Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/c429df-af25-4cce-bed7-d9b07fbbbbdb/1/NmIEOjHdm9K3yxhifrS6wRhAzhY.mft
File:                     NmIEOjHdm9K3yxhifrS6wRhAzhY.mft (raw, json)
Hash identifier:          i5JVtWTglWf8tPj1a+jWKxlZafqH42BpcID0gMyrUkw=
Subject key identifier:   3C:BD:00:51:F0:7A:94:1B:17:7B:CF:11:4F:6D:D9:78:8C:BF:65:EC
Authority key identifier: 36:62:04:3A:31:DD:9B:D2:B7:CB:18:62:7E:B4:BA:C1:18:40:CE:16
Certificate issuer:       /CN=3662043a31dd9bd2b7cb18627eb4bac11840ce16
Certificate serial:       01977A5416DF964630160207AF96BBA381A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NmIEOjHdm9K3yxhifrS6wRhAzhY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/c429df-af25-4cce-bed7-d9b07fbbbbdb/1/NmIEOjHdm9K3yxhifrS6wRhAzhY.mft
Manifest number:          12A5
Signing time:             Mon 16 Jun 2025 20:00:20 +0000
Manifest this update:     Mon 16 Jun 2025 20:00:20 +0000
Manifest next update:     Tue 17 Jun 2025 20:00:20 +0000
Files and hashes:         1: NmIEOjHdm9K3yxhifrS6wRhAzhY.crl (hash: s4lupsthegZDC/1g+uRM6GxCJgyLcjUdukPDBxKN100=)
                          2: WD0FQcbHEB-uoxf6girnu5JNKHw.roa (hash: iXRex71CWC3wFm8Z6DiGxb32qluuOPal75ek37KzREs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/c429df-af25-4cce-bed7-d9b07fbbbbdb/1/NmIEOjHdm9K3yxhifrS6wRhAzhY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/c429df-af25-4cce-bed7-d9b07fbbbbdb/1/NmIEOjHdm9K3yxhifrS6wRhAzhY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NmIEOjHdm9K3yxhifrS6wRhAzhY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 20:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:7a:54:16:df:96:46:30:16:02:07:af:96:bb:a3:81:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3662043a31dd9bd2b7cb18627eb4bac11840ce16
        Validity
            Not Before: Jun 16 20:00:20 2025 GMT
            Not After : Jun 17 20:00:20 2025 GMT
        Subject: CN=3cbd0051f07a941b177bcf114f6dd9788cbf65ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:43:d9:29:55:ae:17:93:58:fc:35:e7:4b:22:
                    c3:33:0e:25:4c:1c:44:2c:1c:11:40:9a:2e:4c:68:
                    bf:46:be:87:e8:a8:03:05:04:b7:4c:f3:b9:2e:3f:
                    83:9a:5b:d8:04:56:3b:71:4b:92:ae:b3:47:6c:a0:
                    71:f9:81:34:82:dc:d8:84:8f:60:e7:07:94:31:b2:
                    65:70:b5:f8:7a:55:f3:15:81:81:e4:07:ad:86:33:
                    c4:28:d0:0b:b8:60:99:db:0a:70:69:7b:ef:fd:39:
                    b1:d0:55:f0:30:62:4a:38:52:33:a4:a4:24:10:3a:
                    8c:2b:22:51:15:7f:10:9e:a2:60:57:96:8a:01:59:
                    7c:f6:16:07:f8:b3:6b:ee:69:31:76:4b:81:f6:99:
                    e1:84:c1:d8:5a:5f:ba:24:cb:a5:e3:4d:77:cb:d0:
                    a4:0e:63:71:9f:82:04:52:27:c3:cf:fe:24:f3:26:
                    93:68:32:eb:80:92:95:d9:d9:de:5d:23:3f:8a:a9:
                    07:36:f3:af:f1:64:c0:36:59:46:f3:91:f5:94:1c:
                    80:6f:93:00:ca:87:ad:46:57:02:4f:d5:6e:75:2d:
                    4e:5d:dd:51:95:36:f1:6d:ab:b9:0d:a0:d8:63:75:
                    a5:30:76:db:ab:87:58:b2:2e:00:db:8b:5b:1b:27:
                    f5:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:BD:00:51:F0:7A:94:1B:17:7B:CF:11:4F:6D:D9:78:8C:BF:65:EC
            X509v3 Authority Key Identifier:
                keyid:36:62:04:3A:31:DD:9B:D2:B7:CB:18:62:7E:B4:BA:C1:18:40:CE:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NmIEOjHdm9K3yxhifrS6wRhAzhY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/c429df-af25-4cce-bed7-d9b07fbbbbdb/1/NmIEOjHdm9K3yxhifrS6wRhAzhY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/c429df-af25-4cce-bed7-d9b07fbbbbdb/1/NmIEOjHdm9K3yxhifrS6wRhAzhY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:da:c9:54:8c:eb:83:32:76:50:47:b1:79:8a:ce:78:5f:ab:
         43:6b:f6:c8:87:a1:3e:77:3c:24:af:43:37:dc:25:d3:f3:7e:
         26:5f:d7:d5:d6:ed:fa:3a:30:6e:ef:4a:28:65:ce:4c:46:18:
         04:d6:61:ed:98:54:ee:1b:9a:5e:26:26:84:b6:e0:a8:a5:7a:
         76:06:7a:76:f6:e3:b8:d4:2f:8f:33:27:f1:64:ee:43:df:df:
         c9:54:55:4f:e7:f0:2b:61:00:94:61:1a:60:e2:16:77:27:3b:
         f1:8c:97:d4:30:67:ba:b0:f9:c3:77:6f:6b:ad:21:98:54:ce:
         42:6e:64:16:27:5a:78:32:68:17:bb:00:8a:0a:dc:de:84:a8:
         0e:1b:aa:8b:14:ab:13:cc:29:8d:d2:44:d5:4d:d3:a2:57:c1:
         4b:c5:a7:78:5e:76:0a:77:f0:62:07:0c:d9:d2:9b:bd:cd:45:
         77:99:32:c5:18:7f:1c:4b:c9:ae:cf:8a:5a:b0:ed:6a:e6:a9:
         fc:26:b0:06:0f:5d:d9:b0:cb:b0:a0:35:e9:27:2f:50:ee:09:
         5d:b2:50:f7:f0:83:0b:7b:15:aa:16:6b:65:fc:da:43:c8:4c:
         40:d9:2e:ba:2e:c6:85:b2:47:39:f2:6a:5d:02:2c:85:07:8c:
         5c:43:e9:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 01:30:11 2025 by rpki-client