Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/e0059f-b910-4bb7-9341-7750972265aa/1/N_9VuVdDqRW3k9ct5xrJbOYZipc.mft
File:                     N_9VuVdDqRW3k9ct5xrJbOYZipc.mft (raw, json)
Hash identifier:          BeyOCXI3GilB5yHzmkgTIO4bFK+mkmUHk9PrIPa/LT0=
Subject key identifier:   3B:9A:50:7B:41:81:EE:61:49:E2:E9:AD:79:E5:CF:BC:C4:5B:CF:21
Authority key identifier: 37:FF:55:B9:57:43:A9:15:B7:93:D7:2D:E7:1A:C9:6C:E6:19:8A:97
Certificate issuer:       /CN=37ff55b95743a915b793d72de71ac96ce6198a97
Certificate serial:       0198D5F138447EA1D45CC60A5828270EDB01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N_9VuVdDqRW3k9ct5xrJbOYZipc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/e0059f-b910-4bb7-9341-7750972265aa/1/N_9VuVdDqRW3k9ct5xrJbOYZipc.mft
Manifest number:          15DB
Signing time:             Sat 23 Aug 2025 08:00:12 +0000
Manifest this update:     Sat 23 Aug 2025 08:00:12 +0000
Manifest next update:     Sun 24 Aug 2025 08:00:12 +0000
Files and hashes:         1: N_9VuVdDqRW3k9ct5xrJbOYZipc.crl (hash: nJqCVNKmjZS9hU86bJuzLoJeVn/BZ7o4xRj9NSeA8Jo=)
                          2: UOgjlDZ-hlIE51uRVoyR7KP99NE.roa (hash: 1AY5DsB6GoL7krCLNb7v1DdRQDuAlUbr226PuiYccH4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/e0059f-b910-4bb7-9341-7750972265aa/1/N_9VuVdDqRW3k9ct5xrJbOYZipc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/e0059f-b910-4bb7-9341-7750972265aa/1/N_9VuVdDqRW3k9ct5xrJbOYZipc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N_9VuVdDqRW3k9ct5xrJbOYZipc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 08:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:f1:38:44:7e:a1:d4:5c:c6:0a:58:28:27:0e:db:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37ff55b95743a915b793d72de71ac96ce6198a97
        Validity
            Not Before: Aug 23 08:00:12 2025 GMT
            Not After : Aug 24 08:00:12 2025 GMT
        Subject: CN=3b9a507b4181ee6149e2e9ad79e5cfbcc45bcf21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:01:75:fe:cd:90:6d:8f:9f:ed:43:df:ce:db:
                    1e:a8:83:11:2b:88:a2:d0:ec:98:32:7c:39:aa:c4:
                    91:d4:d7:5a:ff:09:7a:87:25:d0:05:2d:52:92:01:
                    49:8c:61:5b:2c:1a:18:92:38:4a:26:38:7c:df:00:
                    ec:c0:63:85:55:76:db:9f:ae:d1:3c:3f:15:9d:bb:
                    62:dd:4f:10:8e:33:ca:13:fb:be:86:e8:87:9e:8b:
                    1e:11:ac:b9:27:c3:d6:07:25:11:05:38:28:03:20:
                    c5:84:86:34:33:99:b6:65:7c:7a:06:75:ec:44:52:
                    0c:34:a8:96:0e:51:2c:9c:44:c9:da:14:05:84:b5:
                    ab:4c:01:1c:de:c2:6b:c1:b5:db:7d:88:70:d5:e2:
                    3c:70:25:29:e1:0c:12:95:b6:1b:77:78:b7:32:c1:
                    15:34:02:99:c7:59:16:c7:2b:14:9e:ac:c4:83:b8:
                    22:52:3f:3a:1d:1d:da:33:e6:ea:ff:0e:30:6d:84:
                    54:c2:7c:97:4a:ee:42:30:b6:0c:14:3d:b7:5f:e7:
                    af:c8:a0:2f:05:dc:43:1b:68:2d:96:28:b2:10:af:
                    f9:25:27:0e:30:20:d6:47:e9:26:ed:78:a1:dc:b5:
                    a5:b8:47:b5:c7:3f:7d:bb:4c:d3:33:87:26:ca:82:
                    8d:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:9A:50:7B:41:81:EE:61:49:E2:E9:AD:79:E5:CF:BC:C4:5B:CF:21
            X509v3 Authority Key Identifier:
                keyid:37:FF:55:B9:57:43:A9:15:B7:93:D7:2D:E7:1A:C9:6C:E6:19:8A:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N_9VuVdDqRW3k9ct5xrJbOYZipc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/e0059f-b910-4bb7-9341-7750972265aa/1/N_9VuVdDqRW3k9ct5xrJbOYZipc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/e0059f-b910-4bb7-9341-7750972265aa/1/N_9VuVdDqRW3k9ct5xrJbOYZipc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:6f:77:5c:0f:c1:02:8f:3e:8f:c8:d9:5b:d1:09:44:92:0f:
         ee:0a:d9:2a:0b:1e:60:19:c6:d8:57:91:15:e9:0d:c2:62:ab:
         9b:e8:ac:2f:ef:ac:4b:93:df:3b:fb:aa:9a:42:29:aa:1d:f6:
         88:78:83:ca:ca:6b:16:a6:0e:07:a9:f4:a9:fd:97:03:cd:5e:
         1e:a0:03:89:aa:c9:cb:12:ff:b2:9a:d4:3a:2a:26:e8:0a:65:
         c2:f4:6a:8a:91:34:89:4e:fc:09:cc:55:ae:45:ea:45:82:0d:
         97:a5:bf:86:82:44:58:29:2a:2a:ea:24:d2:5c:62:b9:cc:25:
         67:d0:fa:e9:0d:e4:c5:db:62:17:d8:3b:1d:20:7a:87:aa:19:
         f9:9f:69:eb:2b:d0:09:33:ed:d2:b0:62:11:1c:7e:14:33:59:
         98:e5:ed:b2:0d:8b:45:06:7d:8b:c6:81:3b:e1:78:e5:d0:6e:
         b0:f1:47:2f:be:2a:7a:87:a9:a2:2b:d9:2d:cd:e8:48:1a:f3:
         81:4a:63:d4:11:46:b7:5b:4f:08:c6:a6:6e:c7:5c:f2:16:e1:
         30:ca:1b:f2:bc:7d:13:d4:19:f1:f2:37:03:24:b5:3c:ea:b1:
         8d:69:7e:de:d7:44:df:10:5b:ad:41:63:97:39:7d:5a:38:e6:
         fa:98:0b:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:28:36 2025 by rpki-client