Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/002716-a257-4568-bf07-ded3862b7631/1/nSBC44DWR2UTrMCPtU-8xzYm7D0.mft
File:                     nSBC44DWR2UTrMCPtU-8xzYm7D0.mft (raw, json)
Hash identifier:          GHoC36Np6HQm/U6q02uZfmPGicUgfqY8u4CYAOz3KR0=
Subject key identifier:   6D:0E:50:88:7E:D7:C3:F8:2A:89:CB:03:75:D5:C7:D1:DC:05:29:30
Authority key identifier: 9D:20:42:E3:80:D6:47:65:13:AC:C0:8F:B5:4F:BC:C7:36:26:EC:3D
Certificate issuer:       /CN=9d2042e380d6476513acc08fb54fbcc73626ec3d
Certificate serial:       0198D5BC10D48ADAF66114ABE5DFEE0C19B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nSBC44DWR2UTrMCPtU-8xzYm7D0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/002716-a257-4568-bf07-ded3862b7631/1/nSBC44DWR2UTrMCPtU-8xzYm7D0.mft
Manifest number:          0178
Signing time:             Sat 23 Aug 2025 07:02:08 +0000
Manifest this update:     Sat 23 Aug 2025 07:02:08 +0000
Manifest next update:     Sun 24 Aug 2025 07:02:08 +0000
Files and hashes:         1: nSBC44DWR2UTrMCPtU-8xzYm7D0.crl (hash: CZ5LjU4GdbGPRHRbPx9dcIl6RDZr+nRH4UwrOGq4AfY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/002716-a257-4568-bf07-ded3862b7631/1/nSBC44DWR2UTrMCPtU-8xzYm7D0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/002716-a257-4568-bf07-ded3862b7631/1/nSBC44DWR2UTrMCPtU-8xzYm7D0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nSBC44DWR2UTrMCPtU-8xzYm7D0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bc:10:d4:8a:da:f6:61:14:ab:e5:df:ee:0c:19:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d2042e380d6476513acc08fb54fbcc73626ec3d
        Validity
            Not Before: Aug 23 07:02:08 2025 GMT
            Not After : Aug 24 07:02:08 2025 GMT
        Subject: CN=6d0e50887ed7c3f82a89cb0375d5c7d1dc052930
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b1:28:fd:d6:8d:85:fa:19:47:35:9f:63:c7:
                    d9:10:ea:49:0a:0c:f7:35:79:0b:df:f9:e4:31:e8:
                    6a:b2:e3:d0:52:eb:d8:7a:09:6b:55:52:ca:f0:0b:
                    c2:85:b9:9d:78:f7:88:7f:0f:82:a2:a1:a1:11:18:
                    50:14:9e:3d:c0:05:42:7d:55:08:74:69:3b:f2:64:
                    20:fd:fe:ba:f0:2e:99:45:41:e7:98:fc:76:fe:15:
                    11:38:d5:fa:dc:f2:15:89:72:0e:ca:39:e1:23:73:
                    76:97:35:dc:6b:89:c7:05:6d:1b:09:35:01:5a:e6:
                    50:cd:5c:18:14:93:28:79:72:bf:f0:3b:0b:56:6e:
                    06:26:50:7f:59:ff:91:3f:14:99:78:6e:41:7c:b2:
                    87:50:bd:10:96:dc:17:b8:6d:e7:fb:63:84:d0:03:
                    f5:ef:08:99:44:2c:de:0c:ee:9a:b3:8c:c7:84:45:
                    0b:b2:0e:9a:ee:ce:c2:43:18:18:fb:92:40:01:97:
                    4b:c2:49:2a:9e:c3:b0:3b:2b:21:cd:cc:a0:8f:e5:
                    a4:c4:b0:86:b0:8f:b2:6e:e9:ce:1c:8a:b2:00:e9:
                    5b:3c:fb:37:d8:f5:84:a9:93:6d:9d:0c:d4:91:19:
                    fd:08:a0:42:ec:81:f3:59:44:4a:31:20:42:21:f9:
                    99:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:0E:50:88:7E:D7:C3:F8:2A:89:CB:03:75:D5:C7:D1:DC:05:29:30
            X509v3 Authority Key Identifier:
                keyid:9D:20:42:E3:80:D6:47:65:13:AC:C0:8F:B5:4F:BC:C7:36:26:EC:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSBC44DWR2UTrMCPtU-8xzYm7D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/002716-a257-4568-bf07-ded3862b7631/1/nSBC44DWR2UTrMCPtU-8xzYm7D0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/002716-a257-4568-bf07-ded3862b7631/1/nSBC44DWR2UTrMCPtU-8xzYm7D0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:11:e2:b1:af:d6:ba:ba:74:88:2e:f8:61:8a:51:95:10:82:
         b3:4c:2f:e0:6c:d1:37:b4:2a:f9:8f:6f:a0:cc:49:39:07:44:
         b8:0f:87:f6:21:76:1b:39:0f:64:c0:40:91:a6:77:bf:ad:cc:
         0d:8b:91:d0:47:ee:71:5b:a0:90:16:8c:bd:8d:60:d9:57:9e:
         9c:3a:a8:d8:e8:73:23:95:bc:45:19:ee:78:15:44:9c:8d:29:
         cd:4f:6c:ed:c4:f3:b2:41:bf:e5:93:51:22:93:1a:21:d8:a7:
         8e:f5:04:0d:a9:99:df:12:ba:11:36:9e:0d:5d:c7:f2:f9:eb:
         aa:83:72:b4:90:7b:0b:2d:1b:9f:2f:1c:73:66:cd:2f:f7:ee:
         f0:df:93:40:2f:0a:7c:03:33:35:6d:8a:33:b1:93:58:00:03:
         e6:ae:2b:13:b6:2d:b4:f4:d3:36:1f:f1:f3:53:1a:86:67:d8:
         34:34:99:8b:fd:76:62:5d:d9:a8:61:76:12:2b:e8:0b:14:1e:
         a4:19:a1:f2:df:0c:7f:1f:5e:af:6f:5a:3d:cb:b6:b8:92:fa:
         f1:d6:6c:b2:df:e7:16:87:81:bc:b6:78:12:b6:a5:27:bb:8b:
         7c:a2:f1:1c:e4:a5:4f:57:74:3c:fe:58:fb:3e:2b:66:7e:86:
         6e:e3:75:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:52:56 2025 by rpki-client