Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/NhrfV8jct7_TTprs2D42NC7Do8k.mft
File:                     NhrfV8jct7_TTprs2D42NC7Do8k.mft (raw, json)
Hash identifier:          09gNJoVM7HZH0krav94aahHz/N4aYEkMzdy7ydK3+Lo=
Subject key identifier:   7B:69:F8:DF:AD:E1:44:3D:6F:21:E8:38:2D:F8:FC:F3:16:64:AC:89
Authority key identifier: 36:1A:DF:57:C8:DC:B7:BF:D3:4E:9A:EC:D8:3E:36:34:2E:C3:A3:C9
Certificate issuer:       /CN=361adf57c8dcb7bfd34e9aecd83e36342ec3a3c9
Certificate serial:       0199FCC6B93894ED003F630B126FEE16390D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NhrfV8jct7_TTprs2D42NC7Do8k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/NhrfV8jct7_TTprs2D42NC7Do8k.mft
Manifest number:          149F
Signing time:             Sun 19 Oct 2025 14:01:45 +0000
Manifest this update:     Sun 19 Oct 2025 14:01:45 +0000
Manifest next update:     Mon 20 Oct 2025 14:01:45 +0000
Files and hashes:         1: 8GuN-54fOOWK-SbVRHbvHD1t258.roa (hash: +JAgmZYVHbTg/tn7L+SSKAVcpZBlqMe4rbmvvs3DmTY=)
                          2: KFmrVFMv5VvGN18H4jdGIeWGvn8.roa (hash: /z+1/Ei//uOKicmtTi2XHrdGdq2SuXHHljqI7g0rhfE=)
                          3: NhrfV8jct7_TTprs2D42NC7Do8k.crl (hash: 6wbNUcNL23gzFp+ndUy9MComVjrt1dbpJsQaQ1D6/ew=)
                          4: gaApv-P3VWnlKNagOLOw5elCXUg.roa (hash: uJOMrg9lvM87wMjmTs9ZCZY0pZU1l+jJJKNSBI4+HgI=)
                          5: mldZ02SgByZkxb9-hN-tKmR0o0s.roa (hash: DrkW1wHvYpTjqDlBZkGq/sAaUPB7borOxMsYKMVFock=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/NhrfV8jct7_TTprs2D42NC7Do8k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/NhrfV8jct7_TTprs2D42NC7Do8k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NhrfV8jct7_TTprs2D42NC7Do8k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:c6:b9:38:94:ed:00:3f:63:0b:12:6f:ee:16:39:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=361adf57c8dcb7bfd34e9aecd83e36342ec3a3c9
        Validity
            Not Before: Oct 19 14:01:45 2025 GMT
            Not After : Oct 20 14:01:45 2025 GMT
        Subject: CN=7b69f8dfade1443d6f21e8382df8fcf31664ac89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:30:25:1d:ab:3c:58:44:c6:6f:54:74:5c:65:
                    fe:b3:92:d2:54:b2:3f:91:3d:e9:d6:64:e1:d7:6a:
                    35:fb:aa:4d:3a:bc:35:db:e7:6b:e3:6a:7f:1f:90:
                    26:f0:b3:4b:35:37:09:1f:cf:18:50:1f:c4:e0:e0:
                    8d:f7:4e:c8:05:90:b1:f0:a9:34:c7:0c:3a:94:2a:
                    5e:90:a9:8b:90:d6:5e:e8:0a:9d:86:0b:94:d8:df:
                    02:ec:5a:72:38:95:a0:e5:39:02:52:b1:55:1b:72:
                    db:8b:b0:7c:69:48:fd:ed:9a:1f:ac:3e:11:a5:56:
                    e4:0d:43:82:9c:ab:63:68:5b:a1:3c:27:6d:53:a9:
                    a4:cc:16:f4:10:05:d9:5e:f6:65:57:74:4a:80:54:
                    db:1f:9c:b4:6e:d0:3a:e2:d8:f0:f6:a2:d1:2a:c9:
                    41:58:b4:05:44:cd:33:46:cd:30:32:49:b4:b3:5d:
                    72:a4:19:71:a7:2e:f1:d8:5d:16:29:4b:6f:11:64:
                    1f:ec:10:5f:bb:25:8f:f9:85:a4:02:e2:4f:2b:df:
                    11:ed:7a:95:9f:27:1e:d8:fd:8c:ca:aa:e5:40:1b:
                    c9:f4:0f:70:ef:33:c7:2b:fe:4f:87:5a:e9:fb:14:
                    dd:cb:f2:8e:27:41:51:2e:bc:19:6c:28:14:72:89:
                    f7:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:69:F8:DF:AD:E1:44:3D:6F:21:E8:38:2D:F8:FC:F3:16:64:AC:89
            X509v3 Authority Key Identifier:
                keyid:36:1A:DF:57:C8:DC:B7:BF:D3:4E:9A:EC:D8:3E:36:34:2E:C3:A3:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhrfV8jct7_TTprs2D42NC7Do8k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/NhrfV8jct7_TTprs2D42NC7Do8k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/NhrfV8jct7_TTprs2D42NC7Do8k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:56:50:f0:fe:2f:e8:e0:da:da:43:02:79:fb:d8:c9:02:94:
         a7:ca:f7:cc:b7:78:9d:41:1d:7b:de:02:45:38:74:dc:ee:58:
         1c:d6:d6:5e:45:48:3a:83:3d:a4:e8:42:d0:81:f1:26:8e:6a:
         d2:a3:1a:45:27:4d:bc:62:a4:53:86:fa:06:92:e3:88:16:a0:
         ef:1f:70:ee:2d:20:f0:2b:3d:6b:21:04:1c:99:d2:b8:1c:95:
         f1:5c:4e:0b:c7:72:cc:f8:77:f7:26:43:93:9e:7f:c8:09:a3:
         92:46:00:66:81:63:75:26:53:ba:19:1b:dc:af:cd:8c:43:62:
         a0:b9:72:da:77:bf:cd:1b:09:54:38:e8:c3:52:be:bb:10:71:
         35:5f:fe:54:f9:69:63:75:44:bb:9c:df:9b:9c:4e:8c:c9:b0:
         85:9a:b9:ad:f4:a8:3c:ee:e5:88:28:ad:8b:42:9a:eb:d3:07:
         b8:b5:2c:0b:4e:e5:a3:9d:c3:78:80:e4:06:54:05:f7:67:0c:
         ba:04:4d:b2:6c:f9:c5:d4:56:f0:66:39:db:cf:80:84:6e:98:
         b2:98:fb:e6:fb:03:b0:0e:6c:5f:4c:8f:7f:9a:51:57:b7:95:
         2c:8b:ba:c7:cc:3d:c0:90:55:7f:e9:02:3d:6a:39:fb:a7:1e:
         03:51:94:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xrk4lO0AP2MLEm/uFjkNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2MWFkZjU3YzhkY2I3YmZkMzRlOWFlY2Q4M2UzNjM0MmVj
M2EzYzkwHhcNMjUxMDE5MTQwMTQ1WhcNMjUxMDIwMTQwMTQ1WjAzMTEwLwYDVQQD
Eyg3YjY5ZjhkZmFkZTE0NDNkNmYyMWU4MzgyZGY4ZmNmMzE2NjRhYzg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjAlHas8WETGb1R0XGX+s5LSVLI/
kT3p1mTh12o1+6pNOrw12+dr42p/H5Am8LNLNTcJH88YUB/E4OCN907IBZCx8Kk0
xww6lCpekKmLkNZe6AqdhguU2N8C7FpyOJWg5TkCUrFVG3Lbi7B8aUj97ZofrD4R
pVbkDUOCnKtjaFuhPCdtU6mkzBb0EAXZXvZlV3RKgFTbH5y0btA64tjw9qLRKslB
WLQFRM0zRs0wMkm0s11ypBlxpy7x2F0WKUtvEWQf7BBfuyWP+YWkAuJPK98R7XqV
nyce2P2MyqrlQBvJ9A9w7zPHK/5Ph1rp+xTdy/KOJ0FRLrwZbCgUcon3qQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHtp+N+t4UQ9byHoOC34/PMWZKyJMB8GA1UdIwQY
MBaAFDYa31fI3Le/006a7Ng+NjQuw6PJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmhyZlY4amN0N19UVHByczJENDJOQzdEbzhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9lMGY4YzYtYWFkYy00YzMxLWI5MmIt
MWExODczOGI0NzQxLzEvTmhyZlY4amN0N19UVHByczJENDJOQzdEbzhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi9lMGY4YzYtYWFkYy00YzMxLWI5MmItMWExODczOGI0NzQx
LzEvTmhyZlY4amN0N19UVHByczJENDJOQzdEbzhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYlZQ8P4v
6ODa2kMCefvYyQKUp8r3zLd4nUEde94CRTh03O5YHNbWXkVIOoM9pOhC0IHxJo5q
0qMaRSdNvGKkU4b6BpLjiBag7x9w7i0g8Cs9ayEEHJnSuByV8VxOC8dyzPh39yZD
k55/yAmjkkYAZoFjdSZTuhkb3K/NjENioLly2ne/zRsJVDjow1K+uxBxNV/+VPlp
Y3VEu5zfm5xOjMmwhZq5rfSoPO7liCiti0Ka69MHuLUsC07lo53DeIDkBlQF92cM
ugRNsmz5xdRW8GY528+AhG6Yspj75vsDsA5sX0yPf5pRV7eVLIu6x8w9wJBVf+kC
PWo5+6ceA1GU2Q==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:47:50 2025 by rpki-client