Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/fc7545-c5fa-43bd-8839-d185dec06012/1/NmqdVCKXV3s3qgxCMZWv4qmOE10.mft
File:                     NmqdVCKXV3s3qgxCMZWv4qmOE10.mft (raw, json)
Hash identifier:          mDEGY0/GJZflvsDlp1N1rG3GarhaGZzumQZMK3S+jxk=
Subject key identifier:   66:33:91:2D:7B:2E:27:38:F9:74:86:06:28:7B:D3:AA:64:F3:9C:E2
Authority key identifier: 36:6A:9D:54:22:97:57:7B:37:AA:0C:42:31:95:AF:E2:A9:8E:13:5D
Certificate issuer:       /CN=366a9d542297577b37aa0c423195afe2a98e135d
Certificate serial:       01976CCFE5C6DBE432948049F0DF7DA03F69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NmqdVCKXV3s3qgxCMZWv4qmOE10.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/fc7545-c5fa-43bd-8839-d185dec06012/1/NmqdVCKXV3s3qgxCMZWv4qmOE10.mft
Manifest number:          1592
Signing time:             Sat 14 Jun 2025 05:00:53 +0000
Manifest this update:     Sat 14 Jun 2025 05:00:53 +0000
Manifest next update:     Sun 15 Jun 2025 05:00:53 +0000
Files and hashes:         1: NmqdVCKXV3s3qgxCMZWv4qmOE10.crl (hash: KbtQ8/eATxWu38AaB5Kz1xJ3qtTKUuhBW0uCLiVvQq8=)
                          2: bEKsBvD9r6Xyt_P3Ap1ApX4DjcU.roa (hash: 24Br4dwLUP9p+zXB4KMnlxiNc2TbHeks2Jsk87QFi10=)
                          3: kSQ_R5Z-vsBcuOXx6WhdFdmllY0.roa (hash: OhKVJv+g1lqmaayTLliiukgCHTE/MZNzjIGSTC2Zdcw=)
                          4: naFGULOSYvt_ys0vvTSfwr2rqtk.roa (hash: b43Uckjczt2PCUz41jkHhIKmF+uwsILXTS5gZeF8UNU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/fc7545-c5fa-43bd-8839-d185dec06012/1/NmqdVCKXV3s3qgxCMZWv4qmOE10.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/fc7545-c5fa-43bd-8839-d185dec06012/1/NmqdVCKXV3s3qgxCMZWv4qmOE10.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NmqdVCKXV3s3qgxCMZWv4qmOE10.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:cf:e5:c6:db:e4:32:94:80:49:f0:df:7d:a0:3f:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=366a9d542297577b37aa0c423195afe2a98e135d
        Validity
            Not Before: Jun 14 05:00:53 2025 GMT
            Not After : Jun 15 05:00:53 2025 GMT
        Subject: CN=6633912d7b2e2738f9748606287bd3aa64f39ce2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:df:95:cf:c8:c7:ec:50:69:1a:ea:c1:cb:f7:
                    ce:5e:e1:15:2a:76:58:1d:9c:dd:05:6e:cb:14:f8:
                    c1:35:c6:63:7d:95:27:8e:1c:b7:14:e7:88:74:c9:
                    6f:f3:ef:2a:5c:82:00:88:f7:e1:06:d1:33:ad:d0:
                    e3:e6:3d:e2:03:ab:47:21:13:24:90:be:b5:75:c4:
                    70:0a:8d:37:62:73:72:08:0f:0b:af:33:61:9f:f3:
                    4d:ea:14:aa:bb:f7:19:d3:4a:76:b2:a9:f7:2b:1a:
                    19:71:ee:bd:fb:84:9f:19:b3:4d:f8:0d:36:c5:c1:
                    7c:59:e6:c9:c5:5f:fb:e6:58:b9:b7:e4:44:9b:4e:
                    23:57:f8:e0:28:29:3a:14:d1:95:7a:7e:ec:8b:bd:
                    16:7f:37:5e:9b:b5:8d:e7:e3:b9:40:db:b0:cc:6e:
                    f6:a6:3a:41:6d:6a:ae:69:be:2b:24:43:88:b2:dd:
                    b6:c8:9d:45:fd:b2:95:b8:14:da:2e:dd:e8:f6:67:
                    45:4a:64:93:33:0f:c2:72:5e:b0:d2:a1:81:25:95:
                    54:b4:c7:3f:ac:08:a9:f6:57:a0:b1:e2:c7:7b:8e:
                    8a:01:b1:ab:31:eb:ec:4e:a8:1c:d9:4b:79:bd:3f:
                    48:38:80:e5:89:b7:ee:e5:21:fa:df:6f:52:6c:6a:
                    ca:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:33:91:2D:7B:2E:27:38:F9:74:86:06:28:7B:D3:AA:64:F3:9C:E2
            X509v3 Authority Key Identifier:
                keyid:36:6A:9D:54:22:97:57:7B:37:AA:0C:42:31:95:AF:E2:A9:8E:13:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NmqdVCKXV3s3qgxCMZWv4qmOE10.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fc7545-c5fa-43bd-8839-d185dec06012/1/NmqdVCKXV3s3qgxCMZWv4qmOE10.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fc7545-c5fa-43bd-8839-d185dec06012/1/NmqdVCKXV3s3qgxCMZWv4qmOE10.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:d1:f2:ab:0c:f1:86:d4:f2:a1:d5:4e:73:38:61:1f:e2:17:
         0f:76:f7:e1:e9:01:ba:90:1c:0a:5d:73:f4:c2:86:f8:a7:cf:
         9a:3f:a7:a7:81:9e:f7:85:89:f7:48:b0:97:b5:8d:dc:9e:47:
         17:e7:57:54:02:9c:65:d0:51:e5:47:ac:04:a2:64:c6:b0:f6:
         7f:a4:0e:c0:40:e2:18:ba:17:88:74:c0:e3:5b:98:d3:dc:01:
         3b:25:f9:d1:3b:d4:a9:00:ec:0d:b2:46:c9:21:df:80:7a:af:
         da:a0:1e:f3:4e:a5:98:2a:63:7a:af:50:f4:aa:49:8a:95:2b:
         9f:54:57:3e:7f:b3:1e:74:f7:fe:15:c2:3f:99:24:6a:11:1c:
         a8:ca:8e:e0:93:f6:76:a5:0b:46:31:b5:c4:8b:f3:96:ae:cb:
         f2:5a:f7:0c:3f:e5:48:8a:08:de:0b:72:57:6c:8f:92:60:f5:
         42:20:d5:ce:84:59:f5:c8:54:31:ed:64:00:e5:99:6b:34:b2:
         58:29:af:db:fc:a3:53:b1:24:90:e6:80:59:bc:9f:18:00:66:
         dc:ee:6a:02:26:71:1a:76:d9:e1:07:84:0d:b9:00:de:9e:d4:
         d1:d6:18:f3:cf:ba:11:60:88:05:48:10:47:c9:d0:a3:77:62:
         6f:29:38:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:50:02 2025 by rpki-client