Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/981b50-03ab-414b-a310-bdc5d6cb2141/1/ntoJbbyNWaRCchzBadautkn1_T8.mft
File:                     ntoJbbyNWaRCchzBadautkn1_T8.mft (raw, json)
Hash identifier:          dOZr00kUXsKF9uVx7hpaWzlhSBU1s9u1tIxrXkjL+hI=
Subject key identifier:   93:EE:E7:F8:82:2C:A3:C4:CF:D1:07:9C:AD:F5:2D:60:F7:CC:C9:0E
Authority key identifier: 9E:DA:09:6D:BC:8D:59:A4:42:72:1C:C1:69:D6:AE:B6:49:F5:FD:3F
Certificate issuer:       /CN=9eda096dbc8d59a442721cc169d6aeb649f5fd3f
Certificate serial:       01976F9A1857E8F4A1019594CBEEB8B00FD5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ntoJbbyNWaRCchzBadautkn1_T8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/981b50-03ab-414b-a310-bdc5d6cb2141/1/ntoJbbyNWaRCchzBadautkn1_T8.mft
Manifest number:          0A43
Signing time:             Sat 14 Jun 2025 18:00:59 +0000
Manifest this update:     Sat 14 Jun 2025 18:00:59 +0000
Manifest next update:     Sun 15 Jun 2025 18:00:59 +0000
Files and hashes:         1: lBu7CwE3UJV_l_-xHUG1qoahCTQ.roa (hash: fQvVs4QYMOjRdLpo5ySosD6udSmF5lBQB4/GrAlIHkM=)
                          2: ntoJbbyNWaRCchzBadautkn1_T8.crl (hash: dhM8ZDo/2Gwwl35eL6DshApcHn45rz9MUUiW4oW+xmI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/981b50-03ab-414b-a310-bdc5d6cb2141/1/ntoJbbyNWaRCchzBadautkn1_T8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/981b50-03ab-414b-a310-bdc5d6cb2141/1/ntoJbbyNWaRCchzBadautkn1_T8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ntoJbbyNWaRCchzBadautkn1_T8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 18:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:9a:18:57:e8:f4:a1:01:95:94:cb:ee:b8:b0:0f:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9eda096dbc8d59a442721cc169d6aeb649f5fd3f
        Validity
            Not Before: Jun 14 18:00:59 2025 GMT
            Not After : Jun 15 18:00:59 2025 GMT
        Subject: CN=93eee7f8822ca3c4cfd1079cadf52d60f7ccc90e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:8b:98:78:59:b8:a9:cb:25:4e:25:b2:fb:b8:
                    86:6d:f3:35:05:88:ac:d9:25:14:eb:fe:6c:01:5b:
                    f5:c9:71:d2:12:a8:06:3c:48:62:93:e0:ef:c5:04:
                    87:8a:cc:96:b2:75:e2:e0:4d:49:f3:10:10:bd:98:
                    90:bd:ca:f9:99:28:64:1b:ac:59:57:0d:ca:ce:08:
                    e0:2a:c9:e4:c6:37:b6:dc:ac:8e:ac:d5:22:f8:4b:
                    be:d1:7b:f5:b6:e6:e4:4d:1e:0f:ca:9e:1d:42:e0:
                    ab:a8:6d:ba:6f:e6:92:5a:10:ca:79:fc:a8:c2:93:
                    b1:f8:cb:b6:16:68:01:dc:32:cb:95:26:93:97:4e:
                    eb:99:70:34:73:ab:39:e9:6a:7a:ec:8e:92:e3:d8:
                    e8:16:74:53:74:84:9a:34:40:dc:10:a7:90:52:3d:
                    35:cb:14:d3:4d:a8:6c:5a:d8:06:39:bf:8b:c0:30:
                    8d:1b:46:21:5c:04:75:aa:14:21:d3:70:68:ec:a1:
                    0d:14:2c:d6:5c:a5:ce:19:ea:b8:a4:1f:8e:06:cf:
                    b9:60:f5:35:1b:40:3c:b5:88:08:dd:67:0b:7a:1e:
                    d8:24:4e:f6:6f:45:eb:36:d3:07:24:ff:11:d3:d4:
                    95:c0:a2:a9:66:40:94:f0:36:3b:7c:f1:f4:61:e4:
                    69:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:EE:E7:F8:82:2C:A3:C4:CF:D1:07:9C:AD:F5:2D:60:F7:CC:C9:0E
            X509v3 Authority Key Identifier:
                keyid:9E:DA:09:6D:BC:8D:59:A4:42:72:1C:C1:69:D6:AE:B6:49:F5:FD:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ntoJbbyNWaRCchzBadautkn1_T8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/981b50-03ab-414b-a310-bdc5d6cb2141/1/ntoJbbyNWaRCchzBadautkn1_T8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/981b50-03ab-414b-a310-bdc5d6cb2141/1/ntoJbbyNWaRCchzBadautkn1_T8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:ee:66:6b:b7:27:9a:9d:9b:e5:13:9c:ad:17:73:fe:da:01:
         85:c7:4f:67:8e:8e:54:ec:da:96:b1:4b:6d:21:c6:77:0c:d0:
         ce:88:f1:c4:91:0e:77:d0:67:fe:36:58:97:7f:6f:b3:59:36:
         d4:a1:57:77:a1:f2:fd:0a:5b:55:55:7c:f8:d4:1f:c8:d4:99:
         6e:6f:64:58:5a:6a:82:ed:b1:ee:d5:85:4b:f4:e6:30:af:ae:
         84:19:2a:09:4a:a2:b4:ab:e6:9f:57:6a:24:28:02:30:ad:6c:
         38:3a:c4:d6:2e:a4:8b:79:d7:c8:10:86:d0:d4:f1:33:6e:d4:
         91:0f:d2:2e:7b:39:94:ab:92:82:54:77:fa:4b:75:8d:44:ac:
         ac:99:70:ec:04:36:58:e8:7f:43:07:a7:fa:7e:63:39:ab:7e:
         6d:61:78:6c:4d:d1:1c:da:6e:b9:08:55:90:c8:3d:7d:bc:be:
         80:e2:78:3f:02:78:b6:fc:98:ab:75:b4:5a:72:9f:5a:f7:6f:
         ce:70:3f:5c:41:09:ca:9d:6b:57:3c:80:3c:20:e7:e3:6a:11:
         0a:d6:eb:d4:34:85:06:09:14:49:92:97:ba:26:97:54:c8:d5:
         11:95:35:dd:06:70:14:f8:54:f3:e8:4c:d8:c7:4c:ec:f7:4e:
         26:fc:b9:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:18:29 2025 by rpki-client