Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/c429df-af25-4cce-bed7-d9b07fbbbbdb/1/NmIEOjHdm9K3yxhifrS6wRhAzhY.mft
File:                     NmIEOjHdm9K3yxhifrS6wRhAzhY.mft (raw, json)
Hash identifier:          4vf3+fcInEcegCr1iAIf9oirAfxOxjEVcUv7COTYhGs=
Subject key identifier:   C0:34:92:3A:FF:48:5C:55:B9:F7:26:81:0A:9F:5B:E9:74:34:C4:92
Authority key identifier: 36:62:04:3A:31:DD:9B:D2:B7:CB:18:62:7E:B4:BA:C1:18:40:CE:16
Certificate issuer:       /CN=3662043a31dd9bd2b7cb18627eb4bac11840ce16
Certificate serial:       01983984628AAE2579AA3FED2544D2D0A12A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NmIEOjHdm9K3yxhifrS6wRhAzhY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/c429df-af25-4cce-bed7-d9b07fbbbbdb/1/NmIEOjHdm9K3yxhifrS6wRhAzhY.mft
Manifest number:          1308
Signing time:             Wed 23 Jul 2025 23:00:33 +0000
Manifest this update:     Wed 23 Jul 2025 23:00:33 +0000
Manifest next update:     Thu 24 Jul 2025 23:00:33 +0000
Files and hashes:         1: NmIEOjHdm9K3yxhifrS6wRhAzhY.crl (hash: AByOhqqVVb8Q4zQMFkDErtV/I149HpCcb58qv6+etaE=)
                          2: WD0FQcbHEB-uoxf6girnu5JNKHw.roa (hash: iXRex71CWC3wFm8Z6DiGxb32qluuOPal75ek37KzREs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/c429df-af25-4cce-bed7-d9b07fbbbbdb/1/NmIEOjHdm9K3yxhifrS6wRhAzhY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/c429df-af25-4cce-bed7-d9b07fbbbbdb/1/NmIEOjHdm9K3yxhifrS6wRhAzhY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NmIEOjHdm9K3yxhifrS6wRhAzhY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Jul 2025 23:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:39:84:62:8a:ae:25:79:aa:3f:ed:25:44:d2:d0:a1:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3662043a31dd9bd2b7cb18627eb4bac11840ce16
        Validity
            Not Before: Jul 23 23:00:33 2025 GMT
            Not After : Jul 24 23:00:33 2025 GMT
        Subject: CN=c034923aff485c55b9f726810a9f5be97434c492
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:cf:ec:4e:0a:95:77:4c:e2:b1:70:d2:21:ac:
                    c5:ed:7b:da:69:f9:9c:2b:13:13:d0:fc:20:c1:88:
                    3f:67:4c:da:b0:2c:67:d3:b1:22:0b:37:dd:df:54:
                    b3:c9:cc:56:a6:fe:1a:be:2f:f6:51:92:b1:0b:70:
                    d1:0f:58:73:8a:fa:ed:80:4b:87:28:1f:89:ad:ff:
                    a3:03:6e:4b:f0:a7:f8:3a:4c:86:8d:4c:db:ad:ec:
                    4f:da:55:c8:a8:06:2e:38:b2:1e:d1:df:52:7f:18:
                    38:32:49:db:fe:45:2c:df:d6:fc:f3:80:1e:0d:01:
                    05:1f:19:15:86:e0:14:76:e7:a9:3a:b8:76:29:1c:
                    ce:f0:67:84:55:91:bc:5f:6c:61:96:37:44:8a:fc:
                    34:ba:2c:47:62:a0:ab:18:47:de:60:51:43:9f:6e:
                    54:29:0c:8a:d5:50:4a:08:35:26:ef:c8:ef:08:a6:
                    fe:12:07:b0:bf:3d:34:55:0b:cb:16:7c:ae:40:29:
                    0b:19:7f:a8:f4:8f:e7:f7:0e:65:3e:64:0e:be:0d:
                    54:22:e7:47:b6:65:5d:3a:30:7c:28:71:f4:35:32:
                    d0:4e:c6:83:10:fc:a8:ff:0f:50:0f:37:1e:57:bf:
                    e4:00:04:b8:f3:b8:8a:a5:7a:aa:da:ce:7d:f3:a6:
                    dc:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:34:92:3A:FF:48:5C:55:B9:F7:26:81:0A:9F:5B:E9:74:34:C4:92
            X509v3 Authority Key Identifier:
                keyid:36:62:04:3A:31:DD:9B:D2:B7:CB:18:62:7E:B4:BA:C1:18:40:CE:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NmIEOjHdm9K3yxhifrS6wRhAzhY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/c429df-af25-4cce-bed7-d9b07fbbbbdb/1/NmIEOjHdm9K3yxhifrS6wRhAzhY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/c429df-af25-4cce-bed7-d9b07fbbbbdb/1/NmIEOjHdm9K3yxhifrS6wRhAzhY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:7f:f2:86:30:aa:23:8f:ed:3e:b8:91:3a:6e:23:70:57:f9:
         9b:f5:81:97:d8:7f:25:6b:bd:f2:ba:d6:78:9c:2d:ce:18:14:
         2e:9b:cb:70:8c:d3:e6:f6:77:55:e2:be:b0:90:14:6a:f6:18:
         c0:08:0d:e9:d4:83:39:96:ba:4b:01:ec:25:2b:2f:cf:bb:ff:
         c1:9c:77:3f:b9:dc:2f:ec:65:9c:d5:9a:4c:ae:fe:e1:97:ab:
         e4:37:6e:f2:83:41:4c:c0:c5:a4:f0:91:39:e1:5d:e2:e7:d8:
         eb:cc:49:22:3d:2c:3f:e9:fd:84:c7:81:2e:2c:ab:32:b7:1d:
         c7:bd:a8:69:bb:31:23:72:c4:cd:dc:88:7c:cd:2b:17:97:69:
         bc:97:6b:1b:26:03:a6:27:d0:ab:ad:05:83:c0:b1:b3:00:fa:
         2d:63:ce:b5:ef:fa:97:1c:42:41:a2:b6:76:ac:6f:43:8f:d9:
         4e:61:3e:7e:6f:a3:3e:f2:fe:38:5d:9c:c5:1b:c8:9a:bb:ff:
         99:49:76:b6:07:e8:41:c3:a6:48:17:19:51:6c:97:f1:ef:7d:
         6b:c8:9c:43:44:fb:8e:98:13:92:ed:11:c6:fc:c9:47:41:9a:
         03:f2:68:23:83:ae:7d:1f:7a:2c:01:6c:7f:e7:84:20:cc:5b:
         38:fc:ac:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 03:56:52 2025 by rpki-client