Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/29cd58-8327-42be-b7f9-c9819a410a7a/1/NIz5d5qS7-l1Q7IqNHuBwuqlu_o.mft
File:                     NIz5d5qS7-l1Q7IqNHuBwuqlu_o.mft (raw, json)
Hash identifier:          T6uiBukzPpHE+r4V5ZNWNLPeej8yHKUp1pO7nQM6paw=
Subject key identifier:   BE:E7:1E:68:EF:D2:11:E6:2E:AF:32:67:5A:12:71:25:34:97:76:2B
Authority key identifier: 34:8C:F9:77:9A:92:EF:E9:75:43:B2:2A:34:7B:81:C2:EA:A5:BB:FA
Certificate issuer:       /CN=348cf9779a92efe97543b22a347b81c2eaa5bbfa
Certificate serial:       0197684E839693FDAE7B2739248DE7A52B75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NIz5d5qS7-l1Q7IqNHuBwuqlu_o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/29cd58-8327-42be-b7f9-c9819a410a7a/1/NIz5d5qS7-l1Q7IqNHuBwuqlu_o.mft
Manifest number:          0B4E
Signing time:             Fri 13 Jun 2025 08:01:05 +0000
Manifest this update:     Fri 13 Jun 2025 08:01:05 +0000
Manifest next update:     Sat 14 Jun 2025 08:01:05 +0000
Files and hashes:         1: NIz5d5qS7-l1Q7IqNHuBwuqlu_o.crl (hash: p7H+bmpq81lx+B7lyBKTB7tJ4y70VYGT8SV6K0/9mso=)
                          2: i5CYIYxAtwPyni-Dl_N7cKRXfcY.roa (hash: SZTtaQcBy5UozsIuO5IHd1U+7pFMt22yevLjl5l8lZA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/29cd58-8327-42be-b7f9-c9819a410a7a/1/NIz5d5qS7-l1Q7IqNHuBwuqlu_o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/29cd58-8327-42be-b7f9-c9819a410a7a/1/NIz5d5qS7-l1Q7IqNHuBwuqlu_o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NIz5d5qS7-l1Q7IqNHuBwuqlu_o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 08:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:68:4e:83:96:93:fd:ae:7b:27:39:24:8d:e7:a5:2b:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=348cf9779a92efe97543b22a347b81c2eaa5bbfa
        Validity
            Not Before: Jun 13 08:01:05 2025 GMT
            Not After : Jun 14 08:01:05 2025 GMT
        Subject: CN=bee71e68efd211e62eaf32675a1271253497762b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ca:b9:b1:f8:28:31:ee:37:d0:df:31:7b:4c:
                    2d:61:0f:04:98:5f:d5:78:de:d6:3c:33:e1:ed:4c:
                    80:70:9d:d8:15:9f:3d:87:e6:cd:5b:ff:15:7b:b7:
                    b1:12:95:5c:e9:e3:05:cd:2c:25:57:b6:91:d8:72:
                    fe:84:e1:5d:af:50:13:55:a0:c6:f4:a6:5c:6d:fa:
                    9a:00:f0:b7:a7:e8:b6:39:47:ea:40:79:86:73:43:
                    a4:49:1e:3a:e6:a3:79:28:24:29:b8:fa:22:55:2a:
                    2b:ca:48:17:f6:22:85:3c:1c:22:fc:03:2d:2d:18:
                    2a:4d:61:c6:1d:55:d4:99:d6:19:5f:a2:61:f1:42:
                    0b:a9:b1:08:2d:84:35:fb:1a:6e:1b:a8:87:2d:34:
                    7c:76:0c:5b:d7:59:c3:c4:ed:32:b0:d5:39:58:17:
                    67:b2:41:b5:00:6e:96:72:f4:c7:20:18:2a:81:8d:
                    5b:2b:60:13:78:ca:44:15:d3:d3:14:66:f4:8f:8f:
                    ca:49:ef:70:31:2e:40:a5:5d:89:a8:9d:2e:b1:fe:
                    f0:82:5a:4f:c1:c9:a8:14:f7:02:4b:ec:f8:17:30:
                    40:84:08:d2:b2:93:ce:54:38:f5:28:b9:1f:0c:13:
                    05:27:21:96:de:7f:b9:a4:08:f1:5d:54:aa:db:2c:
                    d8:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:E7:1E:68:EF:D2:11:E6:2E:AF:32:67:5A:12:71:25:34:97:76:2B
            X509v3 Authority Key Identifier:
                keyid:34:8C:F9:77:9A:92:EF:E9:75:43:B2:2A:34:7B:81:C2:EA:A5:BB:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NIz5d5qS7-l1Q7IqNHuBwuqlu_o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/29cd58-8327-42be-b7f9-c9819a410a7a/1/NIz5d5qS7-l1Q7IqNHuBwuqlu_o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/29cd58-8327-42be-b7f9-c9819a410a7a/1/NIz5d5qS7-l1Q7IqNHuBwuqlu_o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:3e:72:20:7e:ca:e5:d5:aa:0c:dc:8c:1c:fd:d1:73:20:54:
         f6:79:64:01:f4:0a:ce:07:89:5c:ed:ab:7b:e5:cb:e1:60:4d:
         59:3a:cc:14:62:14:58:1f:8f:2c:ee:3a:dd:df:c5:fd:df:51:
         9b:3d:74:c4:11:d2:e8:3f:1b:28:d4:87:3c:ce:57:c7:f9:cf:
         73:4c:52:ab:d6:7c:7a:73:02:bb:1d:c5:99:22:76:5b:a4:3f:
         59:c4:f9:9f:98:a1:04:53:ab:4a:7c:cd:29:6c:c3:f0:fa:55:
         2e:cb:b8:dc:0e:11:9e:bb:22:05:2e:d4:e0:e6:ba:10:5a:24:
         36:0f:4d:27:86:f1:e7:a0:0a:db:d2:23:6e:05:9f:ab:24:6e:
         a2:c2:b3:3d:2c:97:4c:b4:03:71:31:5b:f3:df:f2:2c:78:75:
         c0:81:48:2f:72:a7:45:c1:b3:2d:e2:9e:a4:1c:ac:e7:50:65:
         c9:e6:7a:98:c1:f9:eb:5e:73:f6:0e:71:83:62:72:6b:d9:b4:
         b3:64:50:4a:e9:40:f0:67:c2:57:cd:04:da:a7:a2:b8:75:69:
         e3:77:e1:d4:73:ab:9e:66:56:fa:71:c7:54:19:74:f1:a1:58:
         4a:22:07:74:9e:07:aa:a9:a2:48:8e:4a:eb:0f:d2:b1:f6:3a:
         ae:32:14:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:24:01 2025 by rpki-client