Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/758203-d529-48a7-98f4-e51a90907226/1/NgxZNeUf5wbCRHUZ2bX5WuNjwYY.mft
File:                     NgxZNeUf5wbCRHUZ2bX5WuNjwYY.mft (raw, json)
Hash identifier:          UtWRQ7jTe8iF4JqChObZsoz++/i69i55Xj0sDWXz8X4=
Subject key identifier:   9F:9C:60:58:B7:70:5B:F7:88:69:DC:03:D8:BF:6D:90:9D:E9:B4:10
Authority key identifier: 36:0C:59:35:E5:1F:E7:06:C2:44:75:19:D9:B5:F9:5A:E3:63:C1:86
Certificate issuer:       /CN=360c5935e51fe706c2447519d9b5f95ae363c186
Certificate serial:       0198D54EA48247022103EE585F2EFE5F713D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NgxZNeUf5wbCRHUZ2bX5WuNjwYY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/758203-d529-48a7-98f4-e51a90907226/1/NgxZNeUf5wbCRHUZ2bX5WuNjwYY.mft
Manifest number:          11F6
Signing time:             Sat 23 Aug 2025 05:02:37 +0000
Manifest this update:     Sat 23 Aug 2025 05:02:37 +0000
Manifest next update:     Sun 24 Aug 2025 05:02:37 +0000
Files and hashes:         1: NgxZNeUf5wbCRHUZ2bX5WuNjwYY.crl (hash: S3vqrU597IybnIXH6nGBFRlZ+nFvbUCKpNx4q8qMzvE=)
                          2: t502H2vMdpAeOhruVMNDr3Acpww.roa (hash: fOmBVqNdsH/gE4UkC59LOcZAoo+pjmsg19OUK4hM+ps=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/758203-d529-48a7-98f4-e51a90907226/1/NgxZNeUf5wbCRHUZ2bX5WuNjwYY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/758203-d529-48a7-98f4-e51a90907226/1/NgxZNeUf5wbCRHUZ2bX5WuNjwYY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NgxZNeUf5wbCRHUZ2bX5WuNjwYY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:a4:82:47:02:21:03:ee:58:5f:2e:fe:5f:71:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=360c5935e51fe706c2447519d9b5f95ae363c186
        Validity
            Not Before: Aug 23 05:02:37 2025 GMT
            Not After : Aug 24 05:02:37 2025 GMT
        Subject: CN=9f9c6058b7705bf78869dc03d8bf6d909de9b410
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:96:30:5f:a7:7e:d7:b2:53:52:f1:85:df:12:
                    da:ce:06:01:a1:94:3d:00:5b:6d:3f:17:f4:99:83:
                    65:22:c3:87:6d:a8:9f:34:8a:d6:3a:ef:46:21:3c:
                    9c:06:a6:2a:40:eb:c4:12:77:e3:d8:74:49:84:09:
                    7f:06:dc:8a:f2:0b:65:2f:5a:ef:ed:dd:29:24:05:
                    43:d1:b1:36:e1:a1:82:14:fd:88:f2:67:e4:03:4c:
                    ef:54:0e:45:90:05:cc:e3:53:ec:ed:0e:a1:07:88:
                    f4:f7:28:b8:62:a3:64:e3:5c:8e:85:75:7c:10:a9:
                    0e:cd:92:ca:42:e5:39:ca:aa:49:09:db:49:8d:2d:
                    de:f3:1a:0c:b6:04:bc:d2:b6:51:b2:8c:de:e6:89:
                    5d:6d:4e:90:89:19:1a:fb:ce:b2:c7:88:4e:84:3a:
                    8d:7c:7f:1c:f5:8b:c6:e5:af:29:e4:2a:70:ba:0c:
                    80:55:df:a4:3d:fd:77:e4:06:58:f3:f4:82:db:59:
                    4a:3c:f6:8f:91:ab:6f:1f:ef:c4:6a:17:9e:fd:dc:
                    58:19:f9:fb:11:0a:52:9c:4c:fa:a5:e9:9c:92:cf:
                    1f:d3:1e:b3:bd:08:ba:5d:b0:97:3b:a0:5d:a6:73:
                    33:08:77:27:8a:86:06:08:49:db:34:65:3c:ea:81:
                    ee:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:9C:60:58:B7:70:5B:F7:88:69:DC:03:D8:BF:6D:90:9D:E9:B4:10
            X509v3 Authority Key Identifier:
                keyid:36:0C:59:35:E5:1F:E7:06:C2:44:75:19:D9:B5:F9:5A:E3:63:C1:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NgxZNeUf5wbCRHUZ2bX5WuNjwYY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/758203-d529-48a7-98f4-e51a90907226/1/NgxZNeUf5wbCRHUZ2bX5WuNjwYY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/758203-d529-48a7-98f4-e51a90907226/1/NgxZNeUf5wbCRHUZ2bX5WuNjwYY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e9:eb:0f:78:44:6e:4b:83:c4:f9:2e:e7:8d:cb:6d:92:f8:51:
         59:82:fb:8b:75:05:6f:2d:89:44:c4:e2:64:e1:d1:f8:57:f7:
         7a:69:ab:55:38:6f:e6:dc:cd:62:26:09:90:75:4a:99:4a:38:
         a0:f3:40:be:97:cf:44:c7:7a:68:b3:d2:53:b3:85:1f:0a:c5:
         2d:b9:73:7f:e0:73:1f:e1:67:46:80:f6:1f:db:8c:11:e5:d1:
         4c:b9:e1:6e:96:04:f1:c9:e3:f7:b1:17:67:d8:4c:19:6a:20:
         87:f0:be:f2:b3:f2:ec:c1:f0:5f:24:a7:8e:24:de:b5:03:33:
         e7:83:ea:b8:f2:2b:9d:4c:09:0c:40:3d:20:c4:b8:1e:71:98:
         b2:2b:4b:62:88:f4:fc:e6:87:69:67:21:73:6a:ec:95:74:d6:
         9d:36:4d:47:bb:63:c5:01:c6:c5:a5:fa:cd:9b:a8:62:cd:e3:
         6b:b2:43:ef:1a:7f:28:9c:1c:40:10:92:58:67:25:96:d0:50:
         e6:7f:27:a0:7c:99:73:94:0f:54:9f:c1:12:a8:69:d9:bb:a7:
         64:c2:f4:b9:08:72:bc:d3:8e:00:56:ef:67:10:21:e4:03:55:
         ad:15:ea:1e:8a:5a:7b:66:81:c9:d2:b7:97:15:f0:aa:14:e3:
         d4:00:4f:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:40:02 2025 by rpki-client