Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.mft
File:                     nrUOU4bICaD65lMKpejZglJR3tA.mft (raw, json)
Hash identifier:          x2IV7SdaqJbn0EIGOUZfhqjsp+wTfE+TENcKj6U0uKU=
Subject key identifier:   19:E4:7B:1D:EF:F7:23:95:32:97:EC:55:69:19:F0:9C:66:6F:AB:B1
Authority key identifier: 9E:B5:0E:53:86:C8:09:A0:FA:E6:53:0A:A5:E8:D9:82:52:51:DE:D0
Certificate issuer:       /CN=9eb50e5386c809a0fae6530aa5e8d9825251ded0
Certificate serial:       0198345E67754D46EF3D05639EFFABE49A08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.mft
Manifest number:          0A39
Signing time:             Tue 22 Jul 2025 23:00:58 +0000
Manifest this update:     Tue 22 Jul 2025 23:00:58 +0000
Manifest next update:     Wed 23 Jul 2025 23:00:58 +0000
Files and hashes:         1: LUnk__H52Ka1UZQ74SFwt2XYOA0.roa (hash: STMUNAtIYTQ2D1f5QvDk6ta50/b1jlAx1bvn490hmQY=)
                          2: Yi-_AOBIegyZbx8uOcbaz9DwrKE.roa (hash: ER3+63xjq9p3EvqNEllUUZfmGZVR+0lO0rze97XuPy0=)
                          3: j1xgO_hIvyN1bDBzOqYS6suNPzQ.roa (hash: nD3squlase6LCY8dCz/RdkZ25qLuoWJZ9yqzIv/Hk64=)
                          4: nrUOU4bICaD65lMKpejZglJR3tA.crl (hash: /n0JBswkTgFRXp3Zx5n9EmeQFhn/VsRBPOCw+nO9Z7c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Jul 2025 22:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:34:5e:67:75:4d:46:ef:3d:05:63:9e:ff:ab:e4:9a:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9eb50e5386c809a0fae6530aa5e8d9825251ded0
        Validity
            Not Before: Jul 22 23:00:58 2025 GMT
            Not After : Jul 23 23:00:58 2025 GMT
        Subject: CN=19e47b1deff723953297ec556919f09c666fabb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e2:5b:80:d3:d3:32:9a:12:6c:bb:6d:17:90:
                    06:7c:3a:c6:b2:e9:a3:0d:ec:ac:ac:a7:98:09:71:
                    7e:34:3d:d5:be:5e:6f:f9:bb:ed:07:66:27:cd:1c:
                    33:50:d8:ec:14:15:1e:4b:66:8d:2a:6f:b4:55:ea:
                    da:12:9a:d6:73:6b:7f:e8:33:02:18:62:f6:bc:01:
                    b5:05:bd:dd:8d:fe:20:7f:ff:11:9a:61:c9:51:17:
                    f1:13:8f:35:9a:f7:ce:50:65:cb:21:a0:1d:32:9c:
                    7a:85:46:9d:77:f1:f0:23:35:9a:8b:5a:5b:a2:0c:
                    bf:48:20:ba:4e:8a:4f:11:78:b5:5a:b4:ef:4a:d4:
                    3a:11:96:aa:85:5f:35:03:6d:02:12:5b:69:69:78:
                    9e:18:66:4c:bb:3c:21:00:eb:90:93:c0:2a:df:67:
                    21:c2:bb:3d:d1:c5:4e:6d:23:37:b4:15:c5:31:01:
                    fe:92:69:de:35:46:f2:cc:d3:08:8c:45:2e:eb:6b:
                    51:6a:95:92:25:39:52:7e:d8:92:31:1e:58:5c:88:
                    49:f8:af:3e:1d:84:66:7b:12:5d:4c:68:ce:fa:6a:
                    b8:a1:9b:55:b8:39:6e:6a:aa:c6:78:07:46:09:40:
                    47:50:15:94:64:17:ea:1a:da:f9:13:5f:8d:ed:22:
                    57:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:E4:7B:1D:EF:F7:23:95:32:97:EC:55:69:19:F0:9C:66:6F:AB:B1
            X509v3 Authority Key Identifier:
                keyid:9E:B5:0E:53:86:C8:09:A0:FA:E6:53:0A:A5:E8:D9:82:52:51:DE:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:58:26:7d:83:69:7e:fd:42:7f:00:41:a3:1c:27:fa:62:04:
         f1:f0:77:62:c1:55:ef:4a:7f:2c:3b:a0:f9:99:20:c1:2b:a5:
         58:55:39:f6:49:a4:cd:da:2a:92:e7:56:9e:cb:8b:24:7d:ff:
         f2:13:28:b7:4a:83:8b:aa:cd:16:9c:46:20:5c:23:ff:8a:be:
         80:da:d7:74:c7:fb:5b:66:6d:b5:64:02:e4:f3:3e:d2:7f:e9:
         ff:53:b5:fb:e4:49:cc:fa:c8:4a:0f:97:bf:e7:d6:7a:05:27:
         69:95:5a:9d:07:0f:ab:f5:8a:97:f6:2d:12:6e:ff:e8:05:cd:
         47:0e:d6:25:18:8a:da:83:99:14:61:09:eb:37:06:67:7f:a7:
         35:df:38:75:70:94:9b:d1:2a:38:a6:a4:f5:f8:1e:0b:6a:0d:
         df:c4:db:44:25:48:a2:02:e0:1f:37:69:a4:db:93:6d:a1:b0:
         a4:c5:4a:23:15:56:95:b7:7e:de:8f:e3:3a:fc:b4:e5:96:cf:
         32:92:7e:ae:8d:d7:51:1d:01:40:2f:e9:0e:f8:fa:36:13:d0:
         7d:d0:9d:e7:f5:6d:bd:30:fa:26:d7:4f:83:1e:9f:e9:1e:7c:
         fe:52:ce:b5:6a:7d:38:36:ce:af:2d:da:07:ab:1c:de:a3:6a:
         8c:f0:0c:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 01:22:57 2025 by rpki-client