Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft
File:                     nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft (raw, json)
Hash identifier:          qVxLfIV8yxrKwpBOhoqaWvvYgQLx+XNspwo2gGUpg8s=
Subject key identifier:   41:9D:79:37:A3:72:B4:2A:BF:22:EE:CC:A7:D7:47:1E:E8:E7:0F:28
Authority key identifier: 9E:74:0C:D3:B6:6B:60:E1:8B:3D:96:FF:B3:F4:21:8D:79:B5:B7:70
Certificate issuer:       /CN=9e740cd3b66b60e18b3d96ffb3f4218d79b5b770
Certificate serial:       0198D4DFD85C73F7382B2466A148BB6100B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nnQM07ZrYOGLPZb_s_QhjXm1t3A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft
Manifest number:          15DB
Signing time:             Sat 23 Aug 2025 03:01:36 +0000
Manifest this update:     Sat 23 Aug 2025 03:01:36 +0000
Manifest next update:     Sun 24 Aug 2025 03:01:36 +0000
Files and hashes:         1: P4xtR7feyaz6xolJASFQCzKsZ5I.roa (hash: 8akLt+kVG21bECUmJhi7RKtZ33RFaJwb4cW+qtXYRks=)
                          2: nnQM07ZrYOGLPZb_s_QhjXm1t3A.crl (hash: cgMrSUC4fHQIEOeESu+qgeUAVuHhBS6cRIi4sy3o4YA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nnQM07ZrYOGLPZb_s_QhjXm1t3A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 03:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:df:d8:5c:73:f7:38:2b:24:66:a1:48:bb:61:00:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e740cd3b66b60e18b3d96ffb3f4218d79b5b770
        Validity
            Not Before: Aug 23 03:01:36 2025 GMT
            Not After : Aug 24 03:01:36 2025 GMT
        Subject: CN=419d7937a372b42abf22eecca7d7471ee8e70f28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:09:e9:8d:8a:54:3a:78:42:58:92:0d:2c:95:
                    18:e9:df:62:3a:4a:c8:2d:42:5d:49:02:1e:0b:4a:
                    05:af:45:3b:27:65:3e:0c:17:3e:24:11:db:13:33:
                    b7:c1:ac:9b:d8:d9:7a:4e:34:58:5a:53:ab:2e:47:
                    f5:b7:da:3c:13:e9:b4:ae:97:52:f7:c9:d4:5d:61:
                    87:7f:59:05:54:8d:f9:9f:b4:bb:1d:4f:7c:2f:c5:
                    e0:f8:ca:7c:1b:39:89:49:7d:1f:62:81:2f:b3:c3:
                    2a:13:15:48:10:ee:ce:cd:97:85:7d:b7:74:1b:f0:
                    4f:f1:75:86:94:66:fa:a9:99:c7:2f:97:b6:f1:ea:
                    89:eb:f4:1d:34:23:a9:b8:86:79:2c:bb:cd:15:26:
                    85:68:51:97:b5:c2:e5:39:31:70:ce:3e:1f:11:21:
                    0f:44:63:8d:33:1c:d5:de:47:fe:5a:9b:f4:b4:10:
                    6d:45:3d:4d:ea:b2:9a:90:55:81:ba:c3:1c:82:6b:
                    26:6a:1e:6a:41:11:eb:03:fd:e0:e6:3a:a7:be:2b:
                    c8:8b:1e:15:f4:55:f7:20:7f:cc:1d:81:07:fb:b0:
                    d9:a5:c2:7c:1d:f4:1a:3e:ed:f4:12:7f:81:9f:60:
                    2a:fb:d2:a3:bb:7d:10:04:8a:bc:2b:48:50:a1:5d:
                    e9:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:9D:79:37:A3:72:B4:2A:BF:22:EE:CC:A7:D7:47:1E:E8:E7:0F:28
            X509v3 Authority Key Identifier:
                keyid:9E:74:0C:D3:B6:6B:60:E1:8B:3D:96:FF:B3:F4:21:8D:79:B5:B7:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nnQM07ZrYOGLPZb_s_QhjXm1t3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/1de613-61b9-4b07-ad47-50e4b0504f48/1/nnQM07ZrYOGLPZb_s_QhjXm1t3A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:ab:38:2e:ce:46:b9:fe:03:1c:1c:d8:1a:99:ca:59:39:a1:
         1d:f1:03:e8:4c:a2:9f:7a:ec:00:e4:2a:18:68:e0:2c:a6:7f:
         dc:7d:a6:dc:06:82:d4:86:82:56:f8:3a:c7:4e:70:64:bb:29:
         99:b9:30:90:ea:ec:d1:7b:18:ec:53:12:4b:41:f3:85:f7:b5:
         ad:3b:d6:48:0a:ec:e3:7d:3c:f6:c6:c8:3a:e7:48:e8:23:c8:
         b6:0e:12:15:4e:7d:b6:dc:c4:21:ee:48:91:b3:5d:08:b1:c8:
         ff:5b:9e:36:d0:e6:f3:2c:58:e9:82:93:2f:9e:6e:d1:03:09:
         f2:3a:6d:4f:c7:f0:5f:74:3c:34:72:96:81:b3:55:d5:55:3d:
         02:02:ce:98:7c:6b:cb:c4:10:f7:6d:38:ac:d9:27:8b:9f:96:
         81:f0:1b:e3:e3:ad:50:6b:bc:fa:5f:ee:7b:dc:44:77:7f:52:
         1d:b0:5b:89:4e:e3:1a:1f:b5:be:02:0d:fe:2f:ec:10:cd:e6:
         5b:ef:dd:60:70:89:1c:67:20:55:a8:a1:00:ec:64:b4:2c:8d:
         6c:c8:00:33:7c:ff:44:d3:82:0f:15:58:60:b0:f6:a9:e0:67:
         57:c4:92:49:b7:af:ab:46:e1:3d:d5:f4:ad:80:1e:34:ee:c8:
         bd:4f:19:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:08:15 2025 by rpki-client