Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/a0faca-db7f-4ed8-b11a-eec46ca82a33/1/NVi7R941Tgng_CyywfoU1x2Sbug.mft
File:                     NVi7R941Tgng_CyywfoU1x2Sbug.mft (raw, json)
Hash identifier:          ixK8plao5cdgXieOEzTM/BPh/6MngiAJfFBS6t4KLh0=
Subject key identifier:   C8:BC:19:E0:31:08:5B:4E:13:17:62:75:33:5B:9D:8C:6B:50:AF:AD
Authority key identifier: 35:58:BB:47:DE:35:4E:09:E0:FC:2C:B2:C1:FA:14:D7:1D:92:6E:E8
Certificate issuer:       /CN=3558bb47de354e09e0fc2cb2c1fa14d71d926ee8
Certificate serial:       0199244374E81F80E019C15917A167EA5314
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NVi7R941Tgng_CyywfoU1x2Sbug.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/a0faca-db7f-4ed8-b11a-eec46ca82a33/1/NVi7R941Tgng_CyywfoU1x2Sbug.mft
Manifest number:          167A
Signing time:             Sun 07 Sep 2025 13:00:24 +0000
Manifest this update:     Sun 07 Sep 2025 13:00:24 +0000
Manifest next update:     Mon 08 Sep 2025 13:00:24 +0000
Files and hashes:         1: 0iLUxeXNyLeCeJPOBWFetpkhzr8.roa (hash: GzvKjvrXUQtFRvTqnLO3SZbgmgXYnbU1huTzG2YJ5xg=)
                          2: NVi7R941Tgng_CyywfoU1x2Sbug.crl (hash: 2CZpkLrgyu5Gtcn+qgahDVnB8GXVUFNABu1WV+Q7wSM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/a0faca-db7f-4ed8-b11a-eec46ca82a33/1/NVi7R941Tgng_CyywfoU1x2Sbug.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/a0faca-db7f-4ed8-b11a-eec46ca82a33/1/NVi7R941Tgng_CyywfoU1x2Sbug.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NVi7R941Tgng_CyywfoU1x2Sbug.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 07:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:24:43:74:e8:1f:80:e0:19:c1:59:17:a1:67:ea:53:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3558bb47de354e09e0fc2cb2c1fa14d71d926ee8
        Validity
            Not Before: Sep  7 13:00:24 2025 GMT
            Not After : Sep  8 13:00:24 2025 GMT
        Subject: CN=c8bc19e031085b4e13176275335b9d8c6b50afad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:98:6c:d4:6b:25:55:2d:40:18:d7:b5:d0:17:
                    af:4a:5c:f7:6b:ce:19:ef:62:4e:dd:a8:30:9e:66:
                    4f:9f:79:63:d4:eb:4c:80:87:01:93:78:55:9b:55:
                    30:d2:ae:67:4d:c2:ba:aa:0f:ad:21:c4:ba:57:5e:
                    e4:93:c7:ce:53:fe:21:e4:d6:f2:7d:0a:9c:33:78:
                    09:03:0d:2d:0a:6e:98:ed:89:88:99:f5:b7:50:f2:
                    32:97:6e:18:95:8e:fb:6c:a5:85:fb:6c:07:ee:0a:
                    d3:6b:6d:0a:4a:71:04:a1:f5:ad:0b:73:0c:f7:97:
                    ad:f4:28:34:80:e5:fb:6e:0f:9b:4c:fa:a0:21:1c:
                    e5:7b:1f:c3:c2:85:cb:13:cd:aa:76:4a:b0:99:65:
                    18:e8:a2:43:59:91:b3:ba:d9:b9:40:d8:45:c9:9b:
                    ec:b0:c6:67:f4:c5:46:f1:ed:44:f2:9c:35:78:17:
                    f7:79:f8:92:02:23:d1:e7:08:db:01:fe:70:e4:8f:
                    14:86:7c:66:bd:5e:2d:49:c8:58:82:d4:95:8f:ce:
                    b7:9f:f0:38:af:ca:cc:12:e9:38:17:55:55:e7:30:
                    4c:40:ec:64:05:92:e8:72:4f:39:96:8f:2b:25:13:
                    3b:c3:8e:95:bb:56:c4:61:34:bf:24:e6:f1:45:1a:
                    87:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:BC:19:E0:31:08:5B:4E:13:17:62:75:33:5B:9D:8C:6B:50:AF:AD
            X509v3 Authority Key Identifier:
                keyid:35:58:BB:47:DE:35:4E:09:E0:FC:2C:B2:C1:FA:14:D7:1D:92:6E:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NVi7R941Tgng_CyywfoU1x2Sbug.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a0faca-db7f-4ed8-b11a-eec46ca82a33/1/NVi7R941Tgng_CyywfoU1x2Sbug.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a0faca-db7f-4ed8-b11a-eec46ca82a33/1/NVi7R941Tgng_CyywfoU1x2Sbug.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:b7:98:9b:8e:34:c6:f6:09:55:0b:ee:8e:cd:6b:0e:66:9f:
         46:80:e1:42:fe:2b:aa:29:c4:17:1f:27:01:a0:aa:9a:0b:19:
         f1:10:6e:14:82:9f:02:24:18:c5:d6:b0:1b:0b:c1:5e:78:d4:
         01:92:2a:b4:e5:b0:d5:1e:0c:6c:54:eb:ea:25:a1:fb:48:fd:
         dc:54:52:fd:89:59:67:e9:a9:b2:0e:1c:64:2f:11:85:f0:b1:
         d9:19:22:9a:2e:cb:95:2b:ba:6a:93:03:f3:44:b9:ae:5e:73:
         90:84:e2:53:5a:db:eb:a2:c7:9d:b6:55:7d:8a:d6:72:30:09:
         36:41:32:be:87:3e:c4:34:db:b0:c0:3d:39:c7:6a:4b:c0:c9:
         d4:74:d4:24:f8:1d:92:63:88:3c:6c:85:4d:bb:8c:63:fa:6c:
         13:76:2e:7c:6d:d7:46:57:a0:fb:61:8a:0b:b2:3e:51:da:10:
         7c:3b:bb:08:51:89:40:9a:6a:29:15:55:20:5e:2c:04:d7:c1:
         20:6a:78:1d:46:71:9b:e3:28:b1:7d:9e:1c:7e:8b:11:8a:00:
         b8:e9:c1:1e:22:ff:c3:fc:8f:69:3b:66:97:34:db:f0:ed:18:
         5d:08:13:dc:c8:2e:7e:7a:c6:b1:a5:b4:65:f2:24:28:4b:84:
         3a:db:a0:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:47:44 2025 by rpki-client