Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/308179-be69-4c10-8694-fbd399a4475e/1/NNUZJHQCvPvfDs6QIK1kYi6dO64.mft
File:                     NNUZJHQCvPvfDs6QIK1kYi6dO64.mft (raw, json)
Hash identifier:          NLveR84bOf9d9ZN2+iCIeIv2FjSH0ZZsDs+Bdw+El+s=
Subject key identifier:   62:52:99:68:92:B6:23:64:97:0B:5C:AC:71:28:3B:E4:4B:CE:5D:B2
Authority key identifier: 34:D5:19:24:74:02:BC:FB:DF:0E:CE:90:20:AD:64:62:2E:9D:3B:AE
Certificate issuer:       /CN=34d519247402bcfbdf0ece9020ad64622e9d3bae
Certificate serial:       01978A351D8F8E108FBEBAAD73616E9797AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NNUZJHQCvPvfDs6QIK1kYi6dO64.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/308179-be69-4c10-8694-fbd399a4475e/1/NNUZJHQCvPvfDs6QIK1kYi6dO64.mft
Manifest number:          0E30
Signing time:             Thu 19 Jun 2025 22:00:26 +0000
Manifest this update:     Thu 19 Jun 2025 22:00:26 +0000
Manifest next update:     Fri 20 Jun 2025 22:00:26 +0000
Files and hashes:         1: 1-UL9cqmZR86h5znGrLr9rng1OoA.roa (hash: E9P7J2BtII/1SfdjE4hkF/I8cNTQ+7Tkvjo9UHiDiQ4=)
                          2: 16Vx9JFdsAydCBt8o5HI01kMvEY.roa (hash: uE6o+4HCde5Q2IcMEoOR7KpTVTAt1VCw3Ve7SEAAgA8=)
                          3: AVkM8pQNQe4Lv2gygeYw_iwNR8o.roa (hash: eBDfXYDOLbSmgkFxViph+uhEyXOWfI38ugg/5BV4TtY=)
                          4: NNUZJHQCvPvfDs6QIK1kYi6dO64.crl (hash: 5eFGDgLi6Egh39/H9ViTLSQl26aEcWQMzygvt8fl9nc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/308179-be69-4c10-8694-fbd399a4475e/1/NNUZJHQCvPvfDs6QIK1kYi6dO64.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/308179-be69-4c10-8694-fbd399a4475e/1/NNUZJHQCvPvfDs6QIK1kYi6dO64.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NNUZJHQCvPvfDs6QIK1kYi6dO64.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 20 Jun 2025 19:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:8a:35:1d:8f:8e:10:8f:be:ba:ad:73:61:6e:97:97:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34d519247402bcfbdf0ece9020ad64622e9d3bae
        Validity
            Not Before: Jun 19 22:00:26 2025 GMT
            Not After : Jun 20 22:00:26 2025 GMT
        Subject: CN=6252996892b62364970b5cac71283be44bce5db2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:88:5c:c3:0b:84:8c:0a:39:fd:67:5c:92:21:
                    57:b1:8f:14:26:16:e1:89:14:30:69:98:09:ba:d5:
                    f3:3a:84:12:f5:c2:57:bc:87:65:2f:ec:12:6b:98:
                    f2:58:72:17:82:c1:b9:bc:5a:1a:16:d5:0e:e4:03:
                    25:1a:c4:f1:d0:27:82:e1:51:24:2f:8a:c6:00:46:
                    1b:39:02:6f:bf:8a:3f:b4:e3:73:7b:27:09:82:4c:
                    c9:b2:5d:6f:b7:30:06:6f:b4:fa:88:f9:ae:09:8f:
                    24:cf:0b:5e:98:23:66:24:48:05:f4:a3:09:6f:c8:
                    96:a2:0a:7a:8b:bd:58:6b:ef:c0:5c:41:96:f0:a1:
                    69:30:ec:f7:3e:65:8c:af:8a:5e:1b:2f:4d:f6:94:
                    75:b5:3a:80:6f:61:66:90:a1:d6:07:36:08:4a:ab:
                    24:5f:fa:67:b2:18:1d:ce:45:e6:85:66:9f:92:72:
                    ea:3d:70:ef:c8:30:e8:be:7c:b2:54:a7:bf:10:b7:
                    30:f2:9f:b7:48:f0:be:a7:2b:34:8f:a6:d5:6f:11:
                    df:df:1f:f7:b5:88:9a:47:53:a6:72:20:ea:49:82:
                    98:0d:30:3a:5b:2d:b0:15:94:a1:ac:02:ec:17:6b:
                    ce:91:6a:cc:6a:df:3c:43:fb:5b:28:cb:c8:b7:30:
                    66:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:52:99:68:92:B6:23:64:97:0B:5C:AC:71:28:3B:E4:4B:CE:5D:B2
            X509v3 Authority Key Identifier:
                keyid:34:D5:19:24:74:02:BC:FB:DF:0E:CE:90:20:AD:64:62:2E:9D:3B:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NNUZJHQCvPvfDs6QIK1kYi6dO64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/308179-be69-4c10-8694-fbd399a4475e/1/NNUZJHQCvPvfDs6QIK1kYi6dO64.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/308179-be69-4c10-8694-fbd399a4475e/1/NNUZJHQCvPvfDs6QIK1kYi6dO64.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:0b:76:bd:1c:2d:a4:7a:26:d6:d9:1e:6b:e6:5b:37:e7:b4:
         93:0d:89:99:90:73:56:0d:30:e6:b7:b8:1e:99:93:ad:54:7e:
         1b:55:f1:61:54:2f:57:d1:c6:cc:97:6a:dd:34:1e:58:0c:3a:
         79:55:24:e2:57:4c:a9:1e:62:df:51:ae:d3:94:d5:0c:00:14:
         07:8a:f8:cc:a8:18:d4:db:a3:f4:20:03:0d:b5:0b:08:fe:e8:
         5e:92:d5:45:66:43:77:7a:e5:68:cc:ab:29:c0:53:3a:80:a8:
         af:2d:81:65:9a:ef:92:b9:18:22:ba:b6:80:ae:4d:df:ba:7a:
         c5:ab:c0:53:71:29:3f:c9:8d:4e:8c:f3:11:56:14:d5:48:cb:
         53:ce:40:c5:56:c8:c7:96:78:f4:e7:70:b1:ba:17:b7:21:83:
         bf:28:8f:f6:b4:4d:fd:53:ac:4f:ac:d3:89:bc:13:8c:37:f5:
         e1:ad:5b:a0:de:33:8b:d9:8c:1d:7b:2d:dd:69:73:9e:33:6a:
         9c:74:73:6c:e1:f9:9b:1f:52:a5:80:6f:66:2b:b4:9e:6c:a9:
         99:1b:83:b1:b4:e9:60:21:1e:8b:a4:0d:93:66:5d:66:5b:11:
         0f:4a:31:0a:bb:85:80:34:da:ab:ee:72:02:a7:1f:ef:d7:a4:
         8d:65:36:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 03:54:22 2025 by rpki-client