Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/nM47EZfQz5URVAVypY_TctzAdIk.mft
File:                     nM47EZfQz5URVAVypY_TctzAdIk.mft (raw, json)
Hash identifier:          m041hGGDuExmfaQnDjwyRXxweX8RNQNZHCKtZoRtx/8=
Subject key identifier:   A5:C6:03:6A:DA:BD:3E:82:88:3E:C1:24:D7:A9:58:F6:C0:6E:85:12
Authority key identifier: 9C:CE:3B:11:97:D0:CF:95:11:54:05:72:A5:8F:D3:72:DC:C0:74:89
Certificate issuer:       /CN=9cce3b1197d0cf9511540572a58fd372dcc07489
Certificate serial:       01993191E41CC44F526DA6AC7360FAEC9728
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nM47EZfQz5URVAVypY_TctzAdIk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/nM47EZfQz5URVAVypY_TctzAdIk.mft
Manifest number:          1174
Signing time:             Wed 10 Sep 2025 03:01:08 +0000
Manifest this update:     Wed 10 Sep 2025 03:01:08 +0000
Manifest next update:     Thu 11 Sep 2025 03:01:08 +0000
Files and hashes:         1: B5L5vO55nBhfniljBpOUow8aXpw.roa (hash: DIMd34dyf8uJUIUl3TvafcV9IS2e08ZcTMFZLeGk8KM=)
                          2: JafDMsZo_2WlBv1_b3upjycXmLU.roa (hash: cGcJ9xKOVuAlrxxUBxsd3T744wFpR+9phZElM6fNzW0=)
                          3: SHsQx5nLK3je9BRJdGpJA5FmBJw.roa (hash: w1LS0Na0/a/or8fsG3pHVRaGF64EW4fSRED25Ol57DY=)
                          4: bVTa17baMARG71NZ_lURgWWh_4Y.roa (hash: A1ALFNaBHdD7deqRm4EdGoE1FRnMJSkvg8oyd+Kqmgc=)
                          5: lkc-0MlfE6wjagT9foeguXGZhBk.roa (hash: Dk9iF0id/HpCNZDFa+BXpH9AMMGx3UOmasYJ8e7rqkM=)
                          6: nM47EZfQz5URVAVypY_TctzAdIk.crl (hash: UjGa39SZM0FY+eHtoL47Sl/U6MO6MaQf1UzDyLOLi58=)
                          7: rfouL44lCXKFlJx3f-T9zbjuGS4.roa (hash: tCYRZzQeGaABrV6yDW5xOTTpQ0NtqSv/VFgzFAs4QHg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/nM47EZfQz5URVAVypY_TctzAdIk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/nM47EZfQz5URVAVypY_TctzAdIk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nM47EZfQz5URVAVypY_TctzAdIk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Sep 2025 02:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:31:91:e4:1c:c4:4f:52:6d:a6:ac:73:60:fa:ec:97:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cce3b1197d0cf9511540572a58fd372dcc07489
        Validity
            Not Before: Sep 10 03:01:08 2025 GMT
            Not After : Sep 11 03:01:08 2025 GMT
        Subject: CN=a5c6036adabd3e82883ec124d7a958f6c06e8512
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:3d:ef:fb:65:32:d5:a5:32:b3:bf:11:f7:db:
                    15:96:0e:b9:92:1f:53:b6:bd:c9:d3:58:df:d5:fc:
                    c9:fa:79:8f:90:b1:68:dd:e1:7b:99:b7:25:61:a4:
                    a4:ce:2e:be:53:ae:89:73:71:77:54:ad:a1:4a:3b:
                    ee:c9:9a:1e:22:d6:f6:3e:e6:a9:ee:c6:d4:1a:a3:
                    df:ee:4e:0c:8e:8a:92:ac:4c:b6:36:96:c5:49:8a:
                    2b:6d:17:ce:fb:f9:b7:20:9d:8f:c3:c0:0c:10:0e:
                    59:9d:ba:19:22:87:bb:75:43:9f:0d:26:3a:a4:aa:
                    be:c7:6e:ba:89:8f:ad:a1:2f:a7:4a:60:05:80:a3:
                    37:2c:28:fe:cc:bd:32:ff:95:df:28:1e:27:77:58:
                    00:15:2f:bd:de:95:fe:03:0a:63:52:b8:c9:e2:1d:
                    ce:3c:00:43:15:01:f5:2a:aa:c0:99:ce:19:9a:88:
                    6f:8e:6e:be:5a:c7:68:d1:ed:e8:ed:04:f8:ec:66:
                    0e:7a:7b:b5:85:0f:a1:ff:25:21:11:85:e6:5f:db:
                    7c:d4:ec:28:68:84:51:36:66:26:3a:d9:d8:64:fe:
                    fe:90:16:f3:a3:e4:c0:fa:70:15:16:ad:0a:4e:6d:
                    f1:67:e8:a9:92:06:dc:d5:df:0d:20:6f:4a:c6:b5:
                    5a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:C6:03:6A:DA:BD:3E:82:88:3E:C1:24:D7:A9:58:F6:C0:6E:85:12
            X509v3 Authority Key Identifier:
                keyid:9C:CE:3B:11:97:D0:CF:95:11:54:05:72:A5:8F:D3:72:DC:C0:74:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nM47EZfQz5URVAVypY_TctzAdIk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/nM47EZfQz5URVAVypY_TctzAdIk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/nM47EZfQz5URVAVypY_TctzAdIk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:b2:9b:bf:7d:ba:a4:a4:67:4e:36:bd:83:86:f4:92:dd:b4:
         ab:a8:54:b1:9f:4e:14:ff:1e:c6:cf:ec:17:a1:c4:46:e4:71:
         29:49:03:f0:3e:40:0c:f0:4b:14:7f:a2:4f:ee:9c:fb:ee:b1:
         4d:13:e8:7b:67:0f:c5:bf:0c:ce:0d:13:5c:b3:16:f6:44:74:
         fa:28:23:0a:a2:b1:0e:4e:94:c0:7e:ae:24:dd:57:dc:2a:63:
         b1:a7:e5:92:3f:d6:75:0c:18:21:21:4e:fb:de:b9:ab:9e:43:
         62:1a:80:78:4b:84:f8:9d:15:ce:4d:dd:48:2c:19:09:7b:0b:
         18:d5:7e:0f:01:df:7a:f3:18:16:76:ec:48:03:8d:7b:1c:2d:
         63:35:60:a6:44:a4:a7:97:d8:21:8e:c6:80:02:59:02:df:3e:
         3a:69:13:6e:21:30:31:25:f0:c0:6f:79:6a:13:e6:20:5f:97:
         ad:d8:fa:2c:5a:fd:c9:2d:90:08:bd:71:77:a0:d0:93:4c:39:
         3f:bb:8d:14:f2:d4:a6:07:e0:97:5f:a0:e8:2c:47:68:8f:cf:
         34:e3:1a:20:8c:6c:4a:e6:26:24:ef:98:e1:62:fb:9e:96:85:
         e3:74:1c:1a:ec:92:ba:3a:31:1a:2f:9a:14:c4:4b:57:f2:05:
         de:d7:60:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 10:31:02 2025 by rpki-client