Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/381125-0248-4ebc-a74d-b8dad6e5c3bf/1/N0wmF6Ny5GbpjUJTLdC9jlzdmT0.mft
File:                     N0wmF6Ny5GbpjUJTLdC9jlzdmT0.mft (raw, json)
Hash identifier:          DE4gUhNbL/AWsexeA5pQXLerM3JOfB1Ay5pw7mA9TeE=
Subject key identifier:   7B:53:82:9A:7B:FC:9A:64:53:8A:4B:77:DE:18:BE:84:39:06:66:F9
Authority key identifier: 37:4C:26:17:A3:72:E4:66:E9:8D:42:53:2D:D0:BD:8E:5C:DD:99:3D
Certificate issuer:       /CN=374c2617a372e466e98d42532dd0bd8e5cdd993d
Certificate serial:       019783FC976E0754A84EA17ADB91B57B1A50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N0wmF6Ny5GbpjUJTLdC9jlzdmT0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/381125-0248-4ebc-a74d-b8dad6e5c3bf/1/N0wmF6Ny5GbpjUJTLdC9jlzdmT0.mft
Manifest number:          0F30
Signing time:             Wed 18 Jun 2025 17:00:58 +0000
Manifest this update:     Wed 18 Jun 2025 17:00:58 +0000
Manifest next update:     Thu 19 Jun 2025 17:00:58 +0000
Files and hashes:         1: 2M9xuwu5AndhxSfR2ZXlPgIY5_M.roa (hash: 0EPkYtcWzG6eUp2dhcekU5xNDT1dEtWLrLrA3RfkTu0=)
                          2: N0wmF6Ny5GbpjUJTLdC9jlzdmT0.crl (hash: hNKhCKayoEN40j0JtBgRTFFB8s2jQEzHeRCBLPYLA5U=)
                          3: SS113d4UMKkPVDPWmlqWck-x24E.roa (hash: wgyXZKEbfAwwDp/GZ/OmNWIPZihNhq5vxfdpz8GgLCA=)
                          4: tce_jftJ9E_4KJ_uPWaE-OosXF4.roa (hash: wJZcfb6ZEWBCJ/uKNt0y+u5y+6aoB2gLD29sHouunZQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/381125-0248-4ebc-a74d-b8dad6e5c3bf/1/N0wmF6Ny5GbpjUJTLdC9jlzdmT0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/381125-0248-4ebc-a74d-b8dad6e5c3bf/1/N0wmF6Ny5GbpjUJTLdC9jlzdmT0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N0wmF6Ny5GbpjUJTLdC9jlzdmT0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 19 Jun 2025 16:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:83:fc:97:6e:07:54:a8:4e:a1:7a:db:91:b5:7b:1a:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=374c2617a372e466e98d42532dd0bd8e5cdd993d
        Validity
            Not Before: Jun 18 17:00:58 2025 GMT
            Not After : Jun 19 17:00:58 2025 GMT
        Subject: CN=7b53829a7bfc9a64538a4b77de18be84390666f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d4:15:0c:19:9f:76:19:49:5d:e8:77:4e:09:
                    cf:6c:4a:87:65:5a:fe:b5:9d:43:31:4e:c8:52:a3:
                    e0:c9:4d:c9:04:3d:89:04:76:ca:dd:db:15:10:42:
                    1c:01:49:37:a9:bb:a8:e3:0b:4b:83:c6:3b:b9:ae:
                    05:41:fb:bb:1a:4e:a7:b4:99:ea:c5:0c:19:e1:14:
                    ae:ee:f3:d5:78:de:92:00:eb:7a:16:ed:1a:f9:5f:
                    0b:04:30:55:48:12:85:8a:86:06:91:ed:cd:1b:c4:
                    88:3d:49:64:ce:fb:04:9f:c5:5e:19:1e:43:0d:66:
                    4f:82:61:7f:2e:71:f8:7b:86:8c:2a:ae:c0:41:93:
                    8d:82:1b:23:00:31:eb:46:99:84:bc:bd:bf:c2:18:
                    b1:16:41:77:ec:85:d8:79:54:26:e3:66:c6:3b:82:
                    dd:bb:a9:cd:6d:bb:b4:6e:2f:68:86:c8:44:11:01:
                    d9:44:db:c3:7c:80:83:6a:ab:31:e6:82:4e:f0:cb:
                    77:fc:c9:6c:68:02:e9:ca:56:96:0b:48:7d:c9:82:
                    1d:5a:ab:ac:bb:ed:44:e0:11:e4:ea:d8:24:08:3e:
                    c4:63:da:23:73:fe:57:c7:b9:86:8b:71:27:f1:7f:
                    5e:0a:7c:6a:37:da:32:97:a9:fd:a2:12:13:15:ec:
                    c2:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:53:82:9A:7B:FC:9A:64:53:8A:4B:77:DE:18:BE:84:39:06:66:F9
            X509v3 Authority Key Identifier:
                keyid:37:4C:26:17:A3:72:E4:66:E9:8D:42:53:2D:D0:BD:8E:5C:DD:99:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0wmF6Ny5GbpjUJTLdC9jlzdmT0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/381125-0248-4ebc-a74d-b8dad6e5c3bf/1/N0wmF6Ny5GbpjUJTLdC9jlzdmT0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/381125-0248-4ebc-a74d-b8dad6e5c3bf/1/N0wmF6Ny5GbpjUJTLdC9jlzdmT0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:21:a1:79:a0:16:12:63:9d:62:32:b5:de:37:e5:2e:a6:29:
         ce:33:74:b0:d8:56:1d:23:bb:4a:af:c3:f6:6e:c0:29:c2:1e:
         0a:44:50:72:ec:4a:37:34:3a:ea:01:42:df:9b:da:41:38:f5:
         09:dc:3d:21:25:11:30:22:99:91:0e:a5:9b:b4:87:99:c4:35:
         04:c2:27:87:98:fd:09:61:b6:c0:49:f1:c2:ec:fe:98:f6:b3:
         21:e8:87:4d:21:be:94:0b:d8:d5:6a:9e:43:f6:7d:19:47:48:
         8f:59:b1:e2:2c:2b:39:87:15:d1:17:10:e5:85:46:ef:12:e8:
         8c:52:a6:db:02:7c:e0:ea:f9:a7:22:6b:c3:b0:c9:25:89:b5:
         37:10:75:d5:a5:40:cd:7f:a3:45:bc:93:8f:36:53:73:95:08:
         56:8f:cb:c6:33:13:3a:52:c2:4b:2c:5d:85:9b:6f:b4:c4:b5:
         84:5d:61:18:61:47:ae:bd:03:e1:8c:c9:bd:0d:67:f2:d9:2e:
         c4:6d:fa:5b:2f:fe:b8:a1:1e:e9:b3:fb:83:84:42:d5:7a:32:
         1d:1c:89:8f:a8:e2:fc:ef:b2:e8:55:92:22:32:eb:dd:f7:04:
         cb:bd:d3:0c:67:23:8c:85:9f:32:27:4b:7b:29:f2:9a:5f:e6:
         e7:e8:fc:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 20:45:51 2025 by rpki-client