Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/825cce-0643-4b0b-94b8-b7273c8e3023/1/ndZC_U41WVtf1FikOjrKyLkTlc4.mft
File:                     ndZC_U41WVtf1FikOjrKyLkTlc4.mft (raw, json)
Hash identifier:          zNGRYt4NCKviB+x9gVEAUNEECFeMvaDzAK/eaEuymck=
Subject key identifier:   67:76:44:8A:5A:3A:2C:B7:58:D8:10:96:C5:A3:F7:00:4C:58:7F:CE
Authority key identifier: 9D:D6:42:FD:4E:35:59:5B:5F:D4:58:A4:3A:3A:CA:C8:B9:13:95:CE
Certificate issuer:       /CN=9dd642fd4e35595b5fd458a43a3acac8b91395ce
Certificate serial:       0199FB458122C930A52D759BFC64A37C4AD7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ndZC_U41WVtf1FikOjrKyLkTlc4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/825cce-0643-4b0b-94b8-b7273c8e3023/1/ndZC_U41WVtf1FikOjrKyLkTlc4.mft
Manifest number:          0C8C
Signing time:             Sun 19 Oct 2025 07:01:00 +0000
Manifest this update:     Sun 19 Oct 2025 07:01:00 +0000
Manifest next update:     Mon 20 Oct 2025 07:01:00 +0000
Files and hashes:         1: ECvfm0gD15erbdYEbJ2O8AxuCuo.roa (hash: GjjofPn0BcYPE+NfKTzkDKX8EBfUwYH0FkVVr77Ou74=)
                          2: ndZC_U41WVtf1FikOjrKyLkTlc4.crl (hash: Q82aeaHJMZeFd/0nWfbOdxU9WWQQCMtIPejPpBPMQVw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/825cce-0643-4b0b-94b8-b7273c8e3023/1/ndZC_U41WVtf1FikOjrKyLkTlc4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/825cce-0643-4b0b-94b8-b7273c8e3023/1/ndZC_U41WVtf1FikOjrKyLkTlc4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ndZC_U41WVtf1FikOjrKyLkTlc4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:45:81:22:c9:30:a5:2d:75:9b:fc:64:a3:7c:4a:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9dd642fd4e35595b5fd458a43a3acac8b91395ce
        Validity
            Not Before: Oct 19 07:01:00 2025 GMT
            Not After : Oct 20 07:01:00 2025 GMT
        Subject: CN=6776448a5a3a2cb758d81096c5a3f7004c587fce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:53:0a:93:19:aa:82:33:5f:f5:b8:df:26:74:
                    6e:9b:de:95:74:e6:54:44:aa:eb:60:63:b3:07:ed:
                    ff:f9:c5:bc:36:8e:fc:e5:5d:cf:12:67:77:02:65:
                    a5:01:93:09:2d:0a:cc:fe:03:ec:16:f3:af:9a:c3:
                    22:03:82:15:19:2d:1e:5b:2d:cc:98:6c:a0:a9:63:
                    ea:2d:93:13:43:e0:06:b3:d6:25:de:95:ce:bc:c9:
                    38:4c:39:97:6f:fa:3d:b1:1e:cf:2c:91:7b:64:3f:
                    59:97:4a:d0:b8:8d:a0:c0:3a:40:95:da:06:54:4b:
                    23:f9:0b:e9:19:cb:d5:d6:9d:31:dd:68:9e:ba:02:
                    9b:09:2e:2e:16:61:77:52:4f:e6:85:80:e9:ae:6b:
                    a2:fc:e6:b6:99:5f:da:d6:6a:4c:b6:d0:00:b5:ff:
                    df:ae:3a:61:0e:f0:8a:07:d6:69:a4:0e:1d:97:71:
                    ab:e2:c3:0f:23:07:e5:84:57:28:fa:f2:88:74:2f:
                    6f:31:19:3e:1b:cd:b2:a3:f9:1f:65:7c:74:ed:1c:
                    2f:cd:d3:40:92:f0:f4:33:30:91:b3:dc:d9:24:03:
                    f2:b9:db:b7:32:97:0c:7d:1e:a7:83:85:ac:6d:24:
                    36:bc:7b:3c:9d:2c:13:bc:a0:ac:7f:66:75:d4:79:
                    f1:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:76:44:8A:5A:3A:2C:B7:58:D8:10:96:C5:A3:F7:00:4C:58:7F:CE
            X509v3 Authority Key Identifier:
                keyid:9D:D6:42:FD:4E:35:59:5B:5F:D4:58:A4:3A:3A:CA:C8:B9:13:95:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ndZC_U41WVtf1FikOjrKyLkTlc4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/825cce-0643-4b0b-94b8-b7273c8e3023/1/ndZC_U41WVtf1FikOjrKyLkTlc4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/825cce-0643-4b0b-94b8-b7273c8e3023/1/ndZC_U41WVtf1FikOjrKyLkTlc4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:ef:42:2b:62:5f:e4:ec:55:b6:1b:4d:c0:42:49:f9:b9:4e:
         bc:85:0e:ac:b8:0e:28:a1:38:2a:31:42:b1:ab:da:14:af:36:
         66:41:27:73:a2:a6:cc:ed:26:03:4c:70:4d:3d:24:8e:19:92:
         28:7e:72:d0:bc:b9:66:25:ad:78:8b:96:35:f7:97:c6:98:8e:
         13:7a:ab:e4:7f:62:16:3c:a5:3d:3a:cb:dd:ed:b7:aa:00:62:
         51:b6:c2:70:23:33:cf:fd:e2:fc:a4:dd:64:0e:cc:be:33:cf:
         ce:16:ad:4c:a1:3f:73:ac:52:17:a7:f8:86:24:5d:77:c9:1e:
         b8:d0:05:af:f9:56:82:81:98:72:95:22:e8:ef:cd:98:61:9e:
         b1:2e:12:fe:53:4c:f4:09:4f:ff:e0:68:75:64:99:a3:2a:da:
         18:9e:41:6d:7b:d2:f1:74:28:e5:6f:c0:08:e4:9f:df:e5:98:
         66:22:7d:81:3b:ec:04:e7:06:47:b6:85:a4:2a:84:8b:35:b1:
         bf:31:49:b7:af:2e:c2:be:56:88:d4:ea:41:71:0e:64:88:eb:
         c3:0d:88:a4:bf:e6:f2:3e:38:c5:86:54:dd:ec:53:b5:40:51:
         f1:5e:0b:58:a9:5f:f0:af:fe:35:b1:16:92:4c:c6:15:70:0c:
         83:b4:78:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7RYEiyTClLXWb/GSjfErXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkZDY0MmZkNGUzNTU5NWI1ZmQ0NThhNDNhM2FjYWM4Yjkx
Mzk1Y2UwHhcNMjUxMDE5MDcwMTAwWhcNMjUxMDIwMDcwMTAwWjAzMTEwLwYDVQQD
Eyg2Nzc2NDQ4YTVhM2EyY2I3NThkODEwOTZjNWEzZjcwMDRjNTg3ZmNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVMKkxmqgjNf9bjfJnRum96VdOZU
RKrrYGOzB+3/+cW8No785V3PEmd3AmWlAZMJLQrM/gPsFvOvmsMiA4IVGS0eWy3M
mGygqWPqLZMTQ+AGs9Yl3pXOvMk4TDmXb/o9sR7PLJF7ZD9Zl0rQuI2gwDpAldoG
VEsj+QvpGcvV1p0x3WieugKbCS4uFmF3Uk/mhYDprmui/Oa2mV/a1mpMttAAtf/f
rjphDvCKB9ZppA4dl3Gr4sMPIwflhFco+vKIdC9vMRk+G82yo/kfZXx07RwvzdNA
kvD0MzCRs9zZJAPyudu3MpcMfR6ng4WsbSQ2vHs8nSwTvKCsf2Z11HnxIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGd2RIpaOiy3WNgQlsWj9wBMWH/OMB8GA1UdIwQY
MBaAFJ3WQv1ONVlbX9RYpDo6ysi5E5XOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmRaQ19VNDFXVnRmMUZpa09qckt5TGtUbGM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS84MjVjY2UtMDY0My00YjBiLTk0Yjgt
YjcyNzNjOGUzMDIzLzEvbmRaQ19VNDFXVnRmMUZpa09qckt5TGtUbGM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS84MjVjY2UtMDY0My00YjBiLTk0YjgtYjcyNzNjOGUzMDIz
LzEvbmRaQ19VNDFXVnRmMUZpa09qckt5TGtUbGM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp+9CK2Jf
5OxVthtNwEJJ+blOvIUOrLgOKKE4KjFCsavaFK82ZkEnc6KmzO0mA0xwTT0kjhmS
KH5y0Ly5ZiWteIuWNfeXxpiOE3qr5H9iFjylPTrL3e23qgBiUbbCcCMzz/3i/KTd
ZA7MvjPPzhatTKE/c6xSF6f4hiRdd8keuNAFr/lWgoGYcpUi6O/NmGGesS4S/lNM
9AlP/+BodWSZoyraGJ5BbXvS8XQo5W/ACOSf3+WYZiJ9gTvsBOcGR7aFpCqEizWx
vzFJt68uwr5WiNTqQXEOZIjrww2IpL/m8j44xYZU3exTtUBR8V4LWKlf8K/+NbEW
kkzGFXAMg7R4Xw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:15:23 2025 by rpki-client