Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/6b5b7b-f93c-4f37-8a64-6b2f526047a9/1/nzeBglGggdHMfzAVMg62NSZwm5E.mft
File:                     nzeBglGggdHMfzAVMg62NSZwm5E.mft (raw, json)
Hash identifier:          jL5Adupkwinnum2QeDVGlK5uFUmghUY5LRIZKxPodhA=
Subject key identifier:   AB:4B:14:20:B5:5B:D0:54:71:B1:A4:09:92:17:58:1E:F3:91:94:08
Authority key identifier: 9F:37:81:82:51:A0:81:D1:CC:7F:30:15:32:0E:B6:35:26:70:9B:91
Certificate issuer:       /CN=9f37818251a081d1cc7f3015320eb63526709b91
Certificate serial:       01976960DEE815358860E2C536E3E4AD1E17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nzeBglGggdHMfzAVMg62NSZwm5E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/6b5b7b-f93c-4f37-8a64-6b2f526047a9/1/nzeBglGggdHMfzAVMg62NSZwm5E.mft
Manifest number:          05F6
Signing time:             Fri 13 Jun 2025 13:00:45 +0000
Manifest this update:     Fri 13 Jun 2025 13:00:45 +0000
Manifest next update:     Sat 14 Jun 2025 13:00:45 +0000
Files and hashes:         1: nzeBglGggdHMfzAVMg62NSZwm5E.crl (hash: YxMEWs1cBCnAiS/WSXV/D8/BEgVZ0ap13KZ7HZ/DX/o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/6b5b7b-f93c-4f37-8a64-6b2f526047a9/1/nzeBglGggdHMfzAVMg62NSZwm5E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/6b5b7b-f93c-4f37-8a64-6b2f526047a9/1/nzeBglGggdHMfzAVMg62NSZwm5E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nzeBglGggdHMfzAVMg62NSZwm5E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:60:de:e8:15:35:88:60:e2:c5:36:e3:e4:ad:1e:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f37818251a081d1cc7f3015320eb63526709b91
        Validity
            Not Before: Jun 13 13:00:45 2025 GMT
            Not After : Jun 14 13:00:45 2025 GMT
        Subject: CN=ab4b1420b55bd05471b1a4099217581ef3919408
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b5:ec:5a:fa:cb:23:60:16:fc:ae:3c:79:e9:
                    8b:8c:fa:e6:d2:00:c1:47:57:76:51:5b:b1:78:28:
                    13:ec:60:a8:ac:2d:fa:5f:b4:2b:a3:61:59:5e:00:
                    ff:15:8d:95:ff:8f:74:4c:5d:a9:93:03:a4:92:7a:
                    39:81:67:64:3e:ad:d2:3a:88:d1:11:6a:2e:0a:1a:
                    61:ae:76:51:22:af:cd:ac:49:9d:ff:a3:6f:4a:da:
                    63:f0:05:80:ed:98:9a:93:a6:1f:0f:3c:0f:4e:9d:
                    66:bd:6f:1a:23:06:1e:87:ee:1f:17:44:67:72:f3:
                    d7:a7:0b:b9:92:ad:49:84:2c:61:6e:4b:8f:3b:91:
                    74:a7:86:57:bd:2d:98:d0:70:02:e1:52:a1:1e:64:
                    17:30:e1:26:bc:2d:59:ca:0f:b9:0f:61:13:d8:a5:
                    40:d7:99:a7:be:7c:76:80:ba:20:41:a2:2d:72:c7:
                    c7:48:a6:f0:c5:1c:c3:88:78:7d:54:6c:b3:ef:82:
                    0a:d2:40:c7:bd:70:83:f7:48:d3:08:7e:30:bc:7d:
                    d4:6c:d2:66:2c:a4:96:b6:74:38:27:68:31:8f:ff:
                    28:0d:a8:3e:f5:79:fd:05:cc:8c:40:90:37:cb:58:
                    35:24:c7:38:d1:97:92:b4:e1:2f:73:3d:96:c0:c7:
                    36:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:4B:14:20:B5:5B:D0:54:71:B1:A4:09:92:17:58:1E:F3:91:94:08
            X509v3 Authority Key Identifier:
                keyid:9F:37:81:82:51:A0:81:D1:CC:7F:30:15:32:0E:B6:35:26:70:9B:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzeBglGggdHMfzAVMg62NSZwm5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/6b5b7b-f93c-4f37-8a64-6b2f526047a9/1/nzeBglGggdHMfzAVMg62NSZwm5E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/6b5b7b-f93c-4f37-8a64-6b2f526047a9/1/nzeBglGggdHMfzAVMg62NSZwm5E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:1d:07:78:59:77:a5:84:14:eb:88:92:cc:93:cb:3d:fb:a0:
         8d:33:c4:86:92:c4:c9:71:91:58:eb:a4:ee:20:a5:b9:d4:ea:
         f4:2a:01:99:b9:2f:f7:fa:9a:db:79:cc:69:7d:89:7b:85:a1:
         93:b9:8a:4e:36:7e:86:9f:3c:10:32:49:24:82:55:a9:58:e6:
         24:11:b7:20:76:d4:d3:0f:00:77:bd:30:87:6e:5d:28:15:96:
         67:ca:7b:5b:40:1c:45:ed:15:cd:58:dc:68:ad:ed:ce:13:dd:
         37:67:ad:1d:f1:e7:f8:81:7f:9f:01:9e:31:6d:6d:db:d6:d6:
         59:1a:b9:91:4a:10:b0:d3:dd:13:ce:fa:a7:ee:1b:79:d5:13:
         7f:b4:04:2e:04:50:2a:13:cc:ea:23:78:16:ac:f8:8c:6b:cc:
         bd:b2:23:63:b8:97:aa:42:76:ab:89:cb:81:96:42:0e:4f:7a:
         0b:9d:b1:10:7b:9c:98:1a:8a:f2:d2:67:ec:44:6b:35:31:f9:
         6c:be:01:62:8e:f2:3c:71:02:55:11:a2:1e:c0:6d:2e:58:22:
         36:d8:6f:78:99:45:26:a5:a5:7c:3d:19:77:34:93:74:b5:f3:
         b7:b0:34:2d:26:9a:af:f2:a9:2b:b2:82:f3:77:8b:27:b8:b4:
         6d:e1:8e:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:16:32 2025 by rpki-client