Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft
File:                     nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft (raw, json)
Hash identifier:          P6kTmKP232jQFk+W5e4q6vPGaPEvQPcnJ/SuebLiS5s=
Subject key identifier:   85:0F:69:E6:00:41:AF:08:23:13:80:1A:E6:DB:AD:99:E6:FD:A2:53
Authority key identifier: 9D:5E:CC:E8:C8:7C:4F:0A:75:BA:21:E5:C8:4F:62:41:21:E0:8E:32
Certificate issuer:       /CN=9d5ecce8c87c4f0a75ba21e5c84f624121e08e32
Certificate serial:       019786FCEFB019D85DC278617CBEA06D1296
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft
Manifest number:          C1
Signing time:             Thu 19 Jun 2025 07:00:12 +0000
Manifest this update:     Thu 19 Jun 2025 07:00:12 +0000
Manifest next update:     Fri 20 Jun 2025 07:00:12 +0000
Files and hashes:         1: W1gtHYOxkSQKrOdwkNpP1ZoMoUY.roa (hash: 5S4JEcGJktduCewz9POQY0aRBOXQzpGOLodHYl3CjqI=)
                          2: nV7M6Mh8Twp1uiHlyE9iQSHgjjI.crl (hash: tjzb+rDrdYFejVbZCQJToezQxL5OxUZoyL6sf/jjgx8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 20 Jun 2025 07:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:86:fc:ef:b0:19:d8:5d:c2:78:61:7c:be:a0:6d:12:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d5ecce8c87c4f0a75ba21e5c84f624121e08e32
        Validity
            Not Before: Jun 19 07:00:12 2025 GMT
            Not After : Jun 20 07:00:12 2025 GMT
        Subject: CN=850f69e60041af082313801ae6dbad99e6fda253
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:10:17:21:67:ff:37:88:f6:f4:51:90:56:42:
                    7e:4a:b3:69:2a:44:43:0a:a8:c5:c2:22:ea:89:b7:
                    76:e2:4a:61:d6:34:d3:42:a8:05:c4:7a:d0:cf:c8:
                    9e:84:89:4d:d9:ee:f1:77:4b:94:82:62:71:9b:08:
                    81:d5:54:86:ee:b3:b2:9a:63:5f:9c:87:b8:36:44:
                    c6:56:f5:32:e5:e2:bf:03:94:bd:e6:55:db:20:be:
                    bd:22:de:27:1b:18:3c:cd:61:00:fe:c9:b6:06:07:
                    9f:7f:ad:ec:96:99:51:40:0a:e8:75:41:28:c1:59:
                    c6:47:c2:c8:bf:05:27:35:59:a0:4e:d9:85:a0:b7:
                    8d:48:0e:01:8b:a1:b7:a8:31:6c:dc:42:dc:df:b4:
                    2b:64:31:b8:51:d8:69:c6:f3:13:dc:0b:0d:56:a4:
                    08:02:71:83:d4:77:e1:39:61:18:2a:95:d6:5f:3a:
                    99:0b:02:70:05:df:b6:dd:00:36:02:b9:ac:3a:13:
                    31:cc:c0:ff:71:d8:7f:cd:8c:61:7a:a3:22:06:a6:
                    ea:34:69:c8:71:1e:73:31:7e:49:96:a4:85:4b:e7:
                    99:0e:e3:6a:6f:15:e8:bc:22:04:c2:f4:f0:ef:80:
                    8f:21:3a:d8:52:56:f0:21:c5:b9:13:84:dd:87:9a:
                    32:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:0F:69:E6:00:41:AF:08:23:13:80:1A:E6:DB:AD:99:E6:FD:A2:53
            X509v3 Authority Key Identifier:
                keyid:9D:5E:CC:E8:C8:7C:4F:0A:75:BA:21:E5:C8:4F:62:41:21:E0:8E:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:c4:46:d2:e4:fb:d1:fd:14:08:09:62:1c:84:c0:e0:ab:ba:
         9a:c5:cd:af:49:34:7b:06:e5:2b:9c:98:15:af:45:b8:3a:58:
         79:2c:1f:69:fd:56:d1:03:a0:1b:ea:b2:56:89:97:be:0f:57:
         3a:74:ee:b8:ef:c6:a8:3a:8a:36:13:20:9a:cb:09:9a:93:35:
         71:09:83:35:32:27:59:70:00:a3:06:fc:42:63:f7:73:7e:b6:
         c9:fb:4d:d8:66:d1:37:89:31:22:b9:aa:6c:b3:2e:c7:c3:d4:
         9a:d4:e6:0c:1d:f6:31:31:49:bb:78:27:c0:ba:01:24:a3:b0:
         88:cd:2c:49:7a:6a:9e:0f:fb:61:40:2e:a4:09:bf:19:79:74:
         05:2e:bd:1b:cb:9c:3a:5b:21:ab:ba:d8:0f:f5:2b:e5:9c:44:
         cf:6f:83:b5:48:9d:63:16:14:fe:b2:83:33:e4:53:63:0c:3a:
         0e:09:d7:37:2e:5c:79:3f:32:7b:28:0e:68:9d:f8:b1:b9:5b:
         70:ce:ba:f1:7b:38:90:04:0f:f0:cc:a7:f8:cb:c5:b0:02:ed:
         b7:bc:77:8b:ab:32:4e:e8:5c:2b:da:6f:0c:13:ae:5d:84:cc:
         91:6a:c3:f4:cb:4b:f0:78:e8:68:3a:42:92:47:ba:d8:d6:81:
         b6:52:68:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 13:51:43 2025 by rpki-client