Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/2155f1-976a-4f7e-95a4-076e1d77aebe/1/N2AlOewyw5Gf8cvJWU3cq4FWdMU.mft
File:                     N2AlOewyw5Gf8cvJWU3cq4FWdMU.mft (raw, json)
Hash identifier:          5pCSzQkY3oOnEJp90csUIVUOsH/VaS4MFzbMu7VWaF0=
Subject key identifier:   82:65:BE:93:E8:13:35:DF:E0:80:47:09:58:5C:4A:D2:5C:21:F1:0C
Authority key identifier: 37:60:25:39:EC:32:C3:91:9F:F1:CB:C9:59:4D:DC:AB:81:56:74:C5
Certificate issuer:       /CN=37602539ec32c3919ff1cbc9594ddcab815674c5
Certificate serial:       0199FB7CE3B8F396964C6EEC4D8BAFDA2C76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N2AlOewyw5Gf8cvJWU3cq4FWdMU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/2155f1-976a-4f7e-95a4-076e1d77aebe/1/N2AlOewyw5Gf8cvJWU3cq4FWdMU.mft
Manifest number:          0D98
Signing time:             Sun 19 Oct 2025 08:01:29 +0000
Manifest this update:     Sun 19 Oct 2025 08:01:29 +0000
Manifest next update:     Mon 20 Oct 2025 08:01:29 +0000
Files and hashes:         1: 8OUuy6RxMKAA3VbPAT05z8x14Y0.roa (hash: /S82CRuIWRkEgkIG58XNeFsI8Jv6K3dyodJP/54XncE=)
                          2: N2AlOewyw5Gf8cvJWU3cq4FWdMU.crl (hash: IlW8BIQCLxi2P+u6g7i8WjTVbTBweUNDtG0J2p1Z9zk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/2155f1-976a-4f7e-95a4-076e1d77aebe/1/N2AlOewyw5Gf8cvJWU3cq4FWdMU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/2155f1-976a-4f7e-95a4-076e1d77aebe/1/N2AlOewyw5Gf8cvJWU3cq4FWdMU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N2AlOewyw5Gf8cvJWU3cq4FWdMU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 08:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:7c:e3:b8:f3:96:96:4c:6e:ec:4d:8b:af:da:2c:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37602539ec32c3919ff1cbc9594ddcab815674c5
        Validity
            Not Before: Oct 19 08:01:29 2025 GMT
            Not After : Oct 20 08:01:29 2025 GMT
        Subject: CN=8265be93e81335dfe0804709585c4ad25c21f10c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:35:f8:e4:c4:1f:8d:b4:bd:66:b2:90:70:d0:
                    a1:13:ac:1f:cb:9b:49:55:15:8b:6b:ac:ca:44:45:
                    39:9c:3f:4c:f7:62:b2:78:d3:7c:06:b9:7b:58:f1:
                    1a:cc:20:0e:42:e0:48:1a:4e:65:a1:b5:50:16:4f:
                    93:ce:4a:0c:e0:19:01:ff:1c:9d:5b:0b:de:37:6d:
                    23:dc:2c:a2:62:76:2b:34:e6:04:ce:8c:53:5c:a6:
                    5c:27:fb:16:36:6d:a9:cb:a5:37:ca:bb:7b:4e:c3:
                    89:d5:d2:e3:c9:f8:d0:e1:69:cf:a2:3b:1c:7f:98:
                    b8:15:a6:2c:72:42:50:22:80:1b:01:1e:b1:78:0f:
                    37:aa:ed:38:fd:09:13:62:fa:d5:2a:00:7f:94:38:
                    8d:ed:e4:95:52:08:74:10:22:df:9b:33:0b:4f:3b:
                    e6:f6:b4:bf:48:ad:0c:27:cf:b9:51:09:d2:ce:cd:
                    8e:f0:b7:53:b5:d2:e6:c6:b1:ca:b5:64:fc:f1:f6:
                    94:a5:d4:1b:3c:c8:87:4f:df:34:bf:80:e7:86:2c:
                    64:87:f8:a5:63:bd:53:d4:8c:f8:19:77:25:5d:bb:
                    12:4a:2a:f9:6c:e4:c4:cc:42:0e:eb:e1:62:99:3c:
                    72:d2:49:96:0a:ad:76:67:e7:ea:f8:b9:34:d9:68:
                    6e:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:65:BE:93:E8:13:35:DF:E0:80:47:09:58:5C:4A:D2:5C:21:F1:0C
            X509v3 Authority Key Identifier:
                keyid:37:60:25:39:EC:32:C3:91:9F:F1:CB:C9:59:4D:DC:AB:81:56:74:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N2AlOewyw5Gf8cvJWU3cq4FWdMU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2155f1-976a-4f7e-95a4-076e1d77aebe/1/N2AlOewyw5Gf8cvJWU3cq4FWdMU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2155f1-976a-4f7e-95a4-076e1d77aebe/1/N2AlOewyw5Gf8cvJWU3cq4FWdMU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:32:d2:35:68:40:1e:5c:8b:04:61:fc:1b:63:6d:34:4e:50:
         7f:f0:c3:5c:3d:34:b7:5a:fb:e2:85:b9:66:8a:de:ac:4d:07:
         11:e1:d4:46:f2:77:f2:83:d2:87:c5:d4:a8:87:82:9e:6b:fd:
         9e:54:dd:48:29:69:fa:48:c8:90:0d:2d:4a:c6:2b:c9:20:43:
         8b:6c:b0:c2:5f:44:3e:4c:e8:e7:58:a3:1e:30:4e:10:a9:69:
         9d:4e:3e:9e:b3:c9:a1:d4:4c:66:ea:a6:98:4c:ea:38:5d:75:
         fa:03:dd:5f:12:fd:66:c9:51:7c:e0:24:c0:bb:c0:d1:fe:6c:
         e3:bb:36:1d:29:21:a6:9f:8c:e6:05:0b:b9:bb:92:2b:56:b1:
         4e:a2:f0:bd:df:65:41:d8:1d:4a:77:03:7a:3e:04:d1:fe:d1:
         b0:64:2d:31:05:ff:0b:02:85:7d:40:60:e3:6d:85:5a:9f:aa:
         61:07:73:b7:a0:5f:0b:2d:ac:57:66:08:dd:4e:71:f0:63:76:
         3e:9c:de:2a:56:29:d1:81:6c:ac:8d:40:39:ee:e1:cc:73:cf:
         c3:90:33:77:40:78:0e:22:20:01:5f:96:ab:0a:27:b6:c9:c2:
         aa:63:b7:f8:9a:9e:5a:c4:c4:e9:82:1d:5b:6f:b4:9f:78:97:
         f3:67:b9:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:56:18 2025 by rpki-client