Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.mft
File:                     nl1ITra0tWiaVEzwsTt--TJFfvE.mft (raw, json)
Hash identifier:          wXZ97FuT1DiGVPlLMiQzTv0ehBqSJUaWW50weKAZgKY=
Subject key identifier:   55:E7:10:CC:26:D5:37:1F:2B:74:95:33:22:14:C4:51:3A:10:CA:BE
Authority key identifier: 9E:5D:48:4E:B6:B4:B5:68:9A:54:4C:F0:B1:3B:7E:F9:32:45:7E:F1
Certificate issuer:       /CN=9e5d484eb6b4b5689a544cf0b13b7ef932457ef1
Certificate serial:       0199FAD86D3A0A2BFA6CF3171DAD7E023D09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nl1ITra0tWiaVEzwsTt--TJFfvE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.mft
Manifest number:          1597
Signing time:             Sun 19 Oct 2025 05:01:51 +0000
Manifest this update:     Sun 19 Oct 2025 05:01:51 +0000
Manifest next update:     Mon 20 Oct 2025 05:01:51 +0000
Files and hashes:         1: nl1ITra0tWiaVEzwsTt--TJFfvE.crl (hash: cPnlFnEGZZPzjZ6BxMZHBUo4XFT1ViVHJBzvY2FSKaE=)
                          2: z9Zyukoi2uOHQdEe-vCyq46DaFo.roa (hash: aTR5i5ZEuCcMlVNNZ8y9Ak4ulLNXmEOMB0JCISwIQQM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nl1ITra0tWiaVEzwsTt--TJFfvE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 05:01:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:d8:6d:3a:0a:2b:fa:6c:f3:17:1d:ad:7e:02:3d:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e5d484eb6b4b5689a544cf0b13b7ef932457ef1
        Validity
            Not Before: Oct 19 05:01:51 2025 GMT
            Not After : Oct 20 05:01:51 2025 GMT
        Subject: CN=55e710cc26d5371f2b7495332214c4513a10cabe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:dd:48:50:fe:88:cb:65:60:e6:32:d8:a6:d3:
                    17:fe:80:68:c6:ff:54:e0:bb:f4:3a:91:b5:d0:af:
                    84:3b:63:d3:1d:66:d7:15:18:63:98:6e:ce:3c:91:
                    10:76:de:de:7f:10:f0:fa:a4:0c:91:fb:67:e0:82:
                    14:4d:35:20:19:be:74:c4:2e:30:36:ff:97:c4:34:
                    58:ed:00:19:08:80:bd:83:ef:41:75:a9:f5:a6:0c:
                    e6:df:c7:b5:27:bd:cd:f4:36:1e:19:fc:06:94:bb:
                    0f:aa:a1:93:f4:67:32:34:91:59:5a:f6:8d:6c:81:
                    b6:ef:d6:5b:43:0c:b8:d3:25:31:8f:ef:5b:7b:d8:
                    71:e8:a4:5c:9b:e2:60:69:b1:52:96:c2:54:5d:4c:
                    c8:69:0a:09:38:c2:14:fb:36:6c:27:41:e3:a1:a3:
                    5d:f2:86:96:76:1a:27:ab:71:9c:f8:56:6d:18:9d:
                    f6:41:7d:1d:f2:26:75:b8:2d:89:37:10:c6:0a:42:
                    06:bc:fa:52:2b:9d:dd:50:d5:e5:7f:4d:7e:bd:47:
                    e0:9c:7a:b5:d3:9f:e6:6c:bf:66:82:3f:df:5c:6b:
                    f6:f9:4c:f1:8c:dc:5e:36:dc:20:a9:43:66:ff:e0:
                    ce:5d:09:52:e3:d6:1e:02:17:59:82:85:f4:c0:90:
                    70:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:E7:10:CC:26:D5:37:1F:2B:74:95:33:22:14:C4:51:3A:10:CA:BE
            X509v3 Authority Key Identifier:
                keyid:9E:5D:48:4E:B6:B4:B5:68:9A:54:4C:F0:B1:3B:7E:F9:32:45:7E:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nl1ITra0tWiaVEzwsTt--TJFfvE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:a0:62:6e:a4:70:1d:95:41:e3:f2:38:88:22:29:53:a0:5a:
         ee:91:06:16:d1:9b:49:61:08:61:06:db:6a:5d:6d:3d:49:04:
         c0:13:7d:16:76:85:31:1a:91:fd:9f:f9:a1:36:a6:8e:0d:54:
         36:52:3e:2f:50:a0:98:3e:da:b8:9e:62:78:80:67:43:c1:4d:
         13:81:68:5b:74:0d:dd:22:24:22:ab:00:37:0d:ef:ec:b5:d8:
         9a:66:1d:b9:86:25:58:ba:a6:19:91:8c:7f:eb:ae:4e:54:c9:
         3c:7a:27:bd:78:8b:68:b0:e8:98:ce:20:c4:1e:63:bf:87:f2:
         86:d4:25:91:14:5c:67:43:e1:f0:b4:67:48:ba:92:31:e8:13:
         f7:50:48:55:7a:0a:92:83:b7:40:83:4c:a1:5f:e6:20:fc:a3:
         06:f1:0b:07:43:46:e2:6e:fe:37:b8:c2:3f:f5:5b:e6:05:58:
         e6:3c:f6:14:81:f1:00:e6:1f:53:b8:73:1c:d5:54:33:c9:75:
         9a:25:cd:77:52:fd:9e:1a:90:12:d5:5f:57:3c:97:0b:38:bb:
         ec:e7:2e:61:03:0b:cc:a5:b6:14:1d:34:4c:c2:93:80:83:df:
         63:e9:95:3b:0b:25:fb:f0:ac:b9:69:5a:8e:17:2c:86:fc:37:
         74:3f:13:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:13:41 2025 by rpki-client