Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/NLQZ-koKFgUYgxjN9KIESZKFO5U.mft
File:                     NLQZ-koKFgUYgxjN9KIESZKFO5U.mft (raw, json)
Hash identifier:          QQR5RBkp3Z67Oue4lfaVp368q8BTRsKUH9jC4Ejab+4=
Subject key identifier:   27:25:9C:73:75:FC:0D:E9:E8:54:21:E8:D1:BB:C6:DE:63:71:31:90
Authority key identifier: 34:B4:19:FA:4A:0A:16:05:18:83:18:CD:F4:A2:04:49:92:85:3B:95
Certificate issuer:       /CN=34b419fa4a0a1605188318cdf4a2044992853b95
Certificate serial:       01977075F1488C46D1E5C5723494D50C7A58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NLQZ-koKFgUYgxjN9KIESZKFO5U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/NLQZ-koKFgUYgxjN9KIESZKFO5U.mft
Manifest number:          0E54
Signing time:             Sat 14 Jun 2025 22:01:07 +0000
Manifest this update:     Sat 14 Jun 2025 22:01:07 +0000
Manifest next update:     Sun 15 Jun 2025 22:01:07 +0000
Files and hashes:         1: CNQCSVKEMGXZWYhuFwFlfeJh3Us.roa (hash: HUYQM19IzL3twBwaH+2KXeSqoub/kejTXefcV/fEL14=)
                          2: CNv0NdNZKIhaMEB-_zcwx5XHpgI.roa (hash: jSc4O0ONF5PwUEe8AoTXbFWewQ1vQ1toZjhU7yhjZAU=)
                          3: NLQZ-koKFgUYgxjN9KIESZKFO5U.crl (hash: Z8aZzOmP7wGOjaQlELUh4p1Aqlcf7bHIpPLXhTSCPgg=)
                          4: wig6KC4gSVw0HyIKRBc2xTnuVN4.roa (hash: EHt3EBj8Qls7cfEcrr19uaUc9VJjWJHcYHVlVYE7DsU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/NLQZ-koKFgUYgxjN9KIESZKFO5U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/NLQZ-koKFgUYgxjN9KIESZKFO5U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NLQZ-koKFgUYgxjN9KIESZKFO5U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 19:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:70:75:f1:48:8c:46:d1:e5:c5:72:34:94:d5:0c:7a:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34b419fa4a0a1605188318cdf4a2044992853b95
        Validity
            Not Before: Jun 14 22:01:07 2025 GMT
            Not After : Jun 15 22:01:07 2025 GMT
        Subject: CN=27259c7375fc0de9e85421e8d1bbc6de63713190
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:43:b9:52:67:79:e7:92:3c:c8:d5:07:22:62:
                    46:18:56:3d:2b:d8:e5:9f:ea:05:5a:ea:c3:9c:9f:
                    fb:58:9b:5c:52:de:15:44:18:54:59:4d:99:25:0c:
                    0f:83:9d:ba:9c:19:b0:ae:de:8a:a3:31:0a:a9:0f:
                    3e:9c:e4:65:41:ce:61:dc:d9:90:8f:34:79:89:4e:
                    b7:fa:f2:4b:11:91:77:2d:f2:d4:2e:ca:e0:6e:86:
                    63:5c:7c:7e:de:e6:e2:59:f6:89:8e:bd:70:67:a2:
                    16:4d:87:05:5e:e7:30:07:b9:c6:15:b6:0b:36:4c:
                    ed:f0:87:51:fa:ce:36:cd:4a:a9:33:65:84:20:6e:
                    03:e7:73:ad:1a:67:c0:22:67:99:0e:4d:94:e9:75:
                    73:32:93:00:4f:9d:7c:28:3f:ce:29:b7:31:3d:dd:
                    9d:af:e2:3c:6d:7e:73:04:a3:5d:67:c6:66:61:f9:
                    8f:ac:c4:46:a8:e0:d3:86:40:13:84:82:ae:12:fc:
                    ea:27:b4:1c:f2:7f:5b:58:13:b2:8c:8a:77:85:c2:
                    ed:26:29:ec:7a:78:b4:7a:f9:b4:d4:55:67:0b:11:
                    c5:85:51:4b:f0:9e:1f:e8:e0:41:fd:44:65:d7:d5:
                    2f:dc:87:34:69:fd:56:7c:25:6c:9c:d2:b0:10:14:
                    ac:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:25:9C:73:75:FC:0D:E9:E8:54:21:E8:D1:BB:C6:DE:63:71:31:90
            X509v3 Authority Key Identifier:
                keyid:34:B4:19:FA:4A:0A:16:05:18:83:18:CD:F4:A2:04:49:92:85:3B:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NLQZ-koKFgUYgxjN9KIESZKFO5U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/NLQZ-koKFgUYgxjN9KIESZKFO5U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/NLQZ-koKFgUYgxjN9KIESZKFO5U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:f6:10:13:cf:fc:ca:ef:2c:07:ce:91:3f:d8:cf:da:6e:8f:
         85:9b:ea:a4:f3:19:c0:48:af:5a:20:09:3a:d4:c0:a7:1b:44:
         e4:ec:b2:33:fc:ce:09:79:6a:7b:6c:b0:5b:47:f5:f6:6f:2e:
         e4:40:c9:6d:ad:1c:46:1b:35:90:d2:dc:b4:0c:5b:bd:6c:d9:
         94:ef:c3:53:58:32:d7:e3:ea:19:b3:d2:e1:4a:7e:fd:b1:4d:
         2d:c9:11:d5:f8:d8:3a:79:d2:58:8f:16:2c:72:44:89:89:54:
         a3:0f:bb:75:e4:09:b8:83:ff:38:50:ec:82:cf:e5:60:1c:99:
         f4:d6:16:bf:f4:03:09:71:16:8a:c4:87:03:e4:96:bf:82:c0:
         5c:cf:b9:17:56:c6:3a:b0:65:bc:95:16:4e:d9:24:42:2a:99:
         95:cb:64:6e:69:6d:d8:92:f0:ad:ed:e1:8e:d3:89:2e:8c:4b:
         65:c6:1e:1c:99:fe:37:8c:5f:49:df:b7:35:0b:3d:12:de:83:
         07:0a:58:94:8a:15:ed:2f:7a:cd:26:87:86:33:ee:e5:d7:48:
         c4:b9:c1:84:87:1c:3d:9f:a5:9c:e7:9f:ca:52:01:c1:d2:fa:
         4a:a9:b4:e7:17:57:fc:76:03:0e:11:8b:cb:44:71:a9:ed:32:
         48:a0:75:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:23:55 2025 by rpki-client