Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/f89c9e-3e9a-41ba-9b45-35614e9178fc/1/NPWeovpHqdYxGxyMxahqW5oOR6c.mft
File:                     NPWeovpHqdYxGxyMxahqW5oOR6c.mft (raw, json)
Hash identifier:          JqpsaLP6x0y7x78M6h0DaDaaRKJyYVnNELpksyKmib4=
Subject key identifier:   B9:B4:B1:88:56:D2:6D:8E:A5:27:CE:7E:7C:E7:6F:E0:EA:63:73:E3
Authority key identifier: 34:F5:9E:A2:FA:47:A9:D6:31:1B:1C:8C:C5:A8:6A:5B:9A:0E:47:A7
Certificate issuer:       /CN=34f59ea2fa47a9d6311b1c8cc5a86a5b9a0e47a7
Certificate serial:       0198D5BC66FD0C18BE2C0D2999CAE3AB0A7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NPWeovpHqdYxGxyMxahqW5oOR6c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/f89c9e-3e9a-41ba-9b45-35614e9178fc/1/NPWeovpHqdYxGxyMxahqW5oOR6c.mft
Manifest number:          164B
Signing time:             Sat 23 Aug 2025 07:02:30 +0000
Manifest this update:     Sat 23 Aug 2025 07:02:30 +0000
Manifest next update:     Sun 24 Aug 2025 07:02:30 +0000
Files and hashes:         1: NPWeovpHqdYxGxyMxahqW5oOR6c.crl (hash: JmM7gP7MPcPR+9Z8JM8MqTTA9K5KsA/ms0Uk7xX4XJc=)
                          2: ugIdAnD72uDX1xk6AnCHQeEOh1Y.roa (hash: QffGW9BNMmaT3r0VD1GTXNsWErI53h66jEjYScdrUso=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/f89c9e-3e9a-41ba-9b45-35614e9178fc/1/NPWeovpHqdYxGxyMxahqW5oOR6c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/f89c9e-3e9a-41ba-9b45-35614e9178fc/1/NPWeovpHqdYxGxyMxahqW5oOR6c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NPWeovpHqdYxGxyMxahqW5oOR6c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bc:66:fd:0c:18:be:2c:0d:29:99:ca:e3:ab:0a:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34f59ea2fa47a9d6311b1c8cc5a86a5b9a0e47a7
        Validity
            Not Before: Aug 23 07:02:30 2025 GMT
            Not After : Aug 24 07:02:30 2025 GMT
        Subject: CN=b9b4b18856d26d8ea527ce7e7ce76fe0ea6373e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:6f:6e:cf:00:74:bb:ee:b7:88:fd:e4:22:a9:
                    a5:1d:e0:12:0f:22:b1:46:56:56:76:86:cb:8f:40:
                    5b:f5:7c:a8:08:6a:31:c4:c7:f1:98:6a:cd:2f:92:
                    f1:87:49:2f:16:86:f9:f9:13:86:aa:81:dd:91:ec:
                    77:13:88:85:e7:9d:6f:bd:06:d5:bf:27:73:1e:d4:
                    f8:84:e6:45:c6:d4:a4:54:16:58:44:f9:14:4d:d9:
                    3f:41:25:4d:99:75:9a:b9:c4:5f:98:f7:db:7c:9e:
                    6b:ac:cc:61:5c:14:16:bb:f4:87:7a:41:f3:c9:9c:
                    63:6c:18:89:10:16:ae:21:7a:23:3b:c5:0f:0f:6c:
                    65:6c:8a:47:0e:38:3f:ec:83:fd:a0:a0:2e:80:61:
                    54:9d:79:48:6c:18:e1:83:f2:d5:bc:b2:e3:ec:18:
                    87:b9:31:b9:e3:78:4d:cd:7d:e1:e1:bd:ad:f8:bd:
                    88:97:4c:24:e0:33:75:8b:af:dc:0c:6b:43:5f:9e:
                    e7:67:35:a6:07:d2:15:69:df:c4:0b:08:63:e0:e7:
                    81:e0:16:97:78:09:d8:35:ae:06:98:60:53:7c:1a:
                    9a:e2:21:a2:a6:a1:2e:05:39:01:c3:82:80:55:34:
                    fd:51:61:83:72:8f:8d:8a:77:cf:f2:d0:62:9a:5c:
                    5b:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:B4:B1:88:56:D2:6D:8E:A5:27:CE:7E:7C:E7:6F:E0:EA:63:73:E3
            X509v3 Authority Key Identifier:
                keyid:34:F5:9E:A2:FA:47:A9:D6:31:1B:1C:8C:C5:A8:6A:5B:9A:0E:47:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPWeovpHqdYxGxyMxahqW5oOR6c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f89c9e-3e9a-41ba-9b45-35614e9178fc/1/NPWeovpHqdYxGxyMxahqW5oOR6c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f89c9e-3e9a-41ba-9b45-35614e9178fc/1/NPWeovpHqdYxGxyMxahqW5oOR6c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:3d:33:38:62:5f:dd:05:47:cd:8c:25:da:2d:09:3b:fd:67:
         5b:54:bc:81:62:24:39:15:02:ac:20:15:ac:9b:96:c9:8c:7f:
         37:cb:6f:72:28:46:eb:76:d6:bf:6b:30:af:e1:15:42:43:29:
         63:9f:68:e4:37:e5:6a:bf:47:17:6a:1e:a9:df:56:33:03:ac:
         3b:d2:52:24:6f:b0:36:ed:fa:5a:5c:24:0d:60:40:73:ab:57:
         b1:33:6a:72:08:50:a9:95:85:22:a7:b5:12:b8:8a:2f:dc:e0:
         fe:6a:97:35:c1:74:8d:e2:91:48:38:e2:53:5b:ad:57:eb:4a:
         55:29:eb:2f:5f:2c:59:e5:16:53:f6:73:cf:58:a1:ee:89:a5:
         c5:46:04:b6:34:3b:98:d7:44:e5:cb:ec:d8:67:a9:91:72:34:
         9e:2a:cb:79:ab:33:9b:2f:7c:d4:78:6b:a4:20:47:5a:44:31:
         63:89:b8:25:1a:2c:ec:81:7d:1e:6d:dd:7b:e9:1a:ea:5f:c8:
         76:b0:a7:b1:ec:01:b3:e2:22:15:67:4c:11:71:e4:c1:d4:85:
         9a:62:5b:bb:04:0a:c5:66:e2:c7:a0:94:d7:a8:b8:79:cc:8c:
         de:2e:92:97:44:85:56:9c:0a:a6:5a:7f:df:a8:33:9b:02:bf:
         e5:73:4c:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:07:27 2025 by rpki-client