Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/8c9067-cc6d-4c4a-b661-37d15719a2d0/1/NY82t7AwW9n_68U3oadWt04E1eQ.mft
File:                     NY82t7AwW9n_68U3oadWt04E1eQ.mft (raw, json)
Hash identifier:          L16hbJqxKbV8Jftqlm0sNjh5u88gELyIOKctzSF66PI=
Subject key identifier:   D1:ED:7B:CD:AF:59:E5:C5:87:92:CF:B5:65:94:7F:CA:0F:9D:FD:7F
Authority key identifier: 35:8F:36:B7:B0:30:5B:D9:FF:EB:C5:37:A1:A7:56:B7:4E:04:D5:E4
Certificate issuer:       /CN=358f36b7b0305bd9ffebc537a1a756b74e04d5e4
Certificate serial:       01987CAE07A29DB939FCF04E8D66AABDBEFE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NY82t7AwW9n_68U3oadWt04E1eQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/8c9067-cc6d-4c4a-b661-37d15719a2d0/1/NY82t7AwW9n_68U3oadWt04E1eQ.mft
Manifest number:          0655
Signing time:             Wed 06 Aug 2025 00:00:36 +0000
Manifest this update:     Wed 06 Aug 2025 00:00:36 +0000
Manifest next update:     Thu 07 Aug 2025 00:00:36 +0000
Files and hashes:         1: 8ID8kgv1Se1rg2FGJCKuXeDTZdw.roa (hash: mtFporZGWALvI1bFzQb9Xpsj858BjBk/glbS/pmBQi4=)
                          2: NY82t7AwW9n_68U3oadWt04E1eQ.crl (hash: 7prKTuUUE8kvnSGMhlo1UeGRLWVp0wwadINAYgyYfrk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/8c9067-cc6d-4c4a-b661-37d15719a2d0/1/NY82t7AwW9n_68U3oadWt04E1eQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/8c9067-cc6d-4c4a-b661-37d15719a2d0/1/NY82t7AwW9n_68U3oadWt04E1eQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NY82t7AwW9n_68U3oadWt04E1eQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 23:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7c:ae:07:a2:9d:b9:39:fc:f0:4e:8d:66:aa:bd:be:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=358f36b7b0305bd9ffebc537a1a756b74e04d5e4
        Validity
            Not Before: Aug  6 00:00:36 2025 GMT
            Not After : Aug  7 00:00:36 2025 GMT
        Subject: CN=d1ed7bcdaf59e5c58792cfb565947fca0f9dfd7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:04:5b:eb:47:dd:4c:72:11:72:2d:08:6e:e7:
                    12:51:32:69:9b:b4:c3:6c:f0:a3:31:d4:6e:72:ec:
                    7c:06:18:b7:b3:75:fd:67:8b:b7:7b:15:7d:be:c2:
                    0e:28:fd:b1:75:b4:55:54:f6:4f:29:5d:ca:95:d3:
                    e9:f9:fa:94:52:08:52:75:c6:f2:57:22:29:43:21:
                    ad:d9:db:fd:79:61:61:31:91:ba:f9:e9:62:c7:c0:
                    49:a2:18:60:f0:f7:46:5d:53:69:7a:e3:7e:ad:47:
                    01:8f:e5:b7:6c:58:71:9f:fd:8d:86:37:9c:e1:c7:
                    74:fc:01:bf:ea:3d:8e:c5:bd:b2:97:fe:7a:f6:eb:
                    53:c5:41:b7:21:af:49:4d:27:ac:39:c4:19:c6:36:
                    5d:81:11:66:c6:90:d6:e3:b0:32:f9:8b:a9:bf:96:
                    61:f9:34:51:36:41:84:17:87:42:19:61:2a:8d:7c:
                    e3:06:55:84:b9:91:e6:ca:11:fb:b1:26:98:f7:08:
                    09:31:b1:e1:05:22:49:5e:1a:46:e4:f6:a0:2c:f3:
                    65:f9:7c:34:0b:37:ad:2d:a5:4d:21:a1:94:69:67:
                    6b:a8:38:a6:bd:38:64:e8:ad:d1:fb:25:bc:b2:cb:
                    a3:34:3b:20:9a:c3:b1:07:e7:d0:c9:10:d2:37:21:
                    34:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:ED:7B:CD:AF:59:E5:C5:87:92:CF:B5:65:94:7F:CA:0F:9D:FD:7F
            X509v3 Authority Key Identifier:
                keyid:35:8F:36:B7:B0:30:5B:D9:FF:EB:C5:37:A1:A7:56:B7:4E:04:D5:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NY82t7AwW9n_68U3oadWt04E1eQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8c9067-cc6d-4c4a-b661-37d15719a2d0/1/NY82t7AwW9n_68U3oadWt04E1eQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8c9067-cc6d-4c4a-b661-37d15719a2d0/1/NY82t7AwW9n_68U3oadWt04E1eQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:8e:eb:5e:d8:a8:33:29:c1:c9:ef:6d:85:ce:93:e3:4c:be:
         7a:e7:63:25:05:0a:17:a6:3c:c4:ee:6c:6a:95:67:da:8b:73:
         28:2f:30:c9:d1:cf:18:64:41:9a:5e:b8:61:55:20:a4:c1:d5:
         06:c3:fd:35:4a:77:e4:41:ab:1f:aa:30:07:09:6a:6c:0a:a5:
         5c:fa:91:63:36:90:cc:fc:51:7c:2a:49:78:01:b9:cc:9f:bc:
         61:7e:e4:cb:fa:3d:1e:58:10:eb:e2:48:46:15:dc:c1:a2:7a:
         19:42:a2:37:f3:f4:d2:08:17:66:04:a3:69:21:0f:a9:ba:1c:
         76:92:02:65:97:fe:f0:22:35:07:27:41:7a:6a:7d:4a:88:b8:
         44:84:6e:a8:45:3e:a5:58:b9:25:c2:fd:ee:b7:47:3f:bd:30:
         cf:af:0c:9b:d0:fd:33:99:3f:9e:0a:a5:7f:77:74:bc:44:8b:
         5f:cd:35:0f:95:98:9a:19:b7:1a:ab:9c:d4:84:f4:41:81:e9:
         5c:79:fb:f6:b5:66:51:80:aa:ff:1b:2c:0b:80:42:91:76:18:
         3c:d1:23:2e:c0:55:1c:5f:de:2c:ca:29:e0:2e:ea:87:53:76:
         3e:f0:11:16:f8:9b:35:6e:63:b0:15:53:50:e7:0d:a5:15:44:
         33:02:bb:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 06:02:16 2025 by rpki-client