Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/8cf2a6-4529-43d9-b782-36e85abe52ff/1/NTPUOQNczcXww50bP7FhlbVV_KM.mft
File:                     NTPUOQNczcXww50bP7FhlbVV_KM.mft (raw, json)
Hash identifier:          XJ8l37nLHfj03JLz6uK1pGNu9ZR8Az3bBNHu9oWuZvg=
Subject key identifier:   D3:56:BE:DC:C6:30:1C:40:6F:C8:5F:F7:B0:81:FA:D4:A6:18:86:61
Authority key identifier: 35:33:D4:39:03:5C:CD:C5:F0:C3:9D:1B:3F:B1:61:95:B5:55:FC:A3
Certificate issuer:       /CN=3533d439035ccdc5f0c39d1b3fb16195b555fca3
Certificate serial:       01988FC70E72839F7D496574E0555288D418
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NTPUOQNczcXww50bP7FhlbVV_KM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/8cf2a6-4529-43d9-b782-36e85abe52ff/1/NTPUOQNczcXww50bP7FhlbVV_KM.mft
Manifest number:          0B1B
Signing time:             Sat 09 Aug 2025 17:00:43 +0000
Manifest this update:     Sat 09 Aug 2025 17:00:43 +0000
Manifest next update:     Sun 10 Aug 2025 17:00:43 +0000
Files and hashes:         1: NTPUOQNczcXww50bP7FhlbVV_KM.crl (hash: sFRni89CZmyJ9mZ8KJru34SyMCAOHbjHfX4EDTvEUBo=)
                          2: rAVoUvT6eIAoJ9DaPocwQDvvkoc.roa (hash: 1BFZOwvrkIRFql6imBqxsdk52Ly1yvo/6JadLNNcDZs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/8cf2a6-4529-43d9-b782-36e85abe52ff/1/NTPUOQNczcXww50bP7FhlbVV_KM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/8cf2a6-4529-43d9-b782-36e85abe52ff/1/NTPUOQNczcXww50bP7FhlbVV_KM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NTPUOQNczcXww50bP7FhlbVV_KM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 17:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8f:c7:0e:72:83:9f:7d:49:65:74:e0:55:52:88:d4:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3533d439035ccdc5f0c39d1b3fb16195b555fca3
        Validity
            Not Before: Aug  9 17:00:43 2025 GMT
            Not After : Aug 10 17:00:43 2025 GMT
        Subject: CN=d356bedcc6301c406fc85ff7b081fad4a6188661
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:35:2d:73:15:13:54:43:ce:5c:95:09:90:d1:
                    74:84:1f:1c:d4:e4:a2:01:02:04:90:c5:af:70:d3:
                    41:ac:eb:a4:a8:a3:ab:f6:21:01:4e:17:ba:e5:dc:
                    a3:ce:ed:2e:e6:c3:b3:ed:43:1c:5b:6c:6a:c1:f7:
                    68:0f:83:42:f9:0b:c4:15:54:17:47:89:21:22:ab:
                    35:3d:d6:c7:cb:e0:f5:c8:7a:c7:57:91:a1:a7:36:
                    3e:ed:3a:82:0c:fb:e7:9c:03:48:74:7c:83:1a:53:
                    ca:40:ff:23:01:ad:b0:ee:44:d8:9f:66:7d:dd:a7:
                    f7:c1:58:a4:09:ae:4d:5d:0f:13:4a:16:82:67:95:
                    1f:5e:20:c8:2c:80:e4:c9:cb:e4:bc:e7:2a:71:f5:
                    b1:60:fe:e2:ad:d3:47:4d:5f:5c:76:17:0b:f3:4a:
                    1f:2a:c3:fe:0d:a8:59:ac:18:26:ed:30:c3:3b:1a:
                    1b:8d:2f:ad:c0:d2:b6:21:3a:d0:6c:13:52:45:3a:
                    81:18:86:62:21:b2:1b:e6:7d:7e:31:a3:75:63:f7:
                    67:14:41:c3:38:12:15:6b:50:c0:30:13:5d:e9:0e:
                    52:b2:b5:dc:f7:50:e2:af:56:1e:60:38:31:bc:7c:
                    94:43:c6:27:e3:2c:3d:31:e6:9a:59:8d:5e:9e:57:
                    9f:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:56:BE:DC:C6:30:1C:40:6F:C8:5F:F7:B0:81:FA:D4:A6:18:86:61
            X509v3 Authority Key Identifier:
                keyid:35:33:D4:39:03:5C:CD:C5:F0:C3:9D:1B:3F:B1:61:95:B5:55:FC:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NTPUOQNczcXww50bP7FhlbVV_KM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8cf2a6-4529-43d9-b782-36e85abe52ff/1/NTPUOQNczcXww50bP7FhlbVV_KM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8cf2a6-4529-43d9-b782-36e85abe52ff/1/NTPUOQNczcXww50bP7FhlbVV_KM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:bf:60:52:28:34:26:22:4a:ae:22:c5:ff:89:5b:77:93:05:
         fe:49:56:47:d1:6c:b8:51:e0:78:0f:02:f7:35:b0:ef:1a:f8:
         b2:70:67:5e:f2:28:4b:a7:ad:38:f1:00:fb:12:17:2c:20:67:
         9e:c3:39:d4:55:8b:a8:94:3e:c2:4b:83:59:ca:59:ad:d1:24:
         3d:38:93:df:57:87:be:10:6e:f6:e9:da:3f:b2:48:71:fc:c6:
         c5:80:6c:05:ef:ec:3e:b6:08:71:d5:e1:69:66:34:1d:90:e0:
         d6:05:af:0c:4b:86:49:43:3d:15:70:f5:79:ed:95:41:df:42:
         73:95:4e:9a:9d:df:41:bb:21:49:c9:68:94:20:23:c6:19:f0:
         f9:71:c1:9e:32:08:6f:b7:08:5a:23:3b:69:4a:eb:cb:98:05:
         58:36:b5:90:2c:22:29:ac:2b:1d:ec:5d:67:8d:5d:34:40:21:
         12:7b:db:f2:c4:0e:fb:87:b8:5f:63:7c:0b:2a:d0:e9:08:c7:
         2f:ed:f8:40:dc:12:d5:6f:31:54:e4:14:17:11:67:f2:b0:39:
         41:18:97:27:50:4a:5f:69:77:7b:f3:9d:59:13:7a:e7:11:17:
         22:91:67:b1:2e:5d:9a:30:0b:d4:8f:24:fa:27:91:59:66:fd:
         ad:9e:f6:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 03:49:41 2025 by rpki-client