Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/925d4a-f5f4-4299-a829-152a59479e69/1/Nqr6XD8vjkoIP4Hwy4e8eupEiR8.mft
File:                     Nqr6XD8vjkoIP4Hwy4e8eupEiR8.mft (raw, json)
Hash identifier:          AKLK/ZXBieJRPt5AZGJcy89Pu7HVKaVZDcnN9dEjS4M=
Subject key identifier:   9A:E1:69:FA:E4:60:04:9A:68:AC:66:D9:71:3F:25:E9:A9:C9:78:F3
Authority key identifier: 36:AA:FA:5C:3F:2F:8E:4A:08:3F:81:F0:CB:87:BC:7A:EA:44:89:1F
Certificate issuer:       /CN=36aafa5c3f2f8e4a083f81f0cb87bc7aea44891f
Certificate serial:       0199FF5982E4AB9BA86F218AE8D1A944404D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nqr6XD8vjkoIP4Hwy4e8eupEiR8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/925d4a-f5f4-4299-a829-152a59479e69/1/Nqr6XD8vjkoIP4Hwy4e8eupEiR8.mft
Manifest number:          16E2
Signing time:             Mon 20 Oct 2025 02:01:20 +0000
Manifest this update:     Mon 20 Oct 2025 02:01:20 +0000
Manifest next update:     Tue 21 Oct 2025 02:01:20 +0000
Files and hashes:         1: Nqr6XD8vjkoIP4Hwy4e8eupEiR8.crl (hash: SmAJLc0xQYmNBNvzSKG+3Tnv8jxhWH6QInSKlebxB14=)
                          2: Tz8QjBgBmzpa68NzWLRe2iAGU-U.roa (hash: juEtxBf0oAaQHOnDE0wzOzsnnb3wMIZXnN/0qajABas=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/925d4a-f5f4-4299-a829-152a59479e69/1/Nqr6XD8vjkoIP4Hwy4e8eupEiR8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/925d4a-f5f4-4299-a829-152a59479e69/1/Nqr6XD8vjkoIP4Hwy4e8eupEiR8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Nqr6XD8vjkoIP4Hwy4e8eupEiR8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ff:59:82:e4:ab:9b:a8:6f:21:8a:e8:d1:a9:44:40:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36aafa5c3f2f8e4a083f81f0cb87bc7aea44891f
        Validity
            Not Before: Oct 20 02:01:20 2025 GMT
            Not After : Oct 21 02:01:20 2025 GMT
        Subject: CN=9ae169fae460049a68ac66d9713f25e9a9c978f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:fe:7d:e0:bd:f2:33:cb:3f:d3:f3:ae:43:3f:
                    18:70:0f:b9:48:56:a0:79:07:af:0b:06:44:88:c2:
                    4c:9b:24:b3:55:cb:08:7c:41:c0:8e:a9:ad:58:5e:
                    73:3f:18:db:6b:3d:73:91:14:00:a7:89:ff:0a:a6:
                    f2:cb:92:42:cd:21:b8:8d:25:8a:15:ae:e2:41:a4:
                    f0:eb:7c:52:ba:d6:ab:a6:9c:b9:6f:bd:6e:a1:c7:
                    75:59:d5:18:26:55:e1:ce:a5:c6:11:cc:d4:8b:55:
                    6d:5a:8a:d6:7b:db:1e:a1:72:17:8a:60:59:44:10:
                    68:3b:ad:03:82:63:10:eb:85:84:6f:fd:79:5b:59:
                    73:44:f0:af:a1:48:80:94:c7:3c:01:de:fd:2a:b0:
                    91:46:4b:ec:9d:29:87:29:78:c3:83:20:bd:f8:fd:
                    7f:3d:4b:83:6d:bd:5d:e1:92:c9:5e:16:f6:c2:ae:
                    90:fd:18:15:1f:1c:aa:d7:da:ae:ee:39:84:ad:c2:
                    db:a5:81:dc:f7:93:3d:29:33:5d:5d:8d:af:9c:fa:
                    72:03:ee:c2:d1:52:af:1b:af:5e:88:50:7d:bc:b4:
                    bf:39:6b:80:cb:65:b6:f5:fe:e0:63:8a:b7:b9:18:
                    51:5a:a7:69:a0:68:d7:6e:5a:82:5a:d7:22:ad:d8:
                    0c:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:E1:69:FA:E4:60:04:9A:68:AC:66:D9:71:3F:25:E9:A9:C9:78:F3
            X509v3 Authority Key Identifier:
                keyid:36:AA:FA:5C:3F:2F:8E:4A:08:3F:81:F0:CB:87:BC:7A:EA:44:89:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nqr6XD8vjkoIP4Hwy4e8eupEiR8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/925d4a-f5f4-4299-a829-152a59479e69/1/Nqr6XD8vjkoIP4Hwy4e8eupEiR8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/925d4a-f5f4-4299-a829-152a59479e69/1/Nqr6XD8vjkoIP4Hwy4e8eupEiR8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:6a:fc:07:45:d9:43:a7:45:8f:88:a6:61:d3:ec:57:3a:16:
         d5:d2:b6:b3:59:c1:df:65:b9:05:70:ae:cc:dc:b5:c5:7d:bd:
         c6:b6:b7:74:a1:9a:02:70:cd:d2:64:6c:47:63:3a:88:26:91:
         2f:74:d1:18:94:71:94:fa:aa:45:7d:37:d7:25:c4:61:5e:62:
         19:ee:70:3b:d7:9b:38:d1:3a:c9:41:f9:a5:08:f1:26:a7:dc:
         f7:e6:e0:78:2a:81:5f:d5:44:a1:bc:73:35:68:22:75:c1:51:
         ad:90:29:9e:9e:fc:d3:03:3e:84:be:e4:c2:97:8c:74:37:3b:
         af:f2:b4:84:d1:54:f6:b9:18:64:a3:1a:3f:78:40:17:e3:8e:
         d6:5b:d9:c0:35:bf:ab:15:92:61:24:8c:63:4c:05:63:1f:30:
         a1:80:87:99:e3:74:69:33:4f:77:7b:e1:c6:ff:28:3e:76:33:
         dd:99:4b:6d:65:10:f9:57:c5:33:9d:70:14:3c:1d:93:41:d0:
         91:c3:21:fc:bb:d1:69:8d:6a:de:aa:2a:23:e9:9f:42:99:99:
         6d:f8:8e:1d:37:f8:39:7e:10:fc:73:c9:9a:22:b9:80:0a:3f:
         45:0a:c1:94:87:55:0b:df:4b:25:95:f4:85:9d:d5:d3:82:d0:
         16:46:ff:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:13:53 2025 by rpki-client