Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/nSZknk8seV_-VA-dl_JumcXF4_8.mft
File:                     nSZknk8seV_-VA-dl_JumcXF4_8.mft (raw, json)
Hash identifier:          Eh3zX+YtxWlKrlz1F+7E/NMwX4R+6nEU90CXWGBYby8=
Subject key identifier:   9B:37:FC:45:FF:AA:BD:38:D3:AE:E8:7B:9C:D8:E6:25:9F:B2:B0:6F
Authority key identifier: 9D:26:64:9E:4F:2C:79:5F:FE:54:0F:9D:97:F2:6E:99:C5:C5:E3:FF
Certificate issuer:       /CN=9d26649e4f2c795ffe540f9d97f26e99c5c5e3ff
Certificate serial:       01988EEC234B2B98A50819E4CDD20A73E81D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nSZknk8seV_-VA-dl_JumcXF4_8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/nSZknk8seV_-VA-dl_JumcXF4_8.mft
Manifest number:          1629
Signing time:             Sat 09 Aug 2025 13:01:36 +0000
Manifest this update:     Sat 09 Aug 2025 13:01:36 +0000
Manifest next update:     Sun 10 Aug 2025 13:01:36 +0000
Files and hashes:         1: KCBbNGS1YVW1hBxpXGDK5vFmb2s.roa (hash: 5Zdj42abBdFlW3cL9DY3OZbKnuKmXjtJAYCIOqBuBo0=)
                          2: UHBBgUNLNn1iHI9e-EGjjOzBhFw.roa (hash: BSvm991wTIbEUV5S7qd3FSoLfpa8IYB6IeFe483AVIY=)
                          3: YulnYlbf3_p4_qdtilX3A7GCTS4.roa (hash: 9jhnLDTHr1+aTiwSRhcVHPAQnY8jnY4svd3BxfDOy3k=)
                          4: nSZknk8seV_-VA-dl_JumcXF4_8.crl (hash: R3lnUFCSvUo4+M4bSkQh1nSuxNBDMoGFXhLrXB537y4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/nSZknk8seV_-VA-dl_JumcXF4_8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/nSZknk8seV_-VA-dl_JumcXF4_8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nSZknk8seV_-VA-dl_JumcXF4_8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 13:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8e:ec:23:4b:2b:98:a5:08:19:e4:cd:d2:0a:73:e8:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d26649e4f2c795ffe540f9d97f26e99c5c5e3ff
        Validity
            Not Before: Aug  9 13:01:36 2025 GMT
            Not After : Aug 10 13:01:36 2025 GMT
        Subject: CN=9b37fc45ffaabd38d3aee87b9cd8e6259fb2b06f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b5:83:73:1e:ee:fd:41:28:50:54:31:56:fa:
                    f0:c3:7a:1c:04:ec:a6:4e:90:58:6c:e9:b9:e0:79:
                    c1:c6:e5:d3:1c:a5:4b:82:39:3c:62:f6:e2:63:cf:
                    7a:b9:c0:3d:d0:9c:b5:42:45:18:a8:2e:cc:f1:9e:
                    f2:77:7d:7b:fe:43:5d:15:b5:65:77:b6:8f:35:0b:
                    fa:b3:75:37:9a:b5:48:a7:6d:65:f8:91:2e:0f:d3:
                    0f:8e:ac:c2:f5:68:da:a4:4b:13:7f:6c:99:1e:65:
                    8f:ae:21:38:d3:f0:c5:f0:f5:b8:45:01:17:39:2a:
                    3a:e7:98:22:fc:c7:c6:b4:0a:7c:5c:06:59:b8:4e:
                    e3:b5:1a:f7:bd:b9:d5:71:30:b7:da:cb:bb:89:26:
                    9d:15:90:03:d6:ce:6c:02:35:49:17:39:bd:4f:3e:
                    77:fb:da:59:48:54:3d:4b:cb:fd:5d:f2:14:71:ed:
                    53:52:60:27:2e:70:39:f6:b0:e3:eb:59:a6:c5:dd:
                    d7:ad:3b:b3:b4:45:be:46:a5:76:93:9c:8c:80:b4:
                    de:b4:21:2e:88:87:f2:9a:86:28:ac:8c:40:d2:42:
                    e4:7c:9a:8d:28:7d:a8:68:a4:8d:65:f4:d3:01:a0:
                    a6:1b:b8:29:1a:62:23:f6:74:8e:af:ab:a5:bc:15:
                    e0:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:37:FC:45:FF:AA:BD:38:D3:AE:E8:7B:9C:D8:E6:25:9F:B2:B0:6F
            X509v3 Authority Key Identifier:
                keyid:9D:26:64:9E:4F:2C:79:5F:FE:54:0F:9D:97:F2:6E:99:C5:C5:E3:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSZknk8seV_-VA-dl_JumcXF4_8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/nSZknk8seV_-VA-dl_JumcXF4_8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/nSZknk8seV_-VA-dl_JumcXF4_8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:20:0a:aa:cd:1c:cb:ff:f2:96:a6:9d:0d:74:a8:f8:4c:4c:
         ec:26:8a:df:d8:f9:47:4d:9f:ae:54:2b:78:70:a2:9f:a7:de:
         5f:6f:51:11:57:e3:2b:bb:a0:c6:42:6f:1d:ff:5a:88:04:68:
         83:47:de:6a:f1:cc:39:0e:85:0e:75:a3:e0:f5:08:de:c8:90:
         ad:be:da:43:63:18:2f:0f:49:2b:20:76:d8:c6:ed:5b:f6:61:
         56:23:b2:1b:e9:0b:68:b8:33:78:ac:c6:10:37:b2:b8:cd:d3:
         e9:ed:37:3f:7e:c7:71:c9:41:10:81:7b:2e:06:10:1d:3b:a2:
         27:4b:f3:ba:1f:ab:e3:ae:5d:7e:16:15:37:a8:0c:f5:66:27:
         e3:06:e3:a7:65:55:7d:b5:1e:cb:60:49:37:c6:56:c9:3d:0e:
         d5:7a:1f:d2:bf:ff:68:27:b3:b4:58:b3:20:59:7f:0d:88:8e:
         69:cd:cc:c5:ff:10:19:77:c5:b0:11:f2:d0:8c:04:53:20:3d:
         1f:3e:88:77:2d:44:ac:61:7c:ec:de:b0:8d:68:14:60:0e:67:
         58:ff:9d:2f:ed:2a:65:f2:5b:65:87:3d:d2:75:90:03:b1:80:
         27:35:08:40:d1:ac:35:a2:50:d5:0d:41:1a:0e:75:0e:ee:98:
         e5:c4:6e:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:08:15 2025 by rpki-client