Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/b6baa4-c131-430d-806a-2e967a4cdde1/1/NeXw-_PWvzoWokvseAyw_W7fMec.mft
File:                     NeXw-_PWvzoWokvseAyw_W7fMec.mft (raw, json)
Hash identifier:          cvF6158+m8e1aDWQX8GkznoMRWLVzQSVC7upxyxFfFs=
Subject key identifier:   E7:AA:97:C9:43:7B:96:38:46:7F:7C:1A:92:F9:BE:3D:C3:59:FF:07
Authority key identifier: 35:E5:F0:FB:F3:D6:BF:3A:16:A2:4B:EC:78:0C:B0:FD:6E:DF:31:E7
Certificate issuer:       /CN=35e5f0fbf3d6bf3a16a24bec780cb0fd6edf31e7
Certificate serial:       019685EDF3AC5430EB4B7E803B3A4DA0A0B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NeXw-_PWvzoWokvseAyw_W7fMec.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/b6baa4-c131-430d-806a-2e967a4cdde1/1/NeXw-_PWvzoWokvseAyw_W7fMec.mft
Manifest number:          0D5B
Signing time:             Wed 30 Apr 2025 09:01:26 +0000
Manifest this update:     Wed 30 Apr 2025 09:01:26 +0000
Manifest next update:     Thu 01 May 2025 09:01:26 +0000
Files and hashes:         1: NeXw-_PWvzoWokvseAyw_W7fMec.crl (hash: FnNSwfrRBfMj40qUqFq0Luo6RBxzCaIBPCYqYB/40IM=)
                          2: PmVcb6mc4PNxZC_ptgP_O-XbGLI.roa (hash: pKGXoSvQeFa7SbcSS7sBYIQ1DYaO2+BzF5Gj11hr5Ic=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/b6baa4-c131-430d-806a-2e967a4cdde1/1/NeXw-_PWvzoWokvseAyw_W7fMec.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/b6baa4-c131-430d-806a-2e967a4cdde1/1/NeXw-_PWvzoWokvseAyw_W7fMec.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NeXw-_PWvzoWokvseAyw_W7fMec.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 May 2025 09:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:85:ed:f3:ac:54:30:eb:4b:7e:80:3b:3a:4d:a0:a0:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35e5f0fbf3d6bf3a16a24bec780cb0fd6edf31e7
        Validity
            Not Before: Apr 30 09:01:26 2025 GMT
            Not After : May  1 09:01:26 2025 GMT
        Subject: CN=e7aa97c9437b9638467f7c1a92f9be3dc359ff07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:74:47:32:25:f9:6a:6e:a4:7a:a1:55:02:b9:
                    6d:fd:c5:78:75:46:5b:d7:b7:52:52:cf:d3:09:29:
                    72:11:58:91:e4:a5:c5:84:a5:da:d2:ce:20:c2:de:
                    6d:d3:da:00:b2:bd:6b:12:26:70:ef:bd:80:3a:44:
                    ca:4d:e1:8c:ab:d9:3c:36:fd:6d:e0:92:bf:b5:e6:
                    a6:b3:ef:ae:0a:40:2b:33:58:d7:fa:97:d3:9e:ed:
                    dc:41:5f:38:82:89:3e:ad:7f:d9:9c:fe:1d:e3:29:
                    62:c4:15:c3:b9:a2:1f:5d:4b:8c:b0:8e:e9:c3:77:
                    b7:1c:56:f8:75:6a:a3:1e:fa:82:3f:aa:79:bf:db:
                    a2:28:bf:59:d7:5c:cf:a2:8f:fc:ef:b7:77:48:5d:
                    ea:28:11:95:2f:e0:d6:b8:27:7e:be:b1:58:8d:4e:
                    88:cb:4b:9d:eb:d6:21:92:64:60:ed:28:5b:aa:28:
                    6a:1b:8a:63:c0:19:33:58:b8:e9:96:0d:2e:cc:f8:
                    3c:19:d1:9a:92:64:29:8c:c0:bb:2d:4f:39:0c:e6:
                    99:66:a0:94:ad:30:d2:6c:15:44:35:58:1d:c2:c0:
                    97:8f:6f:17:bf:4a:0d:04:bc:e0:fd:ef:48:c5:9a:
                    8b:08:3d:52:36:12:8b:bd:d5:e9:fc:cf:69:e1:b5:
                    c2:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:AA:97:C9:43:7B:96:38:46:7F:7C:1A:92:F9:BE:3D:C3:59:FF:07
            X509v3 Authority Key Identifier:
                keyid:35:E5:F0:FB:F3:D6:BF:3A:16:A2:4B:EC:78:0C:B0:FD:6E:DF:31:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NeXw-_PWvzoWokvseAyw_W7fMec.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b6baa4-c131-430d-806a-2e967a4cdde1/1/NeXw-_PWvzoWokvseAyw_W7fMec.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b6baa4-c131-430d-806a-2e967a4cdde1/1/NeXw-_PWvzoWokvseAyw_W7fMec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:71:b7:11:36:1c:2c:3e:19:fd:37:39:53:fc:eb:9c:a2:f5:
         20:de:11:08:b3:90:c1:bd:7d:c4:e7:cd:34:83:c4:37:fd:30:
         d4:24:27:40:f4:ab:8e:71:92:2c:d0:8a:c4:0e:d3:fc:2d:c6:
         84:64:f8:80:23:c5:49:bd:a8:22:f0:3d:5d:11:e1:8d:1f:06:
         43:63:c7:00:50:07:64:9f:4c:46:16:21:cb:91:26:3e:ff:57:
         80:70:59:e3:37:7a:c8:0b:85:c9:3c:ce:19:fb:3c:25:ca:55:
         b9:98:9a:be:ce:ca:10:1a:52:33:da:ed:34:f3:13:85:55:0d:
         47:7b:94:44:5e:72:53:92:46:12:b0:18:4a:ab:f7:18:1b:23:
         2d:82:31:68:c6:8c:db:d5:fd:9f:b8:e9:46:8e:f5:27:96:62:
         71:cf:71:3d:a8:ef:bd:dd:b7:c8:2e:bd:4a:6c:ec:8a:ea:2a:
         98:c1:d6:06:e1:6f:30:65:ac:d8:cc:ca:25:d2:31:76:ce:cd:
         84:54:25:7c:9c:a7:12:ee:c6:cd:34:8f:49:30:c4:ca:e6:d0:
         c0:3c:a4:9a:ca:db:9f:20:e0:10:68:5a:d5:4a:47:4e:34:9a:
         06:cf:15:eb:d6:6a:89:ce:b9:5a:d7:c2:0c:9f:24:e2:6e:4e:
         a2:11:ba:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:34:48 2025 by rpki-client