Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.mft
File:                     NQBF99g86xMNjWlf_n1D2zgZ3lU.mft (raw, json)
Hash identifier:          ZxGzZG/9AyFBY0JWkpOUlbNlaAIyT4QQk6i32Sn+88E=
Subject key identifier:   72:C5:A0:60:94:E4:04:2B:D0:24:E8:C9:ED:37:2A:AC:70:82:24:F7
Authority key identifier: 35:00:45:F7:D8:3C:EB:13:0D:8D:69:5F:FE:7D:43:DB:38:19:DE:55
Certificate issuer:       /CN=350045f7d83ceb130d8d695ffe7d43db3819de55
Certificate serial:       0198D473517C5F36FFC98C226DF36C97316F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NQBF99g86xMNjWlf_n1D2zgZ3lU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.mft
Manifest number:          1511
Signing time:             Sat 23 Aug 2025 01:03:03 +0000
Manifest this update:     Sat 23 Aug 2025 01:03:03 +0000
Manifest next update:     Sun 24 Aug 2025 01:03:03 +0000
Files and hashes:         1: NQBF99g86xMNjWlf_n1D2zgZ3lU.crl (hash: bH3cAdzTrOKNlDSAZdg9+ZW6usWX3Fl8b/r/ir7qIqc=)
                          2: i3NuLV9-SVOSQ4rLf1Rnzi76R8s.roa (hash: F0HuxkG9RZJHtx6EFFj7jJPD9PIqUuIoXshg3545UXg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NQBF99g86xMNjWlf_n1D2zgZ3lU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:73:51:7c:5f:36:ff:c9:8c:22:6d:f3:6c:97:31:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=350045f7d83ceb130d8d695ffe7d43db3819de55
        Validity
            Not Before: Aug 23 01:03:03 2025 GMT
            Not After : Aug 24 01:03:03 2025 GMT
        Subject: CN=72c5a06094e4042bd024e8c9ed372aac708224f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:97:98:a1:a6:ea:ac:ce:b4:47:3b:b8:ad:62:
                    f2:33:3a:ff:e9:84:90:74:41:c8:f3:d2:57:59:73:
                    9f:8b:79:0b:90:16:2e:af:b6:72:12:da:f5:df:4a:
                    4e:01:1c:35:1c:3f:db:17:82:e5:87:ce:5d:dd:4a:
                    a0:a7:9b:ca:6b:8f:d1:f1:9c:fd:05:8c:d7:0a:b3:
                    c9:95:48:e9:12:b4:a8:03:a3:c0:84:bd:ac:0a:d4:
                    ae:c4:a4:17:4b:84:d8:c9:a2:93:82:17:af:4c:02:
                    3c:b8:ad:b9:f3:ec:a8:10:93:d6:87:94:17:63:29:
                    81:46:3f:86:03:01:88:9a:2c:e1:00:9e:5c:bb:64:
                    25:22:6d:8b:cb:06:67:2d:6c:d6:9e:bb:7b:d8:6f:
                    ef:c4:42:53:12:3f:56:2b:fa:1f:49:a6:07:4c:4e:
                    98:65:5a:e3:6f:31:ce:1c:fc:ef:cb:29:f6:d7:7e:
                    2e:53:50:f3:d8:dc:15:24:f0:96:5a:a2:74:ee:09:
                    89:aa:b7:ea:7e:0d:b4:54:35:c0:4f:ef:ec:9e:88:
                    64:ce:58:14:32:29:42:5c:d4:e5:da:a3:ab:e7:d0:
                    4f:c2:7c:84:16:60:d6:e2:67:50:be:37:e2:bd:fd:
                    bb:22:20:4a:3c:4b:b5:39:85:91:ad:91:f3:bb:8c:
                    c7:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:C5:A0:60:94:E4:04:2B:D0:24:E8:C9:ED:37:2A:AC:70:82:24:F7
            X509v3 Authority Key Identifier:
                keyid:35:00:45:F7:D8:3C:EB:13:0D:8D:69:5F:FE:7D:43:DB:38:19:DE:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NQBF99g86xMNjWlf_n1D2zgZ3lU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:31:45:b1:fb:ee:8a:74:6c:c1:0b:a8:f6:ce:79:76:18:22:
         a6:a6:cf:29:df:9d:46:e9:8a:88:e1:be:ec:f5:ce:4f:d5:83:
         27:0d:75:b8:c6:24:31:0b:04:13:10:fa:a8:ee:b7:85:b8:a0:
         0c:1e:cb:d1:01:3d:3f:6f:cd:37:42:fc:21:f8:ef:00:66:ba:
         1a:78:d9:96:15:3e:9b:64:22:9e:25:97:7a:65:bf:31:fb:81:
         7b:2a:f0:56:25:1c:55:b3:cd:34:c4:f7:b8:ab:d4:b1:b5:e2:
         ea:11:a1:04:c2:8a:e9:7d:3b:da:70:ce:6e:7f:9b:83:4e:0c:
         1a:ff:62:df:90:33:39:f6:55:a4:78:d8:c9:42:29:82:2c:b4:
         9b:c2:3c:ae:f5:97:27:5a:77:db:e7:2a:73:66:04:5c:c1:aa:
         19:ff:a8:9a:e3:18:66:80:85:50:42:82:3d:db:34:f8:db:fe:
         e9:71:b5:b2:4a:18:c9:b6:7d:4f:3f:32:2b:33:b7:f1:dc:07:
         aa:51:45:20:ab:3e:9b:84:be:8c:ca:80:2c:af:fe:cc:fc:17:
         c4:46:9f:35:4c:1a:6d:7c:0c:a0:ad:21:38:a4:49:c5:40:50:
         db:02:16:90:52:39:d6:84:79:f6:be:9c:3a:a1:e2:09:2d:66:
         b5:4b:db:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUc1F8Xzb/yYwibfNslzFvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1MDA0NWY3ZDgzY2ViMTMwZDhkNjk1ZmZlN2Q0M2RiMzgx
OWRlNTUwHhcNMjUwODIzMDEwMzAzWhcNMjUwODI0MDEwMzAzWjAzMTEwLwYDVQQD
Eyg3MmM1YTA2MDk0ZTQwNDJiZDAyNGU4YzllZDM3MmFhYzcwODIyNGY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5eYoabqrM60Rzu4rWLyMzr/6YSQ
dEHI89JXWXOfi3kLkBYur7ZyEtr130pOARw1HD/bF4Llh85d3Uqgp5vKa4/R8Zz9
BYzXCrPJlUjpErSoA6PAhL2sCtSuxKQXS4TYyaKTghevTAI8uK258+yoEJPWh5QX
YymBRj+GAwGImizhAJ5cu2QlIm2LywZnLWzWnrt72G/vxEJTEj9WK/ofSaYHTE6Y
ZVrjbzHOHPzvyyn2134uU1Dz2NwVJPCWWqJ07gmJqrfqfg20VDXAT+/snohkzlgU
MilCXNTl2qOr59BPwnyEFmDW4mdQvjfivf27IiBKPEu1OYWRrZHzu4zH4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHLFoGCU5AQr0CToye03KqxwgiT3MB8GA1UdIwQY
MBaAFDUARffYPOsTDY1pX/59Q9s4Gd5VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlFCRjk5Zzg2eE1OaldsZl9uMUQyemdaM2xVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS81MDQzZmItY2NhYy00ZmI2LTg2OWQt
NDhlMzBlMmY3YzM2LzEvTlFCRjk5Zzg2eE1OaldsZl9uMUQyemdaM2xVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS81MDQzZmItY2NhYy00ZmI2LTg2OWQtNDhlMzBlMmY3YzM2
LzEvTlFCRjk5Zzg2eE1OaldsZl9uMUQyemdaM2xVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAajFFsfvu
inRswQuo9s55dhgipqbPKd+dRumKiOG+7PXOT9WDJw11uMYkMQsEExD6qO63hbig
DB7L0QE9P2/NN0L8IfjvAGa6GnjZlhU+m2QiniWXemW/MfuBeyrwViUcVbPNNMT3
uKvUsbXi6hGhBMKK6X072nDObn+bg04MGv9i35AzOfZVpHjYyUIpgiy0m8I8rvWX
J1p32+cqc2YEXMGqGf+omuMYZoCFUEKCPds0+Nv+6XG1skoYybZ9Tz8yKzO38dwH
qlFFIKs+m4S+jMqALK/+zPwXxEafNUwabXwMoK0hOKRJxUBQ2wIWkFI51oR59r6c
OqHiCS1mtUvbcg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:21:25 2025 by rpki-client