Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/nM47EZfQz5URVAVypY_TctzAdIk.mft
File:                     nM47EZfQz5URVAVypY_TctzAdIk.mft (raw, json)
Hash identifier:          EpJ0U7zfN1/3NkKjE6K+gP1UTZdDrg+te8DKpW7UQ+Y=
Subject key identifier:   95:48:C8:28:DC:5D:11:10:48:95:7D:7D:7D:8A:D0:1E:BF:80:97:62
Authority key identifier: 9C:CE:3B:11:97:D0:CF:95:11:54:05:72:A5:8F:D3:72:DC:C0:74:89
Certificate issuer:       /CN=9cce3b1197d0cf9511540572a58fd372dcc07489
Certificate serial:       0198D4E0076EB7E22552F764187193E4C1E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nM47EZfQz5URVAVypY_TctzAdIk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/nM47EZfQz5URVAVypY_TctzAdIk.mft
Manifest number:          1144
Signing time:             Sat 23 Aug 2025 03:01:48 +0000
Manifest this update:     Sat 23 Aug 2025 03:01:48 +0000
Manifest next update:     Sun 24 Aug 2025 03:01:48 +0000
Files and hashes:         1: B5L5vO55nBhfniljBpOUow8aXpw.roa (hash: DIMd34dyf8uJUIUl3TvafcV9IS2e08ZcTMFZLeGk8KM=)
                          2: JafDMsZo_2WlBv1_b3upjycXmLU.roa (hash: cGcJ9xKOVuAlrxxUBxsd3T744wFpR+9phZElM6fNzW0=)
                          3: SHsQx5nLK3je9BRJdGpJA5FmBJw.roa (hash: w1LS0Na0/a/or8fsG3pHVRaGF64EW4fSRED25Ol57DY=)
                          4: bVTa17baMARG71NZ_lURgWWh_4Y.roa (hash: A1ALFNaBHdD7deqRm4EdGoE1FRnMJSkvg8oyd+Kqmgc=)
                          5: lkc-0MlfE6wjagT9foeguXGZhBk.roa (hash: Dk9iF0id/HpCNZDFa+BXpH9AMMGx3UOmasYJ8e7rqkM=)
                          6: nM47EZfQz5URVAVypY_TctzAdIk.crl (hash: xNWwh1HblI8JkTKbhaHRAbI/SzN5iru19AoPGDwLWSc=)
                          7: rfouL44lCXKFlJx3f-T9zbjuGS4.roa (hash: tCYRZzQeGaABrV6yDW5xOTTpQ0NtqSv/VFgzFAs4QHg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/nM47EZfQz5URVAVypY_TctzAdIk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/nM47EZfQz5URVAVypY_TctzAdIk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nM47EZfQz5URVAVypY_TctzAdIk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 03:01:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:07:6e:b7:e2:25:52:f7:64:18:71:93:e4:c1:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cce3b1197d0cf9511540572a58fd372dcc07489
        Validity
            Not Before: Aug 23 03:01:48 2025 GMT
            Not After : Aug 24 03:01:48 2025 GMT
        Subject: CN=9548c828dc5d111048957d7d7d8ad01ebf809762
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6b:f8:8d:8c:0a:8f:b4:6b:58:74:74:de:3c:
                    53:a6:dd:fc:aa:1e:b5:43:1a:59:76:32:13:e5:e5:
                    c4:34:af:79:16:1f:cb:84:1a:c3:ac:59:90:07:9b:
                    a3:64:4d:d9:de:b2:f0:1f:13:f1:36:29:33:48:39:
                    80:31:fd:ef:dc:0a:e6:de:22:fc:f3:50:f4:e3:93:
                    e6:28:37:90:63:f7:97:8e:73:56:28:8e:6d:a2:1a:
                    c5:ea:7c:17:a7:75:44:45:ce:23:03:0e:0d:a4:c4:
                    76:49:6c:72:2c:73:72:e8:8b:8e:ff:15:8f:42:11:
                    39:45:7f:42:17:e1:33:e3:3e:11:b6:50:5a:66:32:
                    c9:65:8b:af:68:b1:13:cd:57:15:d7:49:aa:cd:10:
                    2c:14:3c:6c:e8:f5:3b:23:f4:e1:e7:f7:32:cb:4e:
                    f2:68:61:7e:64:ba:e5:0f:e5:e9:03:43:33:42:4e:
                    7b:f2:b7:0c:69:b6:91:80:f5:7a:de:eb:9d:21:99:
                    72:44:10:90:41:2e:10:61:84:07:ff:6d:df:f2:aa:
                    6b:3e:e7:69:19:1e:37:bf:55:4b:d0:09:60:c6:de:
                    d2:4f:b1:b5:d6:e0:6a:59:51:4d:18:d3:73:26:7c:
                    9a:eb:1a:6e:0d:2f:a5:bb:57:8d:7f:e6:2e:19:8f:
                    e9:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:48:C8:28:DC:5D:11:10:48:95:7D:7D:7D:8A:D0:1E:BF:80:97:62
            X509v3 Authority Key Identifier:
                keyid:9C:CE:3B:11:97:D0:CF:95:11:54:05:72:A5:8F:D3:72:DC:C0:74:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nM47EZfQz5URVAVypY_TctzAdIk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/nM47EZfQz5URVAVypY_TctzAdIk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/nM47EZfQz5URVAVypY_TctzAdIk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:98:13:8b:42:0c:4f:5c:d7:3c:65:01:01:73:c9:ad:46:9b:
         3d:62:2c:29:be:b9:30:40:6f:31:f1:be:57:2e:51:a9:a3:0f:
         2a:bd:53:4a:4b:9a:09:94:59:b1:fa:79:c4:35:3a:27:6c:95:
         7c:a8:e3:8b:13:69:c8:79:5f:58:ec:2a:48:ad:f0:ad:de:00:
         7a:88:83:95:bf:8e:38:fd:1d:40:9c:5f:ca:ac:c6:7d:69:7c:
         b8:e0:9b:46:61:73:75:e7:55:c0:26:1d:08:ae:e9:e0:3b:51:
         6b:9e:d8:e4:24:bf:2e:a0:68:00:8d:d1:6e:42:6d:66:cb:1c:
         32:47:2e:54:ad:b6:d5:f7:a6:7f:f6:53:16:84:d6:96:6f:88:
         57:f0:2c:36:58:04:f4:fb:62:3a:dd:c1:1a:d2:67:74:07:de:
         d7:6d:65:9f:a4:46:f3:35:6a:39:56:7e:20:ad:13:1b:c6:f1:
         fc:ff:4f:03:5d:a8:c5:5a:5a:62:de:a5:a7:17:16:9d:5f:40:
         31:52:5c:9a:76:03:27:95:91:38:54:98:8c:b5:15:38:ca:24:
         7a:48:bb:e0:c2:5d:a5:45:da:f1:ff:b2:a8:c9:23:ed:7a:8d:
         a7:aa:1e:d8:6d:f1:2a:29:5c:4a:4e:d7:ee:5d:da:e3:46:1f:
         b6:ac:81:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:11:10 2025 by rpki-client