Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/24c5a3-2a31-4b85-840e-26806ec35c20/1/N0zC_9dpwY5ebw38mg6nT7P4wQg.mft
File:                     N0zC_9dpwY5ebw38mg6nT7P4wQg.mft (raw, json)
Hash identifier:          UtPJSm078Wi231OV8oRmWu3cxIMf49vgUahMnoQm5vQ=
Subject key identifier:   8A:2D:7B:F9:B3:9C:67:8F:96:1B:AA:F9:89:35:CA:2F:4C:35:7C:08
Authority key identifier: 37:4C:C2:FF:D7:69:C1:8E:5E:6F:0D:FC:9A:0E:A7:4F:B3:F8:C1:08
Certificate issuer:       /CN=374cc2ffd769c18e5e6f0dfc9a0ea74fb3f8c108
Certificate serial:       0198CCBA359E436F63301112B995135BAA78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N0zC_9dpwY5ebw38mg6nT7P4wQg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/24c5a3-2a31-4b85-840e-26806ec35c20/1/N0zC_9dpwY5ebw38mg6nT7P4wQg.mft
Manifest number:          0605
Signing time:             Thu 21 Aug 2025 13:03:31 +0000
Manifest this update:     Thu 21 Aug 2025 13:03:31 +0000
Manifest next update:     Fri 22 Aug 2025 13:03:31 +0000
Files and hashes:         1: N0zC_9dpwY5ebw38mg6nT7P4wQg.crl (hash: LteFU8gJPdMVmRtxpBAcCdIuZ5GfAlVLdMGDvidCCBU=)
                          2: vhowbyAk5Rh70uoSE00L17bmBWw.roa (hash: BWCvKLZnXJi7kB8pBa3EtqBdHPmAZ8d1B0Q3jz/KOuk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/24c5a3-2a31-4b85-840e-26806ec35c20/1/N0zC_9dpwY5ebw38mg6nT7P4wQg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/24c5a3-2a31-4b85-840e-26806ec35c20/1/N0zC_9dpwY5ebw38mg6nT7P4wQg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N0zC_9dpwY5ebw38mg6nT7P4wQg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Aug 2025 08:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:cc:ba:35:9e:43:6f:63:30:11:12:b9:95:13:5b:aa:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=374cc2ffd769c18e5e6f0dfc9a0ea74fb3f8c108
        Validity
            Not Before: Aug 21 13:03:31 2025 GMT
            Not After : Aug 22 13:03:31 2025 GMT
        Subject: CN=8a2d7bf9b39c678f961baaf98935ca2f4c357c08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0e:7f:e7:cd:1c:2a:85:68:b3:3c:65:75:c9:
                    fb:6d:52:3b:17:a3:3b:97:b0:90:87:91:c3:ea:68:
                    9d:9d:5f:2f:ba:df:60:e5:f9:74:b0:a2:b9:40:91:
                    fa:df:75:e8:1f:a0:10:1a:1f:3c:cd:60:33:9d:7d:
                    ea:9a:b5:25:e0:ca:df:32:1a:9f:e7:e1:87:1a:3f:
                    76:0b:ea:e8:e9:b7:bf:b2:0c:b6:9d:06:00:4e:f9:
                    0b:d4:43:ba:03:39:15:fa:b5:16:83:5a:3e:bc:eb:
                    2c:df:0c:f7:52:cf:3f:06:b8:86:f0:6c:d4:7b:41:
                    15:8f:05:53:9a:b1:0e:dc:fa:6c:45:30:6c:78:f2:
                    5b:0c:5d:f4:51:eb:31:37:e9:60:2f:09:4b:ea:ed:
                    f1:b5:94:24:54:39:c3:34:0a:f4:51:0f:df:bc:ff:
                    e1:f3:26:2b:65:f1:2b:54:ab:ae:0b:d8:b0:e0:32:
                    68:ef:30:bc:2c:92:8d:70:7c:b6:88:0a:94:28:fa:
                    7f:99:fe:ee:c3:9a:ce:f0:b8:00:69:07:de:2b:c8:
                    d1:cc:88:d0:0d:a5:7e:b1:9f:37:55:9a:09:ec:ea:
                    4d:21:a5:3f:fc:ab:91:37:cb:4d:06:14:bf:28:71:
                    56:70:ee:89:c8:31:0d:4f:2f:b5:f3:f8:c3:91:c2:
                    52:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:2D:7B:F9:B3:9C:67:8F:96:1B:AA:F9:89:35:CA:2F:4C:35:7C:08
            X509v3 Authority Key Identifier:
                keyid:37:4C:C2:FF:D7:69:C1:8E:5E:6F:0D:FC:9A:0E:A7:4F:B3:F8:C1:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0zC_9dpwY5ebw38mg6nT7P4wQg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/24c5a3-2a31-4b85-840e-26806ec35c20/1/N0zC_9dpwY5ebw38mg6nT7P4wQg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/24c5a3-2a31-4b85-840e-26806ec35c20/1/N0zC_9dpwY5ebw38mg6nT7P4wQg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:7f:58:74:22:c2:e8:5d:a8:77:97:3a:99:1a:a5:37:1a:1b:
         2a:ac:8d:c2:78:40:0d:e8:00:08:d4:e2:dd:76:1f:a4:af:25:
         df:13:c8:07:f3:37:48:7a:22:34:9c:9d:f5:dc:c2:46:b6:c3:
         98:55:c4:7e:ae:58:7d:01:8d:4a:10:eb:73:bf:84:f5:a9:c9:
         61:a5:68:65:9a:ad:d0:bd:4a:94:ad:6e:5f:40:46:91:34:8a:
         1d:b8:6c:c2:71:60:6e:0d:31:1c:5b:2d:61:f1:39:8e:6c:d0:
         dd:8c:ae:86:02:29:f1:59:22:54:55:0f:75:00:e6:2c:4e:fd:
         e0:93:d6:52:73:db:a9:94:0a:85:4b:30:d9:d2:fa:b9:0c:cb:
         96:be:43:2f:18:60:fe:58:40:a8:15:1d:dc:aa:5c:c8:5e:7d:
         89:bf:d1:bc:58:32:c7:e4:b5:69:ed:8c:d0:7b:64:65:1d:cb:
         ba:4d:ca:ea:9b:f7:85:dd:4d:0a:65:d9:c5:41:13:c2:e8:f3:
         6b:ec:69:f6:74:79:32:aa:db:9a:2e:6b:e8:5b:cd:9a:9e:e5:
         fa:2f:3e:57:3f:5d:1f:2f:33:73:a7:a8:cf:60:fe:94:c8:55:
         ae:08:ae:56:14:84:99:ec:2c:3c:f3:1e:b1:a4:91:4a:b9:97:
         88:17:94:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 17:45:30 2025 by rpki-client