Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/75baf6-724f-4c0b-be89-2fd63a12d66c/1/N6VPsHvqPfVW41k0VNMg5PAO7yw.mft
File:                     N6VPsHvqPfVW41k0VNMg5PAO7yw.mft (raw, json)
Hash identifier:          PneFvJFOT5qq047fXUFeJD2rmtN2sdujb41PF1y/LxU=
Subject key identifier:   F2:3B:B1:E2:21:FA:FD:7E:FE:58:86:B2:83:F6:08:F5:04:64:CD:4A
Authority key identifier: 37:A5:4F:B0:7B:EA:3D:F5:56:E3:59:34:54:D3:20:E4:F0:0E:EF:2C
Certificate issuer:       /CN=37a54fb07bea3df556e3593454d320e4f00eef2c
Certificate serial:       0198733DC44DCF7B3A8DC41DDC95EE709A05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N6VPsHvqPfVW41k0VNMg5PAO7yw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/75baf6-724f-4c0b-be89-2fd63a12d66c/1/N6VPsHvqPfVW41k0VNMg5PAO7yw.mft
Manifest number:          042E
Signing time:             Mon 04 Aug 2025 04:01:24 +0000
Manifest this update:     Mon 04 Aug 2025 04:01:24 +0000
Manifest next update:     Tue 05 Aug 2025 04:01:24 +0000
Files and hashes:         1: N6VPsHvqPfVW41k0VNMg5PAO7yw.crl (hash: HQHEJwn/pRla/h2027oo/SqslXoKiKvuZqoctqYdne0=)
                          2: Z9jKPG-aJrl0Zezz0qMB35u4yX4.roa (hash: 2A8HZxxRaB1bgoi8TMjFDPNN3FGgJuX9XCmcDH5eYKg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/75baf6-724f-4c0b-be89-2fd63a12d66c/1/N6VPsHvqPfVW41k0VNMg5PAO7yw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/75baf6-724f-4c0b-be89-2fd63a12d66c/1/N6VPsHvqPfVW41k0VNMg5PAO7yw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N6VPsHvqPfVW41k0VNMg5PAO7yw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:3d:c4:4d:cf:7b:3a:8d:c4:1d:dc:95:ee:70:9a:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37a54fb07bea3df556e3593454d320e4f00eef2c
        Validity
            Not Before: Aug  4 04:01:24 2025 GMT
            Not After : Aug  5 04:01:24 2025 GMT
        Subject: CN=f23bb1e221fafd7efe5886b283f608f50464cd4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:9a:91:2c:82:32:1f:d6:ab:0b:15:ef:da:59:
                    69:e0:9d:0d:13:36:7e:99:ee:23:54:2e:77:97:be:
                    34:f9:80:ab:6b:8e:c3:ca:21:60:54:9e:8a:c4:a5:
                    94:f4:93:32:bc:6c:f8:1f:a8:22:37:ab:9c:cd:99:
                    9b:a7:11:81:65:b2:ec:08:76:5d:90:66:e4:72:c9:
                    e4:78:8a:2f:a4:9a:85:f3:cc:07:45:c8:29:9b:84:
                    9b:eb:9a:6e:f8:46:75:8a:79:c1:58:05:41:81:d3:
                    1b:28:28:41:45:b4:91:f3:d2:e6:d0:40:9f:4d:f0:
                    d7:3f:17:60:2e:ab:79:6a:a4:de:d3:44:1d:df:af:
                    5b:85:f5:0d:60:e6:5b:fb:c6:6a:f3:ea:3a:15:34:
                    8d:bd:0c:fa:a4:89:5a:92:1f:b8:92:36:ce:3f:7d:
                    b0:20:0a:94:41:d5:a2:c7:0b:34:2c:fe:60:b5:74:
                    a1:52:d8:f2:60:5b:14:8f:45:5e:df:6f:33:30:16:
                    e2:c7:23:59:e4:d0:7c:8e:5b:e4:09:46:05:08:74:
                    76:77:82:56:06:45:53:5f:5c:30:df:ed:66:e6:fe:
                    b6:b9:20:c3:f9:7b:f6:3c:dd:38:15:9b:20:e7:4b:
                    3d:a1:11:7d:c1:cb:1a:d3:e9:5f:28:b5:e4:ac:33:
                    6c:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:3B:B1:E2:21:FA:FD:7E:FE:58:86:B2:83:F6:08:F5:04:64:CD:4A
            X509v3 Authority Key Identifier:
                keyid:37:A5:4F:B0:7B:EA:3D:F5:56:E3:59:34:54:D3:20:E4:F0:0E:EF:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N6VPsHvqPfVW41k0VNMg5PAO7yw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/75baf6-724f-4c0b-be89-2fd63a12d66c/1/N6VPsHvqPfVW41k0VNMg5PAO7yw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/75baf6-724f-4c0b-be89-2fd63a12d66c/1/N6VPsHvqPfVW41k0VNMg5PAO7yw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:b2:c9:ca:f7:73:15:6c:ab:1d:5a:31:f1:40:9b:19:92:64:
         ed:ec:00:9a:ee:e3:fc:a1:6e:26:70:8e:dc:9a:b1:61:a8:d2:
         8e:08:a6:8c:83:47:94:ee:16:b0:96:a7:30:da:e2:72:bd:ea:
         54:09:13:6a:23:80:45:58:3a:3d:bb:94:f1:f6:1a:16:f4:19:
         77:32:96:ef:3f:dc:dc:b9:4e:8b:27:93:2a:e1:c2:cf:5d:28:
         4f:98:c2:45:b7:6b:40:3d:93:95:85:32:f4:e2:d1:93:2e:a7:
         f8:83:a4:18:77:23:95:80:fd:28:f0:b7:27:06:f2:b4:98:e5:
         7e:30:80:29:44:43:20:83:d5:d7:b9:6b:ab:b8:37:4e:86:9a:
         91:ce:6a:1e:db:85:4a:3c:04:51:1d:62:56:5f:75:10:3a:15:
         35:6b:f9:76:db:a6:d5:3f:03:7e:a3:5a:21:dc:84:c5:d8:62:
         08:91:e1:89:3b:34:98:d0:3c:c6:ae:fc:9a:7b:11:d6:0f:9e:
         ee:fb:48:a1:2b:43:16:12:d7:49:d3:0b:bf:ef:3d:70:23:33:
         b0:b1:f1:40:c9:86:5b:90:d7:45:ad:d8:02:c8:9c:ab:75:6c:
         d6:1c:78:85:fd:8a:a9:7b:b2:34:78:6c:6a:10:49:da:59:d8:
         98:2a:80:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:58:31 2025 by rpki-client