Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.mft
File:                     NpL-31nGDTJU43qcjs3hHJuhKCo.mft (raw, json)
Hash identifier:          w4ASuNaW4JeMvuDXU3tOvLgeEXcG2ArsA1QgWj8FRdE=
Subject key identifier:   0D:B2:3B:45:DF:9D:0B:FA:9F:72:3F:EF:3A:6F:C4:F2:F9:88:91:B5
Authority key identifier: 36:92:FE:DF:59:C6:0D:32:54:E3:7A:9C:8E:CD:E1:1C:9B:A1:28:2A
Certificate issuer:       /CN=3692fedf59c60d3254e37a9c8ecde11c9ba1282a
Certificate serial:       01984A0A200D4F0DA4C3554DA386959211DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.mft
Manifest number:          16AC
Signing time:             Sun 27 Jul 2025 04:00:34 +0000
Manifest this update:     Sun 27 Jul 2025 04:00:34 +0000
Manifest next update:     Mon 28 Jul 2025 04:00:34 +0000
Files and hashes:         1: 1-GJhYiuUUrP8RhmBh0USv-VEBfA.roa (hash: yv0HSZPQLPjAOK0Qjg6MUOpe4+d1qLZAv2u1ddULbTs=)
                          2: 8zzToX2_MSbXjPU6GvHQQ_9Dvvk.roa (hash: wilJSEirQsqEx26ndpfgfkDVvj+zVkzSkCh5uXU9fHI=)
                          3: NpL-31nGDTJU43qcjs3hHJuhKCo.crl (hash: LznPzIgl0clTqAdFWYNbjyVo9jt/9MbJbpLfcEXPnqw=)
                          4: bHL_tTznnHPbHP4F0hJKIReYm6M.roa (hash: R72+H7qsqTY9GklcA/NGuJeZ8wkSyMWhn933bwOHpJE=)
                          5: q8AP7H93ZbNKPWz_Zh0y6fK8m7g.roa (hash: Jd2YHA+NTHYb6+qWLH1KGDGjnXW6xUSmZVAZe2REuGQ=)
                          6: rf6L0TwRlHBLPhVKaPDEKnbqT_w.roa (hash: AzTZWJBoZdwqFymIdorc82U7WjpDv54tYnTW1K3fl6o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 04:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:0a:20:0d:4f:0d:a4:c3:55:4d:a3:86:95:92:11:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3692fedf59c60d3254e37a9c8ecde11c9ba1282a
        Validity
            Not Before: Jul 27 04:00:34 2025 GMT
            Not After : Jul 28 04:00:34 2025 GMT
        Subject: CN=0db23b45df9d0bfa9f723fef3a6fc4f2f98891b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:00:e5:72:c6:67:2d:1e:45:dd:b4:45:24:70:
                    b7:3f:27:52:97:76:ba:63:4a:dc:2a:dd:80:b0:30:
                    2f:0d:80:7d:89:21:5f:43:f5:46:f3:09:5a:37:77:
                    4e:9c:c8:26:a5:75:e1:50:5e:ac:11:c5:6d:cc:9b:
                    73:44:dd:b5:a1:b9:78:7b:c9:3a:25:ef:90:49:e5:
                    b4:de:5c:13:2d:21:b7:dc:0a:f7:51:ad:d7:83:49:
                    06:3c:5a:3f:01:70:1f:02:8e:be:8c:74:20:28:1c:
                    8a:27:06:68:27:f3:57:38:e7:47:8d:2d:5c:8e:0c:
                    5e:fc:3e:68:69:16:1d:01:26:c7:f8:ac:81:b5:2a:
                    c7:5c:8f:99:2c:99:53:fa:ce:c1:79:63:21:8a:49:
                    05:91:ab:eb:fd:b1:6f:49:74:42:02:87:fb:d1:d5:
                    fa:f8:cf:3b:f2:80:8d:d5:f4:e4:2d:1f:f5:0e:cd:
                    27:60:4a:5d:17:c1:65:85:06:84:ef:fa:3e:7f:33:
                    16:3f:eb:63:9c:d7:33:61:54:38:4b:3a:9b:3b:9d:
                    f7:b3:d0:42:88:f9:c0:fd:57:c6:f3:d1:e3:04:19:
                    9d:0f:95:90:f2:8d:4b:ac:c5:80:45:6e:4a:5a:a2:
                    15:7e:84:6f:47:5b:b3:62:cd:88:f1:8d:45:26:76:
                    10:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:B2:3B:45:DF:9D:0B:FA:9F:72:3F:EF:3A:6F:C4:F2:F9:88:91:B5
            X509v3 Authority Key Identifier:
                keyid:36:92:FE:DF:59:C6:0D:32:54:E3:7A:9C:8E:CD:E1:1C:9B:A1:28:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:70:34:2e:87:ad:a2:37:89:10:16:69:c4:1a:af:5d:d3:d5:
         32:eb:00:4a:ae:3e:11:eb:4f:74:00:d3:2d:66:7e:9b:dc:07:
         77:73:ac:a2:ae:e0:4d:23:c2:9e:f5:e6:ae:4f:d5:37:5e:70:
         ee:68:a8:b7:38:1a:10:2e:17:12:18:83:d2:3b:a6:27:10:61:
         af:55:84:ab:dc:09:2f:1c:17:68:f7:f2:f0:13:3b:7a:63:fc:
         7f:c8:ad:2e:c8:93:83:0a:a0:b7:e2:0b:8b:42:26:96:e0:25:
         c2:18:75:17:76:d6:c6:07:6f:59:96:97:32:ed:77:c8:d3:9f:
         e9:13:c4:f8:63:8b:e1:9f:20:0a:fa:8c:77:0e:91:9c:10:8d:
         55:0c:21:d2:46:f4:a7:63:4e:4a:9e:09:2c:0b:68:7b:aa:b1:
         00:90:21:ba:e3:5b:bf:51:c4:fc:45:9f:78:28:80:4c:3e:ea:
         5e:57:0f:6f:a8:b6:7b:8f:a2:ab:15:a9:fc:e0:a3:9c:10:fb:
         5e:18:be:d7:55:bc:ea:1c:c4:b0:61:c8:4e:0a:fa:94:10:55:
         86:29:be:15:76:c1:8d:53:5a:ee:b2:7c:9a:07:ea:84:11:55:
         8b:fa:3a:ac:69:32:42:dd:d3:9e:87:82:fd:47:83:c2:c9:b0:
         8f:ba:86:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 14:39:54 2025 by rpki-client