Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/NgAOvu0kK5VkrclUhTI7lr1vXAI.mft
File:                     NgAOvu0kK5VkrclUhTI7lr1vXAI.mft (raw, json)
Hash identifier:          4VqC03YEl2nT0gVbEGoDjgInFv4+hhKC9fIm7jIahwU=
Subject key identifier:   9B:28:82:61:2C:AD:5E:D6:84:D8:1F:6A:29:AA:A1:64:26:05:07:44
Authority key identifier: 36:00:0E:BE:ED:24:2B:95:64:AD:C9:54:85:32:3B:96:BD:6F:5C:02
Certificate issuer:       /CN=36000ebeed242b9564adc95485323b96bd6f5c02
Certificate serial:       0199FC58DF8A3E55CF0D739457B961687BAE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NgAOvu0kK5VkrclUhTI7lr1vXAI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/NgAOvu0kK5VkrclUhTI7lr1vXAI.mft
Manifest number:          1250
Signing time:             Sun 19 Oct 2025 12:01:46 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:46 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:46 +0000
Files and hashes:         1: NgAOvu0kK5VkrclUhTI7lr1vXAI.crl (hash: QXYowloTxG9L1ZWpzlaqBuCUeCXZihCirN7XC0WAWmI=)
                          2: PcqW_01nYr_g65r_pcHJ33ZMGuA.roa (hash: ldAGcbaFd4WhyCTSLv1tpLkIbH81eRDfpjEnAMP8NwM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/NgAOvu0kK5VkrclUhTI7lr1vXAI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/NgAOvu0kK5VkrclUhTI7lr1vXAI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NgAOvu0kK5VkrclUhTI7lr1vXAI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:58:df:8a:3e:55:cf:0d:73:94:57:b9:61:68:7b:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36000ebeed242b9564adc95485323b96bd6f5c02
        Validity
            Not Before: Oct 19 12:01:46 2025 GMT
            Not After : Oct 20 12:01:46 2025 GMT
        Subject: CN=9b2882612cad5ed684d81f6a29aaa16426050744
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:9d:d2:3d:96:f2:51:63:ed:79:63:a9:8f:bd:
                    4f:33:41:15:21:1f:b3:ba:70:c4:c9:66:26:9d:bc:
                    3d:2a:1f:90:41:29:dc:71:c2:e5:8a:23:eb:64:d6:
                    64:2e:52:07:51:f8:54:10:b4:47:2e:d9:6e:20:30:
                    c1:63:a0:e3:6d:5c:d3:f2:31:1a:31:37:7e:ed:53:
                    e8:95:ba:1f:5e:ce:3d:20:cd:75:b6:d5:d8:af:22:
                    ce:92:68:50:9f:2a:d8:37:ac:64:58:78:38:8e:1b:
                    ef:5c:1e:0b:66:4f:79:76:03:9d:e4:04:3e:c7:39:
                    bf:d0:cb:6c:f9:96:8d:d9:f5:f3:5f:62:5d:da:78:
                    9f:6d:00:db:d9:f9:18:e5:18:39:a4:65:30:dd:b9:
                    23:5e:82:8c:09:cd:11:82:ce:0f:97:d2:0a:89:b9:
                    d0:81:92:c5:af:87:38:f0:91:88:f6:15:af:c2:69:
                    be:14:6d:aa:3c:77:6e:27:7b:c3:dc:e0:b9:8b:03:
                    c0:44:6b:6e:60:eb:1b:0c:43:4c:66:ae:a5:58:54:
                    a3:e3:48:e9:6d:d1:7a:55:06:4b:56:09:ae:8f:9c:
                    b7:59:0d:b7:da:8d:a6:54:d0:be:4b:af:d9:9b:8c:
                    32:a1:85:97:56:a5:b0:a2:de:ac:4a:ab:14:f1:ea:
                    fd:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:28:82:61:2C:AD:5E:D6:84:D8:1F:6A:29:AA:A1:64:26:05:07:44
            X509v3 Authority Key Identifier:
                keyid:36:00:0E:BE:ED:24:2B:95:64:AD:C9:54:85:32:3B:96:BD:6F:5C:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NgAOvu0kK5VkrclUhTI7lr1vXAI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/NgAOvu0kK5VkrclUhTI7lr1vXAI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b77e1a-663a-445b-8e61-370150b669e4/1/NgAOvu0kK5VkrclUhTI7lr1vXAI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:e5:71:53:2f:09:8e:18:cd:9e:61:c5:8d:0a:b8:7f:5b:3a:
         05:9f:bd:59:c5:f9:ed:82:b0:c9:d7:53:aa:13:46:09:fd:fb:
         bb:5e:35:d0:4a:10:9a:43:67:1b:78:bc:a6:53:f1:ab:87:51:
         a2:dd:b5:e5:04:9a:06:28:d2:c8:ae:f6:e2:55:44:05:29:9d:
         74:2a:fc:0b:15:7b:72:ec:0e:83:a3:f6:61:f7:5f:0a:7d:64:
         09:90:57:b0:51:2c:02:0d:7c:0c:ef:2f:25:eb:43:f9:8e:09:
         8e:5e:db:f0:09:0a:dd:77:98:f3:f0:42:86:7d:da:cb:e8:a3:
         c2:4b:c3:8f:89:ba:75:33:ed:5a:c1:80:0f:ca:d0:f8:11:89:
         91:39:5b:0d:63:3f:18:7c:a0:bb:5b:a1:27:9e:40:43:b3:63:
         d8:c4:28:82:1a:8b:c0:df:9b:88:ce:58:ee:43:38:78:3a:e9:
         d1:5c:94:6c:f5:b3:5b:86:89:db:0a:c2:b3:29:f0:07:c4:e4:
         a2:01:32:bd:6c:18:2d:90:85:a6:8f:3c:33:ee:17:90:26:8d:
         da:25:c8:59:05:60:d6:f9:58:3d:49:a7:98:6d:98:d8:aa:44:
         42:88:21:b0:04:14:c4:11:91:d1:6f:f8:3e:a6:f9:06:3e:71:
         a0:af:4c:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:18:59 2025 by rpki-client