Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft
File:                     NPFybqS9bTyAka4MitGgPpHjWaI.mft (raw, json)
Hash identifier:          +6jtBX9xCU99yCnrUyn+bhoSBo7DkKhtOE4beTa2YV4=
Subject key identifier:   02:79:B0:22:53:6C:B0:74:A2:AF:9B:C8:C4:32:3F:46:11:C6:38:D0
Authority key identifier: 34:F1:72:6E:A4:BD:6D:3C:80:91:AE:0C:8A:D1:A0:3E:91:E3:59:A2
Certificate issuer:       /CN=34f1726ea4bd6d3c8091ae0c8ad1a03e91e359a2
Certificate serial:       0198D47438EE99C5298D5B8AD8D0D76E92EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NPFybqS9bTyAka4MitGgPpHjWaI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft
Manifest number:          1384
Signing time:             Sat 23 Aug 2025 01:04:03 +0000
Manifest this update:     Sat 23 Aug 2025 01:04:03 +0000
Manifest next update:     Sun 24 Aug 2025 01:04:03 +0000
Files and hashes:         1: 1-QRYDCk4GRkhhK94MTs5nmWBy_E.roa (hash: 0DMmysmCmz5ptQIzT31buoWW9naDewY16lMSk6nyNPM=)
                          2: 4_hN70Gn93YtNqyU6RsNlMbDtXc.roa (hash: peVwC9DiY5O5MpDM5td7h9VpXZKdL2e2Hkif7cNRbJM=)
                          3: 6RKHwkUGkLRE0nOS7i-phv0Y7b8.roa (hash: YNCF/KzAqV3Fo+hsWHR3r0AQecfE2O/ljxIxKeerc6E=)
                          4: NPFybqS9bTyAka4MitGgPpHjWaI.crl (hash: UkngKy9ErOaBq0FmH/JZqgchzrfa81OMarY36eqCpUM=)
                          5: RZB6hhj_LzY-DO3DfmavoIAg3K8.roa (hash: 8fSztyIXmdrydCA2Hwo+fzHNQuQ8HachHnXLTdni/F4=)
                          6: V-ziVBTzF3yW8Qn17SkTQka0Z1w.roa (hash: dzI5Exw0Cav9WTDJa9bU3vaVrx3/DEAhAyNHw9d0Q+M=)
                          7: f9J3fcUkkHHcn80-VJtEBd6Rau4.roa (hash: JDi8khg5idPehoZbbOnLzz9O6Dz2cHDlR75V8A55UBk=)
                          8: m26Z4EdJjPTeKqQP4bLFsm0qZJo.roa (hash: NWpdZVKoDOS9cnbyZWpfcC92E8AFSl1SI5HiCmg5+Gg=)
                          9: mI_12gpPA1x4m56hwYP082Ar3JU.roa (hash: nTAzRPzpRleX8rbBjz+dEflffb+oOGW6DVQuLBf/K4c=)
                          10: oHw7wrhs1qz9tzh4TUZjM8oea6k.roa (hash: IIsyfj8tmjqckisgTytL6hssPf4b/V3+My7Zj1/h7d0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NPFybqS9bTyAka4MitGgPpHjWaI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:74:38:ee:99:c5:29:8d:5b:8a:d8:d0:d7:6e:92:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34f1726ea4bd6d3c8091ae0c8ad1a03e91e359a2
        Validity
            Not Before: Aug 23 01:04:03 2025 GMT
            Not After : Aug 24 01:04:03 2025 GMT
        Subject: CN=0279b022536cb074a2af9bc8c4323f4611c638d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a4:73:6c:c3:2f:4f:0e:3f:c2:7a:fa:03:b9:
                    33:7c:f6:a8:75:1c:cd:b7:56:f4:44:5c:f8:eb:9d:
                    9c:f7:56:69:f5:b8:41:81:9f:8f:6d:fd:0b:3f:48:
                    3f:75:5f:71:23:08:18:83:a7:f4:65:a7:d0:57:21:
                    3c:21:2a:dc:f2:c9:5f:ec:ae:ad:fa:92:ff:b0:23:
                    3c:e5:8e:91:09:17:09:db:a3:c3:b3:42:9f:80:89:
                    5b:c2:36:ff:45:09:12:6a:ae:ea:3f:db:99:8b:cd:
                    d1:30:6d:42:14:12:54:b0:16:9a:89:05:5b:a8:0d:
                    95:77:cb:8d:0c:17:d7:56:de:2a:e6:0f:68:a2:0b:
                    f0:da:82:3f:7d:1d:9f:c7:4a:9c:37:cb:63:a3:8e:
                    a4:0a:2b:9f:87:29:d3:5f:02:4f:2c:76:e3:c4:3e:
                    a4:94:4f:37:37:fa:8e:34:7b:68:8b:53:60:a3:a4:
                    76:37:08:75:cf:55:4d:2b:2f:8b:79:b6:cb:ee:6f:
                    01:25:d0:d0:81:e5:1c:bf:be:ef:b1:93:b0:a3:c1:
                    b9:e3:0b:ef:7e:ff:16:32:be:ae:cc:38:cb:03:f8:
                    ad:d7:c0:19:f6:91:2e:ae:44:bb:85:ed:0f:4e:3b:
                    4f:a4:7c:20:0e:3e:93:9a:0e:0b:a4:de:0f:c0:9c:
                    c7:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:79:B0:22:53:6C:B0:74:A2:AF:9B:C8:C4:32:3F:46:11:C6:38:D0
            X509v3 Authority Key Identifier:
                keyid:34:F1:72:6E:A4:BD:6D:3C:80:91:AE:0C:8A:D1:A0:3E:91:E3:59:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPFybqS9bTyAka4MitGgPpHjWaI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:ea:f2:d2:a0:24:c3:db:0b:d6:21:45:c6:23:c6:f2:a6:e5:
         88:06:eb:ef:59:76:81:76:1c:98:cf:5a:09:e2:16:71:47:57:
         64:31:26:42:2b:08:7c:50:c9:9d:20:a1:d3:cd:eb:9e:cf:8a:
         f9:ad:d4:89:ca:c7:bd:f8:17:e5:ed:36:31:fa:14:8e:7b:e3:
         65:7f:6e:22:a0:8d:19:51:71:80:ef:d6:15:99:21:30:e9:20:
         64:76:0a:f4:ed:48:05:69:68:0d:eb:bd:2c:55:42:96:6c:7a:
         e8:19:0c:7a:a2:23:8c:d3:42:5c:4d:1b:1b:8b:6f:2c:a1:42:
         d9:84:51:1a:36:87:0d:7e:7f:04:65:81:56:26:c6:5a:6c:9c:
         30:8a:b4:eb:0d:75:fc:11:11:57:f5:00:79:c7:d8:25:b0:44:
         40:74:0e:2e:e3:1b:8c:35:27:35:4f:df:77:0e:98:bb:53:5b:
         d9:46:78:b3:33:b5:8c:3e:21:6c:e4:a2:d7:5d:f6:d4:c5:fa:
         7e:fd:bb:40:78:fc:bb:b9:ad:f6:07:4e:4b:df:6d:bf:f2:ff:
         4b:db:00:f8:03:f1:6b:8a:e6:1b:e8:cc:43:cf:9e:7d:ac:4e:
         c9:e6:51:d6:b9:5d:77:bb:b8:2b:eb:ab:33:8a:98:7e:b2:e5:
         ec:17:34:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:25:14 2025 by rpki-client