Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/47d21c-604b-47d8-a333-708b68c856cf/1/ngpS_uIoDW8jG7aiYibmU1Fw8f4.mft
File:                     ngpS_uIoDW8jG7aiYibmU1Fw8f4.mft (raw, json)
Hash identifier:          M+jglpk3R1it4HZNY71sWB3MamgBGkdj6ah+3LuH2c0=
Subject key identifier:   C7:5F:AC:C4:82:18:4F:3E:DB:3C:46:9F:7A:77:FA:50:94:62:31:A9
Authority key identifier: 9E:0A:52:FE:E2:28:0D:6F:23:1B:B6:A2:62:26:E6:53:51:70:F1:FE
Certificate issuer:       /CN=9e0a52fee2280d6f231bb6a26226e6535170f1fe
Certificate serial:       019873E367B3B274284B2373EE88156A3626
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ngpS_uIoDW8jG7aiYibmU1Fw8f4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/47d21c-604b-47d8-a333-708b68c856cf/1/ngpS_uIoDW8jG7aiYibmU1Fw8f4.mft
Manifest number:          125D
Signing time:             Mon 04 Aug 2025 07:02:19 +0000
Manifest this update:     Mon 04 Aug 2025 07:02:19 +0000
Manifest next update:     Tue 05 Aug 2025 07:02:19 +0000
Files and hashes:         1: 96ceGnLozFWN_QTriAA9ffT0NZo.roa (hash: xYD9mhJQTnDUO7IrqsbDyJlQ0+k0aFVeTHj0N17MtSI=)
                          2: ngpS_uIoDW8jG7aiYibmU1Fw8f4.crl (hash: /C1hf+OFc2ajU9YXUkhbMJRPj6tZUC5eSoTIQM1RhrY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/47d21c-604b-47d8-a333-708b68c856cf/1/ngpS_uIoDW8jG7aiYibmU1Fw8f4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/47d21c-604b-47d8-a333-708b68c856cf/1/ngpS_uIoDW8jG7aiYibmU1Fw8f4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ngpS_uIoDW8jG7aiYibmU1Fw8f4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e3:67:b3:b2:74:28:4b:23:73:ee:88:15:6a:36:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e0a52fee2280d6f231bb6a26226e6535170f1fe
        Validity
            Not Before: Aug  4 07:02:19 2025 GMT
            Not After : Aug  5 07:02:19 2025 GMT
        Subject: CN=c75facc482184f3edb3c469f7a77fa50946231a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:58:09:0e:16:8d:0f:c2:99:46:bd:ab:8d:b9:
                    06:54:4d:f6:a2:9e:4f:e4:c9:0d:b2:25:59:74:fe:
                    f9:db:95:c5:23:85:7e:15:29:90:6b:59:83:ba:9e:
                    8f:da:33:f4:b1:6d:ee:5f:8d:5a:b9:3f:e0:95:45:
                    4f:d9:92:06:02:f0:7e:fa:48:48:cd:9e:bb:5a:7a:
                    98:bf:fc:9d:fd:92:14:87:90:51:c1:25:f9:7c:bf:
                    e0:d2:28:4f:bb:93:56:a9:bb:37:b7:31:fc:6c:7e:
                    db:df:45:9b:14:1d:73:ea:ce:cc:02:ef:09:07:92:
                    e6:4b:74:16:fe:dc:73:18:f0:ec:71:b2:4b:03:62:
                    e2:75:b1:fb:b3:2e:87:9f:4c:8d:8b:e7:da:e1:f7:
                    de:6e:70:dd:a6:8d:61:7a:bc:87:93:e5:81:79:db:
                    46:24:cb:ce:05:ba:fe:ae:a5:e8:ae:9e:de:5f:fe:
                    0c:cd:25:db:84:5b:6d:a1:f2:f0:8d:9b:44:e5:5f:
                    5e:17:00:b0:ff:59:52:f8:7b:f9:d4:25:d2:66:8b:
                    dc:08:8f:34:2e:37:6f:50:14:b8:5e:54:0d:3e:02:
                    47:df:ee:13:3d:0f:a7:35:84:15:81:79:45:e9:9f:
                    d7:fc:c3:a3:71:a5:6e:78:92:62:1a:01:56:40:81:
                    c3:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:5F:AC:C4:82:18:4F:3E:DB:3C:46:9F:7A:77:FA:50:94:62:31:A9
            X509v3 Authority Key Identifier:
                keyid:9E:0A:52:FE:E2:28:0D:6F:23:1B:B6:A2:62:26:E6:53:51:70:F1:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ngpS_uIoDW8jG7aiYibmU1Fw8f4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/47d21c-604b-47d8-a333-708b68c856cf/1/ngpS_uIoDW8jG7aiYibmU1Fw8f4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/47d21c-604b-47d8-a333-708b68c856cf/1/ngpS_uIoDW8jG7aiYibmU1Fw8f4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:b2:0e:2c:c4:d3:be:86:99:b4:19:84:d6:50:2d:af:13:a8:
         af:3f:e1:b5:aa:6d:71:7a:d8:da:77:a3:f0:e2:e6:39:14:e8:
         85:ea:e6:00:0d:11:76:07:b5:dc:a2:73:fe:6c:e4:23:72:e8:
         97:07:8d:d0:59:c1:98:96:96:ea:60:8a:d8:6a:f5:69:3a:5d:
         01:f8:d5:10:c0:07:d6:65:7c:42:50:97:fa:5b:5a:ff:41:46:
         7b:47:3f:5e:f9:99:47:83:37:38:d0:1f:e5:6d:ae:e2:ab:0e:
         c6:f8:0d:17:a4:16:a8:75:ad:5e:e0:fb:d4:fe:d9:28:3e:8c:
         93:2e:47:fc:25:d7:f8:76:b7:5d:62:3c:ca:1f:d6:3c:02:76:
         3b:9b:19:ec:0a:a3:5b:97:85:8d:8a:6f:da:72:88:d7:88:71:
         f1:bc:d1:2b:af:77:d0:72:09:0b:6e:ac:be:40:a5:d1:21:e8:
         0a:84:df:53:78:f2:e7:0e:33:ba:d1:2f:94:07:77:f3:69:5e:
         eb:ae:e5:a6:b8:e5:e8:f6:c9:a8:c4:a6:50:84:f9:4e:13:ff:
         c5:b8:0e:ed:a8:ee:80:94:42:02:01:7b:38:43:a2:41:b4:20:
         83:ac:f6:c4:bf:95:50:37:ff:df:11:3e:ac:d0:49:98:83:d7:
         b3:70:11:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:59:54 2025 by rpki-client