Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/4d58f5-5c3f-4aca-97b8-6d8a69a0ad43/1/NscJXgRZhgU7mz6HiQNnJoN90fU.mft
File:                     NscJXgRZhgU7mz6HiQNnJoN90fU.mft (raw, json)
Hash identifier:          jpQ1ZtTFQW1WltBKN2ZmXuUaIaUDlCf6bkaIf+EEQdk=
Subject key identifier:   30:A7:F3:3B:70:5E:C8:68:35:E0:34:90:88:8D:B7:3E:52:AD:40:B0
Authority key identifier: 36:C7:09:5E:04:59:86:05:3B:9B:3E:87:89:03:67:26:83:7D:D1:F5
Certificate issuer:       /CN=36c7095e045986053b9b3e8789036726837dd1f5
Certificate serial:       019883FA9712875CD11640C62F72692FA63B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NscJXgRZhgU7mz6HiQNnJoN90fU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/4d58f5-5c3f-4aca-97b8-6d8a69a0ad43/1/NscJXgRZhgU7mz6HiQNnJoN90fU.mft
Manifest number:          0548
Signing time:             Thu 07 Aug 2025 10:01:34 +0000
Manifest this update:     Thu 07 Aug 2025 10:01:34 +0000
Manifest next update:     Fri 08 Aug 2025 10:01:34 +0000
Files and hashes:         1: 13YuQXcDJbnIYp9Q74L-JDcuLVM.roa (hash: xxqrr3XwSKukvs1NGhAPXhNBgDJT5zDVkc5duMlGjfY=)
                          2: NscJXgRZhgU7mz6HiQNnJoN90fU.crl (hash: hf8uSBYXHpAOMwzyTh1VYQn4IS8oDr+ru4ZzVxvMrgI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/4d58f5-5c3f-4aca-97b8-6d8a69a0ad43/1/NscJXgRZhgU7mz6HiQNnJoN90fU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/4d58f5-5c3f-4aca-97b8-6d8a69a0ad43/1/NscJXgRZhgU7mz6HiQNnJoN90fU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NscJXgRZhgU7mz6HiQNnJoN90fU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 08 Aug 2025 08:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:83:fa:97:12:87:5c:d1:16:40:c6:2f:72:69:2f:a6:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36c7095e045986053b9b3e8789036726837dd1f5
        Validity
            Not Before: Aug  7 10:01:34 2025 GMT
            Not After : Aug  8 10:01:34 2025 GMT
        Subject: CN=30a7f33b705ec86835e03490888db73e52ad40b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:1a:e0:2f:09:70:c4:c5:73:ec:c4:20:00:7c:
                    ca:09:11:51:5a:aa:55:d2:fe:7f:b7:f1:92:55:6d:
                    3b:ae:c7:e2:49:9d:f8:ed:1f:88:7a:1f:3b:60:60:
                    be:23:f5:71:5f:97:97:d0:34:5c:8e:bb:cf:5e:9d:
                    7b:11:1c:ae:52:e6:fd:7a:53:bc:d0:f6:44:c6:e3:
                    fc:8d:43:9c:6f:bf:ec:44:da:c7:06:5e:cf:6f:38:
                    9f:8c:7c:96:ea:6b:e1:82:a5:fa:b7:17:4f:52:a8:
                    4d:d1:ee:ab:b2:be:31:bb:43:b4:ca:63:bd:96:7f:
                    4f:5c:82:26:66:61:63:39:cf:39:19:30:53:90:3b:
                    09:5f:17:bd:59:0d:59:46:3c:2b:a0:d1:08:d7:aa:
                    be:c0:ed:89:cb:dc:10:3d:1a:49:70:81:be:9c:f0:
                    92:53:25:e3:5b:e0:23:43:47:92:96:d0:b1:25:ba:
                    37:4e:c6:81:db:72:d8:e9:03:24:be:c9:f1:c6:94:
                    3b:d5:11:78:d5:0d:52:33:e8:d3:e4:ba:b6:f7:fa:
                    1c:67:c5:c2:f3:56:ce:9a:8b:6a:d5:2f:0a:e0:bf:
                    98:9f:44:71:0e:22:32:c8:50:7c:3e:c2:2a:16:26:
                    e1:12:dc:8e:77:3b:d7:85:e9:df:85:4a:2c:da:52:
                    41:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:A7:F3:3B:70:5E:C8:68:35:E0:34:90:88:8D:B7:3E:52:AD:40:B0
            X509v3 Authority Key Identifier:
                keyid:36:C7:09:5E:04:59:86:05:3B:9B:3E:87:89:03:67:26:83:7D:D1:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NscJXgRZhgU7mz6HiQNnJoN90fU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/4d58f5-5c3f-4aca-97b8-6d8a69a0ad43/1/NscJXgRZhgU7mz6HiQNnJoN90fU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/4d58f5-5c3f-4aca-97b8-6d8a69a0ad43/1/NscJXgRZhgU7mz6HiQNnJoN90fU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:95:cd:7e:e0:82:05:e2:ae:06:e2:7d:9b:51:00:a2:13:d0:
         20:79:e1:8f:ac:5c:77:4d:ad:fa:e5:38:14:b2:7d:7c:38:00:
         0b:1b:a2:ac:94:16:49:25:be:b7:ce:8b:e7:ce:ed:5d:99:01:
         b8:42:53:42:fa:5c:44:06:1a:d3:f9:2e:05:59:3f:6e:1c:a7:
         0a:59:9d:ad:9e:2b:23:57:22:37:7e:f7:2d:24:31:28:9d:dd:
         c3:b9:29:d0:c6:8f:91:87:47:ce:31:dc:13:9c:07:2c:a1:a3:
         32:09:6d:f1:ed:14:72:89:7e:64:21:18:a5:8f:f3:9a:c0:bb:
         3e:1e:f5:8e:4c:a6:a3:93:3f:f2:c4:20:e9:fd:65:5a:91:10:
         4b:c1:9c:5d:9d:59:05:1e:17:fa:c3:14:84:84:a7:4f:68:fc:
         e6:fa:20:81:65:1b:2e:b4:5b:84:ec:8f:2b:03:0b:76:eb:b0:
         91:5c:b4:99:70:60:11:93:ba:08:83:74:1e:bc:fe:17:4e:69:
         20:a1:90:1d:7d:df:73:be:2b:ae:57:6c:b9:2c:ad:8a:ff:1f:
         2a:ae:ed:e1:a3:b9:f9:ae:7c:49:95:7c:a6:96:5f:01:f7:a8:
         9f:a6:c2:9a:51:72:be:56:d5:fb:f6:47:b7:dc:46:c9:ce:75:
         5d:22:b0:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiD+pcSh1zRFkDGL3JpL6Y7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2YzcwOTVlMDQ1OTg2MDUzYjliM2U4Nzg5MDM2NzI2ODM3
ZGQxZjUwHhcNMjUwODA3MTAwMTM0WhcNMjUwODA4MTAwMTM0WjAzMTEwLwYDVQQD
EygzMGE3ZjMzYjcwNWVjODY4MzVlMDM0OTA4ODhkYjczZTUyYWQ0MGIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxrgLwlwxMVz7MQgAHzKCRFRWqpV
0v5/t/GSVW07rsfiSZ347R+Ieh87YGC+I/VxX5eX0DRcjrvPXp17ERyuUub9elO8
0PZExuP8jUOcb7/sRNrHBl7PbzifjHyW6mvhgqX6txdPUqhN0e6rsr4xu0O0ymO9
ln9PXIImZmFjOc85GTBTkDsJXxe9WQ1ZRjwroNEI16q+wO2Jy9wQPRpJcIG+nPCS
UyXjW+AjQ0eSltCxJbo3TsaB23LY6QMkvsnxxpQ71RF41Q1SM+jT5Lq29/ocZ8XC
81bOmotq1S8K4L+Yn0RxDiIyyFB8PsIqFibhEtyOdzvXhenfhUos2lJBiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDCn8ztwXshoNeA0kIiNtz5SrUCwMB8GA1UdIwQY
MBaAFDbHCV4EWYYFO5s+h4kDZyaDfdH1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnNjSlhnUlpoZ1U3bXo2SGlRTm5Kb045MGZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy80ZDU4ZjUtNWMzZi00YWNhLTk3Yjgt
NmQ4YTY5YTBhZDQzLzEvTnNjSlhnUlpoZ1U3bXo2SGlRTm5Kb045MGZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy80ZDU4ZjUtNWMzZi00YWNhLTk3YjgtNmQ4YTY5YTBhZDQz
LzEvTnNjSlhnUlpoZ1U3bXo2SGlRTm5Kb045MGZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo5XNfuCC
BeKuBuJ9m1EAohPQIHnhj6xcd02t+uU4FLJ9fDgACxuirJQWSSW+t86L587tXZkB
uEJTQvpcRAYa0/kuBVk/bhynClmdrZ4rI1ciN373LSQxKJ3dw7kp0MaPkYdHzjHc
E5wHLKGjMglt8e0Ucol+ZCEYpY/zmsC7Ph71jkymo5M/8sQg6f1lWpEQS8GcXZ1Z
BR4X+sMUhISnT2j85voggWUbLrRbhOyPKwMLduuwkVy0mXBgEZO6CIN0Hrz+F05p
IKGQHX3fc74rrldsuSytiv8fKq7t4aO5+a58SZV8ppZfAfeon6bCmlFyvlbV+/ZH
t9xGyc51XSKwqg==
-----END CERTIFICATE-----
Generated at Thu Aug 7 14:36:14 2025 by rpki-client