Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/c429df-af25-4cce-bed7-d9b07fbbbbdb/1/NmIEOjHdm9K3yxhifrS6wRhAzhY.mft
File:                     NmIEOjHdm9K3yxhifrS6wRhAzhY.mft (raw, json)
Hash identifier:          bBQycjYLfc7gjAGJiSGKsMkNiaFbcLgb8mGmdRuUJTQ=
Subject key identifier:   08:82:44:CC:67:95:8C:7A:7F:E0:57:C4:39:10:98:A8:A9:38:5D:D8
Authority key identifier: 36:62:04:3A:31:DD:9B:D2:B7:CB:18:62:7E:B4:BA:C1:18:40:CE:16
Certificate issuer:       /CN=3662043a31dd9bd2b7cb18627eb4bac11840ce16
Certificate serial:       0198D5F184D167F7A45D91B7E7982A7D7EE1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NmIEOjHdm9K3yxhifrS6wRhAzhY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/c429df-af25-4cce-bed7-d9b07fbbbbdb/1/NmIEOjHdm9K3yxhifrS6wRhAzhY.mft
Manifest number:          1359
Signing time:             Sat 23 Aug 2025 08:00:31 +0000
Manifest this update:     Sat 23 Aug 2025 08:00:31 +0000
Manifest next update:     Sun 24 Aug 2025 08:00:31 +0000
Files and hashes:         1: NmIEOjHdm9K3yxhifrS6wRhAzhY.crl (hash: 3Tw8uXAvSl7LTpa3/IbHxKHpzOu2DFKhKZ030iGZf9c=)
                          2: WD0FQcbHEB-uoxf6girnu5JNKHw.roa (hash: iXRex71CWC3wFm8Z6DiGxb32qluuOPal75ek37KzREs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/c429df-af25-4cce-bed7-d9b07fbbbbdb/1/NmIEOjHdm9K3yxhifrS6wRhAzhY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/c429df-af25-4cce-bed7-d9b07fbbbbdb/1/NmIEOjHdm9K3yxhifrS6wRhAzhY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NmIEOjHdm9K3yxhifrS6wRhAzhY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:f1:84:d1:67:f7:a4:5d:91:b7:e7:98:2a:7d:7e:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3662043a31dd9bd2b7cb18627eb4bac11840ce16
        Validity
            Not Before: Aug 23 08:00:31 2025 GMT
            Not After : Aug 24 08:00:31 2025 GMT
        Subject: CN=088244cc67958c7a7fe057c4391098a8a9385dd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d8:20:79:cc:c4:b4:34:bb:36:a7:17:70:5e:
                    eb:4e:84:5f:03:5f:80:ea:c0:d1:c9:39:ba:f1:de:
                    08:ea:13:ca:7e:70:17:70:fb:fe:20:c2:5a:15:72:
                    44:f0:14:bd:d2:75:e3:9f:5f:02:a9:57:fb:43:64:
                    be:db:ab:0a:22:60:57:ef:34:e7:1a:06:8e:fa:40:
                    55:1f:b8:a8:72:14:d1:7a:05:1b:a0:8d:ca:37:6e:
                    b9:20:d5:f9:34:bd:3f:e4:c0:fe:f6:33:11:bc:f5:
                    13:01:ae:9d:f0:12:ee:16:36:e3:82:47:fc:82:3a:
                    63:ef:69:d9:f8:68:3a:50:0c:fd:90:30:ca:84:a3:
                    39:2c:7a:4b:03:20:ed:ba:3a:97:0a:d4:7c:f7:a0:
                    3f:bb:f4:90:c2:e7:a0:20:d8:d2:cf:f2:f2:28:8b:
                    60:89:7a:36:1a:d0:27:34:07:26:75:4e:5b:4e:d5:
                    c0:d6:91:21:12:b5:2f:e3:bd:c0:95:66:39:59:2b:
                    8f:1a:aa:74:2c:f2:d2:4c:3a:66:42:b3:e0:2e:06:
                    b7:7c:25:0e:0a:7b:94:ff:ff:6c:af:85:ed:76:44:
                    bc:7f:86:19:eb:e9:95:58:8d:d0:30:82:75:bf:8e:
                    38:d5:d0:53:cc:c2:ba:3e:10:b5:1b:00:7f:5f:7d:
                    b9:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:82:44:CC:67:95:8C:7A:7F:E0:57:C4:39:10:98:A8:A9:38:5D:D8
            X509v3 Authority Key Identifier:
                keyid:36:62:04:3A:31:DD:9B:D2:B7:CB:18:62:7E:B4:BA:C1:18:40:CE:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NmIEOjHdm9K3yxhifrS6wRhAzhY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/c429df-af25-4cce-bed7-d9b07fbbbbdb/1/NmIEOjHdm9K3yxhifrS6wRhAzhY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/c429df-af25-4cce-bed7-d9b07fbbbbdb/1/NmIEOjHdm9K3yxhifrS6wRhAzhY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:4f:05:99:a1:bb:62:d2:0f:38:a0:c2:3c:f8:a3:5a:c9:60:
         76:bb:78:aa:d7:c9:4c:0c:fa:d6:d9:67:47:2a:fc:55:95:2d:
         41:03:1e:06:f7:85:13:ca:ef:66:e5:46:d9:f8:2d:1b:d3:b8:
         c4:fe:08:a2:26:61:f6:8c:9b:51:e9:f2:42:f6:38:1b:b4:80:
         51:d5:7d:cc:68:14:74:52:d8:12:35:f9:ae:64:a5:59:63:cc:
         3f:72:16:09:e2:f5:2f:15:b2:f4:15:b8:c2:b3:1e:64:2c:d8:
         86:36:52:2a:51:dc:93:28:ae:ea:90:b0:a1:5b:86:76:f9:03:
         0a:1d:e0:33:6c:1f:6f:94:29:8b:65:d8:8d:60:39:5c:e8:8c:
         76:53:11:42:10:f1:37:cf:84:ed:df:d7:26:d1:90:35:9b:b7:
         5b:08:12:7e:63:b4:65:bc:25:47:74:0b:74:c7:59:ac:df:e1:
         86:83:c3:27:46:44:ff:b8:4f:9a:99:e8:86:8e:73:32:7d:a3:
         07:a6:0b:f7:01:a0:fd:22:59:21:57:05:b7:57:c1:68:51:3f:
         12:4e:01:1b:8f:ea:bf:33:17:41:9c:a9:ec:fe:29:aa:df:30:
         09:ad:6e:f9:c4:79:69:a2:83:c9:9c:3e:0e:fd:e1:8c:60:08:
         f6:15:a7:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:31:27 2025 by rpki-client