Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/25fb54-d467-4e90-a41f-91c0d8e7549d/1/N6TS5C8jYsLm71K4Lxn35WN1fgw.mft
File:                     N6TS5C8jYsLm71K4Lxn35WN1fgw.mft (raw, json)
Hash identifier:          dGDu154rikGheQ0YGyhDW7PRv/K7+ZFJgS+S2KdISPA=
Subject key identifier:   8F:2A:79:C0:22:60:3D:76:DF:F0:F2:26:D7:68:64:57:DF:62:4D:24
Authority key identifier: 37:A4:D2:E4:2F:23:62:C2:E6:EF:52:B8:2F:19:F7:E5:63:75:7E:0C
Certificate issuer:       /CN=37a4d2e42f2362c2e6ef52b82f19f7e563757e0c
Certificate serial:       019675D554E6DA839FD03FA227AD80C54028
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N6TS5C8jYsLm71K4Lxn35WN1fgw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/25fb54-d467-4e90-a41f-91c0d8e7549d/1/N6TS5C8jYsLm71K4Lxn35WN1fgw.mft
Manifest number:          023A
Signing time:             Sun 27 Apr 2025 06:00:37 +0000
Manifest this update:     Sun 27 Apr 2025 06:00:37 +0000
Manifest next update:     Mon 28 Apr 2025 06:00:37 +0000
Files and hashes:         1: 3PpgKNG0AmRV_aCWCsXZ_tB5eIg.roa (hash: eRzqoJ+wnFE50kPBIiEdOOr71bv/+CxmFvCCuPDTNi4=)
                          2: N6TS5C8jYsLm71K4Lxn35WN1fgw.crl (hash: qfxuDdzMhF41d23ZzNElG73b4D0EM0OWV+XtN8AL5JU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/25fb54-d467-4e90-a41f-91c0d8e7549d/1/N6TS5C8jYsLm71K4Lxn35WN1fgw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/25fb54-d467-4e90-a41f-91c0d8e7549d/1/N6TS5C8jYsLm71K4Lxn35WN1fgw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N6TS5C8jYsLm71K4Lxn35WN1fgw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 05:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:75:d5:54:e6:da:83:9f:d0:3f:a2:27:ad:80:c5:40:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37a4d2e42f2362c2e6ef52b82f19f7e563757e0c
        Validity
            Not Before: Apr 27 06:00:37 2025 GMT
            Not After : Apr 28 06:00:37 2025 GMT
        Subject: CN=8f2a79c022603d76dff0f226d7686457df624d24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:e3:a1:c1:34:31:6a:55:b5:4b:92:47:b6:1d:
                    9c:17:a5:06:17:82:35:5e:fa:25:f5:17:73:72:c0:
                    20:07:22:f2:62:d0:ef:04:ef:ae:6a:18:ef:6f:69:
                    b3:ae:94:fa:f6:e2:dd:f7:11:5e:e2:4e:ea:49:84:
                    7a:32:32:ca:b8:37:3d:4d:ef:39:46:e5:8d:7e:b8:
                    4d:98:95:33:07:74:18:d1:78:29:4e:7c:2b:f0:e4:
                    4a:40:50:fa:bc:a1:e5:f1:8e:b9:2d:3c:8a:01:12:
                    72:b7:7b:72:b9:69:ae:29:a4:30:26:f7:c2:bc:7d:
                    4d:f0:9c:f5:b2:a7:6a:ba:d8:f9:19:24:1e:52:b9:
                    5b:4c:d3:7a:5f:84:9d:0f:2e:7d:71:c2:ef:38:95:
                    54:1d:c7:60:ec:9d:57:ea:8d:61:c1:6a:43:65:b5:
                    ca:a4:e1:ff:bb:8e:f5:d9:f0:53:7b:de:f7:87:4d:
                    39:d4:86:00:6d:de:95:84:2d:80:4f:8d:83:cb:a0:
                    28:33:9a:36:08:d1:33:d6:e3:58:42:95:8b:0a:66:
                    5b:68:ce:85:1f:c8:0d:d6:3f:2f:fd:15:8a:64:41:
                    62:b1:6a:cc:b9:df:db:c1:e5:2a:b2:8d:2d:39:4a:
                    d4:71:fa:9a:41:f1:1e:f9:47:ea:ba:2d:05:63:59:
                    8e:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:2A:79:C0:22:60:3D:76:DF:F0:F2:26:D7:68:64:57:DF:62:4D:24
            X509v3 Authority Key Identifier:
                keyid:37:A4:D2:E4:2F:23:62:C2:E6:EF:52:B8:2F:19:F7:E5:63:75:7E:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N6TS5C8jYsLm71K4Lxn35WN1fgw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/25fb54-d467-4e90-a41f-91c0d8e7549d/1/N6TS5C8jYsLm71K4Lxn35WN1fgw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/25fb54-d467-4e90-a41f-91c0d8e7549d/1/N6TS5C8jYsLm71K4Lxn35WN1fgw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:f5:84:37:58:77:37:0d:4b:17:9b:9f:5f:b2:a5:3d:af:3e:
         ad:10:11:a5:ec:cb:95:88:fa:c3:c8:1a:1f:3d:76:50:09:d2:
         d4:58:63:da:ca:08:6b:a6:26:7a:3e:1a:35:88:2b:a2:2b:96:
         be:ad:de:81:03:06:e5:d2:c4:8f:e6:26:4a:ae:aa:1a:9f:71:
         f3:3f:99:04:93:24:d9:52:b2:1a:34:f1:7d:a4:33:1d:a6:55:
         ba:76:77:a9:8e:3d:31:59:40:33:08:55:c6:fd:69:47:e8:8e:
         0e:e4:4c:6e:a3:98:0a:a8:ac:73:72:bd:ff:47:1e:09:ae:86:
         5d:95:2e:5c:b3:ae:fd:b1:99:6e:e0:91:7e:db:29:19:77:0b:
         f2:01:57:00:2d:f3:5d:eb:4d:93:3d:27:c1:f7:50:46:8b:b6:
         f0:6a:80:f5:3d:1f:33:15:ae:f3:18:dc:0c:77:9f:c8:e8:56:
         5d:46:cf:56:3f:06:4a:83:67:a5:fc:6a:75:da:13:3d:20:82:
         bd:79:d2:69:60:00:d6:87:7e:ae:35:81:21:22:15:d5:7a:4b:
         78:5f:d7:f3:cb:94:dd:75:dd:43:f9:e2:71:69:c6:cb:b4:69:
         f1:b3:dc:91:c4:c8:a8:d7:2a:c1:ab:4c:7f:ce:3b:78:0e:49:
         7a:03:58:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:12:26 2025 by rpki-client