Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/333034-e737-436d-b149-3119d3332282/1/njQ_BMJ9FUVaqlzapFadN6iJUNc.mft
File:                     njQ_BMJ9FUVaqlzapFadN6iJUNc.mft (raw, json)
Hash identifier:          VouYOMipdhelc+dcwY5iOm+avloTuZvje/ExsNoxxfY=
Subject key identifier:   A4:6C:63:75:D2:55:E0:76:19:C8:27:8A:A9:1E:31:8C:E9:95:70:3A
Authority key identifier: 9E:34:3F:04:C2:7D:15:45:5A:AA:5C:DA:A4:56:9D:37:A8:89:50:D7
Certificate issuer:       /CN=9e343f04c27d15455aaa5cdaa4569d37a88950d7
Certificate serial:       019922C326BF6E3821FB84B8CF5007BE24A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/njQ_BMJ9FUVaqlzapFadN6iJUNc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/333034-e737-436d-b149-3119d3332282/1/njQ_BMJ9FUVaqlzapFadN6iJUNc.mft
Manifest number:          13A0
Signing time:             Sun 07 Sep 2025 06:00:38 +0000
Manifest this update:     Sun 07 Sep 2025 06:00:38 +0000
Manifest next update:     Mon 08 Sep 2025 06:00:38 +0000
Files and hashes:         1: MspHMRx79y2hbQhEiM4afU6NUCQ.roa (hash: Umb9OOhu/lMtmCnjDzYDKJVcT/aByAqAtDT/npY6pzk=)
                          2: njQ_BMJ9FUVaqlzapFadN6iJUNc.crl (hash: kGAII4KgM/6r8LJsVTZgpu0BTAQJrfNFJ/CMIHdvUyA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/333034-e737-436d-b149-3119d3332282/1/njQ_BMJ9FUVaqlzapFadN6iJUNc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/333034-e737-436d-b149-3119d3332282/1/njQ_BMJ9FUVaqlzapFadN6iJUNc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/njQ_BMJ9FUVaqlzapFadN6iJUNc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:c3:26:bf:6e:38:21:fb:84:b8:cf:50:07:be:24:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e343f04c27d15455aaa5cdaa4569d37a88950d7
        Validity
            Not Before: Sep  7 06:00:38 2025 GMT
            Not After : Sep  8 06:00:38 2025 GMT
        Subject: CN=a46c6375d255e07619c8278aa91e318ce995703a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:30:7a:31:3a:c8:89:59:dc:c0:ae:7b:25:32:
                    83:9c:b6:35:5d:0a:40:a3:38:a5:ad:b0:73:e7:c4:
                    29:a5:86:28:32:83:18:7e:8d:9c:47:98:57:e1:82:
                    fa:40:4a:1b:67:6b:f1:8b:bc:e4:26:15:1a:31:a2:
                    db:27:dc:fe:22:b6:09:d1:03:fa:b4:a9:0f:6f:df:
                    0f:37:45:86:e8:f5:48:46:1f:08:0e:66:ba:14:cf:
                    4f:e3:74:fc:ed:cd:ea:9c:cb:e0:cd:8c:54:73:b4:
                    7c:46:54:cf:54:99:c0:c8:20:74:f0:8d:50:27:c0:
                    0c:1e:40:80:fd:9e:23:2b:95:66:a9:f9:11:30:a1:
                    67:1a:2c:a1:84:02:b5:8b:30:2d:55:7f:18:ec:12:
                    fd:0d:b4:fe:c5:25:02:21:0e:7a:6b:a0:c3:cd:c6:
                    f8:6d:8c:af:a4:94:81:f6:79:9d:08:49:98:0a:48:
                    5a:70:31:cc:0f:1b:30:47:66:53:4f:6d:94:de:2c:
                    e3:16:e2:84:4a:b1:e2:3a:54:de:21:3a:c3:ba:38:
                    fe:c2:67:fc:7f:a6:d4:2e:f4:31:60:de:b6:e2:35:
                    8c:c7:52:90:5c:b5:c3:da:52:79:06:55:ab:c2:d8:
                    5b:05:74:af:87:ce:04:eb:19:1b:75:83:e0:ea:ae:
                    f1:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:6C:63:75:D2:55:E0:76:19:C8:27:8A:A9:1E:31:8C:E9:95:70:3A
            X509v3 Authority Key Identifier:
                keyid:9E:34:3F:04:C2:7D:15:45:5A:AA:5C:DA:A4:56:9D:37:A8:89:50:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njQ_BMJ9FUVaqlzapFadN6iJUNc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/333034-e737-436d-b149-3119d3332282/1/njQ_BMJ9FUVaqlzapFadN6iJUNc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/333034-e737-436d-b149-3119d3332282/1/njQ_BMJ9FUVaqlzapFadN6iJUNc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:f7:cf:2a:ba:27:d0:43:1c:6b:fd:64:c7:dc:31:3a:a7:05:
         d4:d0:e4:8f:4c:bb:e5:e0:93:41:df:4a:e7:a1:cc:6d:eb:06:
         31:0a:13:90:c2:48:14:79:0a:7d:fd:ec:8c:ef:8e:40:d5:53:
         f7:cd:43:2d:67:d2:c5:1b:98:2a:ea:8d:ef:e4:0e:37:57:1e:
         a8:1e:69:c8:92:ba:fb:bb:28:e6:20:9d:e2:3c:2c:c3:42:a5:
         f3:d6:2b:ba:27:ab:5d:80:10:6d:9b:2c:32:9c:73:33:fe:6d:
         cc:7c:02:7c:b5:c8:07:f7:93:78:65:3c:06:9f:29:7d:31:39:
         50:80:8e:e6:bd:5d:58:95:44:25:3e:0a:b9:bd:4a:aa:f3:77:
         cc:d1:8a:13:32:9f:9d:9f:05:30:86:13:67:01:61:25:ff:2c:
         d1:36:89:33:a1:90:ba:bd:1c:83:10:a9:4f:08:84:67:dc:da:
         d5:94:4d:65:9c:1a:cd:15:58:72:17:83:f4:78:cf:b0:e4:af:
         25:d7:07:e7:80:e0:56:18:3d:36:71:17:2d:70:99:82:26:0f:
         da:05:08:e4:8a:98:4a:13:de:06:81:33:f2:88:b2:b4:79:e6:
         bf:82:ff:58:18:2d:ec:80:da:50:c1:0c:11:08:8e:df:62:9a:
         67:1c:e5:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:24:14 2025 by rpki-client