Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/nozX1qQQV1C_iXWn0LlnlMHv5iI.mft
File:                     nozX1qQQV1C_iXWn0LlnlMHv5iI.mft (raw, json)
Hash identifier:          /u1rtJJ6tihzkVeew2r7zlzF88dI70NPnuCTtE5hlBE=
Subject key identifier:   8B:F6:2A:BA:0C:71:70:FC:68:B9:3E:69:8B:E2:CF:54:9D:4B:81:99
Authority key identifier: 9E:8C:D7:D6:A4:10:57:50:BF:89:75:A7:D0:B9:67:94:C1:EF:E6:22
Certificate issuer:       /CN=9e8cd7d6a4105750bf8975a7d0b96794c1efe622
Certificate serial:       0198763E98622DF4FED58EED456EDDF5D925
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nozX1qQQV1C_iXWn0LlnlMHv5iI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/nozX1qQQV1C_iXWn0LlnlMHv5iI.mft
Manifest number:          0F5B
Signing time:             Mon 04 Aug 2025 18:01:10 +0000
Manifest this update:     Mon 04 Aug 2025 18:01:10 +0000
Manifest next update:     Tue 05 Aug 2025 18:01:10 +0000
Files and hashes:         1: YqcsRsNWUIAuSWFcG2LkwlaCRpU.roa (hash: JnjUw+oSYZ7zYyFgVViB1dXlZlt1DLN5IKIef4zg43A=)
                          2: _VhyulaRLMFmy7z_tqs-4L4cWXE.roa (hash: T2PRCy0LrQZ9+r9vTWIgoLmdpeQ4Ly8m5VmmmlXegNc=)
                          3: i4e34huH3g5sLDHdnkVm8dSr_sE.roa (hash: S/XQJg4OAS7AjMIGPw3l7NpJsp2Db+/obQ9OlOHPkv4=)
                          4: nozX1qQQV1C_iXWn0LlnlMHv5iI.crl (hash: aFagqLKZuBZtp6vaxvi6wAPm0fe/KnFjWj1T84qM2aw=)
                          5: qdNG49hIyDFFdCFIGbm6kEPFcbI.roa (hash: oUfCXgwymuAlhA935EnqN9SnikKCG4eVZ1qECppIrzI=)
                          6: tgtnwoMSuJpvUhZwhk9qFrx7hWQ.roa (hash: rFNa5r+Q4PL0nS416jQMSkeeFMd2IaIQ8Oy1MIANZ/s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/nozX1qQQV1C_iXWn0LlnlMHv5iI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/nozX1qQQV1C_iXWn0LlnlMHv5iI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nozX1qQQV1C_iXWn0LlnlMHv5iI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 12:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:76:3e:98:62:2d:f4:fe:d5:8e:ed:45:6e:dd:f5:d9:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e8cd7d6a4105750bf8975a7d0b96794c1efe622
        Validity
            Not Before: Aug  4 18:01:10 2025 GMT
            Not After : Aug  5 18:01:10 2025 GMT
        Subject: CN=8bf62aba0c7170fc68b93e698be2cf549d4b8199
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:9a:69:5b:b0:9c:e7:dc:19:c7:75:b6:98:2a:
                    1c:b2:f3:d2:ee:fe:e7:80:0e:a6:cf:26:6d:33:8c:
                    12:89:14:14:be:db:b7:4b:19:a1:30:85:6f:57:e8:
                    25:e5:7f:bf:d2:13:81:03:11:fb:8f:7b:e8:c9:ef:
                    b5:aa:81:72:ee:67:62:1c:0e:d8:cf:d2:e9:bb:f8:
                    46:eb:38:07:15:94:b4:a3:f3:ef:3d:18:08:bd:b3:
                    12:c0:3b:a6:cf:98:13:40:d6:ef:3c:d3:0f:a6:71:
                    d5:5c:0c:d3:e6:91:ad:68:cf:86:a5:f7:bf:51:4e:
                    12:83:59:c4:fa:2d:eb:72:df:b6:81:35:c8:c1:af:
                    09:1d:47:e0:e6:37:11:0d:aa:d6:d2:49:ea:2b:ad:
                    91:66:3c:f1:dd:3e:53:52:8f:76:02:ca:f8:04:57:
                    f2:71:87:fb:24:78:ab:3a:d3:06:92:ce:74:0f:b3:
                    bb:a4:66:06:5a:49:21:e4:08:b8:3c:f8:56:95:a1:
                    9b:68:b6:87:16:fe:cd:d8:06:dd:b2:b9:82:1c:b4:
                    ae:aa:2c:77:4f:de:ce:44:cd:c7:f6:cc:11:64:77:
                    3a:7c:69:36:e0:ef:1f:ba:40:ae:63:0d:41:2d:0b:
                    54:ed:5c:0c:75:3c:0c:2c:27:34:0b:ad:82:df:9e:
                    88:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:F6:2A:BA:0C:71:70:FC:68:B9:3E:69:8B:E2:CF:54:9D:4B:81:99
            X509v3 Authority Key Identifier:
                keyid:9E:8C:D7:D6:A4:10:57:50:BF:89:75:A7:D0:B9:67:94:C1:EF:E6:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nozX1qQQV1C_iXWn0LlnlMHv5iI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/nozX1qQQV1C_iXWn0LlnlMHv5iI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/nozX1qQQV1C_iXWn0LlnlMHv5iI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:f4:ed:5c:78:ed:d2:be:df:99:67:58:fc:3d:92:99:02:4f:
         6b:09:7d:8f:31:3f:c6:e2:31:e6:3f:31:57:b2:60:bc:0f:d7:
         2f:30:c1:fc:ae:25:11:f7:97:f7:43:ac:8d:b1:64:30:7e:c9:
         61:ce:fe:1c:ee:93:06:76:5c:05:1a:95:ad:eb:18:ad:21:5e:
         18:b6:7d:c7:75:7d:81:81:0e:51:95:d6:72:23:4a:14:da:07:
         40:74:ae:10:02:03:35:69:4a:6f:13:3d:77:07:d7:cd:b0:33:
         15:a8:d8:42:35:7c:80:02:3e:04:a7:08:5a:f3:18:70:c1:0c:
         ae:5f:d9:65:96:1e:fa:51:55:3f:33:fe:f9:69:71:29:45:9f:
         02:a3:35:30:b0:c9:19:78:71:93:4b:5c:fa:16:5a:5d:a0:ad:
         1e:f2:1a:94:d3:b4:fd:cf:d8:a6:10:11:b9:cb:b9:8c:b9:e9:
         12:cc:ce:09:3b:ab:32:e8:cf:d2:78:f6:a1:5f:e8:42:6e:79:
         88:35:d2:a0:54:d1:53:0d:97:a2:00:f4:cb:e9:83:88:36:5d:
         e5:e5:9b:0e:6b:16:dd:70:46:31:5d:ff:34:1e:48:53:1c:f0:
         56:47:92:9d:a6:d6:95:0a:42:09:8b:d6:86:f1:3e:97:f5:2b:
         87:50:8c:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 22:21:39 2025 by rpki-client