Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/75baf6-724f-4c0b-be89-2fd63a12d66c/1/N6VPsHvqPfVW41k0VNMg5PAO7yw.mft
File:                     N6VPsHvqPfVW41k0VNMg5PAO7yw.mft (raw, json)
Hash identifier:          8Us2PANaZJC++jvk168S9RfhlRXikprJbLNJ/4NMfck=
Subject key identifier:   86:D9:F6:E6:BF:E9:4E:08:46:0E:5A:AD:C1:C6:2B:92:53:8C:E8:E7
Authority key identifier: 37:A5:4F:B0:7B:EA:3D:F5:56:E3:59:34:54:D3:20:E4:F0:0E:EF:2C
Certificate issuer:       /CN=37a54fb07bea3df556e3593454d320e4f00eef2c
Certificate serial:       0199FD346EAB996C867032CD66DC2158649E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N6VPsHvqPfVW41k0VNMg5PAO7yw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/75baf6-724f-4c0b-be89-2fd63a12d66c/1/N6VPsHvqPfVW41k0VNMg5PAO7yw.mft
Manifest number:          04FA
Signing time:             Sun 19 Oct 2025 16:01:35 +0000
Manifest this update:     Sun 19 Oct 2025 16:01:35 +0000
Manifest next update:     Mon 20 Oct 2025 16:01:35 +0000
Files and hashes:         1: N6VPsHvqPfVW41k0VNMg5PAO7yw.crl (hash: Dn/KQALtrJKPXOt0pyWGtH33gVcfw8q90zmNf02jKmY=)
                          2: Z9jKPG-aJrl0Zezz0qMB35u4yX4.roa (hash: 2A8HZxxRaB1bgoi8TMjFDPNN3FGgJuX9XCmcDH5eYKg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/75baf6-724f-4c0b-be89-2fd63a12d66c/1/N6VPsHvqPfVW41k0VNMg5PAO7yw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/75baf6-724f-4c0b-be89-2fd63a12d66c/1/N6VPsHvqPfVW41k0VNMg5PAO7yw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N6VPsHvqPfVW41k0VNMg5PAO7yw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:34:6e:ab:99:6c:86:70:32:cd:66:dc:21:58:64:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37a54fb07bea3df556e3593454d320e4f00eef2c
        Validity
            Not Before: Oct 19 16:01:35 2025 GMT
            Not After : Oct 20 16:01:35 2025 GMT
        Subject: CN=86d9f6e6bfe94e08460e5aadc1c62b92538ce8e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a5:fb:78:49:b1:1b:dc:1d:ad:e2:ec:bf:80:
                    f0:5e:e7:c7:db:a8:e0:5d:d4:a1:c2:31:92:bf:0a:
                    3a:1e:e3:78:91:75:bb:df:d2:15:1e:19:31:f1:a7:
                    8c:a7:99:0f:6e:21:78:af:a2:e6:62:bf:86:76:03:
                    4b:16:d9:15:8a:71:ee:5e:5e:b4:20:61:fb:64:bb:
                    b3:f0:f9:bb:6f:5a:eb:3c:1b:3b:a5:4c:f0:b4:31:
                    ba:e2:c9:89:05:5d:82:c6:69:27:43:da:d6:38:3e:
                    9f:05:5c:c5:81:9f:e0:93:a0:25:ea:38:d5:c9:be:
                    ba:2b:43:29:ee:7f:b3:a0:60:3a:f0:e7:e7:22:c6:
                    c8:ac:e7:f9:f7:89:cc:66:10:c6:2e:8c:b8:15:5f:
                    04:04:2f:b1:08:c1:b7:52:db:d1:40:12:51:f3:1d:
                    e5:19:c0:28:88:51:71:82:52:0f:20:8f:62:f7:8e:
                    f1:e3:64:a2:f5:fc:17:b3:e0:05:f9:d9:85:29:40:
                    57:7e:bd:63:10:6f:64:7a:dd:a0:85:63:f3:0f:f9:
                    59:b4:cd:06:2c:87:f9:6e:ea:d5:93:53:b3:d0:49:
                    71:81:78:c7:cc:a7:f6:af:12:cc:42:f9:9b:92:f8:
                    79:8e:6e:54:fe:fc:9f:2f:93:01:d8:c1:a6:94:6d:
                    de:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:D9:F6:E6:BF:E9:4E:08:46:0E:5A:AD:C1:C6:2B:92:53:8C:E8:E7
            X509v3 Authority Key Identifier:
                keyid:37:A5:4F:B0:7B:EA:3D:F5:56:E3:59:34:54:D3:20:E4:F0:0E:EF:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N6VPsHvqPfVW41k0VNMg5PAO7yw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/75baf6-724f-4c0b-be89-2fd63a12d66c/1/N6VPsHvqPfVW41k0VNMg5PAO7yw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/75baf6-724f-4c0b-be89-2fd63a12d66c/1/N6VPsHvqPfVW41k0VNMg5PAO7yw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:e9:86:cd:d8:4c:13:eb:2b:3e:7b:c8:5d:a3:4a:74:b3:d1:
         92:4b:df:35:d5:48:f6:61:92:29:1e:a9:bb:e0:07:b8:39:e3:
         82:0a:11:fd:ae:0a:20:6d:a9:66:9a:fa:27:40:7c:cc:be:23:
         f7:7b:3f:73:87:af:d1:a3:ae:23:ab:62:33:db:93:50:13:3d:
         e2:94:fe:d7:0d:a1:ab:76:8f:36:cd:57:71:f1:0f:e3:a6:d9:
         28:8c:7a:9e:ea:ff:5a:03:be:55:66:41:b3:86:b6:27:59:b8:
         d8:de:b8:bb:f8:f6:91:59:e9:7d:9b:25:20:7f:cc:93:5a:bc:
         c8:20:e4:89:a9:67:8d:69:e6:3d:39:81:3c:e3:39:67:40:94:
         78:bb:6e:c9:db:d1:57:4b:a4:37:0b:4a:61:74:e8:54:7e:99:
         26:7a:5b:0f:7d:fc:2b:ae:a0:c9:d8:79:6f:04:b3:4f:19:9f:
         cd:61:c5:b4:16:ad:1d:d0:7d:31:f3:4d:60:25:e1:8d:3f:4c:
         cb:60:df:cc:18:fa:d7:ae:99:73:42:a2:a0:73:6e:39:21:91:
         9e:03:71:4f:c9:4a:50:2a:47:25:17:58:97:6f:06:42:71:6b:
         3d:6c:4d:3e:df:05:7a:5a:62:26:32:71:5e:e2:6d:8c:a8:a6:
         16:ae:6b:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:47:08 2025 by rpki-client