Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/962840-5169-4ff3-89f9-480734e38da8/1/nj8Vea4XZmLWY6ODTA_vgkzuAzw.mft
File:                     nj8Vea4XZmLWY6ODTA_vgkzuAzw.mft (raw, json)
Hash identifier:          SXGw7pYgio2qhz6TxURgHdixdvHMNTi62rtDg97t9MA=
Subject key identifier:   93:C8:FF:9E:55:65:30:A0:03:A9:2A:67:4A:78:DA:E1:96:9C:DE:38
Authority key identifier: 9E:3F:15:79:AE:17:66:62:D6:63:A3:83:4C:0F:EF:82:4C:EE:03:3C
Certificate issuer:       /CN=9e3f1579ae176662d663a3834c0fef824cee033c
Certificate serial:       01976C622E4FBB3613FA3BCEAC2D4FD87C88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nj8Vea4XZmLWY6ODTA_vgkzuAzw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/962840-5169-4ff3-89f9-480734e38da8/1/nj8Vea4XZmLWY6ODTA_vgkzuAzw.mft
Manifest number:          02BD
Signing time:             Sat 14 Jun 2025 03:01:02 +0000
Manifest this update:     Sat 14 Jun 2025 03:01:02 +0000
Manifest next update:     Sun 15 Jun 2025 03:01:02 +0000
Files and hashes:         1: nj8Vea4XZmLWY6ODTA_vgkzuAzw.crl (hash: Jki+euNoIPQv6aV6LMBcZwCBds3YNIfFZ6iFpOvi6nU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/962840-5169-4ff3-89f9-480734e38da8/1/nj8Vea4XZmLWY6ODTA_vgkzuAzw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/962840-5169-4ff3-89f9-480734e38da8/1/nj8Vea4XZmLWY6ODTA_vgkzuAzw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nj8Vea4XZmLWY6ODTA_vgkzuAzw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:62:2e:4f:bb:36:13:fa:3b:ce:ac:2d:4f:d8:7c:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e3f1579ae176662d663a3834c0fef824cee033c
        Validity
            Not Before: Jun 14 03:01:02 2025 GMT
            Not After : Jun 15 03:01:02 2025 GMT
        Subject: CN=93c8ff9e556530a003a92a674a78dae1969cde38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:91:96:be:5f:9d:e6:3b:87:3b:51:8b:5c:75:
                    a3:95:a4:b1:e8:15:f1:ca:96:25:08:ff:2c:de:22:
                    19:10:b3:a2:af:e0:07:e4:40:bb:d6:6f:bc:0c:6f:
                    b1:fa:97:c5:6d:71:41:62:47:2a:48:db:31:6a:78:
                    5e:10:a2:15:31:23:31:28:33:28:e3:01:6f:9c:59:
                    12:3c:a4:63:0f:60:ec:50:f9:1a:b4:3e:c0:d6:32:
                    72:7c:91:49:5f:90:29:85:bb:43:39:6a:70:df:08:
                    24:74:fe:10:6e:b0:73:2d:fb:42:4d:26:51:28:6c:
                    be:25:2c:89:93:24:a3:b4:db:0d:96:ac:f9:e1:ba:
                    e0:c4:5e:96:67:e9:50:b9:4c:4e:81:7b:51:bc:d3:
                    4b:e7:41:05:06:db:94:4d:2c:de:51:e2:13:95:8b:
                    34:12:3a:f1:50:09:29:43:f0:7b:d8:6c:8e:b0:b1:
                    eb:f6:37:aa:60:45:d4:bb:93:d2:fc:57:de:b7:c4:
                    90:00:15:96:e0:f7:7c:d4:23:30:82:d9:bd:22:d1:
                    98:94:62:f1:9c:44:65:48:54:35:3f:fb:0f:e7:6b:
                    a6:8e:88:dd:94:f7:17:2d:63:9f:c0:cd:db:68:28:
                    94:02:e6:75:fd:66:03:c6:4f:db:fe:4d:30:2a:32:
                    fb:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:C8:FF:9E:55:65:30:A0:03:A9:2A:67:4A:78:DA:E1:96:9C:DE:38
            X509v3 Authority Key Identifier:
                keyid:9E:3F:15:79:AE:17:66:62:D6:63:A3:83:4C:0F:EF:82:4C:EE:03:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nj8Vea4XZmLWY6ODTA_vgkzuAzw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/962840-5169-4ff3-89f9-480734e38da8/1/nj8Vea4XZmLWY6ODTA_vgkzuAzw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/962840-5169-4ff3-89f9-480734e38da8/1/nj8Vea4XZmLWY6ODTA_vgkzuAzw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:92:5f:85:84:bf:52:4d:43:5a:bd:79:82:cb:11:97:0a:d8:
         ec:f3:9c:79:34:a5:1a:1f:a9:11:16:32:12:50:4f:90:e3:86:
         72:73:cc:78:67:6b:01:e8:74:77:50:23:b5:19:5c:75:16:17:
         d6:05:7d:95:5e:3f:52:1e:27:13:f1:98:c6:e2:c7:66:fb:4a:
         15:42:d1:4d:0d:9c:2a:1d:2e:12:e0:ca:a5:97:40:73:4b:6b:
         94:d3:81:93:dc:7a:3d:27:22:f5:4f:a3:b1:61:92:6c:19:78:
         b7:07:97:96:a3:80:e9:2c:60:b5:80:81:29:95:f1:93:fc:71:
         a1:7e:86:31:85:01:4f:b4:03:15:ad:19:22:8b:dd:34:5f:59:
         44:19:d8:d1:e0:e7:ae:2f:6d:ab:de:44:35:fa:12:77:cc:d1:
         7e:f4:9d:98:58:5f:fe:df:49:b7:16:5e:db:f8:2c:76:ca:50:
         a1:b8:f1:02:d6:1a:e2:be:5c:0a:a9:44:2b:14:db:c6:1a:39:
         0d:37:2b:42:e9:20:f8:6e:6f:a6:e5:22:40:cd:b6:dc:fb:21:
         0e:c4:5f:65:3e:0b:89:6f:3a:72:d8:56:70:fa:e2:d3:85:ee:
         a7:86:e9:fb:03:98:49:9c:0e:d4:79:53:4e:87:a9:88:3d:4a:
         d6:5d:43:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:07:23 2025 by rpki-client