Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/c5a848-260d-4ad0-aef3-d7b2c93442d3/1/Nx-4XU-AjLFgeivk9KeYyj6tOBA.mft
File:                     Nx-4XU-AjLFgeivk9KeYyj6tOBA.mft (raw, json)
Hash identifier:          D2bkLU8y8MRHYeOan47vMbDHsVQ/hhXrD4i01PsJ3z0=
Subject key identifier:   39:F8:9E:0F:78:0C:B4:D2:DE:28:5F:FF:FD:18:20:C8:D9:E9:40:7F
Authority key identifier: 37:1F:B8:5D:4F:80:8C:B1:60:7A:2B:E4:F4:A7:98:CA:3E:AD:38:10
Certificate issuer:       /CN=371fb85d4f808cb1607a2be4f4a798ca3ead3810
Certificate serial:       0198D73B07C1CC32675720DCEA5B0DA5BC44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nx-4XU-AjLFgeivk9KeYyj6tOBA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/c5a848-260d-4ad0-aef3-d7b2c93442d3/1/Nx-4XU-AjLFgeivk9KeYyj6tOBA.mft
Manifest number:          164C
Signing time:             Sat 23 Aug 2025 14:00:26 +0000
Manifest this update:     Sat 23 Aug 2025 14:00:26 +0000
Manifest next update:     Sun 24 Aug 2025 14:00:26 +0000
Files and hashes:         1: Nx-4XU-AjLFgeivk9KeYyj6tOBA.crl (hash: 7ACZMoKuIoaWCwPjslQneoPwCu8IqixrNsuJof0xajA=)
                          2: n5KP5ufURfzYm-dc-9TpGgegI9M.roa (hash: BV7R38C05Kbtl7OcfTA9iXDfsj6OteeTUI52xIrldQE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/c5a848-260d-4ad0-aef3-d7b2c93442d3/1/Nx-4XU-AjLFgeivk9KeYyj6tOBA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/c5a848-260d-4ad0-aef3-d7b2c93442d3/1/Nx-4XU-AjLFgeivk9KeYyj6tOBA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Nx-4XU-AjLFgeivk9KeYyj6tOBA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:50:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:3b:07:c1:cc:32:67:57:20:dc:ea:5b:0d:a5:bc:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=371fb85d4f808cb1607a2be4f4a798ca3ead3810
        Validity
            Not Before: Aug 23 14:00:26 2025 GMT
            Not After : Aug 24 14:00:26 2025 GMT
        Subject: CN=39f89e0f780cb4d2de285ffffd1820c8d9e9407f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:7a:20:79:78:96:55:e3:af:f5:84:8d:99:79:
                    5f:4e:4b:d1:5f:b5:06:49:01:07:88:96:5e:99:dd:
                    80:a0:f0:07:d5:33:48:88:0f:e3:14:33:f6:31:9c:
                    f8:57:ca:d4:fc:5b:0a:f3:8a:fc:6f:ba:b3:34:69:
                    1d:f4:2f:fd:8a:33:b7:3a:10:1b:a1:cc:b6:e7:1b:
                    0a:35:88:28:f4:7c:2e:d6:e2:b9:8d:56:35:01:15:
                    71:5d:c1:8b:71:67:3d:7e:47:7e:64:76:33:e7:1d:
                    9e:70:79:d9:fc:10:d1:62:a9:33:6a:5c:d6:3d:7d:
                    72:03:53:5b:a2:c7:34:c5:ae:ad:a9:1d:7f:ba:68:
                    fb:e9:65:d4:65:9c:0e:34:b4:1a:8c:16:39:c2:c0:
                    36:bd:af:98:e1:ea:a4:d0:09:93:fe:64:d3:e1:df:
                    ed:a2:7d:9f:f0:7d:8d:6b:27:0e:29:13:43:ca:6f:
                    47:59:a4:75:04:84:f8:53:6d:b0:68:e7:13:17:c9:
                    d0:7f:7e:90:27:7e:9c:62:be:92:c2:42:03:57:b3:
                    68:fd:f8:c9:ce:56:f9:e7:88:a9:89:19:ac:9a:45:
                    fe:cc:04:fe:7c:40:73:57:3b:0f:f5:42:31:91:db:
                    b6:12:d4:10:62:bb:e0:92:89:ad:00:c1:a3:c4:72:
                    d2:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:F8:9E:0F:78:0C:B4:D2:DE:28:5F:FF:FD:18:20:C8:D9:E9:40:7F
            X509v3 Authority Key Identifier:
                keyid:37:1F:B8:5D:4F:80:8C:B1:60:7A:2B:E4:F4:A7:98:CA:3E:AD:38:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nx-4XU-AjLFgeivk9KeYyj6tOBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c5a848-260d-4ad0-aef3-d7b2c93442d3/1/Nx-4XU-AjLFgeivk9KeYyj6tOBA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c5a848-260d-4ad0-aef3-d7b2c93442d3/1/Nx-4XU-AjLFgeivk9KeYyj6tOBA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:b6:ec:50:a0:65:1e:16:39:48:f2:37:8b:7d:8b:8d:90:58:
         b7:8b:7e:96:e3:04:e5:b6:76:77:bc:10:f8:c6:44:8d:6f:3f:
         6e:b7:20:15:2f:d9:ca:7b:27:db:81:dd:ff:2c:91:19:d4:11:
         ca:aa:68:7e:3a:76:be:c3:ce:f8:ff:87:44:0a:d3:5f:e8:d3:
         c1:d8:df:7a:94:80:5d:29:30:41:d6:b2:91:f1:b4:2a:93:4f:
         66:62:93:a0:ba:6e:54:fd:09:63:f9:37:0c:3d:92:f9:42:c0:
         ca:72:a7:d8:f5:f0:c2:ac:37:b2:80:86:11:ab:46:e8:78:a9:
         c0:f9:dc:50:72:67:b3:bf:7a:2b:a6:fb:a7:db:61:b8:48:1f:
         71:2c:a1:6b:45:41:ba:e3:04:55:49:da:b1:2f:dd:57:25:2c:
         e5:db:19:a8:e3:63:4b:d6:61:ba:76:64:1a:d4:91:38:21:21:
         1b:81:68:33:e7:6b:81:d5:6f:88:c2:c9:98:99:3a:47:1e:2f:
         28:34:42:11:62:ad:93:c9:8c:16:b4:1c:3f:bb:42:cd:be:dd:
         11:89:6c:b7:c6:96:52:e8:e1:3e:07:59:27:9c:5a:65:f5:89:
         0b:66:f8:1d:ce:36:81:5b:2c:04:f6:35:b3:77:6c:cf:41:1b:
         d9:68:67:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:45:50 2025 by rpki-client