Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/c43a75-a326-4c6d-87ca-817d84e53d53/1/ngN01xvFfbltw5PpH-u56dWf75o.mft
File:                     ngN01xvFfbltw5PpH-u56dWf75o.mft (raw, json)
Hash identifier:          R3o0KlJ+LY7wxwUpx3VlyVccoNZv35q+NiECVjmhAF8=
Subject key identifier:   ED:F1:C4:28:1D:BC:53:3A:99:70:6B:38:FA:5C:B3:C8:BA:96:31:9E
Authority key identifier: 9E:03:74:D7:1B:C5:7D:B9:6D:C3:93:E9:1F:EB:B9:E9:D5:9F:EF:9A
Certificate issuer:       /CN=9e0374d71bc57db96dc393e91febb9e9d59fef9a
Certificate serial:       01982CA48DA7B4BE6F8A01660EB61B1F5EFB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ngN01xvFfbltw5PpH-u56dWf75o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/c43a75-a326-4c6d-87ca-817d84e53d53/1/ngN01xvFfbltw5PpH-u56dWf75o.mft
Manifest number:          15F4
Signing time:             Mon 21 Jul 2025 11:00:38 +0000
Manifest this update:     Mon 21 Jul 2025 11:00:38 +0000
Manifest next update:     Tue 22 Jul 2025 11:00:38 +0000
Files and hashes:         1: 90vahj-_hJ5i1HoZpq9u0D0BXno.roa (hash: hNcbTROFVc3qb49hFAj0UmBrANu4X9fdOG7KqwGkrWI=)
                          2: aiayIUHfqJqjLTqVFWc4nu-4G4A.roa (hash: pzPbeMaNHz+Qf8EsosFYtAc0dvzeTKY+f3jQ8e+tojI=)
                          3: ngN01xvFfbltw5PpH-u56dWf75o.crl (hash: yrIXMa4kpB0Bqfh1oKbnwVy2PlLInxHilNB1euwfhKQ=)
                          4: pchvFEtf54PSSiTi01p5PApQHUQ.roa (hash: LNaFLGgXExgOKyuOXBO2LPMxZGv4i1837UIKdLVtZOA=)
                          5: q3loLepsq8UUkjol44_uG7-Dp-g.roa (hash: HiKWGBwaGg7MLWq1sRr7H+Pilt+M4gjbpsaE+yrM590=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/c43a75-a326-4c6d-87ca-817d84e53d53/1/ngN01xvFfbltw5PpH-u56dWf75o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/c43a75-a326-4c6d-87ca-817d84e53d53/1/ngN01xvFfbltw5PpH-u56dWf75o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ngN01xvFfbltw5PpH-u56dWf75o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Jul 2025 07:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:2c:a4:8d:a7:b4:be:6f:8a:01:66:0e:b6:1b:1f:5e:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e0374d71bc57db96dc393e91febb9e9d59fef9a
        Validity
            Not Before: Jul 21 11:00:38 2025 GMT
            Not After : Jul 22 11:00:38 2025 GMT
        Subject: CN=edf1c4281dbc533a99706b38fa5cb3c8ba96319e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:87:6d:78:a6:3c:59:d2:68:a0:19:e7:4d:3d:
                    de:c3:6f:2c:30:f4:d7:ff:e3:16:4f:88:99:02:48:
                    06:cc:fb:2b:78:18:2f:f7:ee:d4:32:3b:0a:1e:73:
                    21:a8:09:ad:80:8c:2c:c5:5f:1a:95:de:2a:0d:96:
                    3f:d3:b1:b1:23:fa:ba:69:37:80:0b:99:1b:f9:7f:
                    d8:5a:30:b7:3b:6f:37:77:06:38:fa:90:0a:bd:b2:
                    82:f6:e6:0b:5a:14:c4:1a:15:7d:ad:a3:11:3f:2f:
                    66:77:4a:17:8a:96:2b:ef:b7:91:ed:1d:af:da:d8:
                    a2:a0:2f:e5:32:84:f4:8c:fe:8e:13:71:e6:bd:4c:
                    c1:a6:2a:7d:aa:68:7a:b3:11:9b:40:20:ae:ee:79:
                    15:89:40:56:2d:77:c6:0f:c5:43:6b:f2:05:1d:08:
                    bf:86:1a:0d:01:21:62:ec:69:07:94:cd:1c:40:6a:
                    1b:d0:42:17:21:43:84:b2:1d:85:2c:65:d7:10:9c:
                    48:c5:87:66:76:2c:4c:d3:86:e8:01:cd:8b:37:f6:
                    bb:03:c0:e0:cc:84:02:06:e3:b4:c9:fe:1a:31:e9:
                    72:29:1d:93:66:87:2a:bf:3d:4a:09:89:a8:41:4a:
                    d8:fc:54:12:c6:fb:a9:49:2b:4d:fb:85:52:a0:67:
                    25:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:F1:C4:28:1D:BC:53:3A:99:70:6B:38:FA:5C:B3:C8:BA:96:31:9E
            X509v3 Authority Key Identifier:
                keyid:9E:03:74:D7:1B:C5:7D:B9:6D:C3:93:E9:1F:EB:B9:E9:D5:9F:EF:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ngN01xvFfbltw5PpH-u56dWf75o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c43a75-a326-4c6d-87ca-817d84e53d53/1/ngN01xvFfbltw5PpH-u56dWf75o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c43a75-a326-4c6d-87ca-817d84e53d53/1/ngN01xvFfbltw5PpH-u56dWf75o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:af:61:9a:9b:86:1b:ba:eb:20:40:91:cc:1d:59:d5:e7:75:
         2e:da:7b:4d:5a:1a:06:57:8e:5e:19:95:2c:64:eb:bd:47:85:
         1e:0f:9a:53:1a:7d:26:1a:22:6d:03:e5:4e:2f:f9:bf:41:5a:
         99:f0:d9:22:f6:3d:14:20:fa:92:35:bc:be:3a:b8:ab:be:09:
         8a:67:12:dc:98:21:f1:e4:a8:43:a6:1e:40:50:ea:10:24:8e:
         c4:75:c9:ec:1c:8f:10:39:ad:bf:b2:53:25:2c:f5:50:b7:b6:
         cf:69:86:0a:02:9f:00:19:2e:e0:36:28:e0:11:74:af:ac:63:
         b3:1d:6c:d7:e4:c7:f6:d4:4e:6b:c1:26:a7:b4:aa:e8:14:cf:
         45:e2:29:25:17:08:5e:c6:e9:df:0d:1c:5a:53:cc:b4:53:75:
         2c:50:07:11:95:2c:1d:71:79:3e:4c:ba:73:57:e5:c0:5a:45:
         c0:94:f1:74:ac:47:75:bc:7d:e2:76:e6:3f:4d:5e:bc:db:17:
         ba:58:39:de:cf:ca:69:47:23:d8:2b:e4:83:2b:3a:57:47:17:
         f8:ce:84:3f:55:6e:d9:5b:b1:ea:97:ac:35:87:63:45:b8:65:
         9f:54:ca:76:46:6d:68:fb:96:0e:2b:05:cb:9c:12:cd:d1:d1:
         c2:51:55:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 12:28:06 2025 by rpki-client