Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/NsPEVldDrle9KuqaNjwrPD4lD3I.mft
File:                     NsPEVldDrle9KuqaNjwrPD4lD3I.mft (raw, json)
Hash identifier:          /NaemBSz9x3D5JRMRLEAd3tq66bC290cnx9dZB+6wvc=
Subject key identifier:   DF:BB:86:43:48:50:3F:97:48:FF:41:4C:84:5D:92:01:35:0B:42:54
Authority key identifier: 36:C3:C4:56:57:43:AE:57:BD:2A:EA:9A:36:3C:2B:3C:3E:25:0F:72
Certificate issuer:       /CN=36c3c4565743ae57bd2aea9a363c2b3c3e250f72
Certificate serial:       0199FB46241351F2D6A520E116124A4AFD11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NsPEVldDrle9KuqaNjwrPD4lD3I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/NsPEVldDrle9KuqaNjwrPD4lD3I.mft
Manifest number:          12E4
Signing time:             Sun 19 Oct 2025 07:01:41 +0000
Manifest this update:     Sun 19 Oct 2025 07:01:41 +0000
Manifest next update:     Mon 20 Oct 2025 07:01:41 +0000
Files and hashes:         1: IfdUdkM_5ScEBaPG7l3GiRIWFuU.roa (hash: R1YS3LmUUMRjG9wj9Vs3Bys5gjm8WufD0RLPEG4kcAw=)
                          2: NsPEVldDrle9KuqaNjwrPD4lD3I.crl (hash: cLwZ+7u6RaJ7AhhsWit/EETiW+MbgB/4DQ413CzBVQI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/NsPEVldDrle9KuqaNjwrPD4lD3I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/NsPEVldDrle9KuqaNjwrPD4lD3I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NsPEVldDrle9KuqaNjwrPD4lD3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:46:24:13:51:f2:d6:a5:20:e1:16:12:4a:4a:fd:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36c3c4565743ae57bd2aea9a363c2b3c3e250f72
        Validity
            Not Before: Oct 19 07:01:41 2025 GMT
            Not After : Oct 20 07:01:41 2025 GMT
        Subject: CN=dfbb864348503f9748ff414c845d9201350b4254
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:95:f7:59:a0:a0:92:4b:bc:92:3f:73:7a:2c:
                    b4:d2:28:15:25:62:d7:70:6b:b5:27:30:6d:20:9f:
                    7b:a9:4d:bd:44:4b:1a:2f:c9:40:8a:40:93:70:0a:
                    88:d2:e1:73:d7:7b:7d:c4:ee:56:e3:35:f6:34:c1:
                    3f:85:85:89:13:55:f0:3f:f7:8b:11:80:7c:17:a7:
                    df:67:89:8e:bb:a7:72:d8:40:71:df:2e:00:d8:e4:
                    86:1c:73:6d:98:c9:ed:c7:02:f4:b6:0d:7f:f1:97:
                    66:72:bc:57:50:50:af:42:12:77:3b:bc:a0:a2:1e:
                    de:0b:9c:5c:03:41:2e:ba:b6:ec:ea:84:82:df:7d:
                    a6:e6:35:1b:b6:3c:02:24:f3:b9:71:20:32:e2:c7:
                    d5:e0:54:9a:45:93:4c:3e:41:7d:f7:44:8a:a0:74:
                    f2:72:0e:a1:a1:07:16:04:5e:11:56:6c:5c:db:76:
                    53:da:b0:20:98:bc:ee:05:9c:36:ff:f2:f6:45:c2:
                    61:1e:07:aa:77:81:bf:cc:d4:fc:38:9b:70:50:5a:
                    e6:c4:16:a7:64:42:4a:26:7e:22:fe:03:4e:2f:7c:
                    2d:f0:76:92:72:fa:32:19:1e:00:ee:16:85:2d:9a:
                    3c:fe:d3:0e:89:26:f7:61:e1:59:4d:c1:dd:88:63:
                    82:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:BB:86:43:48:50:3F:97:48:FF:41:4C:84:5D:92:01:35:0B:42:54
            X509v3 Authority Key Identifier:
                keyid:36:C3:C4:56:57:43:AE:57:BD:2A:EA:9A:36:3C:2B:3C:3E:25:0F:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsPEVldDrle9KuqaNjwrPD4lD3I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/NsPEVldDrle9KuqaNjwrPD4lD3I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/016156-093e-405b-9b2d-a5749d2346e7/1/NsPEVldDrle9KuqaNjwrPD4lD3I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:a9:f1:08:72:6a:81:53:42:54:62:75:b1:a1:18:fa:89:3a:
         e2:ca:26:36:40:c6:a2:47:79:d6:22:be:b2:1b:8a:1c:f3:d7:
         00:c7:d1:01:38:d9:40:92:b4:cb:1e:21:9f:72:2a:fb:22:5d:
         4f:b0:24:34:07:54:08:21:a2:29:07:0a:f5:87:36:c3:04:fd:
         69:80:9f:0c:dd:8b:77:00:1a:16:e3:50:6f:f2:26:0d:11:56:
         ad:af:a6:ee:06:7b:cd:e1:58:0b:7a:bf:a1:3b:a6:0a:0b:8f:
         77:28:7e:fc:88:85:74:3e:01:81:eb:af:92:d7:97:d6:9d:71:
         53:41:fe:18:85:8e:3f:85:33:c2:f7:73:cb:f0:18:c7:da:5f:
         0f:b4:9d:22:c5:6e:1b:61:65:19:5c:02:05:7a:ea:6c:c8:c5:
         d3:1a:89:98:7c:87:19:64:2f:87:13:f9:e4:39:56:69:3c:ce:
         7e:cc:55:06:24:62:34:e7:1a:c1:b2:80:88:2e:df:4e:28:ae:
         d8:9d:d8:27:dc:ac:92:8d:87:29:ae:3e:14:85:75:6d:7b:39:
         db:ca:3e:79:fe:a0:09:17:94:dc:d4:94:a9:59:90:e8:a9:bd:
         67:6c:50:30:8f:5d:e0:ab:24:b8:59:a9:df:d1:32:9a:26:b7:
         16:ae:95:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:14:43 2025 by rpki-client