Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/46431e-4951-4e1a-9195-68a4551f68a8/1/6_Ngh8P87PsAb1GNeBGyVepXyQ0.mft
File:                     6_Ngh8P87PsAb1GNeBGyVepXyQ0.mft (raw, json)
Hash identifier:          9qAoMlbLRX79Cv14zlstsbV604tjX/V+77N1Ple1ZL0=
Subject key identifier:   38:91:42:8F:F0:A8:68:40:CF:9C:6F:94:43:1B:58:77:B0:B5:86:DD
Authority key identifier: EB:F3:60:87:C3:FC:EC:FB:00:6F:51:8D:78:11:B2:55:EA:57:C9:0D
Certificate issuer:       /CN=ebf36087c3fcecfb006f518d7811b255ea57c90d
Certificate serial:       0198481B7F0C4BD2299DECB0CBB0E50C5CC9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6_Ngh8P87PsAb1GNeBGyVepXyQ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/46431e-4951-4e1a-9195-68a4551f68a8/1/6_Ngh8P87PsAb1GNeBGyVepXyQ0.mft
Manifest number:          11C2
Signing time:             Sat 26 Jul 2025 19:00:18 +0000
Manifest this update:     Sat 26 Jul 2025 19:00:18 +0000
Manifest next update:     Sun 27 Jul 2025 19:00:18 +0000
Files and hashes:         1: 6_Ngh8P87PsAb1GNeBGyVepXyQ0.crl (hash: Fqj7ETf7304Fg9q33kuaPP4pZV3HDS0isWec0vfQjqM=)
                          2: Cd-K1MEWA2ryKgiTfKMlpJrD0GQ.roa (hash: B7DPcOBfNaFm0TXa9BBHsfzUSprwVkey6QgyDWplAfY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/46431e-4951-4e1a-9195-68a4551f68a8/1/6_Ngh8P87PsAb1GNeBGyVepXyQ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/46431e-4951-4e1a-9195-68a4551f68a8/1/6_Ngh8P87PsAb1GNeBGyVepXyQ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6_Ngh8P87PsAb1GNeBGyVepXyQ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 15:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:1b:7f:0c:4b:d2:29:9d:ec:b0:cb:b0:e5:0c:5c:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebf36087c3fcecfb006f518d7811b255ea57c90d
        Validity
            Not Before: Jul 26 19:00:18 2025 GMT
            Not After : Jul 27 19:00:18 2025 GMT
        Subject: CN=3891428ff0a86840cf9c6f94431b5877b0b586dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:35:0d:a9:ee:13:a8:32:12:bf:38:27:c4:c3:
                    70:10:96:e4:51:46:2d:c4:15:2d:c9:8c:34:e4:4f:
                    30:aa:5e:41:96:2d:d1:39:6d:6a:3d:99:8c:e7:b8:
                    d1:4d:e3:c6:94:9e:85:81:2c:fa:e5:73:43:34:c7:
                    5d:21:b9:ed:34:4a:a4:8b:d3:68:77:47:d5:d9:18:
                    af:c7:6f:88:5f:e8:aa:b2:49:7d:f8:b9:ba:ac:e9:
                    a0:2e:ee:ca:19:d7:d0:da:56:3e:f7:3e:4f:73:d2:
                    1c:2e:1e:b2:ba:f4:25:4d:4a:cd:6d:d3:d4:fc:05:
                    90:ce:02:35:97:e0:d7:e3:8d:dd:49:d2:b2:c8:04:
                    4d:c9:32:d3:a8:ef:ef:2f:02:32:08:78:12:47:d9:
                    0e:4c:e3:0c:99:0f:94:ae:0e:25:1f:d0:15:1d:a9:
                    5f:9f:9a:a1:b7:7b:a6:92:92:7b:e0:82:ed:4a:83:
                    3e:03:5b:85:15:36:36:ed:0a:21:8d:62:fd:ef:60:
                    fd:d5:49:18:68:be:f3:66:08:aa:ce:48:9d:0a:9d:
                    32:4b:97:2c:98:65:23:ae:33:88:f8:7f:00:e2:74:
                    7a:20:16:0f:76:1c:60:30:92:01:ed:d3:d7:8e:a7:
                    38:89:b9:17:7a:36:d3:a6:10:58:71:a8:b2:1c:fa:
                    de:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:91:42:8F:F0:A8:68:40:CF:9C:6F:94:43:1B:58:77:B0:B5:86:DD
            X509v3 Authority Key Identifier:
                keyid:EB:F3:60:87:C3:FC:EC:FB:00:6F:51:8D:78:11:B2:55:EA:57:C9:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6_Ngh8P87PsAb1GNeBGyVepXyQ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/46431e-4951-4e1a-9195-68a4551f68a8/1/6_Ngh8P87PsAb1GNeBGyVepXyQ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/46431e-4951-4e1a-9195-68a4551f68a8/1/6_Ngh8P87PsAb1GNeBGyVepXyQ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:a8:7a:84:9d:42:17:3f:fc:50:6c:1a:32:72:f8:e2:75:6f:
         08:b8:81:b2:b0:3f:28:70:2d:49:18:6b:70:ee:b7:20:24:e9:
         02:13:06:8a:d1:bc:4e:03:3e:9a:10:f7:4c:fc:8e:c7:34:62:
         92:0f:c4:e3:e9:53:c3:5b:ba:f4:93:6b:97:78:42:3c:a5:01:
         7e:23:e3:69:a4:ec:a9:80:42:fd:26:40:73:38:84:f9:be:9c:
         e1:ce:a8:33:80:b9:0a:a8:44:ea:90:f4:44:5a:39:18:f5:ab:
         ea:61:7e:27:98:99:56:41:5c:39:14:d8:43:3e:f0:3f:8b:54:
         37:af:e7:9b:05:e8:4a:b3:8e:bb:5f:53:3e:b2:fb:95:2e:ed:
         3f:72:b5:a6:bb:95:72:bb:e9:13:53:d3:eb:14:6e:ca:26:eb:
         37:e9:4b:05:b7:a8:62:80:20:e8:75:8f:fb:26:ae:5b:2a:31:
         05:eb:01:c1:ea:fc:35:f9:5f:42:a7:89:6e:d3:72:f8:0c:c7:
         e0:29:04:e5:de:86:95:95:b1:69:f8:a9:4e:95:f7:99:3a:a3:
         c7:85:2e:21:6e:4c:bc:82:ca:6e:1b:f1:e1:77:61:68:31:c6:
         b7:89:dc:94:f9:15:55:34:fc:94:d0:94:fb:96:59:5e:b1:bd:
         a4:09:9e:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 00:25:22 2025 by rpki-client