Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/0206ff-7e87-44a6-9a56-ba3c64e14a1d/1/Njy1xqBc3UgfMEwM2V6G1yLZbTw.mft
File:                     Njy1xqBc3UgfMEwM2V6G1yLZbTw.mft (raw, json)
Hash identifier:          vi4AywMkua83EFFdaZZjAFvaMoqkSG4xs6dPB+CcDMI=
Subject key identifier:   F0:DF:9C:EF:E8:21:EA:37:B7:C1:65:CF:C6:87:FE:9B:FB:46:2C:7F
Authority key identifier: 36:3C:B5:C6:A0:5C:DD:48:1F:30:4C:0C:D9:5E:86:D7:22:D9:6D:3C
Certificate issuer:       /CN=363cb5c6a05cdd481f304c0cd95e86d722d96d3c
Certificate serial:       019845883869FDD991ADE1857C715291E57B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Njy1xqBc3UgfMEwM2V6G1yLZbTw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/0206ff-7e87-44a6-9a56-ba3c64e14a1d/1/Njy1xqBc3UgfMEwM2V6G1yLZbTw.mft
Manifest number:          0270
Signing time:             Sat 26 Jul 2025 07:00:11 +0000
Manifest this update:     Sat 26 Jul 2025 07:00:11 +0000
Manifest next update:     Sun 27 Jul 2025 07:00:11 +0000
Files and hashes:         1: Kzv57mrF6D4TzpWqRm4OMZsBabg.roa (hash: H8J62lGi+SVfaohRYvudVwS5cRkvujjbuKntKUtgcEc=)
                          2: Njy1xqBc3UgfMEwM2V6G1yLZbTw.crl (hash: m8RNgFj+o8dR6+65oUTfbsUZ7zhX/RV+oFaaieYrDMQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/0206ff-7e87-44a6-9a56-ba3c64e14a1d/1/Njy1xqBc3UgfMEwM2V6G1yLZbTw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/0206ff-7e87-44a6-9a56-ba3c64e14a1d/1/Njy1xqBc3UgfMEwM2V6G1yLZbTw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Njy1xqBc3UgfMEwM2V6G1yLZbTw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 02:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:45:88:38:69:fd:d9:91:ad:e1:85:7c:71:52:91:e5:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=363cb5c6a05cdd481f304c0cd95e86d722d96d3c
        Validity
            Not Before: Jul 26 07:00:11 2025 GMT
            Not After : Jul 27 07:00:11 2025 GMT
        Subject: CN=f0df9cefe821ea37b7c165cfc687fe9bfb462c7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:ac:77:43:74:5d:49:b0:ef:32:be:eb:8a:89:
                    3f:52:48:b9:1c:6d:bc:e8:80:9a:e7:d2:d8:d3:2e:
                    dc:96:e1:53:62:c1:8d:db:4b:b3:a2:74:15:82:8b:
                    b0:81:3e:e1:8c:65:4e:f8:c8:1a:da:e4:d1:f4:f2:
                    d6:49:42:ed:64:0e:11:83:b2:6c:b5:f6:c4:ec:ed:
                    fe:97:3f:11:67:be:a2:df:13:c0:71:8b:33:84:48:
                    3b:a7:29:68:ef:55:2e:85:17:87:0a:21:db:f2:fd:
                    5e:b6:df:c5:62:eb:b4:d8:d3:b2:09:f0:b4:36:a3:
                    b0:3b:b6:ae:1b:4b:0a:2b:fa:17:36:9c:3c:9e:91:
                    52:e1:35:37:33:dc:04:0c:62:37:3b:ce:08:23:be:
                    05:2c:c9:98:88:bc:57:1e:d1:ef:da:b5:58:81:b9:
                    43:1a:6d:1b:c7:6b:e7:fa:08:fe:70:dc:68:de:62:
                    5a:c3:0f:e2:e2:23:7f:c5:c4:a3:d3:1b:08:84:f6:
                    36:ba:e5:d1:fd:a4:99:ad:9c:ec:c4:6f:7f:7f:35:
                    dc:6a:5e:84:5d:09:e2:0d:4b:3b:f8:29:de:32:c2:
                    b9:e4:30:14:37:4b:3d:6e:64:c1:79:fc:d2:62:ed:
                    72:6c:86:74:d2:79:eb:a0:79:49:47:57:e7:27:fd:
                    78:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:DF:9C:EF:E8:21:EA:37:B7:C1:65:CF:C6:87:FE:9B:FB:46:2C:7F
            X509v3 Authority Key Identifier:
                keyid:36:3C:B5:C6:A0:5C:DD:48:1F:30:4C:0C:D9:5E:86:D7:22:D9:6D:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Njy1xqBc3UgfMEwM2V6G1yLZbTw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0206ff-7e87-44a6-9a56-ba3c64e14a1d/1/Njy1xqBc3UgfMEwM2V6G1yLZbTw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0206ff-7e87-44a6-9a56-ba3c64e14a1d/1/Njy1xqBc3UgfMEwM2V6G1yLZbTw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:e0:21:bc:26:ac:57:ec:ca:b3:09:74:b0:0d:fa:da:5a:1d:
         8d:ff:33:aa:81:50:2e:7e:41:3b:5a:d0:46:7b:ac:a5:3d:65:
         e1:87:d1:60:5b:ca:61:d2:ef:03:0d:bc:9e:79:af:0f:25:bd:
         55:94:0a:c0:3d:26:8c:0b:8a:37:93:b0:3f:1f:83:a5:b2:b0:
         e0:13:19:d1:c3:a6:14:df:ef:92:67:35:52:c8:93:15:ab:0b:
         b8:b1:9b:fc:e8:26:6c:90:2a:fa:41:9d:a1:21:d0:96:aa:7a:
         f8:38:94:8e:fb:d5:83:20:ce:45:87:86:94:52:a9:07:94:0b:
         ec:05:39:cd:c5:9f:96:af:25:0c:e0:7c:1a:d4:12:54:0c:ce:
         4c:3e:00:fb:53:c9:b6:f2:c9:69:bf:d7:5c:c4:63:6e:79:a1:
         f8:1b:67:3d:b8:6d:9f:e1:34:1c:4e:f9:fb:f7:05:96:bf:a3:
         85:e5:c6:49:47:1f:d5:91:08:fc:39:36:25:80:30:26:05:b0:
         86:ac:4a:72:cb:fb:73:ab:52:fe:52:9d:43:61:0c:90:64:8a:
         e4:10:d5:e2:2c:b2:24:f4:9e:48:6b:19:c3:32:93:f8:2b:8c:
         4b:0f:b7:cf:61:00:d6:66:1b:69:52:a1:54:62:ef:87:b6:bc:
         97:37:97:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 09:43:57 2025 by rpki-client