Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a9bd93-92bd-4bf9-b655-adcefdaa1028/1/m-NDwvs9a40jeJq02m_NRlppBYM.mft
File:                     m-NDwvs9a40jeJq02m_NRlppBYM.mft (raw, json)
Hash identifier:          p6VPRB6p8L4VCUC1bhpGQu8FF+lh0MkntzcCPmxV+jI=
Subject key identifier:   4D:BB:BE:8C:66:C5:E3:A8:C0:4E:CE:C3:08:08:7D:B9:AB:EA:83:7C
Authority key identifier: 9B:E3:43:C2:FB:3D:6B:8D:23:78:9A:B4:DA:6F:CD:46:5A:69:05:83
Certificate issuer:       /CN=9be343c2fb3d6b8d23789ab4da6fcd465a690583
Certificate serial:       01984A7816504DD56CE86708E684E31118F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m-NDwvs9a40jeJq02m_NRlppBYM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/a9bd93-92bd-4bf9-b655-adcefdaa1028/1/m-NDwvs9a40jeJq02m_NRlppBYM.mft
Manifest number:          09EC
Signing time:             Sun 27 Jul 2025 06:00:40 +0000
Manifest this update:     Sun 27 Jul 2025 06:00:40 +0000
Manifest next update:     Mon 28 Jul 2025 06:00:40 +0000
Files and hashes:         1: V1rYVkHJ4iIIHNg29wauYpELwcg.roa (hash: 7R1pOTL7gS5y/fLoZFKL53bP7clTOjblHiZzRpiMJxQ=)
                          2: m-NDwvs9a40jeJq02m_NRlppBYM.crl (hash: nVoc4CubKkQnVzslj95jpn9IluhEbwCv5lzhBk4en1Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/a9bd93-92bd-4bf9-b655-adcefdaa1028/1/m-NDwvs9a40jeJq02m_NRlppBYM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/a9bd93-92bd-4bf9-b655-adcefdaa1028/1/m-NDwvs9a40jeJq02m_NRlppBYM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m-NDwvs9a40jeJq02m_NRlppBYM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:78:16:50:4d:d5:6c:e8:67:08:e6:84:e3:11:18:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9be343c2fb3d6b8d23789ab4da6fcd465a690583
        Validity
            Not Before: Jul 27 06:00:40 2025 GMT
            Not After : Jul 28 06:00:40 2025 GMT
        Subject: CN=4dbbbe8c66c5e3a8c04ecec308087db9abea837c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6c:b1:f7:cb:f0:18:7f:57:d9:ff:f5:17:c7:
                    99:c4:f4:fe:9a:14:da:51:8f:5a:0e:66:d5:7b:b8:
                    0d:b7:95:f5:7e:33:2f:24:d0:58:a7:7b:51:e2:c0:
                    a2:1b:39:db:06:24:f3:2a:d2:55:e7:d1:07:da:80:
                    c0:da:ab:70:b8:d3:16:a9:83:9a:a4:37:cf:36:74:
                    5c:7f:5b:6b:a3:5a:c6:c8:b6:27:c2:30:19:55:51:
                    50:b1:ba:65:ca:43:3e:b5:4e:32:d2:6c:d3:9f:70:
                    38:bb:9d:bc:e0:49:7f:db:d1:93:f4:52:ee:f5:25:
                    a1:03:9b:0d:7e:56:83:0b:8a:e7:31:6c:0d:f7:2b:
                    9a:b6:b9:c3:50:0f:a2:d1:a4:b1:73:c0:c6:ca:be:
                    8c:6b:00:45:59:6c:7f:e8:d1:2b:21:02:5f:2b:18:
                    e8:6b:ac:18:88:19:39:09:f1:e0:d9:b1:30:a7:09:
                    4c:48:39:e1:b4:23:8d:e7:83:4d:19:8a:d7:8a:ca:
                    70:b4:a6:7b:a3:57:5c:70:83:41:e2:3a:8e:c5:92:
                    ae:72:84:5d:21:c6:d1:e6:c3:5d:90:26:bc:2b:8f:
                    ee:52:24:49:64:8c:17:62:77:47:0a:f6:a0:ae:bb:
                    5a:70:f1:4c:7d:21:d2:0b:fc:74:a9:b9:3a:7e:a0:
                    c4:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:BB:BE:8C:66:C5:E3:A8:C0:4E:CE:C3:08:08:7D:B9:AB:EA:83:7C
            X509v3 Authority Key Identifier:
                keyid:9B:E3:43:C2:FB:3D:6B:8D:23:78:9A:B4:DA:6F:CD:46:5A:69:05:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-NDwvs9a40jeJq02m_NRlppBYM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a9bd93-92bd-4bf9-b655-adcefdaa1028/1/m-NDwvs9a40jeJq02m_NRlppBYM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a9bd93-92bd-4bf9-b655-adcefdaa1028/1/m-NDwvs9a40jeJq02m_NRlppBYM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:30:3b:44:fa:93:8a:6c:99:f4:a3:70:64:d7:42:e7:45:b8:
         7f:69:89:42:1b:2d:51:b5:b3:44:21:b1:f1:e2:77:1c:31:d3:
         a3:99:01:ee:be:f4:df:f7:8f:f0:80:61:22:45:7a:7e:ef:10:
         a9:78:0e:2c:af:66:5a:52:fc:f4:f5:fd:d4:fb:bb:51:62:05:
         5c:f4:59:7b:3d:73:6d:3d:3c:3e:13:cc:da:87:0e:6d:ee:9b:
         b9:d2:91:b8:10:3a:7f:58:82:82:5d:9e:13:74:fb:55:15:69:
         35:1d:d8:8f:ab:f2:b3:41:98:eb:a2:11:93:ec:75:33:15:88:
         57:af:d3:04:1e:ff:3f:42:a8:76:37:16:d7:a3:b6:02:cd:3d:
         01:f4:53:c5:91:8d:7f:32:0a:63:b4:bf:b1:72:2f:de:c9:f9:
         1b:ba:fa:55:90:65:3b:7c:44:c8:32:d7:2a:a0:43:26:4e:d2:
         a4:51:01:82:61:39:1d:37:57:ea:43:ca:a1:2c:c6:22:8a:78:
         40:b4:a5:2a:48:5b:e8:c2:37:3b:a1:2c:b6:5e:91:cd:6f:a7:
         54:75:ff:ac:b4:59:42:dd:66:d3:86:e3:bc:f4:a7:33:93:4b:
         de:31:48:f0:c2:55:28:22:68:82:e5:76:59:1c:f4:c5:1d:e9:
         d6:b6:2f:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:56:49 2025 by rpki-client