Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/c90869-ee20-4939-840e-640c74a94cc6/1/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.mft
File:                     NUb_Rc5QVX7cTAMG4fhpSCrUI-A.mft (raw, json)
Hash identifier:          EEeyyVpcpN/7F1BeD+QEi58/1lS59YKEwg+CazKuZYs=
Subject key identifier:   63:78:16:02:52:66:A9:0F:72:04:96:DE:7A:38:56:21:F4:DB:00:0F
Authority key identifier: 35:46:FF:45:CE:50:55:7E:DC:4C:03:06:E1:F8:69:48:2A:D4:23:E0
Certificate issuer:       /CN=3546ff45ce50557edc4c0306e1f869482ad423e0
Certificate serial:       0198D515AC995C3DC751B83F9E04474F7479
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/c90869-ee20-4939-840e-640c74a94cc6/1/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.mft
Manifest number:          0804
Signing time:             Sat 23 Aug 2025 04:00:24 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:24 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:24 +0000
Files and hashes:         1: NUb_Rc5QVX7cTAMG4fhpSCrUI-A.crl (hash: uHk2B5zfZpcgLDJGhhjk/FmAqaxFZEdMzpNiahpLhHA=)
                          2: Rv1036YGXSxZ-LNtEMTG-yB-cpE.roa (hash: 9hIhakYU1jL8ELRanjY68hTQVJc33GMXNtFCdw91hfI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/c90869-ee20-4939-840e-640c74a94cc6/1/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/c90869-ee20-4939-840e-640c74a94cc6/1/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:15:ac:99:5c:3d:c7:51:b8:3f:9e:04:47:4f:74:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3546ff45ce50557edc4c0306e1f869482ad423e0
        Validity
            Not Before: Aug 23 04:00:24 2025 GMT
            Not After : Aug 24 04:00:24 2025 GMT
        Subject: CN=637816025266a90f720496de7a385621f4db000f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:69:eb:97:78:76:15:8f:fd:dd:48:64:b6:d8:
                    7a:f2:7b:a0:bd:50:65:5b:ef:27:6b:44:6c:1a:27:
                    9c:6b:a9:9e:f7:45:32:ad:27:ee:cb:c2:bd:be:38:
                    7f:26:cc:c6:4d:a0:09:03:61:c6:cf:d8:72:7a:8e:
                    79:65:25:26:c9:be:cb:ff:f0:a3:06:70:8b:50:cd:
                    1b:0a:34:b8:7a:9b:6a:ac:8f:3c:2c:a6:b3:5f:b5:
                    7d:bc:6c:6b:96:b4:94:77:88:c1:14:04:0f:44:71:
                    d5:7e:33:ab:b6:30:18:46:78:08:7d:3c:c4:da:d5:
                    ca:a2:eb:b6:0f:95:40:0b:02:d7:77:17:f6:79:2a:
                    64:fc:1c:bb:d6:91:17:d6:12:f1:a8:89:c0:fb:60:
                    57:19:35:71:19:32:48:ed:46:74:ae:83:fe:27:5b:
                    a3:62:ea:ab:71:84:fc:11:95:74:3a:15:e7:47:07:
                    f0:0e:b1:b6:f4:0c:16:2a:9a:00:b6:ae:03:dc:e1:
                    e9:a8:62:45:7f:f1:94:d1:5d:2b:4e:16:20:0f:fd:
                    77:35:21:32:40:bb:8d:07:d2:71:40:32:80:25:8d:
                    f8:61:bf:36:6d:76:10:0d:ee:5a:34:06:65:a6:92:
                    26:1c:ff:a0:38:fe:ad:04:4c:6a:1a:02:d3:87:b0:
                    da:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:78:16:02:52:66:A9:0F:72:04:96:DE:7A:38:56:21:F4:DB:00:0F
            X509v3 Authority Key Identifier:
                keyid:35:46:FF:45:CE:50:55:7E:DC:4C:03:06:E1:F8:69:48:2A:D4:23:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c90869-ee20-4939-840e-640c74a94cc6/1/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c90869-ee20-4939-840e-640c74a94cc6/1/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:01:5a:fe:ef:14:8e:a2:b8:cd:84:25:58:39:52:39:03:a6:
         02:08:42:ca:03:c3:7f:a3:1d:7d:92:16:df:b6:4a:9b:04:af:
         7b:a0:ce:63:1f:fe:73:a1:1d:64:e1:06:d2:f9:d6:cb:de:97:
         4e:a7:a1:ed:a9:d8:78:27:e1:5f:f2:e8:60:d9:6f:4b:fd:b2:
         78:01:45:90:8a:18:dd:27:f0:d0:d9:1e:03:29:a7:f5:3a:4f:
         af:ef:15:a1:25:40:8f:ba:59:24:a0:cd:35:5b:e1:d2:5e:8c:
         e2:9a:85:4e:16:93:b5:78:5b:cd:09:e9:f1:6e:f3:1b:22:ba:
         c1:0e:3d:7c:73:18:62:38:39:1f:64:73:17:a5:13:b3:b5:14:
         8c:4e:a2:2b:32:39:a7:9b:65:7f:4e:b2:34:e0:4f:93:42:35:
         d2:ec:e6:9a:ad:c2:1f:a4:5b:82:d9:8a:5a:b1:d7:0c:09:e5:
         9e:61:f0:55:ac:fc:94:8d:a4:65:ab:75:d3:d0:ad:ab:4d:57:
         8b:37:b3:dd:23:97:3a:9c:d9:36:29:ac:ed:18:5c:2b:37:b2:
         8e:3d:c8:0f:d6:1d:54:05:19:65:91:4c:79:d7:28:23:4e:5e:
         95:d9:f0:c6:a0:44:e3:d9:ab:98:51:46:a2:ad:f3:fc:75:c7:
         59:fe:b0:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFayZXD3HUbg/ngRHT3R5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NDZmZjQ1Y2U1MDU1N2VkYzRjMDMwNmUxZjg2OTQ4MmFk
NDIzZTAwHhcNMjUwODIzMDQwMDI0WhcNMjUwODI0MDQwMDI0WjAzMTEwLwYDVQQD
Eyg2Mzc4MTYwMjUyNjZhOTBmNzIwNDk2ZGU3YTM4NTYyMWY0ZGIwMDBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmnrl3h2FY/93Uhktth68nugvVBl
W+8na0RsGieca6me90UyrSfuy8K9vjh/JszGTaAJA2HGz9hyeo55ZSUmyb7L//Cj
BnCLUM0bCjS4eptqrI88LKazX7V9vGxrlrSUd4jBFAQPRHHVfjOrtjAYRngIfTzE
2tXKouu2D5VACwLXdxf2eSpk/By71pEX1hLxqInA+2BXGTVxGTJI7UZ0roP+J1uj
YuqrcYT8EZV0OhXnRwfwDrG29AwWKpoAtq4D3OHpqGJFf/GU0V0rThYgD/13NSEy
QLuNB9JxQDKAJY34Yb82bXYQDe5aNAZlppImHP+gOP6tBExqGgLTh7DaCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGN4FgJSZqkPcgSW3no4ViH02wAPMB8GA1UdIwQY
MBaAFDVG/0XOUFV+3EwDBuH4aUgq1CPgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlViX1JjNVFWWDdjVEFNRzRmaHBTQ3JVSS1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9jOTA4NjktZWUyMC00OTM5LTg0MGUt
NjQwYzc0YTk0Y2M2LzEvTlViX1JjNVFWWDdjVEFNRzRmaHBTQ3JVSS1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9jOTA4NjktZWUyMC00OTM5LTg0MGUtNjQwYzc0YTk0Y2M2
LzEvTlViX1JjNVFWWDdjVEFNRzRmaHBTQ3JVSS1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJgFa/u8U
jqK4zYQlWDlSOQOmAghCygPDf6MdfZIW37ZKmwSve6DOYx/+c6EdZOEG0vnWy96X
Tqeh7anYeCfhX/LoYNlvS/2yeAFFkIoY3Sfw0NkeAymn9TpPr+8VoSVAj7pZJKDN
NVvh0l6M4pqFThaTtXhbzQnp8W7zGyK6wQ49fHMYYjg5H2RzF6UTs7UUjE6iKzI5
p5tlf06yNOBPk0I10uzmmq3CH6RbgtmKWrHXDAnlnmHwVaz8lI2kZat109Ctq01X
izez3SOXOpzZNims7RhcKzeyjj3ID9YdVAUZZZFMedcoI05eldnwxqBE49mrmFFG
oq3z/HXHWf6wvA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 09:49:21 2025 by rpki-client