Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.mft
File:                     NAVRrOgTFIKTUaJ-OZrt2zMkYVU.mft (raw, json)
Hash identifier:          6fFxoe/lcEFOrNWK3IKhhC2xZ/EJipkMsVPZVIFoPTY=
Subject key identifier:   0B:12:B8:11:46:AE:D6:43:1E:C3:0F:C4:9C:39:A7:C9:48:86:35:39
Authority key identifier: 34:05:51:AC:E8:13:14:82:93:51:A2:7E:39:9A:ED:DB:33:24:61:55
Certificate issuer:       /CN=340551ace81314829351a27e399aeddb33246155
Certificate serial:       019847AD8B9E2459A8C0A100BB31701874DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.mft
Manifest number:          1600
Signing time:             Sat 26 Jul 2025 17:00:12 +0000
Manifest this update:     Sat 26 Jul 2025 17:00:12 +0000
Manifest next update:     Sun 27 Jul 2025 17:00:12 +0000
Files and hashes:         1: NAVRrOgTFIKTUaJ-OZrt2zMkYVU.crl (hash: k+AoGTCDiqbYv8649XrceiGeN9eHW+G8vvn5ylBYxxk=)
                          2: imECYFGKC-3y-aw_FjEqqGuMgCg.roa (hash: W1gRIBzxFMrRJWBGFPIeo4wKyMzv3I/ninZ6Px3gAlY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 15:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:47:ad:8b:9e:24:59:a8:c0:a1:00:bb:31:70:18:74:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=340551ace81314829351a27e399aeddb33246155
        Validity
            Not Before: Jul 26 17:00:12 2025 GMT
            Not After : Jul 27 17:00:12 2025 GMT
        Subject: CN=0b12b81146aed6431ec30fc49c39a7c948863539
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e2:73:9e:95:8f:db:21:c0:7f:74:7b:f9:49:
                    c8:17:84:60:a0:a1:dd:a0:2c:fa:99:aa:cb:74:d5:
                    2f:12:4d:0e:96:46:89:a3:f5:fc:c2:d9:a5:32:f0:
                    c5:1d:95:2f:04:10:ec:91:39:e3:de:0a:c7:02:30:
                    11:f0:3d:63:f6:21:f0:dc:5e:c1:47:19:d2:ad:85:
                    3d:81:20:8a:e3:18:61:66:84:59:bd:2b:44:8d:c7:
                    06:50:69:ee:54:c5:17:42:76:13:83:68:b8:7d:c0:
                    d2:08:35:08:11:85:e1:3a:a4:f8:5b:a5:46:58:a7:
                    18:7d:78:55:30:30:dc:20:68:63:9b:44:e5:2e:2e:
                    1d:8b:a1:2f:f4:b3:41:f2:ed:71:10:1d:1e:31:e7:
                    b7:73:ad:fd:82:54:ae:bb:87:b0:db:66:c2:38:aa:
                    5d:a8:06:5a:1d:05:b8:93:88:2c:4e:75:52:73:08:
                    4a:f5:9e:19:dc:80:6f:e6:e4:10:45:38:4d:01:7d:
                    47:75:6a:96:db:50:1c:12:52:53:32:33:6d:6e:95:
                    80:ae:8a:a6:6c:ef:71:5d:fe:e2:32:60:3f:28:79:
                    4e:5d:49:5f:96:98:ca:e6:b1:92:fe:d9:36:e0:20:
                    58:09:f5:ad:05:31:ba:3a:74:b0:3b:90:ec:cf:02:
                    cc:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:12:B8:11:46:AE:D6:43:1E:C3:0F:C4:9C:39:A7:C9:48:86:35:39
            X509v3 Authority Key Identifier:
                keyid:34:05:51:AC:E8:13:14:82:93:51:A2:7E:39:9A:ED:DB:33:24:61:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:78:1d:13:ec:82:b9:b9:6b:ea:d5:b4:d6:92:ef:8f:dd:5e:
         af:91:7b:a1:a9:fd:c8:98:08:e6:06:13:d2:f3:8e:ce:bf:98:
         36:b9:4a:de:43:a8:05:a2:17:15:40:54:0f:c3:bb:21:a1:d4:
         98:12:f0:74:da:3b:4e:3a:68:8b:75:a0:4a:12:a4:21:4f:4e:
         7d:c4:62:ee:db:41:e3:1e:e7:6d:4d:00:4b:1a:8b:ce:05:91:
         fa:d9:cd:64:51:9a:01:70:e3:e6:2f:ad:da:22:dd:e2:5f:0b:
         47:56:9f:09:15:82:19:7a:5a:45:b3:5f:32:40:0a:5e:45:fd:
         5f:fe:fd:e0:3a:e1:9b:85:c2:4c:f4:94:57:05:87:69:1c:ed:
         a2:10:d6:29:a8:df:1f:85:a9:be:aa:2f:93:d2:63:86:d4:36:
         60:fa:7e:00:1c:bf:11:d6:6f:ea:3b:b5:33:6e:c2:be:92:85:
         e8:e7:c9:6b:f8:f8:2a:06:26:07:eb:0c:27:a2:21:5d:17:13:
         94:35:f4:ac:b7:ca:fb:7e:c6:42:02:5e:14:0c:06:1b:0a:fa:
         c9:78:f8:1c:a4:40:e2:d0:91:4a:35:7e:d7:57:be:de:5f:04:
         c4:83:2a:7f:75:9a:8d:80:1b:36:1e:71:7b:57:88:55:e2:16:
         1a:65:23:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 00:01:25 2025 by rpki-client