Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/ed4e2c-e5ad-417a-8788-11824406bd5d/1/nOTmWuzJXURqDLZAuXZvoPgVDjw.mft
File:                     nOTmWuzJXURqDLZAuXZvoPgVDjw.mft (raw, json)
Hash identifier:          xpBTIhhR3Xk3XIT8SPlsHmX4/7OfnwMv02QUJzIcmWc=
Subject key identifier:   57:EB:BD:84:C6:9B:7F:0D:CA:35:76:2F:F6:87:96:49:8F:D2:C9:65
Authority key identifier: 9C:E4:E6:5A:EC:C9:5D:44:6A:0C:B6:40:B9:76:6F:A0:F8:15:0E:3C
Certificate issuer:       /CN=9ce4e65aecc95d446a0cb640b9766fa0f8150e3c
Certificate serial:       0198D8516B7CAF3E43DC985AEDE6A8C23D1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nOTmWuzJXURqDLZAuXZvoPgVDjw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/ed4e2c-e5ad-417a-8788-11824406bd5d/1/nOTmWuzJXURqDLZAuXZvoPgVDjw.mft
Manifest number:          0F4E
Signing time:             Sat 23 Aug 2025 19:04:31 +0000
Manifest this update:     Sat 23 Aug 2025 19:04:31 +0000
Manifest next update:     Sun 24 Aug 2025 19:04:31 +0000
Files and hashes:         1: nOTmWuzJXURqDLZAuXZvoPgVDjw.crl (hash: 2prSyD5h0AY/QfGiTB1EpPaTZIndrxbdkbWSLe44RAY=)
                          2: wnex2LpnDh2tDYAOL_JlA2jqYbg.roa (hash: jkFPmngwGBf/VR9fqzS0+q+xo9EQNuNbpIxHsY+rxw0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/ed4e2c-e5ad-417a-8788-11824406bd5d/1/nOTmWuzJXURqDLZAuXZvoPgVDjw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/ed4e2c-e5ad-417a-8788-11824406bd5d/1/nOTmWuzJXURqDLZAuXZvoPgVDjw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nOTmWuzJXURqDLZAuXZvoPgVDjw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 17:19:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d8:51:6b:7c:af:3e:43:dc:98:5a:ed:e6:a8:c2:3d:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ce4e65aecc95d446a0cb640b9766fa0f8150e3c
        Validity
            Not Before: Aug 23 19:04:31 2025 GMT
            Not After : Aug 24 19:04:31 2025 GMT
        Subject: CN=57ebbd84c69b7f0dca35762ff68796498fd2c965
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c1:76:6a:aa:12:a4:bb:db:f4:91:af:49:a5:
                    e2:86:a8:f3:f6:d8:33:17:17:80:72:5d:03:b1:fd:
                    8e:b0:dd:6d:ee:53:f4:2a:79:95:48:cf:56:73:1f:
                    7a:63:b9:30:b2:0f:af:44:b4:53:80:fd:07:92:ce:
                    01:7c:57:68:49:25:41:a0:82:c0:d5:aa:77:45:5b:
                    5e:2e:46:a8:16:38:bf:24:73:7a:82:15:64:ba:4a:
                    43:ba:38:86:e0:9f:70:25:be:8d:d0:49:2f:e7:81:
                    b6:16:45:e3:18:86:62:d9:5b:5b:e7:38:b8:1b:36:
                    18:f3:f5:51:a7:d4:c3:98:48:95:ac:8c:b0:24:41:
                    06:dc:3f:ab:30:f4:21:25:7b:5f:7d:ab:b3:82:9d:
                    c6:d5:dd:12:af:65:36:96:56:e5:6b:54:93:2d:b1:
                    71:73:1c:b2:ea:eb:a0:58:5d:f4:12:73:67:ea:e9:
                    ae:d9:0b:9c:f5:5d:87:e2:04:36:0f:c0:24:58:e9:
                    25:9a:8f:f4:03:40:f9:a2:ae:53:68:79:84:36:b5:
                    17:19:81:36:b7:5b:4b:4d:b8:3d:68:d3:63:18:12:
                    d7:e0:9a:a1:88:52:8e:64:c4:92:88:7b:a6:60:e5:
                    37:bc:ae:b7:35:43:c6:4e:41:72:e8:01:a3:6a:a2:
                    5d:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:EB:BD:84:C6:9B:7F:0D:CA:35:76:2F:F6:87:96:49:8F:D2:C9:65
            X509v3 Authority Key Identifier:
                keyid:9C:E4:E6:5A:EC:C9:5D:44:6A:0C:B6:40:B9:76:6F:A0:F8:15:0E:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nOTmWuzJXURqDLZAuXZvoPgVDjw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ed4e2c-e5ad-417a-8788-11824406bd5d/1/nOTmWuzJXURqDLZAuXZvoPgVDjw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ed4e2c-e5ad-417a-8788-11824406bd5d/1/nOTmWuzJXURqDLZAuXZvoPgVDjw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:46:4a:77:ca:5d:73:06:ec:2b:0c:bc:a2:24:2b:1d:93:29:
         68:31:08:ec:f1:2b:81:4a:aa:53:be:e5:b0:b7:d4:4a:ca:9a:
         02:3e:fd:3e:ef:03:f5:a0:7a:23:7f:09:0d:a9:06:cf:40:55:
         d0:d9:a7:7a:3a:b9:3a:b9:ef:85:7e:34:39:8e:1f:c3:20:ad:
         33:bb:19:45:ab:8c:dc:ee:ee:ec:60:1b:b9:93:78:c8:57:82:
         c3:54:34:11:89:87:8b:c2:50:bd:bc:39:29:4c:50:f6:52:7a:
         63:cd:91:8f:85:54:26:6c:d3:2c:e6:a8:b0:39:2e:27:9c:a8:
         a0:42:a5:3f:5e:04:71:94:b5:e3:25:a3:7c:77:0a:ff:6a:11:
         64:73:0e:75:9a:d4:70:0a:3c:cb:d8:c5:44:4e:ad:23:25:72:
         41:cd:a3:16:b2:69:f2:a5:99:72:b0:8e:bf:a5:d4:2e:76:97:
         9f:8b:c6:22:d2:08:ce:e7:9d:ef:69:83:43:0b:93:85:f8:bd:
         ae:11:d9:0b:5a:c5:7d:95:12:4d:c7:7f:00:fb:f1:21:31:30:
         5a:ad:34:da:b4:e0:00:45:e8:02:76:42:91:cc:99:68:34:37:
         20:11:8c:4c:59:b6:3c:3d:9b:c9:a0:8c:3f:a2:d2:ac:7e:60:
         93:93:a6:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:07:45 2025 by rpki-client