Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/c3ca86-3e76-48c4-98ac-c2d00342235c/1/NgqWAeAvgSjvZG9VlTNuCleRfK8.mft
File:                     NgqWAeAvgSjvZG9VlTNuCleRfK8.mft (raw, json)
Hash identifier:          H7n2OiNSGC6OARp3rbCMTY3JemwqGcQILlVBMXflAFM=
Subject key identifier:   E4:FF:3B:3F:29:42:BF:EC:B8:5E:9F:6C:BC:53:E5:F2:02:60:F3:EB
Authority key identifier: 36:0A:96:01:E0:2F:81:28:EF:64:6F:55:95:33:6E:0A:57:91:7C:AF
Certificate issuer:       /CN=360a9601e02f8128ef646f5595336e0a57917caf
Certificate serial:       019892234AAE4C37A85D9309FA1604B018A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NgqWAeAvgSjvZG9VlTNuCleRfK8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/c3ca86-3e76-48c4-98ac-c2d00342235c/1/NgqWAeAvgSjvZG9VlTNuCleRfK8.mft
Manifest number:          DE
Signing time:             Sun 10 Aug 2025 04:00:42 +0000
Manifest this update:     Sun 10 Aug 2025 04:00:42 +0000
Manifest next update:     Mon 11 Aug 2025 04:00:42 +0000
Files and hashes:         1: CAK19XLyWpDBKtyOh5VJFJlDLgs.roa (hash: UlLhFCJZ2QmzzZ8qbAQI384c7jYogbUbzPQIMlTHrTw=)
                          2: NgqWAeAvgSjvZG9VlTNuCleRfK8.crl (hash: CYjF0LX6Z2ZusLR3ofxoCtPbUbrm1Dcz40XFVM1N5WM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/c3ca86-3e76-48c4-98ac-c2d00342235c/1/NgqWAeAvgSjvZG9VlTNuCleRfK8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/c3ca86-3e76-48c4-98ac-c2d00342235c/1/NgqWAeAvgSjvZG9VlTNuCleRfK8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NgqWAeAvgSjvZG9VlTNuCleRfK8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 04:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:92:23:4a:ae:4c:37:a8:5d:93:09:fa:16:04:b0:18:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=360a9601e02f8128ef646f5595336e0a57917caf
        Validity
            Not Before: Aug 10 04:00:42 2025 GMT
            Not After : Aug 11 04:00:42 2025 GMT
        Subject: CN=e4ff3b3f2942bfecb85e9f6cbc53e5f20260f3eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:22:8d:a4:03:8b:3a:a4:4b:c3:79:2f:26:f8:
                    21:01:be:24:75:ec:fc:0d:81:85:93:6a:26:14:35:
                    d1:57:d8:08:3d:ba:6e:48:ea:e2:13:1a:1a:58:56:
                    64:d6:ea:22:5f:84:57:ef:86:d4:d1:2d:3a:59:84:
                    6f:48:b0:e6:4d:cd:47:15:21:69:c8:24:40:1c:cc:
                    e4:5f:b1:d0:ab:14:df:74:c6:06:47:a0:ff:f0:0a:
                    59:55:48:40:b0:c9:84:c2:2a:8e:5c:15:7d:12:10:
                    61:84:bb:85:5f:e8:3d:d2:a0:dd:04:89:d9:54:e5:
                    00:83:f9:d8:46:85:8c:25:47:56:ad:f0:c3:ff:72:
                    ba:08:a4:77:ce:34:23:6a:6a:25:fb:73:71:e8:97:
                    29:04:05:05:d0:fc:1d:e6:ee:a8:a4:fb:5b:cb:eb:
                    19:c0:9e:34:83:c7:b6:dc:00:68:1a:fb:a7:95:ab:
                    00:84:65:10:f1:8e:e0:87:75:94:7a:79:0d:32:1b:
                    41:ed:04:ba:9f:ed:ce:0a:e0:90:5f:e2:3c:b2:5c:
                    f4:be:df:b1:2a:d5:8a:0c:c5:40:fe:ba:a4:80:26:
                    c9:3a:4c:84:e5:42:b6:a4:1b:2c:e8:46:cb:25:dd:
                    c1:4f:25:4f:0a:f0:8b:97:67:bf:4d:0d:e1:49:c3:
                    a5:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:FF:3B:3F:29:42:BF:EC:B8:5E:9F:6C:BC:53:E5:F2:02:60:F3:EB
            X509v3 Authority Key Identifier:
                keyid:36:0A:96:01:E0:2F:81:28:EF:64:6F:55:95:33:6E:0A:57:91:7C:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NgqWAeAvgSjvZG9VlTNuCleRfK8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c3ca86-3e76-48c4-98ac-c2d00342235c/1/NgqWAeAvgSjvZG9VlTNuCleRfK8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c3ca86-3e76-48c4-98ac-c2d00342235c/1/NgqWAeAvgSjvZG9VlTNuCleRfK8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:51:97:6b:4a:23:ba:36:08:67:04:b4:90:d1:eb:f7:da:3a:
         a1:d0:50:3f:d0:81:4e:22:7e:67:2f:03:46:e1:91:c2:ac:f9:
         5a:61:34:c0:80:23:32:09:18:09:8b:be:27:1a:69:a7:83:99:
         f0:dc:45:fc:92:76:54:67:6f:2f:b0:94:83:38:6b:2e:33:07:
         7c:63:fd:29:ba:aa:45:be:e9:98:28:d3:02:ea:53:21:ab:53:
         31:63:60:09:95:38:b7:d9:36:0a:c1:84:74:30:9f:3f:74:5b:
         6a:d2:d1:ce:42:b5:65:63:5d:03:bc:20:51:de:51:a5:3e:56:
         3f:2e:9e:ea:8e:78:a0:68:88:59:85:a7:88:fa:93:ac:30:f6:
         10:50:9d:be:14:6c:22:dd:ea:97:02:9e:1f:81:b6:75:07:8a:
         df:04:67:df:9b:86:54:95:ac:b2:1a:36:32:bd:8a:fe:25:84:
         64:3d:98:f9:4a:fd:09:02:91:e2:1a:52:13:10:f0:fa:4b:13:
         26:ff:d5:82:67:6c:8b:04:f1:ce:a2:a2:a0:98:6c:a7:b4:7a:
         e1:8f:9f:e9:cf:7f:86:8e:2c:90:f4:06:1d:33:27:75:0d:8e:
         80:aa:60:3c:98:11:c6:22:2c:2e:34:c6:c9:be:8f:35:0c:71:
         06:18:7f:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:43:02 2025 by rpki-client