Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/25e17b-824e-4e7d-b3e8-27b87bfbee7b/1/NDK6HG0LAr7-aMyUrp0t4xB6YEY.mft
File:                     NDK6HG0LAr7-aMyUrp0t4xB6YEY.mft (raw, json)
Hash identifier:          pldtfBNc437WWZu1vhKim+H8zAQR/dAlO7BNj8sBfdw=
Subject key identifier:   A5:A4:C2:9E:CE:12:D4:5A:EF:94:83:63:87:E6:31:CE:32:6C:54:0F
Authority key identifier: 34:32:BA:1C:6D:0B:02:BE:FE:68:CC:94:AE:9D:2D:E3:10:7A:60:46
Certificate issuer:       /CN=3432ba1c6d0b02befe68cc94ae9d2de3107a6046
Certificate serial:       0199FB7D1569F01CF0ADF869216AE00F4FC8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NDK6HG0LAr7-aMyUrp0t4xB6YEY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/25e17b-824e-4e7d-b3e8-27b87bfbee7b/1/NDK6HG0LAr7-aMyUrp0t4xB6YEY.mft
Manifest number:          16E5
Signing time:             Sun 19 Oct 2025 08:01:42 +0000
Manifest this update:     Sun 19 Oct 2025 08:01:42 +0000
Manifest next update:     Mon 20 Oct 2025 08:01:42 +0000
Files and hashes:         1: NDK6HG0LAr7-aMyUrp0t4xB6YEY.crl (hash: D4iIC+cvHIdtJMkpSL60tUOq5/4jSg/e0mB5ETY8UTM=)
                          2: aDRwFZp3Ye9nOga6oqU2-HxOi5Q.roa (hash: 55fN/khKAT7BHMTfK9zjOz/iWjkXrLDgvWhFUwURpbU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/25e17b-824e-4e7d-b3e8-27b87bfbee7b/1/NDK6HG0LAr7-aMyUrp0t4xB6YEY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/25e17b-824e-4e7d-b3e8-27b87bfbee7b/1/NDK6HG0LAr7-aMyUrp0t4xB6YEY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NDK6HG0LAr7-aMyUrp0t4xB6YEY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:7d:15:69:f0:1c:f0:ad:f8:69:21:6a:e0:0f:4f:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3432ba1c6d0b02befe68cc94ae9d2de3107a6046
        Validity
            Not Before: Oct 19 08:01:42 2025 GMT
            Not After : Oct 20 08:01:42 2025 GMT
        Subject: CN=a5a4c29ece12d45aef94836387e631ce326c540f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:28:75:15:3d:ab:e6:6b:a4:87:19:1f:e6:b2:
                    f2:25:1d:28:c3:a9:66:0c:9c:37:bf:01:a3:de:c2:
                    ba:92:13:a8:1e:4a:6d:ed:20:34:d3:1b:be:da:98:
                    77:a9:e6:db:3f:c5:19:3a:1b:3e:62:a5:81:21:23:
                    88:11:cb:f0:40:dd:c5:79:45:9c:25:6a:63:b0:89:
                    4d:fe:17:12:e7:e4:b2:b7:44:f7:a1:9f:4d:7b:21:
                    cb:72:99:ad:2b:97:ad:89:bd:c5:41:f7:dc:b6:a6:
                    f6:25:b2:54:8f:e8:00:07:8a:5f:af:22:88:74:07:
                    51:59:30:b0:f3:ae:04:ee:61:7e:19:b7:2a:b6:05:
                    d6:ad:f4:47:8f:27:8a:83:93:c4:57:32:21:49:c2:
                    da:d9:08:eb:62:f0:15:6c:f0:d0:63:31:9a:0e:d6:
                    87:93:1d:e6:87:ef:d4:0c:f8:ca:97:cd:19:a8:30:
                    9a:99:59:5e:f8:3e:9a:d7:f9:2b:ee:31:a0:6e:ed:
                    c0:f2:33:60:68:50:9c:6d:fc:32:82:a8:21:05:57:
                    d2:05:4f:ef:00:ea:8b:8b:ba:c1:ce:20:63:48:2a:
                    b3:33:df:2c:ec:51:5a:c2:86:c4:04:b5:9c:7d:03:
                    b2:05:5c:19:e0:ef:c6:4c:91:a3:ad:e7:03:2c:0a:
                    f2:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:A4:C2:9E:CE:12:D4:5A:EF:94:83:63:87:E6:31:CE:32:6C:54:0F
            X509v3 Authority Key Identifier:
                keyid:34:32:BA:1C:6D:0B:02:BE:FE:68:CC:94:AE:9D:2D:E3:10:7A:60:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NDK6HG0LAr7-aMyUrp0t4xB6YEY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/25e17b-824e-4e7d-b3e8-27b87bfbee7b/1/NDK6HG0LAr7-aMyUrp0t4xB6YEY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/25e17b-824e-4e7d-b3e8-27b87bfbee7b/1/NDK6HG0LAr7-aMyUrp0t4xB6YEY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:82:06:c5:63:cd:fd:d2:4d:79:99:16:c4:fb:a4:5c:5a:a4:
         c2:5e:cf:46:bb:8b:55:92:92:f9:b4:4a:f9:4b:72:f7:f9:ce:
         4a:5a:0a:ef:4e:83:cd:ab:70:b3:19:dd:28:74:ae:d1:3d:53:
         28:09:34:e7:09:d4:ee:5e:32:70:f7:ed:80:e0:83:4c:fa:21:
         85:8f:a9:85:63:c3:29:1b:5c:29:2d:59:51:de:70:df:76:0b:
         19:c4:82:b9:70:7a:5b:61:e2:0c:54:a0:ba:11:ce:34:ce:bf:
         ad:8e:cf:e8:a1:1a:00:81:0f:96:3f:31:e5:68:22:5e:80:1c:
         fe:64:4e:2d:dd:7c:ca:37:65:19:ae:ec:94:e3:40:9b:fa:1d:
         4c:9f:2b:46:95:f3:b0:fe:c4:4e:ac:dc:76:cc:0e:cf:93:f5:
         72:68:a7:a5:38:78:c7:30:11:d9:20:ab:1b:8a:06:ab:17:c2:
         4b:45:72:2a:4b:61:de:5c:bc:41:c7:9a:3f:b4:c0:4a:0f:53:
         04:94:97:87:2d:e8:ca:8e:71:e7:2b:f7:86:81:8f:68:56:26:
         aa:38:9f:d7:2a:dd:35:ec:ca:70:8f:97:09:8c:36:a5:18:76:
         fd:f6:7e:21:4d:f5:b4:85:10:f2:8f:46:66:81:e4:16:c7:ed:
         c6:e2:84:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:06:54 2025 by rpki-client