Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/eac997-ce1e-459b-9436-ed7067f987d9/1/ng3k8mJ16l_C8jyLTX4G1ys7c8c.mft
File:                     ng3k8mJ16l_C8jyLTX4G1ys7c8c.mft (raw, json)
Hash identifier:          FviO19zfYutJh0cCMnkqQAvLYY3YQtVArYGY3Xx5Jig=
Subject key identifier:   1A:C8:34:C4:38:43:BF:95:46:63:F3:DE:CF:40:52:4F:0F:49:47:7C
Authority key identifier: 9E:0D:E4:F2:62:75:EA:5F:C2:F2:3C:8B:4D:7E:06:D7:2B:3B:73:C7
Certificate issuer:       /CN=9e0de4f26275ea5fc2f23c8b4d7e06d72b3b73c7
Certificate serial:       0196805928F6D39F52420A698A12027A5D5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ng3k8mJ16l_C8jyLTX4G1ys7c8c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/eac997-ce1e-459b-9436-ed7067f987d9/1/ng3k8mJ16l_C8jyLTX4G1ys7c8c.mft
Manifest number:          066D
Signing time:             Tue 29 Apr 2025 07:00:48 +0000
Manifest this update:     Tue 29 Apr 2025 07:00:48 +0000
Manifest next update:     Wed 30 Apr 2025 07:00:48 +0000
Files and hashes:         1: ng3k8mJ16l_C8jyLTX4G1ys7c8c.crl (hash: LPC79PpT2QObMQBD2VGbTBiCmaG7nt0kGVRAHPGhjvs=)
                          2: z5plCbvdkup7MxI7T8lBnb_bFXc.roa (hash: gJ70ebUSb97tS8RCU2JGa9RBjyi3gQiPSVEBaoEhFFM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/eac997-ce1e-459b-9436-ed7067f987d9/1/ng3k8mJ16l_C8jyLTX4G1ys7c8c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/eac997-ce1e-459b-9436-ed7067f987d9/1/ng3k8mJ16l_C8jyLTX4G1ys7c8c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ng3k8mJ16l_C8jyLTX4G1ys7c8c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:80:59:28:f6:d3:9f:52:42:0a:69:8a:12:02:7a:5d:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e0de4f26275ea5fc2f23c8b4d7e06d72b3b73c7
        Validity
            Not Before: Apr 29 07:00:48 2025 GMT
            Not After : Apr 30 07:00:48 2025 GMT
        Subject: CN=1ac834c43843bf954663f3decf40524f0f49477c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:1d:48:f6:9f:c1:d2:c1:de:ea:5d:29:e0:34:
                    e0:2f:28:6a:30:32:c5:03:24:9f:7f:d2:a1:0c:b9:
                    fc:01:31:c3:1e:55:d4:e7:ee:5e:b8:e3:24:45:c1:
                    c6:66:cd:6f:39:99:b2:ba:32:6a:5c:5b:ff:22:9e:
                    55:86:55:9a:62:6d:7e:4b:d2:91:0a:89:6c:a4:64:
                    a2:31:42:e6:44:eb:d1:b9:4e:75:20:78:84:9b:59:
                    39:cd:b7:26:95:09:fb:6d:f8:f1:4f:31:03:4e:80:
                    3d:f1:14:42:0c:c2:51:ec:3e:7a:36:a8:e9:e1:43:
                    28:af:16:bb:0c:39:bb:5c:fb:ad:7e:16:5e:d0:19:
                    bd:1a:97:66:fc:98:87:de:82:2d:96:37:71:90:5f:
                    47:11:5d:c1:b8:ca:f4:e2:4e:62:35:58:fe:41:ec:
                    2e:fe:a9:13:a9:bc:d8:fc:37:a9:2c:6b:0a:ad:8d:
                    bc:fd:7a:b3:c9:35:c0:58:10:c6:2b:db:bc:4f:51:
                    51:ea:d2:58:36:fb:95:d6:1d:07:ce:6c:ec:13:c2:
                    0b:86:3b:8e:d9:8e:64:6a:4b:4f:ae:6c:63:dd:9f:
                    d5:76:9f:04:be:40:6e:f6:be:82:60:24:e6:08:3f:
                    a6:b9:20:39:15:0e:e1:7e:cc:00:a5:b9:0f:3f:b2:
                    68:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:C8:34:C4:38:43:BF:95:46:63:F3:DE:CF:40:52:4F:0F:49:47:7C
            X509v3 Authority Key Identifier:
                keyid:9E:0D:E4:F2:62:75:EA:5F:C2:F2:3C:8B:4D:7E:06:D7:2B:3B:73:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ng3k8mJ16l_C8jyLTX4G1ys7c8c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/eac997-ce1e-459b-9436-ed7067f987d9/1/ng3k8mJ16l_C8jyLTX4G1ys7c8c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/eac997-ce1e-459b-9436-ed7067f987d9/1/ng3k8mJ16l_C8jyLTX4G1ys7c8c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:c9:60:45:5f:f2:f1:18:55:bb:55:4b:68:b9:89:1b:1f:cd:
         38:7a:7f:ed:f3:60:03:b1:73:f3:bf:73:a2:29:57:3c:e9:ee:
         46:7e:32:be:9c:b5:42:62:cc:a8:3c:5e:ab:14:db:cd:d6:df:
         fb:62:a2:f7:6b:f6:9e:50:53:0f:e2:52:ec:24:26:65:8b:5f:
         98:ad:92:6f:93:1a:2d:63:75:25:39:ee:20:fc:8e:9a:72:62:
         8c:e9:c1:f9:19:ad:b3:04:04:28:d4:5f:90:23:d3:7a:85:29:
         66:8b:bf:c7:b8:ee:87:07:8d:d3:56:ad:a2:4d:57:18:cc:ae:
         c4:db:29:f6:ff:6d:04:a0:16:20:a4:08:86:d6:94:8b:7c:32:
         85:2a:36:be:e3:d0:08:cc:1b:56:9e:1b:c5:e8:67:a9:3d:e8:
         ee:ea:b8:ee:e6:85:43:95:ac:30:7d:e1:95:5e:5a:c8:01:0f:
         b3:2f:fa:91:24:b4:1d:68:15:81:6f:08:44:10:1c:20:ea:a4:
         6c:2b:3b:9f:55:c3:c0:95:7b:1b:6d:7b:41:ba:63:f2:03:f6:
         28:e7:54:79:50:f8:f0:e4:cf:55:50:5c:5f:88:8b:28:f4:45:
         ec:4a:8e:9d:08:00:97:a7:f5:25:e6:b1:05:e4:02:5c:12:33:
         ab:81:3a:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:21:14 2025 by rpki-client