Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.mft
File:                     NpL-31nGDTJU43qcjs3hHJuhKCo.mft (raw, json)
Hash identifier:          MvDtauNzIP3OFMHiWNJD31OKxR5ZRsVvZbPcdFWwFkQ=
Subject key identifier:   B9:51:F5:39:DB:F9:4A:A5:34:87:36:CC:49:6F:AA:B6:51:20:72:D7
Authority key identifier: 36:92:FE:DF:59:C6:0D:32:54:E3:7A:9C:8E:CD:E1:1C:9B:A1:28:2A
Certificate issuer:       /CN=3692fedf59c60d3254e37a9c8ecde11c9ba1282a
Certificate serial:       0199FC8F7C3739C3443A1C5ABA287A5B1A43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.mft
Manifest number:          178D
Signing time:             Sun 19 Oct 2025 13:01:25 +0000
Manifest this update:     Sun 19 Oct 2025 13:01:25 +0000
Manifest next update:     Mon 20 Oct 2025 13:01:25 +0000
Files and hashes:         1: 1-GJhYiuUUrP8RhmBh0USv-VEBfA.roa (hash: yv0HSZPQLPjAOK0Qjg6MUOpe4+d1qLZAv2u1ddULbTs=)
                          2: 8zzToX2_MSbXjPU6GvHQQ_9Dvvk.roa (hash: wilJSEirQsqEx26ndpfgfkDVvj+zVkzSkCh5uXU9fHI=)
                          3: NpL-31nGDTJU43qcjs3hHJuhKCo.crl (hash: DoLYAHaquCOU/H+TGMe3mRhHSrcHeEZhl3MryuDr7f4=)
                          4: bHL_tTznnHPbHP4F0hJKIReYm6M.roa (hash: R72+H7qsqTY9GklcA/NGuJeZ8wkSyMWhn933bwOHpJE=)
                          5: q8AP7H93ZbNKPWz_Zh0y6fK8m7g.roa (hash: Jd2YHA+NTHYb6+qWLH1KGDGjnXW6xUSmZVAZe2REuGQ=)
                          6: rf6L0TwRlHBLPhVKaPDEKnbqT_w.roa (hash: AzTZWJBoZdwqFymIdorc82U7WjpDv54tYnTW1K3fl6o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:8f:7c:37:39:c3:44:3a:1c:5a:ba:28:7a:5b:1a:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3692fedf59c60d3254e37a9c8ecde11c9ba1282a
        Validity
            Not Before: Oct 19 13:01:25 2025 GMT
            Not After : Oct 20 13:01:25 2025 GMT
        Subject: CN=b951f539dbf94aa5348736cc496faab6512072d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:e9:f8:82:c1:64:61:57:4b:71:9d:1f:86:4a:
                    81:75:34:d8:69:a0:0c:68:f3:43:a0:76:5d:e4:df:
                    a8:5d:13:c2:a0:93:d7:44:17:d8:64:f8:df:6d:f1:
                    d9:c4:dd:93:3a:b5:4b:42:d0:9a:50:85:93:ba:36:
                    da:0f:da:ec:bc:ab:ff:8b:f1:14:a2:41:5d:53:19:
                    17:81:81:53:09:0c:89:3c:e0:e7:79:47:93:1d:3e:
                    72:4c:a7:19:3c:97:6e:ae:68:10:b1:9f:e5:2b:bd:
                    ff:1a:24:44:a3:60:22:a6:97:8a:75:54:d3:34:5d:
                    13:00:47:3a:21:aa:b8:54:a8:f3:52:d4:6f:5c:92:
                    45:0e:70:ab:2d:25:b7:56:e0:29:b2:07:40:66:50:
                    cd:af:75:f7:18:0f:78:5d:8c:52:52:93:8d:b0:83:
                    c1:3f:4a:af:ad:a6:23:11:3d:52:33:1f:91:f3:35:
                    9b:5b:d5:d8:f4:87:a1:80:f9:5d:16:83:80:78:82:
                    de:04:fc:4d:be:b3:58:48:3b:8d:b9:55:24:49:04:
                    4c:70:19:60:bb:a3:80:69:fd:51:2d:ec:c4:dd:a3:
                    c5:ad:e3:a1:6b:87:1c:d0:72:56:6e:83:da:77:ef:
                    37:6a:5d:32:01:a2:64:b4:f9:f6:31:bc:3a:a8:65:
                    cb:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:51:F5:39:DB:F9:4A:A5:34:87:36:CC:49:6F:AA:B6:51:20:72:D7
            X509v3 Authority Key Identifier:
                keyid:36:92:FE:DF:59:C6:0D:32:54:E3:7A:9C:8E:CD:E1:1C:9B:A1:28:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:d7:d7:f5:c8:ec:c6:d8:1b:1b:e7:8b:0b:24:51:78:df:5b:
         65:b4:02:85:46:5f:3a:b5:6e:d8:0f:33:77:9a:c3:8e:41:59:
         7a:48:fd:11:a6:2f:e5:2a:c1:eb:42:35:89:da:11:83:57:8d:
         63:a9:26:c1:79:6d:64:b7:41:47:ae:dd:64:b1:aa:39:fb:e8:
         7b:67:01:6a:5b:b7:4c:d9:91:9e:e1:46:42:58:e3:77:2c:da:
         4b:dd:9a:c8:86:d1:03:17:da:1c:3b:50:16:01:d3:2b:74:81:
         8d:30:ec:2c:33:c0:46:b3:32:14:48:6b:15:25:b5:31:c9:04:
         d7:6b:3d:95:2b:bd:5e:cc:c8:01:e3:ce:3e:8a:44:50:2d:70:
         5f:ac:48:07:9d:4c:c5:10:7c:ed:8b:d1:00:e3:56:d4:33:08:
         20:d1:83:53:b3:8b:6e:e8:47:14:e8:f6:9d:f0:c2:80:ab:ff:
         96:63:92:ee:9d:54:11:5e:2a:1f:2d:d6:7f:46:e4:5a:60:43:
         f8:a2:9e:d6:1b:f1:eb:e9:64:cc:88:21:7f:be:fc:8d:10:cb:
         e6:53:43:c4:56:52:f4:c3:38:a7:27:4e:ee:f1:d9:ac:ae:3b:
         62:8c:94:76:46:d4:8e:d7:11:79:64:b3:01:99:e4:5c:81:57:
         31:2f:66:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:25:57 2025 by rpki-client