Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/12dfdd-b06b-4937-b8e8-13817fdbec04/1/NyjynNN9d1zWSyJSBcODPD5E1mE.mft
File:                     NyjynNN9d1zWSyJSBcODPD5E1mE.mft (raw, json)
Hash identifier:          H0y20LAe4NlOwzc+C2DpdaCC5r4KhsfWMxnH0Fzklrg=
Subject key identifier:   C0:13:8E:2B:0A:31:0B:57:1B:E0:5A:DB:E8:27:C4:B2:59:CB:45:CF
Authority key identifier: 37:28:F2:9C:D3:7D:77:5C:D6:4B:22:52:05:C3:83:3C:3E:44:D6:61
Certificate issuer:       /CN=3728f29cd37d775cd64b225205c3833c3e44d661
Certificate serial:       0199FBEBF7D16DE34AF9F9D2001E62402D0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NyjynNN9d1zWSyJSBcODPD5E1mE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/12dfdd-b06b-4937-b8e8-13817fdbec04/1/NyjynNN9d1zWSyJSBcODPD5E1mE.mft
Manifest number:          0427
Signing time:             Sun 19 Oct 2025 10:02:49 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:49 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:49 +0000
Files and hashes:         1: NyjynNN9d1zWSyJSBcODPD5E1mE.crl (hash: Kxa8k7F2uGq31tGD4z8ofHGrTY6kXq4hI+jGppoPVr0=)
                          2: PYq1HAQzPx7M7fdPhklvX0GStbk.roa (hash: HQ1rnmgYkh6S7nDcm+R94ykQLYw/alLJJRY1NxJAQWs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/12dfdd-b06b-4937-b8e8-13817fdbec04/1/NyjynNN9d1zWSyJSBcODPD5E1mE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/12dfdd-b06b-4937-b8e8-13817fdbec04/1/NyjynNN9d1zWSyJSBcODPD5E1mE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NyjynNN9d1zWSyJSBcODPD5E1mE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:f7:d1:6d:e3:4a:f9:f9:d2:00:1e:62:40:2d:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3728f29cd37d775cd64b225205c3833c3e44d661
        Validity
            Not Before: Oct 19 10:02:49 2025 GMT
            Not After : Oct 20 10:02:49 2025 GMT
        Subject: CN=c0138e2b0a310b571be05adbe827c4b259cb45cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:c1:39:5e:1a:31:08:20:79:33:3a:e9:03:41:
                    d2:62:b2:38:47:97:74:55:bf:0e:48:c3:5d:6b:b0:
                    ed:53:bc:60:6d:00:3f:d5:07:65:6d:50:0d:97:28:
                    08:c8:73:76:ef:41:c0:14:4f:44:c2:8b:d7:10:a4:
                    2d:e2:aa:4e:29:d6:43:77:ab:b5:a6:40:ba:af:9c:
                    30:41:e4:33:99:a7:d0:e2:46:71:52:ce:6b:a5:65:
                    8c:b3:3d:01:a9:1d:fd:98:1a:67:69:62:af:a3:d5:
                    43:6c:c6:c1:4e:e4:51:03:a0:58:dd:d6:33:9f:b3:
                    70:7e:04:21:83:19:de:c9:e1:27:ab:a4:ef:7f:18:
                    c4:ba:b9:fc:bf:f5:ba:b8:8d:f8:17:d1:36:f8:5e:
                    d7:ad:4d:6e:46:26:19:74:70:b5:17:63:a5:58:33:
                    09:4b:46:85:e7:fd:8c:25:27:cc:52:10:ea:f8:2a:
                    62:8b:67:69:b1:1f:7d:23:68:17:74:79:76:5d:73:
                    43:5e:e7:bb:e7:cf:2b:99:af:f8:b4:02:0c:4a:0a:
                    b1:18:ee:e3:0d:95:26:63:e0:26:32:d8:fa:24:a4:
                    0f:2b:23:54:06:b5:64:8e:3b:09:02:5c:fe:14:4b:
                    7d:d4:58:2f:a0:20:e6:5e:bc:ec:61:fd:a7:1c:b6:
                    7f:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:13:8E:2B:0A:31:0B:57:1B:E0:5A:DB:E8:27:C4:B2:59:CB:45:CF
            X509v3 Authority Key Identifier:
                keyid:37:28:F2:9C:D3:7D:77:5C:D6:4B:22:52:05:C3:83:3C:3E:44:D6:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyjynNN9d1zWSyJSBcODPD5E1mE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/12dfdd-b06b-4937-b8e8-13817fdbec04/1/NyjynNN9d1zWSyJSBcODPD5E1mE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/12dfdd-b06b-4937-b8e8-13817fdbec04/1/NyjynNN9d1zWSyJSBcODPD5E1mE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:35:2e:fa:50:92:2a:e4:b0:20:d5:0d:12:6b:a1:6c:36:74:
         83:b4:e7:19:f0:f1:7f:9b:a3:10:56:08:79:c5:61:a3:06:94:
         43:f1:7e:9f:b3:99:49:63:68:aa:19:bf:fc:d9:e6:fe:68:03:
         56:16:0f:3e:6a:a9:59:21:b3:08:f6:7c:1c:3e:d4:37:05:65:
         8b:69:cc:80:f3:f3:ea:ad:02:b2:b1:98:d5:72:35:92:00:40:
         2e:35:33:4b:c6:d1:d1:9c:8f:3c:e8:cd:56:16:3a:3a:8f:b1:
         26:00:8f:b0:ac:40:6a:c5:e6:03:0a:a7:c5:73:9a:11:9f:b6:
         34:57:16:92:dd:ca:07:e0:70:64:4d:a7:f8:dd:0f:9a:41:d3:
         9c:17:be:b6:9a:89:7c:8e:76:44:97:0a:ec:13:d0:b5:32:b0:
         2e:9a:80:1a:51:9a:ca:2b:e0:67:d3:b1:99:5f:42:a2:4a:ca:
         a6:a5:09:a8:51:f7:c8:5d:8d:f9:0b:46:b1:1f:8b:84:b9:4e:
         fe:bb:c2:3b:b4:20:f1:b9:c2:69:b2:db:d2:db:5d:f7:ef:84:
         cf:bb:8b:10:60:69:d4:cf:da:a0:5c:6b:2a:6b:7f:ce:d1:6a:
         30:01:24:88:8e:f7:9f:49:9c:8b:35:db:71:79:f7:e3:40:df:
         91:c3:b4:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:18:22 2025 by rpki-client