Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/60a100-f166-42d5-8712-1e84f08c1dcb/1/NJ_TV8P7jqMOEgeCO2RuElMYOA4.mft
File:                     NJ_TV8P7jqMOEgeCO2RuElMYOA4.mft (raw, json)
Hash identifier:          E//OzkEu3z7zr4GmByEsxb4Kz3Wf0PPpsEriHZ++YHU=
Subject key identifier:   2A:A1:62:EF:78:D8:CF:72:79:9D:83:79:1E:B5:4E:F0:1E:A1:F2:75
Authority key identifier: 34:9F:D3:57:C3:FB:8E:A3:0E:12:07:82:3B:64:6E:12:53:18:38:0E
Certificate issuer:       /CN=349fd357c3fb8ea30e1207823b646e125318380e
Certificate serial:       019776E56A361F250ADC78243CA2B3BF8D67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NJ_TV8P7jqMOEgeCO2RuElMYOA4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/60a100-f166-42d5-8712-1e84f08c1dcb/1/NJ_TV8P7jqMOEgeCO2RuElMYOA4.mft
Manifest number:          1593
Signing time:             Mon 16 Jun 2025 04:00:35 +0000
Manifest this update:     Mon 16 Jun 2025 04:00:35 +0000
Manifest next update:     Tue 17 Jun 2025 04:00:35 +0000
Files and hashes:         1: NJ_TV8P7jqMOEgeCO2RuElMYOA4.crl (hash: pY5fALNhywVUAvvnB+nSXCyV4sOP8oMEfP83ghgQUmM=)
                          2: mR66z8E13ZO0oQRWIFilM8XhtIc.roa (hash: 6LXZMdZX8N37u9JPM24+jBKZx+3a7O9LjRVCP3ekI8s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/60a100-f166-42d5-8712-1e84f08c1dcb/1/NJ_TV8P7jqMOEgeCO2RuElMYOA4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/60a100-f166-42d5-8712-1e84f08c1dcb/1/NJ_TV8P7jqMOEgeCO2RuElMYOA4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NJ_TV8P7jqMOEgeCO2RuElMYOA4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 04:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:76:e5:6a:36:1f:25:0a:dc:78:24:3c:a2:b3:bf:8d:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=349fd357c3fb8ea30e1207823b646e125318380e
        Validity
            Not Before: Jun 16 04:00:35 2025 GMT
            Not After : Jun 17 04:00:35 2025 GMT
        Subject: CN=2aa162ef78d8cf72799d83791eb54ef01ea1f275
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:25:7c:0d:2c:a0:3a:c8:e7:61:51:dc:5d:a1:
                    b6:4d:3b:ba:37:42:59:01:32:a7:f2:0d:a3:79:e6:
                    eb:3d:ed:88:61:a8:d5:86:03:c9:fe:ad:41:a0:64:
                    fe:2d:3d:9f:dd:c0:13:b3:f1:92:ce:60:fc:c8:9e:
                    e0:6a:5d:6b:fd:8f:4e:25:e3:e3:f4:51:fd:4c:19:
                    df:d1:d4:4f:83:50:29:2e:49:0d:e6:e1:dd:91:f1:
                    03:a6:80:4a:9b:0a:bd:c2:8a:37:5e:6c:16:5e:b9:
                    d9:6f:a1:be:8b:a8:a2:f2:7e:c2:eb:2e:35:85:ef:
                    db:a4:d1:7b:7f:e1:ae:12:fa:5a:89:3b:15:6f:40:
                    ab:4e:3f:6b:97:11:00:58:7e:98:c9:70:e9:2a:e8:
                    86:29:91:c7:99:20:6c:0a:04:9d:8b:89:c2:2a:05:
                    73:64:44:4d:9d:de:a1:d0:d3:11:7f:66:ea:8b:68:
                    43:2d:af:c4:19:26:28:22:65:10:34:76:76:f1:e0:
                    d5:89:f1:d2:0d:57:72:18:c7:df:ba:9e:07:c0:b9:
                    60:f5:d2:13:8d:39:06:c6:87:c0:00:1e:d5:54:a9:
                    5e:20:14:b7:ee:b9:4e:a6:45:52:2e:46:ec:aa:c0:
                    a3:e3:89:b0:08:80:29:41:74:e6:58:31:06:5a:f1:
                    3f:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:A1:62:EF:78:D8:CF:72:79:9D:83:79:1E:B5:4E:F0:1E:A1:F2:75
            X509v3 Authority Key Identifier:
                keyid:34:9F:D3:57:C3:FB:8E:A3:0E:12:07:82:3B:64:6E:12:53:18:38:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJ_TV8P7jqMOEgeCO2RuElMYOA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/60a100-f166-42d5-8712-1e84f08c1dcb/1/NJ_TV8P7jqMOEgeCO2RuElMYOA4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/60a100-f166-42d5-8712-1e84f08c1dcb/1/NJ_TV8P7jqMOEgeCO2RuElMYOA4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:c5:8d:93:32:57:e7:1f:98:35:95:de:b7:e7:ea:a2:d7:a6:
         a2:45:e9:14:e3:df:ca:cc:ab:5e:c8:3e:b0:d6:28:5e:8c:e6:
         f6:cf:61:44:13:06:36:38:73:bb:14:21:2e:a9:78:29:d6:6f:
         04:0a:70:0a:25:bf:7a:b6:51:0d:f3:fd:a8:43:b0:41:89:c1:
         de:2e:40:0f:c0:7d:0d:65:a4:f0:cb:23:ee:c0:56:bb:7c:3e:
         f6:35:1e:60:e7:39:d1:b1:fd:ae:56:22:23:dd:d0:18:29:02:
         11:cb:29:aa:da:0d:8e:b5:76:e1:f2:e3:6e:9f:33:f6:b7:f3:
         44:04:f3:2c:91:7b:a5:e7:aa:fc:f8:c4:62:9b:88:eb:42:d5:
         b9:75:3c:13:f4:3d:c3:b3:9d:02:ca:bb:da:d3:00:78:67:5e:
         fe:09:ef:47:52:8e:f4:f7:69:17:9d:27:61:b1:bb:d2:66:6e:
         a8:b8:a7:34:9c:6e:65:bd:5f:3c:b6:66:e4:14:09:6f:ce:d2:
         23:ea:4d:54:cd:76:6c:6f:53:13:3c:50:49:79:4d:7c:d8:13:
         ac:09:57:40:62:84:67:f8:06:30:48:ba:e4:05:33:b9:d1:98:
         58:8f:d3:cb:4c:c8:74:2b:0a:03:6a:e5:a7:ca:dc:4c:74:ac:
         22:00:15:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 14:52:32 2025 by rpki-client