Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.mft
File:                     NoBlGroGa0CEp-0g1_UgGyKWwZc.mft (raw, json)
Hash identifier:          S8AamZ8aDGxVdBLfSm5TRQwJ0HnQT33rtASCnxsgnj0=
Subject key identifier:   56:C3:C0:57:43:6C:75:42:75:31:A1:1D:C6:CB:0E:A0:04:62:63:9A
Authority key identifier: 36:80:65:1A:BA:06:6B:40:84:A7:ED:20:D7:F5:20:1B:22:96:C1:97
Certificate issuer:       /CN=3680651aba066b4084a7ed20d7f5201b2296c197
Certificate serial:       019930110005246D752480B6D7BEAF88B474
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NoBlGroGa0CEp-0g1_UgGyKWwZc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.mft
Manifest number:          0699
Signing time:             Tue 09 Sep 2025 20:00:44 +0000
Manifest this update:     Tue 09 Sep 2025 20:00:44 +0000
Manifest next update:     Wed 10 Sep 2025 20:00:44 +0000
Files and hashes:         1: 4WEE6M8dthgW-fAXTbXKabGLlL0.roa (hash: Vz/LsTTjIy8GCO6P/Fc6vDeS0OdzaRulpb9xjUaoVO0=)
                          2: NoBlGroGa0CEp-0g1_UgGyKWwZc.crl (hash: Ovy139R2TKFJopnbxV3UGzLqpPuSfYBlXhJurf20Nww=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NoBlGroGa0CEp-0g1_UgGyKWwZc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 10 Sep 2025 20:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:30:11:00:05:24:6d:75:24:80:b6:d7:be:af:88:b4:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3680651aba066b4084a7ed20d7f5201b2296c197
        Validity
            Not Before: Sep  9 20:00:44 2025 GMT
            Not After : Sep 10 20:00:44 2025 GMT
        Subject: CN=56c3c057436c75427531a11dc6cb0ea00462639a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:27:62:16:74:7d:4f:1a:96:4a:a1:b7:4a:c3:
                    15:95:16:4c:be:b9:29:1c:fb:b8:fe:6b:e5:c5:cc:
                    74:bc:37:a1:57:0f:16:a9:21:56:ca:6e:eb:2c:2d:
                    33:da:79:43:02:c0:20:23:19:30:f4:66:4c:d0:34:
                    1a:1c:63:3a:16:78:97:fa:3a:22:cb:1c:92:47:44:
                    4b:f8:90:53:67:0e:b7:fb:1b:9f:19:84:c1:d5:48:
                    74:53:54:6a:3d:a3:7f:b7:89:9d:15:4a:14:9e:03:
                    72:ad:3d:f1:4e:6c:49:89:15:c5:da:f7:0a:a2:b3:
                    79:57:6e:f0:42:d3:c1:e0:c9:6f:8e:87:8a:a0:6a:
                    3e:4a:e8:62:07:06:32:6c:c5:73:cf:08:93:f5:ee:
                    28:3b:f1:fd:fb:3d:e2:97:b8:d2:cf:9a:3e:e2:74:
                    bf:9e:19:1c:e2:87:f6:ec:03:d2:47:86:0b:63:6d:
                    b6:78:5f:9e:8f:9e:4d:6e:96:80:e0:80:4a:ee:41:
                    98:8f:a7:9e:82:d9:a7:ea:48:ca:d8:52:11:14:20:
                    9d:a4:c2:51:a5:02:37:84:57:e4:99:ab:3f:f6:b1:
                    d7:36:f3:d9:27:14:75:0f:ce:ec:6b:71:d0:07:d2:
                    58:a6:9a:76:19:6d:99:c0:7a:91:a5:4e:36:df:8c:
                    87:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:C3:C0:57:43:6C:75:42:75:31:A1:1D:C6:CB:0E:A0:04:62:63:9A
            X509v3 Authority Key Identifier:
                keyid:36:80:65:1A:BA:06:6B:40:84:A7:ED:20:D7:F5:20:1B:22:96:C1:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NoBlGroGa0CEp-0g1_UgGyKWwZc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:de:98:a1:ed:de:f8:eb:59:ff:06:9e:1f:7b:af:5a:1f:96:
         ff:93:05:9b:5e:4e:7c:13:0b:24:bf:60:71:0b:04:b0:ca:21:
         83:9e:d8:12:65:11:47:47:2e:d2:2b:99:b5:73:dc:50:96:d2:
         d9:60:9c:04:20:f7:1e:5a:da:92:e3:98:d4:24:ce:5d:85:52:
         f3:6b:2e:89:42:d1:8e:fa:be:21:0c:53:43:3e:45:e3:92:bb:
         2a:5f:66:bb:26:b0:94:25:13:fa:d5:88:a2:0a:a9:92:4e:8b:
         7a:6f:be:f5:7c:3b:b5:55:dd:19:3e:2e:83:88:a2:ba:5b:e6:
         22:24:2d:fa:1e:f3:12:f2:29:cb:23:49:3b:3c:15:d9:5e:8b:
         d7:fa:43:22:d4:f2:c6:be:dc:28:71:e5:8a:9a:fd:c3:e1:66:
         93:38:0f:32:75:1f:01:aa:9d:c4:b4:c8:c2:8f:18:c0:07:b3:
         53:3f:e7:cb:5c:1a:a1:e1:0a:51:03:79:f2:24:4b:86:bd:3d:
         18:82:06:04:37:f6:a0:f2:8b:45:90:bb:91:76:63:be:fa:d1:
         8e:7f:a7:de:b4:2a:48:40:af:15:9f:40:22:c6:0a:92:23:e3:
         34:cb:ba:40:32:84:f4:3f:19:49:ab:86:d3:bd:19:ae:70:9a:
         b2:b6:91:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 04:17:06 2025 by rpki-client