Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/9678f9-9dfe-4b39-a80b-c54af960ef18/1/N6lZHUhfwNCQKom-hBijuxJ1BqU.mft
File:                     N6lZHUhfwNCQKom-hBijuxJ1BqU.mft (raw, json)
Hash identifier:          byHYx0g8sllrx7D1k9GH9Zl/xVzHEUkMy/dn7/h80Nc=
Subject key identifier:   8C:63:49:18:5C:38:94:EF:8A:E0:F9:19:BB:A3:9F:E1:B4:F3:C5:BE
Authority key identifier: 37:A9:59:1D:48:5F:C0:D0:90:2A:89:BE:84:18:A3:BB:12:75:06:A5
Certificate issuer:       /CN=37a9591d485fc0d0902a89be8418a3bb127506a5
Certificate serial:       0198D698457DE2B673F2EC7D45B3341D2EF5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N6lZHUhfwNCQKom-hBijuxJ1BqU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/9678f9-9dfe-4b39-a80b-c54af960ef18/1/N6lZHUhfwNCQKom-hBijuxJ1BqU.mft
Manifest number:          0625
Signing time:             Sat 23 Aug 2025 11:02:40 +0000
Manifest this update:     Sat 23 Aug 2025 11:02:40 +0000
Manifest next update:     Sun 24 Aug 2025 11:02:40 +0000
Files and hashes:         1: N6lZHUhfwNCQKom-hBijuxJ1BqU.crl (hash: WiVJg3548WcigvHn0npGIJtnBZ+yCvHuiibsdljQB5Y=)
                          2: vUnbbu8skzS26iiXfWJzScSr25E.roa (hash: ImAxTHT0Xe4VXBRsFAB4OoUTkv7HmDfrBn2Cev7GldU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/9678f9-9dfe-4b39-a80b-c54af960ef18/1/N6lZHUhfwNCQKom-hBijuxJ1BqU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/9678f9-9dfe-4b39-a80b-c54af960ef18/1/N6lZHUhfwNCQKom-hBijuxJ1BqU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N6lZHUhfwNCQKom-hBijuxJ1BqU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:98:45:7d:e2:b6:73:f2:ec:7d:45:b3:34:1d:2e:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37a9591d485fc0d0902a89be8418a3bb127506a5
        Validity
            Not Before: Aug 23 11:02:40 2025 GMT
            Not After : Aug 24 11:02:40 2025 GMT
        Subject: CN=8c6349185c3894ef8ae0f919bba39fe1b4f3c5be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:22:eb:39:52:6c:21:29:96:2f:4a:62:fa:62:
                    80:d7:38:32:4f:c4:60:50:2f:e5:58:a0:3b:be:82:
                    ec:b0:df:e1:d0:67:78:30:9c:99:41:78:0e:4a:f3:
                    24:52:1a:18:fa:c5:d5:dc:95:c7:8a:83:86:db:69:
                    9f:33:3e:31:b1:5e:f4:a9:58:70:b8:e2:79:58:cc:
                    5a:dd:23:3e:92:6a:c1:15:81:04:e5:0b:7e:5d:8f:
                    66:10:ba:29:de:aa:84:bb:32:11:45:be:af:64:b2:
                    ac:30:f8:f3:16:72:f6:e4:68:bd:28:81:09:09:0d:
                    e0:26:df:36:bd:b3:50:fb:5b:45:fe:f8:9b:b8:0e:
                    c6:88:71:db:6e:35:e0:c4:01:15:ef:08:9c:29:0a:
                    c1:c0:01:74:21:a2:78:2d:2c:92:b7:da:e7:24:35:
                    27:cb:db:6b:ae:97:7f:84:37:6d:90:3c:30:b0:47:
                    05:96:9d:5c:80:67:09:5a:86:70:84:4d:f5:c0:da:
                    57:cc:6e:e3:e0:3a:f6:76:64:ad:38:41:4f:39:83:
                    67:15:54:18:b8:d8:b8:4f:22:be:3e:ab:35:83:16:
                    61:a2:f9:0b:51:8d:3d:d3:a6:d7:b7:10:57:af:52:
                    45:51:d6:17:f6:b3:a1:35:6d:84:ed:4d:ea:d1:34:
                    e2:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:63:49:18:5C:38:94:EF:8A:E0:F9:19:BB:A3:9F:E1:B4:F3:C5:BE
            X509v3 Authority Key Identifier:
                keyid:37:A9:59:1D:48:5F:C0:D0:90:2A:89:BE:84:18:A3:BB:12:75:06:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N6lZHUhfwNCQKom-hBijuxJ1BqU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/9678f9-9dfe-4b39-a80b-c54af960ef18/1/N6lZHUhfwNCQKom-hBijuxJ1BqU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/9678f9-9dfe-4b39-a80b-c54af960ef18/1/N6lZHUhfwNCQKom-hBijuxJ1BqU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:bb:37:d1:36:4a:26:35:78:29:cc:99:0e:de:df:22:3e:3d:
         31:28:9d:80:bf:71:ea:8f:31:d0:6d:b9:07:91:f4:f2:4c:17:
         11:3f:bb:26:d2:e5:c2:42:17:b9:ba:16:3d:a3:57:1a:ea:86:
         51:4f:71:84:4d:44:31:27:6a:ab:15:ee:93:02:c1:8b:58:6f:
         f5:38:30:44:f2:ae:09:da:98:8c:12:78:a6:b0:62:5c:ba:20:
         35:39:54:dc:69:23:e4:fe:40:d7:8b:34:bf:18:6d:2d:06:9f:
         18:c2:db:85:30:35:96:87:c2:f6:07:93:bc:8f:65:1b:88:05:
         70:a8:d9:00:52:55:50:6a:c9:b1:a0:db:ed:2b:12:68:49:20:
         f3:d7:e1:c3:26:31:45:58:6f:0f:8a:db:e3:ed:1b:68:72:94:
         92:85:21:2c:83:46:45:2f:4a:9c:21:dd:6b:42:e3:c4:b1:76:
         31:3d:5d:96:d0:9a:5d:17:fe:69:e4:78:0b:a5:66:8c:63:44:
         e4:e4:bc:87:5d:2a:33:e6:43:32:80:45:2e:78:6d:70:5a:0f:
         0e:fc:4c:4b:12:91:5d:12:ea:71:95:eb:e2:1b:83:e5:07:6e:
         ee:1b:86:c7:9d:19:ef:b3:3f:b5:76:7d:66:36:79:06:95:01:
         86:7c:25:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:33:38 2025 by rpki-client