Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/813821-24f4-485f-9c4b-433403d30a83/1/NJwCswrb8Q9x-b4PRkRCRJgmPfM.mft
File:                     NJwCswrb8Q9x-b4PRkRCRJgmPfM.mft (raw, json)
Hash identifier:          Rv5SXFf0m1SGfduoDo6DJfXGRd9EGTKDAwDlDun9OL0=
Subject key identifier:   65:5F:7F:83:E8:E5:27:A8:45:E0:90:BE:E2:C1:7F:12:17:83:73:87
Authority key identifier: 34:9C:02:B3:0A:DB:F1:0F:71:F9:BE:0F:46:44:42:44:98:26:3D:F3
Certificate issuer:       /CN=349c02b30adbf10f71f9be0f4644424498263df3
Certificate serial:       0198D65F5F75FA15245F747E5A7375C21631
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NJwCswrb8Q9x-b4PRkRCRJgmPfM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/813821-24f4-485f-9c4b-433403d30a83/1/NJwCswrb8Q9x-b4PRkRCRJgmPfM.mft
Manifest number:          138B
Signing time:             Sat 23 Aug 2025 10:00:31 +0000
Manifest this update:     Sat 23 Aug 2025 10:00:31 +0000
Manifest next update:     Sun 24 Aug 2025 10:00:31 +0000
Files and hashes:         1: NJwCswrb8Q9x-b4PRkRCRJgmPfM.crl (hash: UxtqFxRz/F1y5mu0kesBM4hcTFqwPevU09+CH0et4tc=)
                          2: OhsLBgdiLz12uE4gfFblJpOKDsM.roa (hash: +nTXnosSsmnjrvQn+59KIQoVJyqP58V74UTxUmrvxmI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/813821-24f4-485f-9c4b-433403d30a83/1/NJwCswrb8Q9x-b4PRkRCRJgmPfM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/813821-24f4-485f-9c4b-433403d30a83/1/NJwCswrb8Q9x-b4PRkRCRJgmPfM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NJwCswrb8Q9x-b4PRkRCRJgmPfM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 10:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:5f:5f:75:fa:15:24:5f:74:7e:5a:73:75:c2:16:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=349c02b30adbf10f71f9be0f4644424498263df3
        Validity
            Not Before: Aug 23 10:00:31 2025 GMT
            Not After : Aug 24 10:00:31 2025 GMT
        Subject: CN=655f7f83e8e527a845e090bee2c17f1217837387
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:61:98:94:df:67:aa:4f:91:e0:06:34:cf:f2:
                    f3:68:a9:21:8a:9f:70:47:b2:62:2a:30:02:00:91:
                    5a:0c:64:06:de:cd:b6:1f:5e:d0:62:b3:3c:b2:6f:
                    78:7c:23:ef:a1:eb:b6:d4:c8:88:47:14:f9:6f:10:
                    6c:bc:22:f9:41:74:f1:23:db:7f:df:8c:96:67:2b:
                    3b:6a:17:c1:98:e2:69:d3:50:32:1b:fe:4a:08:5f:
                    9c:f6:ea:8e:ab:90:46:1f:c1:38:2c:8e:4b:69:09:
                    bf:2d:49:1a:29:60:42:33:62:f4:99:fe:75:88:c9:
                    92:85:f5:4e:45:78:ea:e1:36:e6:3d:c3:58:c3:ce:
                    40:87:ac:e2:e0:59:08:b4:96:91:9c:be:11:9b:05:
                    ea:94:a2:b1:11:f6:20:8e:ee:ba:a8:0a:3b:79:e9:
                    4e:45:ae:5c:dd:29:7c:9f:32:1c:36:ae:3b:d2:71:
                    bd:0a:8e:bb:1a:06:bf:f1:fb:22:38:49:f5:20:13:
                    3e:35:39:b1:89:b7:ba:d8:e1:90:51:5b:21:8e:b1:
                    8e:9f:96:9f:ff:ec:a9:a8:d0:e2:cd:50:ff:3e:a3:
                    8c:55:73:43:4a:44:20:7b:d0:57:49:f8:8b:f9:08:
                    10:6c:55:f5:17:e0:2d:71:3b:74:2b:56:15:80:51:
                    8e:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:5F:7F:83:E8:E5:27:A8:45:E0:90:BE:E2:C1:7F:12:17:83:73:87
            X509v3 Authority Key Identifier:
                keyid:34:9C:02:B3:0A:DB:F1:0F:71:F9:BE:0F:46:44:42:44:98:26:3D:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJwCswrb8Q9x-b4PRkRCRJgmPfM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/813821-24f4-485f-9c4b-433403d30a83/1/NJwCswrb8Q9x-b4PRkRCRJgmPfM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/813821-24f4-485f-9c4b-433403d30a83/1/NJwCswrb8Q9x-b4PRkRCRJgmPfM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:c8:92:42:9a:be:46:eb:15:ff:ea:14:ca:1c:01:e3:b3:b8:
         4e:5e:d2:34:50:89:7f:27:21:27:7b:8c:0d:d4:5a:33:f5:46:
         7f:64:1c:b0:5b:63:fc:79:d4:5d:eb:5b:38:d8:98:11:fd:ff:
         d9:43:81:fc:4b:34:8b:b3:0c:f0:99:48:ea:9f:fb:d7:3b:43:
         7f:4a:f0:80:b0:68:04:36:f6:31:fe:b3:88:36:e2:5f:bd:ca:
         a3:c5:08:95:90:fb:75:17:57:81:f8:ac:a4:d0:8e:3e:77:15:
         bf:7c:88:62:33:a2:f4:51:07:c4:d3:86:37:50:b9:36:b8:2e:
         ad:7d:07:01:74:6d:11:a1:b6:1b:fe:79:81:4d:eb:16:dd:51:
         a6:ef:e9:5e:47:5a:0b:15:2d:ba:a6:2b:78:5b:bb:23:b5:cd:
         a4:46:46:f9:ef:b7:a2:65:9a:0b:68:b6:c3:cb:0f:86:7f:42:
         37:74:34:26:24:95:ad:ac:69:56:e7:4b:18:2d:88:4b:e1:3e:
         f4:ba:38:0d:fb:10:ed:88:25:39:8e:16:b6:85:34:8f:0c:80:
         cb:40:71:a0:b9:60:6e:6e:d7:ee:75:93:1f:1f:0e:76:31:d2:
         e7:36:c6:22:95:8d:67:9f:50:a2:f1:ca:0f:4a:b0:56:ed:73:
         1f:41:50:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:33:55 2025 by rpki-client