Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/0660e4-8d5d-43b9-8c89-b5a428b7d14c/1/Nv7f7M_QD1d8t5H45DqmWSYuk9s.mft
File:                     Nv7f7M_QD1d8t5H45DqmWSYuk9s.mft (raw, json)
Hash identifier:          JnftBjflqBu+HhckeYTVJ0rqufVH6mQTTxBFLogGl/g=
Subject key identifier:   74:06:FA:CD:74:31:87:06:7B:0B:8B:0D:B7:AE:D4:90:16:F1:70:3B
Authority key identifier: 36:FE:DF:EC:CF:D0:0F:57:7C:B7:91:F8:E4:3A:A6:59:26:2E:93:DB
Certificate issuer:       /CN=36fedfeccfd00f577cb791f8e43aa659262e93db
Certificate serial:       01982859E4CE28920F8F56104DAE203FA410
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nv7f7M_QD1d8t5H45DqmWSYuk9s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/0660e4-8d5d-43b9-8c89-b5a428b7d14c/1/Nv7f7M_QD1d8t5H45DqmWSYuk9s.mft
Manifest number:          1D
Signing time:             Sun 20 Jul 2025 15:00:36 +0000
Manifest this update:     Sun 20 Jul 2025 15:00:36 +0000
Manifest next update:     Mon 21 Jul 2025 15:00:36 +0000
Files and hashes:         1: Nv7f7M_QD1d8t5H45DqmWSYuk9s.crl (hash: ByogtU4eRrcLYqsv9HTu3cja4WPyrrPrq8vw0AR9Ep8=)
                          2: _Yf7Te2uvhwWX_l1JN9UjpNgrZY.roa (hash: f5+J7yt13fqQYgFUTN4kcse4XeHLgbH6pOCZG6b6MbQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/0660e4-8d5d-43b9-8c89-b5a428b7d14c/1/Nv7f7M_QD1d8t5H45DqmWSYuk9s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/0660e4-8d5d-43b9-8c89-b5a428b7d14c/1/Nv7f7M_QD1d8t5H45DqmWSYuk9s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Nv7f7M_QD1d8t5H45DqmWSYuk9s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Jul 2025 13:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:28:59:e4:ce:28:92:0f:8f:56:10:4d:ae:20:3f:a4:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36fedfeccfd00f577cb791f8e43aa659262e93db
        Validity
            Not Before: Jul 20 15:00:36 2025 GMT
            Not After : Jul 21 15:00:36 2025 GMT
        Subject: CN=7406facd743187067b0b8b0db7aed49016f1703b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:29:90:1f:c9:cb:2e:e2:3e:c1:a5:91:69:47:
                    05:13:45:01:43:f5:69:2c:64:d8:c4:9b:9e:f6:44:
                    f2:2b:0e:91:90:ae:3d:4e:34:5c:d4:6a:12:5b:f1:
                    04:34:cc:be:8a:45:17:fe:47:8b:72:1f:fa:c4:9c:
                    d8:54:bf:05:5f:b0:7d:67:63:47:f1:36:b3:6f:30:
                    27:7f:ab:38:1f:09:59:43:9a:44:61:32:d7:65:1a:
                    0a:1e:f1:88:39:32:c5:5f:6a:bc:0d:52:e1:7f:d7:
                    dd:ee:b6:c0:a2:04:68:87:f5:d1:e7:3d:94:32:16:
                    d2:55:40:84:ce:4f:7b:a7:40:e1:a6:c6:a8:52:e3:
                    e4:d1:ef:5a:bf:6b:32:7e:d5:e0:4d:80:57:24:f3:
                    12:67:da:1e:27:3d:5c:0f:f4:63:34:a6:79:41:b4:
                    f8:00:84:22:ff:c7:1b:ad:ed:a0:15:52:d1:11:04:
                    40:6a:57:5f:94:23:46:89:68:0d:8c:d7:a9:07:51:
                    a3:95:dd:c4:d2:cb:8a:30:16:3c:df:f9:55:78:83:
                    fd:59:a9:67:78:2a:db:79:f0:da:d5:36:e0:23:46:
                    af:e0:13:23:a9:89:35:fb:db:52:3a:99:b0:7c:a5:
                    3f:be:36:2c:f7:04:47:29:76:89:c8:7c:00:d7:ac:
                    8a:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:06:FA:CD:74:31:87:06:7B:0B:8B:0D:B7:AE:D4:90:16:F1:70:3B
            X509v3 Authority Key Identifier:
                keyid:36:FE:DF:EC:CF:D0:0F:57:7C:B7:91:F8:E4:3A:A6:59:26:2E:93:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nv7f7M_QD1d8t5H45DqmWSYuk9s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/0660e4-8d5d-43b9-8c89-b5a428b7d14c/1/Nv7f7M_QD1d8t5H45DqmWSYuk9s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/0660e4-8d5d-43b9-8c89-b5a428b7d14c/1/Nv7f7M_QD1d8t5H45DqmWSYuk9s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:e2:6f:fa:99:98:7d:50:b3:05:4e:c9:68:8b:34:d2:69:6e:
         46:c2:93:05:c8:a6:05:e2:97:d7:0a:45:04:b0:bd:6e:39:28:
         81:e2:43:28:b2:45:18:3b:ac:5f:9a:e8:d9:ac:26:b8:4e:a9:
         0c:17:01:96:ed:e4:d7:a3:70:a9:7a:77:fe:25:32:bf:12:a2:
         33:dc:1e:9b:c1:cb:6c:df:85:f7:ac:a0:db:7e:04:89:80:61:
         1a:a9:04:dc:f7:7e:5b:57:65:9b:26:42:98:e1:f8:1e:31:67:
         50:5c:7e:97:c3:47:73:47:fa:2a:5e:a5:47:1b:65:c5:d5:ee:
         17:6f:7c:ae:58:f6:6b:0a:be:19:90:77:e2:96:5f:e9:7f:cf:
         2c:03:e3:eb:01:73:64:8e:8a:6e:30:94:c2:ef:9b:67:de:29:
         b1:44:37:92:1e:47:e2:f3:a7:59:93:81:d8:5a:5a:f0:97:7a:
         3e:d9:17:1d:48:db:fc:f8:fa:e4:86:19:cd:1e:8f:09:f6:7b:
         08:c6:85:12:c2:a5:94:7a:3e:a7:37:45:06:c8:c7:98:96:28:
         80:fc:0c:fe:6c:a5:81:69:53:3a:f4:f9:43:03:91:92:b1:ac:
         65:f2:83:36:5c:af:e3:65:61:26:e1:67:7b:3a:c6:58:bf:dc:
         b0:5e:e3:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 16:20:31 2025 by rpki-client