Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/2d6237-e584-4bef-9c35-7ef24099db85/1/NqMuFKL_7OVnnz7RF8MP93tFsPQ.mft
File:                     NqMuFKL_7OVnnz7RF8MP93tFsPQ.mft (raw, json)
Hash identifier:          x4MYJXzcljLe6VkSe00YLGjkrJXhE/6iN14HrCaFQtQ=
Subject key identifier:   2B:0C:3C:76:C8:9F:02:A5:7A:6A:68:8B:6B:5C:9F:E7:88:5F:DE:E6
Authority key identifier: 36:A3:2E:14:A2:FF:EC:E5:67:9F:3E:D1:17:C3:0F:F7:7B:45:B0:F4
Certificate issuer:       /CN=36a32e14a2ffece5679f3ed117c30ff77b45b0f4
Certificate serial:       01987E2EFC4B70D40B37A4289A35A8AC4929
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NqMuFKL_7OVnnz7RF8MP93tFsPQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/2d6237-e584-4bef-9c35-7ef24099db85/1/NqMuFKL_7OVnnz7RF8MP93tFsPQ.mft
Manifest number:          0858
Signing time:             Wed 06 Aug 2025 07:01:04 +0000
Manifest this update:     Wed 06 Aug 2025 07:01:04 +0000
Manifest next update:     Thu 07 Aug 2025 07:01:04 +0000
Files and hashes:         1: I4q92VajZXPlw9QYtmNI4uQ6GtM.roa (hash: 1MIUh7t1a8Oi5v6mo6yeYyqi8+Xbxa0dw1T/gUvyI5M=)
                          2: NqMuFKL_7OVnnz7RF8MP93tFsPQ.crl (hash: C22KMFH0DgwQUtgvkCSQGNTecRRNDp6W/zVtpxGj4nk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/2d6237-e584-4bef-9c35-7ef24099db85/1/NqMuFKL_7OVnnz7RF8MP93tFsPQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/2d6237-e584-4bef-9c35-7ef24099db85/1/NqMuFKL_7OVnnz7RF8MP93tFsPQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NqMuFKL_7OVnnz7RF8MP93tFsPQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 07:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7e:2e:fc:4b:70:d4:0b:37:a4:28:9a:35:a8:ac:49:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36a32e14a2ffece5679f3ed117c30ff77b45b0f4
        Validity
            Not Before: Aug  6 07:01:04 2025 GMT
            Not After : Aug  7 07:01:04 2025 GMT
        Subject: CN=2b0c3c76c89f02a57a6a688b6b5c9fe7885fdee6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d9:47:cd:6d:50:64:da:5e:9b:1b:c1:5a:50:
                    6f:b0:3c:10:73:a2:98:ee:36:e5:7d:aa:f5:33:54:
                    c8:b3:36:ad:e3:9e:17:0f:51:4a:87:5b:32:a1:a3:
                    d0:69:ed:ae:8c:fe:95:a8:d6:f1:8a:9d:41:76:49:
                    de:c0:20:75:05:38:61:7d:bd:4d:a6:e2:7f:be:46:
                    fb:fd:a6:ba:ce:d5:56:86:8c:8e:3a:e3:24:0b:2f:
                    d5:4c:5c:1b:46:1a:ab:5a:cc:7c:ed:21:29:9e:74:
                    cf:9e:50:78:87:ff:52:b1:69:98:cd:18:b4:07:cb:
                    ce:e6:60:fd:9b:b4:5c:26:f4:e1:92:c1:34:0e:23:
                    38:98:da:fe:75:41:46:35:2a:84:cf:43:24:2c:4e:
                    53:f9:80:14:8a:75:f0:ea:27:d9:20:db:da:a7:ba:
                    79:7f:ec:54:9b:dd:bf:72:4a:cd:d1:eb:5d:86:68:
                    65:cb:cf:55:ab:b2:e6:67:d5:08:80:0f:f2:64:b9:
                    41:ec:5a:d9:4c:54:0b:cd:6a:96:1d:40:0f:24:85:
                    63:70:aa:74:97:c9:88:3e:65:1b:e5:78:8d:a0:18:
                    1b:13:de:c5:59:dd:3b:1b:76:a1:d4:5c:01:f0:c2:
                    23:ff:f1:94:d0:83:00:cd:3a:d7:f8:51:1e:a6:8d:
                    d0:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:0C:3C:76:C8:9F:02:A5:7A:6A:68:8B:6B:5C:9F:E7:88:5F:DE:E6
            X509v3 Authority Key Identifier:
                keyid:36:A3:2E:14:A2:FF:EC:E5:67:9F:3E:D1:17:C3:0F:F7:7B:45:B0:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NqMuFKL_7OVnnz7RF8MP93tFsPQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/2d6237-e584-4bef-9c35-7ef24099db85/1/NqMuFKL_7OVnnz7RF8MP93tFsPQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/2d6237-e584-4bef-9c35-7ef24099db85/1/NqMuFKL_7OVnnz7RF8MP93tFsPQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:f6:6b:17:42:dc:59:50:c4:f9:1e:41:d8:1a:a6:29:26:1b:
         78:f3:22:99:42:ff:2f:55:64:a3:e6:67:03:f0:70:4c:80:63:
         53:b0:0a:d6:2d:7d:14:12:8f:0e:4c:49:ca:48:71:8a:1e:75:
         10:3f:60:14:b0:db:43:2c:75:32:6a:5d:ce:05:3d:48:18:62:
         f6:65:d0:70:0d:72:86:20:4d:75:23:78:7e:75:f4:02:5f:db:
         cd:56:7e:fa:e2:a4:f3:7a:74:81:f9:4e:10:f9:d6:d0:ed:7c:
         2c:08:d7:0e:b9:79:81:c4:74:4c:52:27:9f:ce:c0:21:c6:16:
         04:e0:ad:0b:44:18:06:ae:b5:88:99:c1:9b:21:62:5f:65:19:
         ec:02:78:75:18:ae:f5:f9:5b:0d:6b:dc:f9:0a:05:9f:a5:71:
         76:58:f9:02:14:53:5d:bb:ed:77:34:90:c4:17:d2:46:11:98:
         2f:55:27:d0:52:24:99:9d:f7:65:88:c4:9e:e7:c4:c4:a5:cd:
         54:df:e9:42:95:52:6c:14:e3:30:fb:dd:3e:1b:55:89:c4:de:
         f3:72:bd:9a:68:51:c1:18:a5:d9:44:a0:59:09:f5:97:81:c7:
         c8:a7:d6:02:d6:5b:bf:61:bd:23:d3:ec:8e:b3:16:a5:10:56:
         85:26:4b:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:15:09 2025 by rpki-client