Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/366830-c634-4644-a752-820914022158/1/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.mft
File:                     nqc_uHyHtv-EYgFhR3ZOfk8OrSk.mft (raw, json)
Hash identifier:          CuD0BgYDHwu4g6d6t/VUXOMgx4k/bc1hnPCF9HrYdVM=
Subject key identifier:   D7:DA:B3:42:15:7F:E6:10:25:83:34:77:9F:C7:E1:CC:B4:36:C7:94
Authority key identifier: 9E:A7:3F:B8:7C:87:B6:FF:84:62:01:61:47:76:4E:7E:4F:0E:AD:29
Certificate issuer:       /CN=9ea73fb87c87b6ff8462016147764e7e4f0ead29
Certificate serial:       0199FDD90AA4F1FB2FE2195933287F4FB25F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/366830-c634-4644-a752-820914022158/1/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.mft
Manifest number:          0925
Signing time:             Sun 19 Oct 2025 19:01:23 +0000
Manifest this update:     Sun 19 Oct 2025 19:01:23 +0000
Manifest next update:     Mon 20 Oct 2025 19:01:23 +0000
Files and hashes:         1: Jc4wKdZujtBQlnsZSGZ-Msh3t-U.roa (hash: yoz3wQ6+m9WewYaNOk0D0h3Hx6RkufI02fLU4g+5owo=)
                          2: nqc_uHyHtv-EYgFhR3ZOfk8OrSk.crl (hash: UlUiVCtG1WU7ydlqCEZ24KO5NVO74CXDLm6OyG2X+qM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/366830-c634-4644-a752-820914022158/1/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/366830-c634-4644-a752-820914022158/1/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:d9:0a:a4:f1:fb:2f:e2:19:59:33:28:7f:4f:b2:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ea73fb87c87b6ff8462016147764e7e4f0ead29
        Validity
            Not Before: Oct 19 19:01:23 2025 GMT
            Not After : Oct 20 19:01:23 2025 GMT
        Subject: CN=d7dab342157fe610258334779fc7e1ccb436c794
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:7b:cd:38:06:40:96:43:05:07:4f:59:4d:1c:
                    16:f9:0e:76:a5:b5:7c:e5:2f:1c:a4:90:eb:46:ff:
                    77:49:7e:0d:10:12:20:20:9d:7e:db:d8:92:9c:06:
                    31:10:cf:14:ef:5f:ff:39:d9:f0:09:3c:c2:e2:ca:
                    48:0f:91:57:42:e6:26:e2:82:61:3c:8c:6f:a9:1b:
                    30:7e:14:f2:a1:d0:2b:b9:a2:42:d5:a2:80:56:9a:
                    3f:d3:16:12:b3:5b:cf:dc:58:a8:92:23:46:d1:3e:
                    47:03:06:de:d0:00:fc:1a:eb:2b:60:d6:51:b9:3c:
                    4f:fd:5d:be:0d:08:47:b6:0d:67:79:9b:f9:7e:60:
                    c2:d5:9a:5f:d7:bb:91:91:aa:5e:3f:e7:90:ae:c9:
                    28:b2:26:cd:94:19:51:d5:94:fe:81:c8:b7:ff:55:
                    59:2f:54:17:97:45:cf:f9:53:2e:2b:09:04:9d:f8:
                    64:52:4c:23:30:8c:54:58:4b:72:4e:05:54:99:f2:
                    1a:df:88:a6:1b:ea:78:c5:77:5c:3d:81:ad:61:b1:
                    5c:4e:39:38:cd:58:31:03:19:05:f1:e2:1a:ba:16:
                    23:a6:bf:60:e4:c0:01:ca:dc:86:a4:de:00:0e:58:
                    af:88:bd:96:2a:0d:0c:0d:a2:92:d6:29:0a:a3:37:
                    90:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:DA:B3:42:15:7F:E6:10:25:83:34:77:9F:C7:E1:CC:B4:36:C7:94
            X509v3 Authority Key Identifier:
                keyid:9E:A7:3F:B8:7C:87:B6:FF:84:62:01:61:47:76:4E:7E:4F:0E:AD:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/366830-c634-4644-a752-820914022158/1/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/366830-c634-4644-a752-820914022158/1/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:11:38:f3:e2:f8:eb:2f:c7:b5:41:1c:b0:fd:2a:18:9a:18:
         8a:96:52:80:7a:61:fc:c1:71:54:d0:b7:7b:79:f8:ea:97:ba:
         0b:4d:e0:bf:3e:fb:03:17:b2:3d:b7:ae:49:84:c6:30:61:2a:
         be:b4:01:94:95:d4:00:16:da:17:98:b1:4f:7a:08:3c:93:37:
         e6:a0:b1:f2:b9:b6:fe:54:76:fb:e5:93:2f:fd:3b:32:1c:46:
         fc:84:37:27:47:e5:d7:ad:95:21:1c:d6:94:fc:b0:ff:c8:e1:
         17:c0:42:28:a1:c7:eb:eb:22:2c:53:a0:2a:d8:ca:8d:ab:b7:
         1f:94:23:5e:3a:76:ed:cb:fb:65:21:c7:57:6e:7d:f5:38:8c:
         0c:b7:7d:e8:eb:e8:b9:65:e3:4b:22:c6:cb:69:f5:ee:6c:5d:
         a1:38:29:fc:58:8c:99:2f:24:38:20:a0:08:fe:19:a9:79:f4:
         06:81:cd:58:5f:ec:a4:d7:5f:c1:99:2a:d0:02:cc:53:50:31:
         17:4c:b3:0e:c6:2d:d8:d7:22:b6:6c:48:e2:16:b6:68:20:66:
         76:4b:b2:f1:b1:08:ff:4e:97:d7:ca:bb:dd:d9:85:f5:bb:98:
         48:b5:4e:fb:96:d5:a9:82:e6:6a:e8:be:d3:ce:74:26:04:69:
         21:96:0a:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:03:39 2025 by rpki-client