Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/82af7c-8606-4f9b-a052-4f3bea9fb95c/1/NJYux3ZGK3bmOugVW7J7nYx-f94.mft
File:                     NJYux3ZGK3bmOugVW7J7nYx-f94.mft (raw, json)
Hash identifier:          h+yLS9qXLd6pgDWCOY9HBCXo00sDqijYQmOwTDhXXzI=
Subject key identifier:   D7:23:7F:50:7D:32:42:2E:7B:6F:51:E5:BF:DD:A2:7D:69:5A:6B:47
Authority key identifier: 34:96:2E:C7:76:46:2B:76:E6:3A:E8:15:5B:B2:7B:9D:8C:7E:7F:DE
Certificate issuer:       /CN=34962ec776462b76e63ae8155bb27b9d8c7e7fde
Certificate serial:       0199FC217CF259E20CA916D567BE68DAE894
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NJYux3ZGK3bmOugVW7J7nYx-f94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/82af7c-8606-4f9b-a052-4f3bea9fb95c/1/NJYux3ZGK3bmOugVW7J7nYx-f94.mft
Manifest number:          1051
Signing time:             Sun 19 Oct 2025 11:01:17 +0000
Manifest this update:     Sun 19 Oct 2025 11:01:17 +0000
Manifest next update:     Mon 20 Oct 2025 11:01:17 +0000
Files and hashes:         1: NJYux3ZGK3bmOugVW7J7nYx-f94.crl (hash: RVWaRNX7XznDATLOUJudKTbXza+Z1g8oRYi5at99Zck=)
                          2: raSmxoHnzmzGBzTkG0MLkl3VZgs.roa (hash: lXV0TrwdE+JtNBRnmGgOqwwu3Hr9XSo7ebZyvtagFuc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/82af7c-8606-4f9b-a052-4f3bea9fb95c/1/NJYux3ZGK3bmOugVW7J7nYx-f94.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/82af7c-8606-4f9b-a052-4f3bea9fb95c/1/NJYux3ZGK3bmOugVW7J7nYx-f94.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NJYux3ZGK3bmOugVW7J7nYx-f94.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:21:7c:f2:59:e2:0c:a9:16:d5:67:be:68:da:e8:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34962ec776462b76e63ae8155bb27b9d8c7e7fde
        Validity
            Not Before: Oct 19 11:01:17 2025 GMT
            Not After : Oct 20 11:01:17 2025 GMT
        Subject: CN=d7237f507d32422e7b6f51e5bfdda27d695a6b47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:96:85:99:07:f6:9b:2a:e2:fb:41:c5:db:1e:
                    fc:e5:a2:28:c5:72:e6:da:c6:e3:62:36:0c:f0:6e:
                    cc:fc:90:32:9d:9c:d5:36:ea:a2:9f:ce:69:c0:3a:
                    37:08:f8:42:5d:cb:38:80:86:4a:c1:6a:9f:34:2d:
                    21:d5:79:25:bb:93:ab:21:a2:c9:cd:f4:2f:5b:c4:
                    24:3f:f0:98:b5:11:d3:92:c0:91:bb:55:55:80:de:
                    31:9a:09:08:a3:93:6b:00:05:a7:80:df:a6:0c:95:
                    da:05:5c:22:cc:b5:ed:20:c0:2f:1e:61:1f:98:ff:
                    c8:f1:2c:41:6b:f9:eb:cb:5e:9c:ce:a3:dc:96:32:
                    32:4f:9a:ac:27:da:24:14:21:f7:a3:db:34:61:a9:
                    6c:bc:b1:89:eb:58:6b:df:3f:dc:fb:5d:e2:58:2b:
                    ea:8b:fe:bc:92:6a:d7:a2:86:e3:e1:07:9e:d9:a4:
                    a1:ab:8d:1b:87:ee:ad:8b:d2:8f:84:5e:35:3b:53:
                    56:98:49:fe:5a:99:d5:f4:52:27:3f:14:4e:aa:0c:
                    4e:19:61:14:37:8b:60:65:0b:20:43:e4:b4:ac:fb:
                    ad:db:5a:57:a3:29:c0:8d:6d:7e:f8:eb:a0:2e:75:
                    03:3e:de:28:cc:bc:6b:ba:f6:8b:23:c0:88:8d:c1:
                    48:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:23:7F:50:7D:32:42:2E:7B:6F:51:E5:BF:DD:A2:7D:69:5A:6B:47
            X509v3 Authority Key Identifier:
                keyid:34:96:2E:C7:76:46:2B:76:E6:3A:E8:15:5B:B2:7B:9D:8C:7E:7F:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJYux3ZGK3bmOugVW7J7nYx-f94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/82af7c-8606-4f9b-a052-4f3bea9fb95c/1/NJYux3ZGK3bmOugVW7J7nYx-f94.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/82af7c-8606-4f9b-a052-4f3bea9fb95c/1/NJYux3ZGK3bmOugVW7J7nYx-f94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:06:3d:1a:86:c9:0c:aa:d6:04:0e:fb:8d:16:fe:7d:ad:2a:
         3e:a9:f1:37:a6:81:33:5d:56:38:b9:c0:6b:d7:fd:cc:83:de:
         d2:f9:1d:99:c3:bd:b0:13:da:0f:66:9d:e8:08:95:e2:91:e4:
         7e:76:98:11:d5:ef:5e:cc:58:93:57:a3:39:15:b1:ee:87:41:
         35:a3:7e:a5:ea:4f:88:7c:45:f7:d5:24:0a:47:be:f0:40:e8:
         34:5b:5c:bf:27:26:e5:64:4a:70:7f:bc:bb:52:67:f0:df:c4:
         10:1a:2d:18:60:bb:ba:86:a0:ce:78:ff:fd:fc:30:10:8b:ec:
         f6:96:fe:de:9b:cb:8b:b0:b9:f6:94:8e:d3:a8:ff:6e:e5:7e:
         86:38:d6:1e:8b:35:a5:57:85:e2:63:a8:ab:bc:05:a6:23:9d:
         73:1b:77:f9:d4:6a:e3:ed:22:a6:35:cb:bb:b9:b0:db:86:f0:
         aa:4b:ca:7f:9d:ff:0e:01:49:ef:68:d7:a6:72:0f:5e:45:9e:
         dc:82:ce:47:2c:42:6d:f6:e3:d3:0c:f4:92:72:26:fc:74:96:
         be:e0:1a:5c:34:3b:40:11:51:dd:f2:26:e9:f0:6c:a2:c3:c2:
         53:9f:0a:14:a0:ee:85:10:26:c0:89:0f:c5:d7:47:3d:c6:b7:
         46:bd:9f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:37:07 2025 by rpki-client