Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.mft
File:                     NoBlGroGa0CEp-0g1_UgGyKWwZc.mft (raw, json)
Hash identifier:          2xDdAErOiEStPzgW59Vl1urbGTZ880Ey4JzHbtVF1ME=
Subject key identifier:   D9:2F:2D:C0:A1:88:B1:70:EE:3F:F3:BC:81:62:F3:2F:40:ED:60:70
Authority key identifier: 36:80:65:1A:BA:06:6B:40:84:A7:ED:20:D7:F5:20:1B:22:96:C1:97
Certificate issuer:       /CN=3680651aba066b4084a7ed20d7f5201b2296c197
Certificate serial:       0198D54EBBBC83915E1A1C5AF6183AAEF852
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NoBlGroGa0CEp-0g1_UgGyKWwZc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.mft
Manifest number:          066A
Signing time:             Sat 23 Aug 2025 05:02:43 +0000
Manifest this update:     Sat 23 Aug 2025 05:02:43 +0000
Manifest next update:     Sun 24 Aug 2025 05:02:43 +0000
Files and hashes:         1: 4WEE6M8dthgW-fAXTbXKabGLlL0.roa (hash: Vz/LsTTjIy8GCO6P/Fc6vDeS0OdzaRulpb9xjUaoVO0=)
                          2: NoBlGroGa0CEp-0g1_UgGyKWwZc.crl (hash: +6RaMo+ahufS7fYhqPdN30Z15qPCyw8p7AakDlFA6nc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NoBlGroGa0CEp-0g1_UgGyKWwZc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:bb:bc:83:91:5e:1a:1c:5a:f6:18:3a:ae:f8:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3680651aba066b4084a7ed20d7f5201b2296c197
        Validity
            Not Before: Aug 23 05:02:43 2025 GMT
            Not After : Aug 24 05:02:43 2025 GMT
        Subject: CN=d92f2dc0a188b170ee3ff3bc8162f32f40ed6070
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:32:5f:1d:c6:52:d2:68:47:bf:14:ab:99:65:
                    0c:35:da:cf:90:87:2b:52:d0:a7:8c:4e:d5:21:b5:
                    d9:14:75:ca:71:17:6e:4e:61:85:a6:e2:53:61:e1:
                    d9:b0:ee:97:e5:67:d1:e4:2b:84:14:1a:18:ba:fe:
                    e5:ac:43:5d:70:0f:11:4e:6c:7e:23:e9:47:e2:7c:
                    b2:39:28:15:f9:dd:c0:ae:c2:29:9c:06:91:54:e8:
                    b5:fc:3c:d8:e6:db:2f:87:c7:44:c5:d2:9b:58:25:
                    26:02:87:dc:0a:65:a4:29:97:71:2e:23:34:41:9c:
                    ea:44:7f:c5:f3:5d:0e:2e:28:19:bc:73:00:b1:2e:
                    d8:f3:ac:ab:08:76:92:e0:3a:5d:56:45:d5:c7:a8:
                    b3:fc:0f:76:8c:c5:a2:b3:9a:3e:25:12:4f:06:6b:
                    5e:7b:52:65:5a:68:67:e7:42:fd:ee:e4:12:e4:8d:
                    78:e8:72:06:04:55:d7:58:a5:3d:cb:9b:19:90:cd:
                    74:07:87:e6:7c:73:0b:8c:94:b9:d0:c8:c8:c0:67:
                    d8:12:24:c1:88:51:94:53:24:8a:e7:2f:da:54:d3:
                    a1:77:f4:01:84:25:13:90:57:95:36:30:7c:e5:e5:
                    b9:fc:ca:38:d7:9d:4d:f7:78:43:fb:65:90:87:31:
                    a1:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:2F:2D:C0:A1:88:B1:70:EE:3F:F3:BC:81:62:F3:2F:40:ED:60:70
            X509v3 Authority Key Identifier:
                keyid:36:80:65:1A:BA:06:6B:40:84:A7:ED:20:D7:F5:20:1B:22:96:C1:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NoBlGroGa0CEp-0g1_UgGyKWwZc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:94:3e:c9:6f:dd:65:04:f6:39:f8:b1:f6:89:66:59:26:78:
         54:bb:06:95:a7:92:48:d8:c4:f6:74:11:d2:54:5a:d5:27:b3:
         78:92:97:4c:76:61:9c:23:84:3e:08:ce:05:0c:e9:c3:c3:9a:
         b6:6d:45:81:70:51:56:73:96:ad:34:26:b3:20:cf:f6:bd:ae:
         84:11:0f:d5:ac:92:f7:b0:9a:b9:16:b7:8e:b3:28:bb:10:5d:
         03:5a:f5:bc:f1:65:03:88:3a:03:8a:43:b7:22:06:b4:ee:f2:
         f2:e6:da:4a:d4:9d:bc:c7:56:ea:e5:9d:3f:db:e0:8f:bd:bc:
         e8:42:d1:c6:07:74:86:94:1b:7e:9c:22:72:6e:f4:9a:69:48:
         3c:9b:33:61:7a:70:c1:33:9a:f4:fa:09:b7:62:ad:cc:26:38:
         4e:5d:86:7c:2d:47:54:2d:40:80:51:2b:37:c1:92:18:39:27:
         21:f3:a9:33:a2:76:4d:87:8f:94:60:d9:96:c9:43:98:ae:44:
         33:86:c5:dd:5e:04:0b:8f:c9:c8:b9:18:9b:51:b4:6c:2a:19:
         04:8f:5f:2b:1e:76:7f:ae:33:93:a0:e1:9d:e9:5a:22:06:91:
         da:24:5c:83:e4:f8:72:f6:26:0f:cf:a1:b0:68:82:cf:b2:64:
         c7:65:88:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:11:10 2025 by rpki-client