0c:ae:32:b0:81:ae:c2:e6:f3:b2:c5:55:38:3f:
                    f8:55:9c:ba:c3:b8:3a:fe:1d:0e:66:78:ca:87:84:
                    11:4b:ae:09:f7:80:74:28:7c:83:2d:5b:74:ef:b5:
                    a9:d0:de:5a:98:2f:08:b3:35:bd:a0:7c:8c:fd:96:
                    6b:da:2c:50:a8:89:1a:1c:20:c2:62:f7:76:81:f1:
                    20:4c:90:47:01:83:c1:6a:db:6c:e5:f2:58:a7:2e:
                    25:23:0a:61:94:ce:8a:9d:27:9b:9e:8e:51:29:21:
                    a5:b5:98:c3:cf:52:c0:0c:ed:d8:07:2c:b1:35:33:
                    12:59:0c:3a:3e:db:91:3a:12:da:a6:59:8e:f0:ca:
                    11:a8:21:f6:84:d0:29:3d:ae:33:40:d8:86:09:30:
                    b4:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:88:0B:58:4B:5D:6C:5C:BF:40:31:85:7E:62:AD:43:A3:2F:6A:0E
            X509v3 Authority Key Identifier:
                keyid:9F:28:41:11:70:04:92:AB:0B:E1:10:E8:21:A1:BC:E7:3F:80:A5:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyhBEXAEkqsL4RDoIaG85z-ApWU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2d0e8f-cd8a-4d38-ac51-6f523f960073/1/nyhBEXAEkqsL4RDoIaG85z-ApWU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2d0e8f-cd8a-4d38-ac51-6f523f960073/1/nyhBEXAEkqsL4RDoIaG85z-ApWU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:b8:29:f3:7c:49:e7:e0:3d:ef:6f:06:12:fd:44:e0:54:05:
         59:72:30:2a:59:e0:4a:e7:01:89:d6:f9:b0:68:c2:93:4d:86:
         17:90:3d:af:bb:93:e1:80:0d:85:c5:89:8d:6b:c4:6c:b2:6b:
         d1:e5:b1:e9:bf:fc:0f:80:4a:7b:44:1a:66:15:8d:ef:64:0e:
         38:27:39:4d:fd:10:c0:9f:51:ee:1d:b3:be:b3:0d:d4:26:b7:
         c4:1c:4d:76:2a:dd:15:4f:76:a9:b9:03:1a:cf:de:4f:a6:5f:
         a1:11:78:2d:92:1a:df:2a:59:e8:7a:6d:14:5f:61:71:ce:91:
         58:75:c7:2e:e4:20:6b:96:a9:21:1d:81:af:16:fa:04:db:f7:
         15:55:e6:df:4e:c1:fd:37:f4:ab:32:1f:03:03:74:45:4c:51:
         d9:81:48:d3:30:01:94:8c:eb:3c:d0:7e:7d:9e:6d:3b:6f:a9:
         e2:d6:48:c2:f6:7d:91:2f:82:37:25:b3:f7:74:f9:24:8b:25:
         1c:4b:d7:43:28:df:5a:c7:1a:8c:c6:ad:4c:12:6e:7d:e9:15:
         a5:50:d9:39:32:e3:f3:e7:36:af:f8:d1:df:3b:d3:0e:1f:88:
         d3:b9:f5:68:76:c9:22:84:2e:d6:ba:cd:d5:97:6c:bc:99:f1:
         97:91:1f:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:14:34 2025 by rpki-client