Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.mft
File:                     navGJqwmQGaxxccJpIR383iDYd4.mft (raw, json)
Hash identifier:          XybM9iXbAuugemlbGPtdtd3r3XqFG1o0IP7SekjAPj0=
Subject key identifier:   55:D5:99:AB:59:72:3F:12:AD:23:61:CA:D0:79:04:D2:A7:20:75:4B
Authority key identifier: 9D:AB:C6:26:AC:26:40:66:B1:C5:C7:09:A4:84:77:F3:78:83:61:DE
Certificate issuer:       /CN=9dabc626ac264066b1c5c709a48477f3788361de
Certificate serial:       0197B7EA4453FD302A684C4ADF0107A54742
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/navGJqwmQGaxxccJpIR383iDYd4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.mft
Manifest number:          138E
Signing time:             Sat 28 Jun 2025 19:01:12 +0000
Manifest this update:     Sat 28 Jun 2025 19:01:12 +0000
Manifest next update:     Sun 29 Jun 2025 19:01:12 +0000
Files and hashes:         1: 1-3EfbNDzCPBhm-MGXRhX1BvajzU.roa (hash: N4yj10cZc+R+7TueMdhublW6w9ad85suNg3KfBlUGDU=)
                          2: navGJqwmQGaxxccJpIR383iDYd4.crl (hash: Vfi1RpsP/KA5kDYujtVZEzagD35fYSBQYev3ydqT0xk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/navGJqwmQGaxxccJpIR383iDYd4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 19:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:ea:44:53:fd:30:2a:68:4c:4a:df:01:07:a5:47:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9dabc626ac264066b1c5c709a48477f3788361de
        Validity
            Not Before: Jun 28 19:01:12 2025 GMT
            Not After : Jun 29 19:01:12 2025 GMT
        Subject: CN=55d599ab59723f12ad2361cad07904d2a720754b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:81:bc:81:d8:87:21:6f:1f:5e:f4:26:55:a3:
                    6c:19:4c:b2:bd:52:19:6b:4b:52:91:8e:78:1e:44:
                    e3:cb:5a:17:9e:3e:b1:e6:db:89:d8:fa:db:a1:0e:
                    62:96:b6:1b:8b:e5:9e:72:d6:2c:e3:26:af:7e:68:
                    b8:77:f0:d1:b2:92:0c:52:bf:e3:ec:1c:58:d3:e2:
                    a9:da:f5:e4:a0:cc:2a:bc:06:81:eb:08:11:79:68:
                    27:84:d8:92:e8:9d:4a:f9:15:a5:23:b8:1e:2b:ce:
                    63:e0:e7:a8:56:8c:1f:42:58:14:b9:6e:d3:c0:c5:
                    7d:8f:13:a1:0b:16:76:19:c9:c6:70:9f:05:a3:2a:
                    57:eb:e9:a4:c4:44:b6:64:e5:5e:82:42:3d:a8:0f:
                    50:8a:83:7a:59:ac:12:57:00:57:0a:24:9c:af:9c:
                    c7:ed:f8:2a:f9:79:98:14:7c:ad:a7:79:00:19:4c:
                    c2:a3:db:fc:a9:fc:bd:2b:63:8d:0d:99:ba:c9:21:
                    8a:a5:30:a7:92:4a:ed:c4:3a:54:d5:89:40:b6:10:
                    40:5a:48:d1:3f:db:55:f9:7b:0d:3a:38:f5:30:e9:
                    77:4e:78:36:de:d1:a8:d5:45:a1:02:4c:52:fb:9c:
                    8c:0d:c2:94:14:8d:ea:b6:6b:e3:34:b3:fc:dd:df:
                    f4:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:D5:99:AB:59:72:3F:12:AD:23:61:CA:D0:79:04:D2:A7:20:75:4B
            X509v3 Authority Key Identifier:
                keyid:9D:AB:C6:26:AC:26:40:66:B1:C5:C7:09:A4:84:77:F3:78:83:61:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/navGJqwmQGaxxccJpIR383iDYd4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:55:6a:58:93:8e:de:a7:8c:27:2a:9c:81:ac:33:64:e1:30:
         bd:5f:6a:c6:76:00:59:09:ed:b4:e0:98:33:23:91:ac:bb:27:
         a1:4f:10:eb:5e:b2:62:c2:67:60:c6:b2:df:27:fe:7c:cd:dc:
         db:1d:cd:30:d9:4a:18:f6:e9:cd:90:7f:6a:9f:ba:ac:2f:20:
         b4:ba:76:d7:16:f2:3c:3c:b8:32:a9:d4:01:be:9d:8a:cc:09:
         7f:1b:fd:2b:79:85:9a:e8:6b:51:85:a0:48:42:f1:9d:2f:20:
         c4:8f:62:1e:45:88:a1:47:d6:c3:53:dc:33:4e:84:1d:db:57:
         7b:2f:6c:5c:aa:4c:41:cc:1a:63:1f:42:78:b9:4e:7f:df:11:
         12:81:01:35:6e:12:7f:ae:e1:ff:83:14:82:05:04:f0:93:89:
         51:19:db:b2:9e:f5:83:4a:71:0c:71:87:d1:62:25:29:a1:45:
         92:c7:36:89:4a:d6:a1:5c:43:29:c1:f6:9f:e6:4c:99:a8:29:
         08:76:1b:72:86:1e:e9:5d:03:63:b7:7e:65:68:56:6f:0a:a2:
         c6:e6:02:4b:de:cf:ce:01:00:4a:b3:26:b6:ed:57:08:11:68:
         1e:0e:19:83:64:c8:51:d5:5d:66:fb:59:0c:04:7c:8a:da:dc:
         a6:25:e9:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:37:15 2025 by rpki-client