Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/dcb613-93eb-4e86-895b-b1e698708f59/1/nJB6oEaogfuAUFGVIBYwYCYNfzE.mft
File:                     nJB6oEaogfuAUFGVIBYwYCYNfzE.mft (raw, json)
Hash identifier:          pgk9Q5z3blu4FcHRJ2MdZGV1ww9zFYmdjZsGgwJWKs4=
Subject key identifier:   26:E2:C9:AC:10:DC:24:F5:34:6A:95:F4:37:A0:D0:3D:E3:6E:AA:F8
Authority key identifier: 9C:90:7A:A0:46:A8:81:FB:80:50:51:95:20:16:30:60:26:0D:7F:31
Certificate issuer:       /CN=9c907aa046a881fb8050519520163060260d7f31
Certificate serial:       0197CC83FCF6EC107FDEEC8677E4F5F6FF8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nJB6oEaogfuAUFGVIBYwYCYNfzE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/dcb613-93eb-4e86-895b-b1e698708f59/1/nJB6oEaogfuAUFGVIBYwYCYNfzE.mft
Manifest number:          019B
Signing time:             Wed 02 Jul 2025 19:01:31 +0000
Manifest this update:     Wed 02 Jul 2025 19:01:31 +0000
Manifest next update:     Thu 03 Jul 2025 19:01:31 +0000
Files and hashes:         1: F86xC6xwpLDuhs7A8wZygejUMX8.roa (hash: hqY5dyyDkeBwJW2ZEKNHXzfFF8UT2R+EbGGyWHizujw=)
                          2: nJB6oEaogfuAUFGVIBYwYCYNfzE.crl (hash: 1L2jdEkgQNCA2zv+CM4ORrjeMVJN+FZCVsgEm3aBfVs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/dcb613-93eb-4e86-895b-b1e698708f59/1/nJB6oEaogfuAUFGVIBYwYCYNfzE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/dcb613-93eb-4e86-895b-b1e698708f59/1/nJB6oEaogfuAUFGVIBYwYCYNfzE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nJB6oEaogfuAUFGVIBYwYCYNfzE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 03 Jul 2025 19:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:cc:83:fc:f6:ec:10:7f:de:ec:86:77:e4:f5:f6:ff:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c907aa046a881fb8050519520163060260d7f31
        Validity
            Not Before: Jul  2 19:01:31 2025 GMT
            Not After : Jul  3 19:01:31 2025 GMT
        Subject: CN=26e2c9ac10dc24f5346a95f437a0d03de36eaaf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:d7:fe:bc:32:22:57:27:2b:09:04:4e:a6:0e:
                    87:0b:76:75:8c:c4:b4:78:2a:d9:53:d0:cc:98:5b:
                    91:58:b1:a5:2f:f8:4a:0b:b5:a9:6b:a2:3f:82:f5:
                    bb:6e:f9:f9:15:7f:72:c1:2f:f9:7a:35:a2:32:e6:
                    10:5e:a4:ed:a9:19:3b:8d:e0:35:8e:e6:ca:75:d6:
                    9e:12:be:dd:60:44:a1:81:97:22:80:b7:27:b2:2f:
                    2e:f1:5c:23:8b:2d:43:6c:09:78:68:b3:86:cc:b7:
                    4f:7f:3a:a5:08:cf:74:f0:26:4e:7e:03:47:a1:6d:
                    6b:67:7e:93:60:d7:9c:2b:23:49:e5:d1:95:77:64:
                    d6:56:8c:99:60:b0:fc:53:34:7c:76:91:97:be:a3:
                    84:68:13:61:ed:5b:f9:6d:47:09:0b:7b:cb:72:42:
                    78:58:39:ad:29:e5:9f:ad:83:99:de:ae:f2:2a:ec:
                    83:36:b7:f3:89:80:82:1b:f8:9f:15:49:89:be:47:
                    c2:20:6b:b8:5f:75:6f:92:06:36:8c:a8:2c:a4:e8:
                    52:ac:bc:7b:f5:71:3f:86:80:4a:45:85:b0:2e:82:
                    7a:db:77:ec:98:e3:ad:2b:e7:f1:69:a5:ad:96:2e:
                    7b:c8:11:6f:5c:1a:dd:c2:30:3a:98:78:3f:5d:67:
                    70:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:E2:C9:AC:10:DC:24:F5:34:6A:95:F4:37:A0:D0:3D:E3:6E:AA:F8
            X509v3 Authority Key Identifier:
                keyid:9C:90:7A:A0:46:A8:81:FB:80:50:51:95:20:16:30:60:26:0D:7F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nJB6oEaogfuAUFGVIBYwYCYNfzE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/dcb613-93eb-4e86-895b-b1e698708f59/1/nJB6oEaogfuAUFGVIBYwYCYNfzE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/dcb613-93eb-4e86-895b-b1e698708f59/1/nJB6oEaogfuAUFGVIBYwYCYNfzE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:30:62:5e:61:d1:8d:e9:39:b0:d6:64:6c:15:3e:8a:bc:9c:
         1f:6d:ad:ae:38:a5:21:f7:7d:81:fe:88:9d:d3:b8:0a:45:83:
         a6:88:05:4c:76:c1:43:21:e9:c6:eb:e5:78:25:f9:61:d5:b5:
         c1:42:ff:47:c3:7e:8a:6b:66:6c:f4:85:63:a4:18:21:ff:0d:
         9a:b7:87:3f:9a:30:96:8e:fc:93:39:3b:9d:47:68:85:73:05:
         ed:d9:8d:5c:d4:78:41:8b:a6:f1:7e:57:d8:e3:3a:8a:23:da:
         8c:39:f2:bb:85:06:ce:92:08:09:90:b7:21:b3:2c:ce:e0:36:
         27:d3:a6:ad:5b:cf:00:c5:0c:7d:2a:91:dd:76:3a:0a:65:e3:
         d6:2f:84:31:57:c2:6f:5a:c5:cd:17:e4:ce:85:d8:76:6d:6f:
         95:c6:34:6c:3f:b0:3f:0f:72:51:16:d8:50:2c:b4:55:e5:55:
         52:23:8b:75:e0:73:a4:e3:29:3c:26:c0:f2:60:af:e8:b9:b3:
         da:e7:6c:71:3c:a5:a8:10:b5:4b:c2:52:07:79:c9:aa:cb:a2:
         c6:04:a1:0c:e4:2f:77:07:5b:67:66:52:75:c1:3c:39:b5:f6:
         68:d0:45:32:08:53:80:9e:d3:e4:e8:02:c1:f4:bc:03:05:5a:
         e1:a3:0e:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 22:46:32 2025 by rpki-client