Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/25fb54-d467-4e90-a41f-91c0d8e7549d/1/N6TS5C8jYsLm71K4Lxn35WN1fgw.mft
File:                     N6TS5C8jYsLm71K4Lxn35WN1fgw.mft (raw, json)
Hash identifier:          q5Z1hoImpnuCfhOIZ6BHeBNTCNM1O7TCykqrnQ7P/yg=
Subject key identifier:   4C:BC:49:5A:04:60:9C:4C:C6:C9:35:C7:3C:76:99:48:77:41:4A:B4
Authority key identifier: 37:A4:D2:E4:2F:23:62:C2:E6:EF:52:B8:2F:19:F7:E5:63:75:7E:0C
Certificate issuer:       /CN=37a4d2e42f2362c2e6ef52b82f19f7e563757e0c
Certificate serial:       019873E3BE0BEB3A5F69FA48A8C0FCDA87A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N6TS5C8jYsLm71K4Lxn35WN1fgw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/25fb54-d467-4e90-a41f-91c0d8e7549d/1/N6TS5C8jYsLm71K4Lxn35WN1fgw.mft
Manifest number:          0342
Signing time:             Mon 04 Aug 2025 07:02:41 +0000
Manifest this update:     Mon 04 Aug 2025 07:02:41 +0000
Manifest next update:     Tue 05 Aug 2025 07:02:41 +0000
Files and hashes:         1: 3PpgKNG0AmRV_aCWCsXZ_tB5eIg.roa (hash: eRzqoJ+wnFE50kPBIiEdOOr71bv/+CxmFvCCuPDTNi4=)
                          2: N6TS5C8jYsLm71K4Lxn35WN1fgw.crl (hash: xp00U+IH2JUc7Ejnu1pEzDbW7rIxgE8Stq1SdQtMTpA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/25fb54-d467-4e90-a41f-91c0d8e7549d/1/N6TS5C8jYsLm71K4Lxn35WN1fgw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/25fb54-d467-4e90-a41f-91c0d8e7549d/1/N6TS5C8jYsLm71K4Lxn35WN1fgw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N6TS5C8jYsLm71K4Lxn35WN1fgw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e3:be:0b:eb:3a:5f:69:fa:48:a8:c0:fc:da:87:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37a4d2e42f2362c2e6ef52b82f19f7e563757e0c
        Validity
            Not Before: Aug  4 07:02:41 2025 GMT
            Not After : Aug  5 07:02:41 2025 GMT
        Subject: CN=4cbc495a04609c4cc6c935c73c76994877414ab4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:75:7a:51:42:76:ec:c8:e6:d9:c1:a3:30:c2:
                    3d:47:aa:61:b3:e2:19:05:10:0a:d8:1e:f6:20:b9:
                    72:0b:3e:bd:09:48:49:ab:bd:70:95:60:0a:e2:d8:
                    cf:3e:1b:4b:3e:82:34:f8:94:f2:5d:24:ec:8b:ba:
                    53:00:2b:6e:6e:ef:9a:e1:2c:1c:7d:1e:e6:04:03:
                    01:a2:26:14:a8:ad:d3:bb:05:dc:44:4c:2a:d9:60:
                    10:a5:db:c9:b6:f9:20:31:fa:99:57:20:c0:3f:01:
                    ce:f4:5d:73:5c:d7:44:a3:3a:d8:2d:90:95:e3:d0:
                    1e:a3:55:c9:42:b9:fa:fa:38:cd:a1:43:e9:b9:eb:
                    6a:fb:ca:cb:b7:3e:70:2d:9f:26:b4:96:52:90:81:
                    cf:29:59:25:c8:2c:c9:86:b7:b0:50:9f:37:4a:fd:
                    0d:16:32:ec:31:d0:53:8d:d1:e1:bb:c2:b9:a2:35:
                    3b:bc:44:c9:ad:6f:18:09:93:69:cc:ce:b3:12:74:
                    20:95:7b:78:54:71:1e:09:0e:69:4f:12:a0:3b:d1:
                    b1:f7:09:93:aa:c5:01:8e:02:f7:f1:f2:fd:55:11:
                    0f:d1:f2:b0:cf:83:1c:50:f4:e8:44:8e:82:4f:f1:
                    9d:a7:0a:bc:71:fe:70:1e:02:54:19:06:8e:80:42:
                    49:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:BC:49:5A:04:60:9C:4C:C6:C9:35:C7:3C:76:99:48:77:41:4A:B4
            X509v3 Authority Key Identifier:
                keyid:37:A4:D2:E4:2F:23:62:C2:E6:EF:52:B8:2F:19:F7:E5:63:75:7E:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N6TS5C8jYsLm71K4Lxn35WN1fgw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/25fb54-d467-4e90-a41f-91c0d8e7549d/1/N6TS5C8jYsLm71K4Lxn35WN1fgw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/25fb54-d467-4e90-a41f-91c0d8e7549d/1/N6TS5C8jYsLm71K4Lxn35WN1fgw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:9f:32:3c:61:a4:b9:ed:88:90:f8:f1:4e:05:d1:3c:62:8f:
         9b:8c:b5:03:64:c3:db:a2:33:0e:d2:28:c4:ce:59:3a:7e:21:
         55:f7:eb:94:57:a5:ca:16:59:39:80:ee:11:96:3b:d7:24:1d:
         ad:7c:9d:98:6e:8e:8b:a3:4a:2d:94:bc:6b:b7:c3:cf:71:ed:
         de:35:d1:3f:29:f9:e3:76:5f:55:a0:bb:47:1c:43:0f:ac:e2:
         cc:49:a8:76:0e:54:68:cb:6e:66:54:59:08:c2:d0:33:96:8d:
         6b:25:f4:6d:51:f2:84:62:6e:87:0e:b9:78:dd:78:f8:d3:d0:
         12:40:3d:c4:e6:c1:fe:2f:8f:75:68:14:2d:6f:15:2b:5d:17:
         92:59:b3:7e:19:56:fd:2d:5a:9e:37:39:5b:c9:a5:15:8e:e9:
         db:c9:21:3c:cd:81:72:69:64:d2:88:05:5c:1c:ce:5f:f9:75:
         0c:e8:1b:fd:86:ca:18:47:66:55:e9:3d:d3:58:e8:f9:f0:6d:
         6d:c4:51:eb:fb:77:b9:bd:fd:d8:94:3f:a2:bb:f9:04:f2:49:
         5a:ed:c5:4f:03:b7:72:ee:a8:4c:35:a4:85:e3:5f:da:d2:39:
         5e:a7:d1:e1:71:04:9b:c9:19:e3:ab:9a:33:39:ee:ad:f3:a6:
         06:4e:e4:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:07:52 2025 by rpki-client