Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/a977ea-4a93-4618-b7ff-35b21bffad4d/1/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.mft
File:                     N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.mft (raw, json)
Hash identifier:          2lrV8RnkZHsNhOfJ/IECEStU7MTKTdN5InC4Mh3+/sI=
Subject key identifier:   00:AB:7F:08:84:37:A1:70:50:D8:EF:01:1D:AD:08:02:25:D2:8A:FA
Authority key identifier: 37:A3:52:E1:7A:F8:7E:E2:E5:DC:17:3D:15:54:3D:A6:3B:E5:54:73
Certificate issuer:       /CN=37a352e17af87ee2e5dc173d15543da63be55473
Certificate serial:       0198733D2EB75AC935A662ADCBF103D6891E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/a977ea-4a93-4618-b7ff-35b21bffad4d/1/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.mft
Manifest number:          0CBB
Signing time:             Mon 04 Aug 2025 04:00:46 +0000
Manifest this update:     Mon 04 Aug 2025 04:00:46 +0000
Manifest next update:     Tue 05 Aug 2025 04:00:46 +0000
Files and hashes:         1: N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.crl (hash: R5/JFoeTlDVbVi/b9Dy4IRd1KJdlMSSxigOEFVgUpTc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/a977ea-4a93-4618-b7ff-35b21bffad4d/1/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/a977ea-4a93-4618-b7ff-35b21bffad4d/1/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:3d:2e:b7:5a:c9:35:a6:62:ad:cb:f1:03:d6:89:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37a352e17af87ee2e5dc173d15543da63be55473
        Validity
            Not Before: Aug  4 04:00:46 2025 GMT
            Not After : Aug  5 04:00:46 2025 GMT
        Subject: CN=00ab7f088437a17050d8ef011dad080225d28afa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b6:75:3e:ea:9c:72:69:f4:b1:9d:a6:37:d7:
                    68:c0:9b:1b:db:46:8f:20:50:eb:36:30:e8:6b:d8:
                    d2:18:4e:40:d3:40:e1:90:aa:13:f5:da:e5:83:68:
                    7f:5a:7a:67:ee:d1:37:4b:8b:2c:df:5c:ce:53:04:
                    c4:2a:b9:68:c2:3a:07:86:dc:80:3d:13:dc:7f:b3:
                    bf:ba:b3:73:ac:b4:45:e6:8a:46:c9:5e:6f:da:86:
                    bc:27:1d:ae:e8:15:4b:40:1e:36:55:9e:11:70:a7:
                    05:7f:f9:ef:06:65:c7:f7:f7:cb:8f:c6:ba:95:7c:
                    6d:81:30:e8:a3:76:25:79:1e:d1:bf:73:0f:78:09:
                    be:71:3d:3a:1e:16:a9:eb:67:be:cf:c5:40:df:d0:
                    cc:fb:9f:71:35:48:44:0f:e5:57:7a:1b:cc:0b:88:
                    f0:cf:28:e2:2c:03:8e:0a:a4:f7:2a:10:ec:a9:8d:
                    21:f3:ce:3f:a1:9b:05:12:c2:3c:91:f8:0e:f5:b8:
                    1c:8a:d8:45:38:eb:3e:d0:7e:2c:a0:c6:21:3b:f4:
                    81:59:e1:7a:a9:87:6a:6a:00:2f:1c:dc:e2:c4:d2:
                    ff:f5:df:11:76:e7:0e:ec:7b:d5:e8:4c:8e:81:79:
                    8b:b7:0b:6b:65:42:da:4b:79:72:7c:1d:aa:96:65:
                    ef:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:AB:7F:08:84:37:A1:70:50:D8:EF:01:1D:AD:08:02:25:D2:8A:FA
            X509v3 Authority Key Identifier:
                keyid:37:A3:52:E1:7A:F8:7E:E2:E5:DC:17:3D:15:54:3D:A6:3B:E5:54:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/a977ea-4a93-4618-b7ff-35b21bffad4d/1/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/a977ea-4a93-4618-b7ff-35b21bffad4d/1/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:07:d6:58:e0:2c:e9:cf:d3:32:5a:49:80:a0:54:0a:f0:aa:
         57:d6:f8:a8:4c:59:af:3a:5b:93:e4:7a:db:44:dd:1f:e4:81:
         f7:f4:d3:ff:c6:5a:78:b5:43:e0:b7:22:47:56:9c:98:58:3c:
         64:05:83:7e:57:ef:5d:e5:03:23:9c:3d:22:21:95:7d:5b:50:
         d4:bb:05:30:02:23:15:33:d5:d1:8a:2a:c1:2d:23:ef:47:2f:
         be:b9:e4:2e:3a:23:35:1a:2f:d7:70:18:a1:c6:e6:80:32:dd:
         96:93:63:a0:24:a1:3a:74:9e:3b:73:86:95:71:1f:2b:0e:3f:
         e5:31:ed:14:72:e0:4a:e8:12:8e:ae:0f:51:8d:e6:89:9a:4a:
         78:6e:02:b6:0c:21:ea:76:32:63:4b:66:2d:c0:b0:58:3d:5f:
         42:b1:66:4b:7f:4e:ef:f7:23:6f:20:70:59:93:bc:94:c4:17:
         6d:bc:67:75:1b:1c:82:36:fb:7b:86:e8:94:37:ba:67:f2:cb:
         c5:42:40:ac:b1:20:c1:96:d7:0f:83:ae:93:72:8c:00:f2:c9:
         77:97:14:60:d7:f6:49:61:96:fa:7c:81:f8:29:98:86:ae:54:
         10:7d:c0:67:1d:33:a0:e3:d7:64:e9:12:9c:76:0b:24:8e:4b:
         e4:c0:c3:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:15:56 2025 by rpki-client