Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/84179d-4c65-44b8-b30b-5dabb4e47abb/1/N2ieqsuvaK810_r7lnTeSKb8CXg.mft
File:                     N2ieqsuvaK810_r7lnTeSKb8CXg.mft (raw, json)
Hash identifier:          f7LJlQiH6vRmbIQ+73lBJM6OSIEdzZ6t414dtFS6p4Y=
Subject key identifier:   16:74:1C:B9:BC:37:C0:59:FB:34:A7:69:A5:A4:2E:DD:39:B4:6D:D1
Authority key identifier: 37:68:9E:AA:CB:AF:68:AF:35:D3:FA:FB:96:74:DE:48:A6:FC:09:78
Certificate issuer:       /CN=37689eaacbaf68af35d3fafb9674de48a6fc0978
Certificate serial:       019883550ECA119C1DA45203B98DAB6B7FE0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N2ieqsuvaK810_r7lnTeSKb8CXg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/84179d-4c65-44b8-b30b-5dabb4e47abb/1/N2ieqsuvaK810_r7lnTeSKb8CXg.mft
Manifest number:          0CC9
Signing time:             Thu 07 Aug 2025 07:00:46 +0000
Manifest this update:     Thu 07 Aug 2025 07:00:46 +0000
Manifest next update:     Fri 08 Aug 2025 07:00:46 +0000
Files and hashes:         1: N2ieqsuvaK810_r7lnTeSKb8CXg.crl (hash: 9SrGQgU7Igjmfw6N/cIy1QGp6lvg06sI75ICMtv5s+E=)
                          2: cNzBuZews7ZdR62Aog1WuWIa_Vc.roa (hash: QJxazJXAbp+Y08ZTXOoocYGXg/oCHOcrCqlhmHqJgf8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/84179d-4c65-44b8-b30b-5dabb4e47abb/1/N2ieqsuvaK810_r7lnTeSKb8CXg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/84179d-4c65-44b8-b30b-5dabb4e47abb/1/N2ieqsuvaK810_r7lnTeSKb8CXg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N2ieqsuvaK810_r7lnTeSKb8CXg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 08 Aug 2025 07:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:83:55:0e:ca:11:9c:1d:a4:52:03:b9:8d:ab:6b:7f:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37689eaacbaf68af35d3fafb9674de48a6fc0978
        Validity
            Not Before: Aug  7 07:00:46 2025 GMT
            Not After : Aug  8 07:00:46 2025 GMT
        Subject: CN=16741cb9bc37c059fb34a769a5a42edd39b46dd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:bd:a4:18:7a:91:9c:3b:9d:35:08:98:33:3d:
                    38:98:bd:19:c6:d3:d4:bd:43:f4:ff:4a:e5:8f:5a:
                    55:48:4b:e0:ca:7f:74:35:aa:c9:f7:22:fd:3d:15:
                    62:73:02:06:e2:23:be:78:60:32:bf:94:7a:d7:10:
                    25:c7:8f:54:3a:1d:18:33:e8:db:a5:58:65:bf:19:
                    fd:8f:f4:6e:e7:43:97:34:52:ad:d6:4d:c8:4c:55:
                    83:ca:3f:ec:44:5c:c4:37:66:2a:44:f0:97:bd:51:
                    ee:b6:95:00:b9:e7:0c:1f:49:51:79:a0:56:e4:16:
                    53:55:08:b8:8c:18:67:d9:46:57:46:55:8c:fc:29:
                    87:c3:12:93:b9:2c:8f:cd:e7:a8:cc:b0:a4:4d:57:
                    26:59:d1:50:1e:7e:c9:7b:25:2a:c7:d6:a5:37:1c:
                    a2:0e:8d:af:99:09:b3:d2:af:b8:ad:d2:dc:24:bc:
                    88:ba:49:3e:47:f5:17:46:5b:06:a3:2e:93:d9:40:
                    3a:24:4b:87:04:3f:b1:da:7f:2f:a5:a6:9d:e8:10:
                    ed:58:59:e6:8c:05:11:5d:a5:17:c8:29:fa:6a:e7:
                    73:f1:0a:4a:ce:4c:3b:a6:95:83:86:f3:f0:7b:4d:
                    bb:5b:63:a2:6d:40:61:4c:b9:aa:c2:20:96:2b:66:
                    1d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:74:1C:B9:BC:37:C0:59:FB:34:A7:69:A5:A4:2E:DD:39:B4:6D:D1
            X509v3 Authority Key Identifier:
                keyid:37:68:9E:AA:CB:AF:68:AF:35:D3:FA:FB:96:74:DE:48:A6:FC:09:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N2ieqsuvaK810_r7lnTeSKb8CXg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/84179d-4c65-44b8-b30b-5dabb4e47abb/1/N2ieqsuvaK810_r7lnTeSKb8CXg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/84179d-4c65-44b8-b30b-5dabb4e47abb/1/N2ieqsuvaK810_r7lnTeSKb8CXg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:a2:3a:a8:75:16:33:25:6f:31:c8:05:36:20:41:98:bf:63:
         8b:e8:a5:b1:85:61:2b:16:2d:40:2a:e1:44:3b:f0:19:7e:82:
         c7:60:86:9c:0e:0c:be:a8:5a:d2:ee:85:db:6c:ad:dd:29:56:
         c0:66:3f:e6:41:80:de:37:e8:a2:a1:09:41:9d:1b:a1:5b:8f:
         03:09:e2:91:d6:70:03:60:dc:58:61:f6:ff:5a:56:f7:62:15:
         d9:86:49:1f:77:b3:21:f0:c6:89:f2:87:c4:e0:54:11:d4:e8:
         28:83:0a:f2:1f:a4:57:74:6c:1c:a5:2f:79:83:80:20:c0:6b:
         f7:ec:62:06:86:40:79:06:e2:4f:c8:1d:c7:9c:80:67:ed:f2:
         ae:d1:b9:6d:17:43:3e:de:7a:ce:f5:9b:28:45:be:3b:a1:67:
         81:17:15:be:09:34:4f:2a:f3:7a:40:96:44:c8:e5:0a:b4:fa:
         06:aa:9e:06:0c:c6:4a:2c:85:f1:52:9c:2e:54:5b:49:0f:8c:
         0e:9f:e1:45:a8:5b:aa:60:dc:aa:b7:4b:3a:a9:b1:c0:2d:a3:
         cf:ae:a2:7d:b8:44:e6:e1:93:02:49:7d:66:c3:50:14:78:e1:
         65:92:0e:13:d2:89:9b:4e:0e:af:95:df:38:52:a7:7d:60:a5:
         51:c6:ab:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:13:11 2025 by rpki-client