Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.mft
File:                     NZTKzdk15Fz3HGFngKGx1Kpox7U.mft (raw, json)
Hash identifier:          Tv3U05tAENRK6Vc4T7IOTLQPgvbmcqMN6HfJ1/EK0e8=
Subject key identifier:   BE:DF:94:86:A6:60:C2:3D:3A:DE:10:54:7A:34:84:A0:D5:80:B1:87
Authority key identifier: 35:94:CA:CD:D9:35:E4:5C:F7:1C:61:67:80:A1:B1:D4:AA:68:C7:B5
Certificate issuer:       /CN=3594cacdd935e45cf71c616780a1b1d4aa68c7b5
Certificate serial:       0199FE46BEA665DEE9126431F25FA80CD124
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NZTKzdk15Fz3HGFngKGx1Kpox7U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.mft
Manifest number:          16E4
Signing time:             Sun 19 Oct 2025 21:01:13 +0000
Manifest this update:     Sun 19 Oct 2025 21:01:13 +0000
Manifest next update:     Mon 20 Oct 2025 21:01:13 +0000
Files and hashes:         1: NZTKzdk15Fz3HGFngKGx1Kpox7U.crl (hash: WKso7td1qfMl6b2Z9DSvvhEw780V7STVm7H3H1I9GUE=)
                          2: ofsbRp2fd5LCZL5t0IaGNjdbGV0.roa (hash: bLNeuXUfAO52F/EGBeoEWZNzHoJs12X+xc+mr+Ggzjo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NZTKzdk15Fz3HGFngKGx1Kpox7U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:46:be:a6:65:de:e9:12:64:31:f2:5f:a8:0c:d1:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3594cacdd935e45cf71c616780a1b1d4aa68c7b5
        Validity
            Not Before: Oct 19 21:01:13 2025 GMT
            Not After : Oct 20 21:01:13 2025 GMT
        Subject: CN=bedf9486a660c23d3ade10547a3484a0d580b187
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:3f:46:7a:6c:10:71:34:ee:7e:fb:13:22:b3:
                    61:2f:ee:9c:ff:ee:f8:0b:4f:35:14:db:73:ea:48:
                    51:47:84:2f:f3:23:61:0a:d3:24:04:f6:67:bd:b0:
                    58:30:24:0e:71:1b:31:b5:c2:6a:dd:d0:55:dd:82:
                    7d:02:7d:19:1b:7d:12:e3:c7:ae:69:59:96:2c:55:
                    9c:93:42:c0:7d:58:f6:cc:02:aa:b4:90:24:c1:3a:
                    26:dc:98:40:c0:bb:b3:56:9b:f1:d4:0f:39:26:ff:
                    ae:4e:71:1e:b3:79:59:57:80:48:fe:87:3d:8e:4a:
                    b2:c5:2f:b8:3d:72:17:5a:69:0c:c3:b9:ff:84:2d:
                    5d:31:80:32:0a:88:21:d4:f0:40:b1:d0:4c:de:b8:
                    80:fb:de:02:07:78:d5:79:ac:bf:6c:ea:0e:e7:c0:
                    a2:6a:40:7c:94:5d:45:a9:58:27:6e:e1:fb:02:14:
                    57:4e:c1:03:c5:b7:41:be:d6:f1:12:90:0d:7d:73:
                    d1:4d:81:50:9b:9a:c3:15:d3:53:cb:76:9e:54:5b:
                    b9:aa:f0:eb:20:2f:53:3c:f0:35:37:51:cc:a2:e7:
                    7f:cc:6d:9c:29:5d:d6:38:6a:07:48:86:be:a5:78:
                    c8:27:5f:e3:6c:56:1e:37:bd:6c:dd:91:89:cd:c1:
                    52:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:DF:94:86:A6:60:C2:3D:3A:DE:10:54:7A:34:84:A0:D5:80:B1:87
            X509v3 Authority Key Identifier:
                keyid:35:94:CA:CD:D9:35:E4:5C:F7:1C:61:67:80:A1:B1:D4:AA:68:C7:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZTKzdk15Fz3HGFngKGx1Kpox7U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d7:c8:69:1a:08:17:f7:c3:b5:fc:d6:c9:a5:72:c2:3e:47:1f:
         a8:c3:d5:42:88:40:2c:f4:d0:17:c7:39:9f:af:5f:44:47:0c:
         80:8f:e3:71:7d:ab:ff:d9:cd:c2:85:72:06:dd:0a:e1:e1:be:
         67:c0:c1:54:33:7c:cb:d0:bf:e1:eb:4e:ed:57:bf:95:a7:8e:
         b7:b0:eb:07:95:e7:4c:a1:ea:4d:a6:d0:14:11:b2:ff:aa:0f:
         54:23:56:c5:35:27:6a:50:9b:48:d0:27:eb:b7:a9:f3:d5:7b:
         3a:f7:09:fb:29:07:28:3a:43:6b:30:cf:41:55:81:9b:5b:08:
         ee:a1:4e:55:5f:c1:af:0d:63:96:30:0b:04:54:4e:08:9a:0e:
         d0:c5:a1:6f:06:3f:d5:88:26:2a:1d:8d:57:61:de:04:1c:f8:
         e6:ed:4e:ca:ae:2d:00:81:fa:89:f4:ad:a2:d5:b8:4a:57:3d:
         8d:e5:08:bc:4f:db:fd:f3:8c:50:62:85:29:dc:1c:42:bb:5f:
         98:7d:3a:8c:a6:e2:32:2e:d9:2b:0b:ff:21:6e:ce:8c:15:3f:
         49:cd:77:c8:fd:4b:e2:30:ba:fd:de:9a:0d:09:29:4f:d8:d7:
         21:0d:d5:23:c9:52:0a:c9:ab:a4:93:5e:d7:b8:ea:a3:ed:44:
         4b:6e:38:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:25:21 2025 by rpki-client