Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/c90869-ee20-4939-840e-640c74a94cc6/1/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.mft
File:                     NUb_Rc5QVX7cTAMG4fhpSCrUI-A.mft (raw, json)
Hash identifier:          fL2S6HmcW5z4eYnKAHfhYOQYqdTWAjsGl347Rb9pfE0=
Subject key identifier:   07:B8:00:69:29:EF:D6:BB:55:AE:5D:FE:7F:96:FC:96:BB:AA:D3:33
Authority key identifier: 35:46:FF:45:CE:50:55:7E:DC:4C:03:06:E1:F8:69:48:2A:D4:23:E0
Certificate issuer:       /CN=3546ff45ce50557edc4c0306e1f869482ad423e0
Certificate serial:       0198481BDD36C9D6166D0E8EF4573EAB4179
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/c90869-ee20-4939-840e-640c74a94cc6/1/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.mft
Manifest number:          07BB
Signing time:             Sat 26 Jul 2025 19:00:42 +0000
Manifest this update:     Sat 26 Jul 2025 19:00:42 +0000
Manifest next update:     Sun 27 Jul 2025 19:00:42 +0000
Files and hashes:         1: NUb_Rc5QVX7cTAMG4fhpSCrUI-A.crl (hash: 2vdOyD1vUk1ODsfGOQHkMkaiY/ixE0OqzBQGW6hX1j4=)
                          2: Rv1036YGXSxZ-LNtEMTG-yB-cpE.roa (hash: 9hIhakYU1jL8ELRanjY68hTQVJc33GMXNtFCdw91hfI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/c90869-ee20-4939-840e-640c74a94cc6/1/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/c90869-ee20-4939-840e-640c74a94cc6/1/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 19:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:1b:dd:36:c9:d6:16:6d:0e:8e:f4:57:3e:ab:41:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3546ff45ce50557edc4c0306e1f869482ad423e0
        Validity
            Not Before: Jul 26 19:00:42 2025 GMT
            Not After : Jul 27 19:00:42 2025 GMT
        Subject: CN=07b8006929efd6bb55ae5dfe7f96fc96bbaad333
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:0d:3e:3c:2f:4c:7c:44:c4:e1:6e:06:0b:a3:
                    44:79:37:08:b1:e2:03:28:1e:5f:09:7b:59:55:7f:
                    2d:e9:a1:3b:f1:7d:39:f2:e9:98:b4:83:d6:30:26:
                    88:86:c6:d6:e3:0d:8a:05:80:ff:77:ae:4a:12:c1:
                    9d:65:4f:95:76:63:91:a2:1d:75:b2:c5:ab:ba:b6:
                    03:b0:69:92:65:61:3a:fe:60:99:f0:f1:f2:a5:fe:
                    34:33:1a:bb:8d:f0:8d:b7:ea:c7:2f:02:63:b3:41:
                    c3:dc:81:44:d8:00:c9:2d:85:54:17:99:f2:72:84:
                    b6:8c:d4:59:5a:0b:9e:a0:05:c2:8f:83:b6:8e:84:
                    a3:30:fd:21:c3:36:38:3b:fc:17:6f:4b:43:b4:4c:
                    33:8f:25:cd:b2:9f:65:42:50:dd:10:a5:f2:59:c7:
                    e3:4d:07:0d:9f:e4:69:56:8b:cb:83:b7:c9:09:b6:
                    aa:2c:80:86:a0:82:31:89:47:54:02:48:c1:a3:4a:
                    3f:bd:0d:0e:6e:6e:e3:ba:19:80:bb:b8:e4:68:2a:
                    44:d9:95:54:0e:1e:8b:ed:79:0f:fe:f1:cb:5f:a6:
                    e3:d5:18:15:41:f7:76:b1:5b:0b:5a:72:d4:77:01:
                    08:2c:67:0d:d3:74:55:ca:85:99:b6:7c:ee:44:d2:
                    20:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:B8:00:69:29:EF:D6:BB:55:AE:5D:FE:7F:96:FC:96:BB:AA:D3:33
            X509v3 Authority Key Identifier:
                keyid:35:46:FF:45:CE:50:55:7E:DC:4C:03:06:E1:F8:69:48:2A:D4:23:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c90869-ee20-4939-840e-640c74a94cc6/1/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c90869-ee20-4939-840e-640c74a94cc6/1/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:1d:21:a2:0c:43:5a:76:2e:71:12:f7:41:3e:80:de:4b:b7:
         80:ce:79:9e:24:01:1a:ec:d8:1b:53:7e:97:6f:38:2b:5a:ae:
         b2:eb:8e:ff:a9:b9:1e:9a:a3:fb:d9:7c:23:d2:9d:cd:ed:10:
         0f:15:db:7b:15:07:5a:40:8e:b3:45:24:5e:68:be:b7:9c:72:
         42:0c:fa:5a:a7:58:c9:42:7a:89:0e:c4:ad:0d:0d:4f:9c:d7:
         26:c0:4f:11:8c:db:aa:96:bd:9a:41:1b:94:ed:da:0a:f0:63:
         00:9a:82:94:91:94:a8:3a:9c:76:e9:1f:e2:29:15:fd:d2:38:
         0e:b1:7c:66:9e:a6:92:86:0c:15:7c:f0:b2:ce:e3:48:c7:0d:
         f9:dc:7f:de:72:5e:26:89:fa:24:66:55:3e:9e:19:91:d7:43:
         91:d4:2d:f0:72:d4:fa:50:b0:83:4b:bf:88:54:60:fa:3d:a1:
         21:a1:56:00:a1:ec:aa:c4:f5:0b:4c:8e:41:30:a4:71:b3:67:
         ae:e9:33:a3:37:5b:e6:55:f0:0b:58:59:6d:16:b4:65:bb:38:
         84:d4:c8:c9:1c:88:f7:ed:a1:ea:cc:78:43:c9:57:1b:89:46:
         1e:1d:5d:08:52:94:0e:ce:75:eb:97:aa:7f:cc:4a:21:77:91:
         ac:bb:51:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:09:55 2025 by rpki-client