Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/0206ff-7e87-44a6-9a56-ba3c64e14a1d/1/Njy1xqBc3UgfMEwM2V6G1yLZbTw.mft
File:                     Njy1xqBc3UgfMEwM2V6G1yLZbTw.mft (raw, json)
Hash identifier:          19yfyUvUeHpg8mnWqB+wR7SLGegyzzA84ndi3241YuY=
Subject key identifier:   F6:0F:62:FE:6E:EC:ED:BE:16:EF:81:D7:5A:13:6A:E9:99:8E:D8:4B
Authority key identifier: 36:3C:B5:C6:A0:5C:DD:48:1F:30:4C:0C:D9:5E:86:D7:22:D9:6D:3C
Certificate issuer:       /CN=363cb5c6a05cdd481f304c0cd95e86d722d96d3c
Certificate serial:       0198D66006EB1C4D633F7276B89CAC1D2CBE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Njy1xqBc3UgfMEwM2V6G1yLZbTw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/0206ff-7e87-44a6-9a56-ba3c64e14a1d/1/Njy1xqBc3UgfMEwM2V6G1yLZbTw.mft
Manifest number:          02BB
Signing time:             Sat 23 Aug 2025 10:01:14 +0000
Manifest this update:     Sat 23 Aug 2025 10:01:14 +0000
Manifest next update:     Sun 24 Aug 2025 10:01:14 +0000
Files and hashes:         1: Kzv57mrF6D4TzpWqRm4OMZsBabg.roa (hash: H8J62lGi+SVfaohRYvudVwS5cRkvujjbuKntKUtgcEc=)
                          2: Njy1xqBc3UgfMEwM2V6G1yLZbTw.crl (hash: eTdRix6ay5engz1/j0R7Gxk9Tpyj3egCwKBqAI2J3fI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/0206ff-7e87-44a6-9a56-ba3c64e14a1d/1/Njy1xqBc3UgfMEwM2V6G1yLZbTw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/0206ff-7e87-44a6-9a56-ba3c64e14a1d/1/Njy1xqBc3UgfMEwM2V6G1yLZbTw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Njy1xqBc3UgfMEwM2V6G1yLZbTw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:60:06:eb:1c:4d:63:3f:72:76:b8:9c:ac:1d:2c:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=363cb5c6a05cdd481f304c0cd95e86d722d96d3c
        Validity
            Not Before: Aug 23 10:01:14 2025 GMT
            Not After : Aug 24 10:01:14 2025 GMT
        Subject: CN=f60f62fe6eecedbe16ef81d75a136ae9998ed84b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:83:d3:4a:a9:5d:f3:5b:a4:37:12:21:c7:0a:
                    d9:0e:11:ab:0c:cc:7e:4e:0d:3e:32:a6:d5:28:06:
                    7e:53:bc:3b:18:2a:d4:2c:58:e4:07:5c:24:52:42:
                    22:90:41:b1:1b:8b:be:34:ec:f5:98:cf:d8:ee:a3:
                    39:00:de:a3:19:b8:ef:36:ed:95:a9:0f:20:1e:4d:
                    d7:87:97:65:48:f8:3d:a2:6d:2a:d4:a5:71:94:f1:
                    56:12:03:c8:da:0b:6d:d6:ce:9c:45:f0:da:99:71:
                    53:38:78:81:cd:65:c6:50:53:d2:d6:69:fa:8a:c3:
                    b6:0c:56:a6:07:3b:d1:1a:d9:a3:1c:1c:52:d2:4a:
                    e3:14:9c:f1:2f:eb:07:2e:9e:92:b9:9a:71:4e:0e:
                    34:94:8c:35:a0:22:df:71:d6:09:08:2b:a6:ae:5f:
                    74:0d:ac:ee:be:81:b7:ac:f2:d5:14:1d:b6:66:cf:
                    e5:87:00:88:d2:58:a6:e8:8a:48:4a:2f:6f:99:8f:
                    86:01:24:e4:18:e4:e0:2c:91:39:cd:f2:21:33:20:
                    8b:75:09:cc:f3:ce:2d:e2:6a:f3:8f:a5:56:67:a1:
                    9f:6c:88:9c:db:11:e7:bc:43:1e:db:6e:2f:32:9b:
                    88:21:60:cd:4b:74:48:23:ef:8e:7f:0d:8a:e6:e9:
                    df:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:0F:62:FE:6E:EC:ED:BE:16:EF:81:D7:5A:13:6A:E9:99:8E:D8:4B
            X509v3 Authority Key Identifier:
                keyid:36:3C:B5:C6:A0:5C:DD:48:1F:30:4C:0C:D9:5E:86:D7:22:D9:6D:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Njy1xqBc3UgfMEwM2V6G1yLZbTw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0206ff-7e87-44a6-9a56-ba3c64e14a1d/1/Njy1xqBc3UgfMEwM2V6G1yLZbTw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0206ff-7e87-44a6-9a56-ba3c64e14a1d/1/Njy1xqBc3UgfMEwM2V6G1yLZbTw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:34:af:f0:fe:53:5a:be:8a:84:b9:fe:cd:57:61:fd:f5:6e:
         ff:b3:69:f0:a3:12:19:80:47:3f:25:a8:0e:35:03:8d:ff:b2:
         ce:87:44:a6:f4:11:5e:1e:09:de:7d:27:cb:93:4f:99:a4:35:
         0b:60:da:ca:b1:e7:12:f3:5c:b8:c7:1c:08:a4:92:35:0b:99:
         7e:a0:aa:8f:5d:5d:4f:bc:06:a0:06:ab:3a:69:8b:57:a8:a8:
         e3:73:c2:e3:e9:e6:3c:bc:62:f5:1d:99:e0:74:e4:2e:f1:d2:
         c8:56:40:16:b2:78:51:d0:26:91:be:45:58:18:a7:d5:7c:dd:
         d0:81:5d:e2:42:ae:9d:fb:02:14:24:ee:f8:33:19:c4:59:bc:
         2e:cf:4a:a2:04:e1:6f:b3:fc:87:75:46:91:dd:a7:0c:d2:d7:
         3e:ec:e8:de:65:b8:4f:7f:41:b1:f5:06:a9:fc:cf:3f:c9:e5:
         48:da:93:31:38:b0:af:31:88:30:01:4b:54:0d:bb:ef:49:9d:
         46:fc:69:5b:0d:a9:9c:99:a2:24:8e:06:d0:bd:84:36:79:53:
         3d:fd:2d:52:74:31:aa:4e:08:68:66:81:eb:12:31:18:52:ee:
         8f:ce:e5:6b:94:bd:79:9e:a6:e3:dc:29:11:cb:a3:15:ab:3b:
         dd:63:b2:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:40:31 2025 by rpki-client