Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.mft
File:                     II-L-NASolzM7iEGgD1wZDIO0PA.mft (raw, json)
Hash identifier:          gnSmO7fIhYHAsvrSYj+fBo1DAV48QxHrJAXhOaW0g7I=
Subject key identifier:   A1:69:9C:66:0B:2F:D6:70:B2:73:E6:2A:65:FF:1D:5D:12:26:57:CE
Authority key identifier: 20:8F:8B:F8:D0:12:A2:5C:CC:EE:21:06:80:3D:70:64:32:0E:D0:F0
Certificate issuer:       /CN=208f8bf8d012a25cccee2106803d7064320ed0f0
Certificate serial:       0199FF59655349A24665938915F30B65612E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/II-L-NASolzM7iEGgD1wZDIO0PA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.mft
Manifest number:          1416
Signing time:             Mon 20 Oct 2025 02:01:12 +0000
Manifest this update:     Mon 20 Oct 2025 02:01:12 +0000
Manifest next update:     Tue 21 Oct 2025 02:01:12 +0000
Files and hashes:         1: GuKetr4Y6ZzvyNbBhedA4m5_pWY.roa (hash: hWzp0ZW056pYjYa7ameczkwCAFFjwLS39b94Y7ubxt8=)
                          2: II-L-NASolzM7iEGgD1wZDIO0PA.crl (hash: COAStSM70GR0TLWbVs+XfVEqyGjVCAwCF0//VTQiMPY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/II-L-NASolzM7iEGgD1wZDIO0PA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ff:59:65:53:49:a2:46:65:93:89:15:f3:0b:65:61:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208f8bf8d012a25cccee2106803d7064320ed0f0
        Validity
            Not Before: Oct 20 02:01:12 2025 GMT
            Not After : Oct 21 02:01:12 2025 GMT
        Subject: CN=a1699c660b2fd670b273e62a65ff1d5d122657ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:8a:e3:53:af:47:15:44:68:0b:cf:3e:e8:fa:
                    b8:56:c0:84:57:78:8c:73:0d:a9:44:6b:9b:fa:2f:
                    7b:98:5b:53:40:04:1e:60:3a:4d:1c:ab:9e:74:42:
                    a4:30:8a:17:83:68:7a:20:5e:10:7e:af:2c:aa:0c:
                    16:af:fc:ce:09:9e:d2:c4:6f:ad:ce:50:c6:39:9a:
                    4c:60:1a:ae:b3:a4:b1:8e:71:9e:9f:01:ce:0c:04:
                    b7:89:53:73:6d:03:04:ce:0d:cb:05:c4:83:37:c8:
                    2a:9d:ef:73:e6:ba:88:71:69:9c:33:80:2e:31:72:
                    a0:33:93:af:68:ed:ec:ad:fb:c9:c1:08:b4:ce:15:
                    23:3a:52:13:48:57:dd:bb:3b:5a:1c:ac:eb:29:1a:
                    1a:f6:76:0c:3a:e8:2e:94:88:ca:96:40:c2:74:26:
                    6e:be:77:2a:f3:73:c0:3f:7e:36:7b:3a:d4:1f:9e:
                    09:17:5a:9c:72:42:ff:d4:1b:dc:1c:62:fa:fb:40:
                    1f:70:09:88:30:78:51:33:71:6f:b2:5e:4b:99:4c:
                    a7:98:9a:f2:95:9a:be:7b:a5:68:7d:d0:57:07:e5:
                    80:90:0a:53:e3:cb:9c:d8:29:ab:ec:dd:f4:e1:17:
                    06:4f:ba:ca:e5:e4:df:54:1f:39:2c:c8:1f:e7:1d:
                    a3:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:69:9C:66:0B:2F:D6:70:B2:73:E6:2A:65:FF:1D:5D:12:26:57:CE
            X509v3 Authority Key Identifier:
                keyid:20:8F:8B:F8:D0:12:A2:5C:CC:EE:21:06:80:3D:70:64:32:0E:D0:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/II-L-NASolzM7iEGgD1wZDIO0PA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:65:dd:ea:1d:3d:d5:d7:76:19:08:dc:a5:10:1c:92:e4:4f:
         52:9e:ef:81:fe:eb:93:de:40:a7:6d:13:5d:a3:23:11:4f:44:
         3d:57:05:c4:8d:b7:31:92:ac:c1:16:ec:2e:c8:50:49:f4:fd:
         93:72:f4:44:43:22:1d:33:1e:5b:fe:a7:a7:fb:d9:f3:93:37:
         27:ae:7f:1a:f0:2f:45:5d:fa:45:41:a7:17:05:2a:73:d0:07:
         33:39:82:3a:94:40:68:a7:94:b6:85:84:13:ca:dc:87:05:f2:
         80:1f:db:80:9d:fb:28:e2:81:e8:9d:68:31:a9:fa:a9:4b:d2:
         c9:da:ce:30:de:36:75:1c:02:ef:f0:27:7a:55:df:72:e1:8a:
         0e:ae:3d:1d:eb:3c:e4:d6:55:15:3c:5b:0d:fd:af:18:fd:e9:
         c1:b1:e2:8d:84:8a:d8:38:3f:b9:28:a8:f3:1d:89:ec:2e:34:
         cd:69:f7:58:ca:77:fb:46:11:53:20:50:5f:c1:19:3a:0b:23:
         52:8a:52:67:25:47:ee:15:b3:f1:5c:fc:6d:a6:68:09:96:c0:
         b2:1d:f0:85:fa:d2:1d:79:e3:16:76:ac:3a:08:26:ff:76:bc:
         03:2e:bb:a3:97:8f:1c:46:9c:8a:51:a3:07:f9:a1:cd:ce:47:
         54:9c:e3:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:24:15 2025 by rpki-client