Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/nozX1qQQV1C_iXWn0LlnlMHv5iI.mft
File:                     nozX1qQQV1C_iXWn0LlnlMHv5iI.mft (raw, json)
Hash identifier:          hP3qUKjC316rsYnPzuELOYaykr7sVzkmvu/ELr30WuY=
Subject key identifier:   D4:D9:6B:0F:48:CA:70:4D:D0:9B:B9:06:EF:81:12:33:E0:B4:7A:C1
Authority key identifier: 9E:8C:D7:D6:A4:10:57:50:BF:89:75:A7:D0:B9:67:94:C1:EF:E6:22
Certificate issuer:       /CN=9e8cd7d6a4105750bf8975a7d0b96794c1efe622
Certificate serial:       019849D34910AF5D88C2ED84F606FD3EEA20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nozX1qQQV1C_iXWn0LlnlMHv5iI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/nozX1qQQV1C_iXWn0LlnlMHv5iI.mft
Manifest number:          0F44
Signing time:             Sun 27 Jul 2025 03:00:40 +0000
Manifest this update:     Sun 27 Jul 2025 03:00:40 +0000
Manifest next update:     Mon 28 Jul 2025 03:00:40 +0000
Files and hashes:         1: YqcsRsNWUIAuSWFcG2LkwlaCRpU.roa (hash: JnjUw+oSYZ7zYyFgVViB1dXlZlt1DLN5IKIef4zg43A=)
                          2: _VhyulaRLMFmy7z_tqs-4L4cWXE.roa (hash: T2PRCy0LrQZ9+r9vTWIgoLmdpeQ4Ly8m5VmmmlXegNc=)
                          3: i4e34huH3g5sLDHdnkVm8dSr_sE.roa (hash: S/XQJg4OAS7AjMIGPw3l7NpJsp2Db+/obQ9OlOHPkv4=)
                          4: nozX1qQQV1C_iXWn0LlnlMHv5iI.crl (hash: PS3HHFOhdBgaStjufkkcvbBmGVpQc71vYlhqSOD/5Kc=)
                          5: qdNG49hIyDFFdCFIGbm6kEPFcbI.roa (hash: oUfCXgwymuAlhA935EnqN9SnikKCG4eVZ1qECppIrzI=)
                          6: tgtnwoMSuJpvUhZwhk9qFrx7hWQ.roa (hash: rFNa5r+Q4PL0nS416jQMSkeeFMd2IaIQ8Oy1MIANZ/s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/nozX1qQQV1C_iXWn0LlnlMHv5iI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/nozX1qQQV1C_iXWn0LlnlMHv5iI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nozX1qQQV1C_iXWn0LlnlMHv5iI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 03:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:d3:49:10:af:5d:88:c2:ed:84:f6:06:fd:3e:ea:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e8cd7d6a4105750bf8975a7d0b96794c1efe622
        Validity
            Not Before: Jul 27 03:00:40 2025 GMT
            Not After : Jul 28 03:00:40 2025 GMT
        Subject: CN=d4d96b0f48ca704dd09bb906ef811233e0b47ac1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:0b:0a:7d:09:2e:57:27:cf:8c:f1:86:e2:59:
                    ab:72:f3:08:b9:aa:a2:94:a5:0c:74:93:69:f3:a9:
                    98:0a:eb:ad:d3:25:46:15:3a:bf:f4:d0:4f:ab:8d:
                    7b:dd:50:4c:3c:3a:de:4b:a4:43:6a:0a:fb:2f:fe:
                    9c:5e:b6:27:ce:67:bc:10:59:9f:ba:0f:3b:c2:5e:
                    28:1a:09:a3:7a:88:8e:b2:86:80:be:7c:35:6c:93:
                    e0:54:ea:9f:22:a0:05:1e:d7:6e:0a:2f:59:62:66:
                    82:fe:92:e0:04:53:3c:3b:87:9b:3d:b6:94:a3:5e:
                    13:a2:72:80:67:5a:70:58:ce:44:78:ce:6f:7a:b0:
                    20:ce:43:06:f3:d2:dc:04:c6:67:a7:7f:46:d8:6a:
                    a5:29:4a:44:37:b8:7b:5b:2d:c1:09:17:df:9b:80:
                    b3:10:c3:92:65:e2:6a:1a:aa:0b:b0:0d:8d:de:8b:
                    ff:44:39:09:4c:6f:f6:64:60:03:87:14:35:74:19:
                    16:39:3b:1b:be:5a:1f:38:3f:ac:6d:41:4f:39:97:
                    00:59:21:8f:24:d9:da:a5:14:25:51:61:d1:fe:e7:
                    a9:9f:b3:8d:46:95:4e:22:c6:94:e5:ae:ce:35:2e:
                    e8:fe:d4:8e:3b:3b:c1:13:2f:f3:d7:1e:a6:61:9d:
                    9f:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:D9:6B:0F:48:CA:70:4D:D0:9B:B9:06:EF:81:12:33:E0:B4:7A:C1
            X509v3 Authority Key Identifier:
                keyid:9E:8C:D7:D6:A4:10:57:50:BF:89:75:A7:D0:B9:67:94:C1:EF:E6:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nozX1qQQV1C_iXWn0LlnlMHv5iI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/nozX1qQQV1C_iXWn0LlnlMHv5iI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/nozX1qQQV1C_iXWn0LlnlMHv5iI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:00:6e:2f:15:9a:19:98:89:1d:de:55:bf:15:9a:67:33:16:
         f8:f8:a7:14:4d:0e:82:ff:3e:a0:bb:bc:dd:a4:a4:31:83:52:
         9a:47:c5:bd:16:9c:c3:18:41:84:ab:8a:de:16:0f:23:f8:a6:
         83:7a:f2:33:27:e8:b9:e9:24:99:0d:94:ff:0d:7b:18:45:96:
         98:07:89:50:c8:60:2a:e5:eb:ef:94:80:3b:1b:7d:5a:a0:87:
         6a:00:f2:e7:3c:75:52:ab:73:83:5c:1b:fe:52:5d:6f:61:71:
         8f:da:41:7c:76:9e:9d:77:33:dd:5e:be:42:89:73:ef:5f:54:
         b8:86:e1:82:70:f3:43:c3:88:4d:54:24:fd:92:12:d9:28:ca:
         66:fd:53:8d:17:76:e7:fa:4e:08:30:e8:68:82:21:e9:df:ed:
         b0:7e:9e:f1:c3:fb:ad:b6:b8:5b:46:fb:0f:cf:ac:c4:36:37:
         ef:58:d3:ca:d9:b9:84:a3:f0:6e:84:c7:33:99:2d:68:da:cf:
         21:f3:67:68:d1:ba:41:91:82:aa:43:05:fb:31:98:91:18:80:
         8d:3f:12:92:21:04:5b:e4:c0:cd:8e:62:1f:d4:a7:40:2c:e4:
         0b:de:9a:25:c8:91:99:00:73:e4:d6:92:be:57:f2:f5:8c:03:
         52:78:1f:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:25:25 2025 by rpki-client