Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.mft
File:                     Nxi3NDSb8yfZRTuWUB5EsZLlUUI.mft (raw, json)
Hash identifier:          o5NUOQp8K8Drhqcoddg8r7B+KtlQP08qVJLmnjDpqrY=
Subject key identifier:   77:F9:24:E1:E3:A6:63:D6:75:77:38:3E:BF:16:36:A0:8C:F8:DB:91
Authority key identifier: 37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42
Certificate issuer:       /CN=3718b734349bf327d9453b96501e44b192e55142
Certificate serial:       019769298BBD125532DFD0C49ED0CE1B2A26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.mft
Manifest number:          15C1
Signing time:             Fri 13 Jun 2025 12:00:19 +0000
Manifest this update:     Fri 13 Jun 2025 12:00:19 +0000
Manifest next update:     Sat 14 Jun 2025 12:00:19 +0000
Files and hashes:         1: 2pr-_P6iDqjAxA7czCmuypqm4EU.roa (hash: ej7V7a6TRJZtAHiPijn6nzDCvVHx84y+/K94PPrq0S8=)
                          2: 6Wce0HwyXHqQ5XvowobWiCGASj8.roa (hash: JFU8RjnJrDHjFA6pQUpW2/JnNtPldCW7iPpp3L9hrfw=)
                          3: 7ew9vmcgcgJuvHxbbgCDhgBggzg.roa (hash: u0wbp7PqNlKFQlgee1VKfFdKJWs/LztnZMwBMRcyX9U=)
                          4: GgUE_XL4Sq39Xxf8zIW_JumJGGM.roa (hash: XcS1ZuCgKYC4lujI/f/yKgFd5if0KehDM2OJ7bBb2dY=)
                          5: JoOoe9F8Z063iNBEpC6jMcj6cvw.roa (hash: gvXwU4aSDxLfKA86My3w9LYcQE9/lTQ4D4PHnAZ09Hc=)
                          6: Nxi3NDSb8yfZRTuWUB5EsZLlUUI.crl (hash: cICOwHnh3H6VHGZN+eLEY6lJHRbiLNoOcb2m4BtDn40=)
                          7: cM_tRkIVV-yV7xbBDk0jpANibHU.roa (hash: xH3UvGA+cwpvKtSHxMEbc6CFPMgBoyUHriV0CyZHYkI=)
                          8: tqu-QanjX6tyJHx__ZdrkRcFQsk.roa (hash: OLKkbSnqqo0RLnA2/zbv4ebHR3Sjd16V0KLb7Bt5pzw=)
                          9: xKARJqa_okDPNZYsEYbBqhi6oaQ.roa (hash: 55gOZL5S3KKSH+1WYi46u5J13NnuzjyEmj8BjI7hTlI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 12:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:29:8b:bd:12:55:32:df:d0:c4:9e:d0:ce:1b:2a:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3718b734349bf327d9453b96501e44b192e55142
        Validity
            Not Before: Jun 13 12:00:19 2025 GMT
            Not After : Jun 14 12:00:19 2025 GMT
        Subject: CN=77f924e1e3a663d67577383ebf1636a08cf8db91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:14:f7:9b:0d:19:1b:ca:d0:34:7b:d6:07:47:
                    31:f3:28:62:b2:45:bb:e8:e0:1f:49:c4:28:a3:d4:
                    3e:fc:e7:c7:b8:2c:73:1b:f8:52:54:d5:c3:40:0d:
                    2e:20:6f:a9:80:16:49:49:8b:57:0c:6a:74:66:6a:
                    8b:4d:65:ca:f5:5d:da:6b:0b:f2:ef:76:12:16:68:
                    db:08:58:c8:34:89:3f:fb:81:cc:fd:ee:a0:23:5e:
                    82:f1:ea:e1:02:4e:a6:b0:4b:ab:41:93:fe:f8:90:
                    39:17:ac:1c:dd:8d:4d:41:85:17:8a:3f:1b:ec:6e:
                    0c:06:c3:b4:02:59:a7:f1:83:c3:06:d3:82:9b:b8:
                    9c:62:9c:11:31:05:00:7e:f1:14:b9:65:0f:dd:57:
                    d2:ff:3c:d2:32:6d:9c:03:df:29:2e:3b:ef:04:87:
                    b3:76:09:17:ec:fb:ce:60:38:48:51:85:37:88:ed:
                    77:73:35:90:1a:d7:3c:02:d3:26:d5:17:e3:de:c4:
                    30:e7:05:bf:88:35:de:49:d8:b9:d9:fb:a8:78:c6:
                    64:88:f1:2d:91:1f:6b:2b:ac:6a:a8:4d:7d:27:89:
                    34:95:f6:75:64:bd:f1:06:f5:64:56:bd:e9:a2:a8:
                    38:f7:8f:4a:97:a6:1d:8b:d1:58:ef:42:88:a5:ae:
                    63:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:F9:24:E1:E3:A6:63:D6:75:77:38:3E:BF:16:36:A0:8C:F8:DB:91
            X509v3 Authority Key Identifier:
                keyid:37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:1c:a8:59:05:42:70:91:a3:b7:e6:9d:e0:98:bc:db:16:48:
         2d:8b:c2:af:c9:54:20:38:d7:31:cc:74:ec:1a:0a:94:50:9f:
         6f:c4:7a:e9:f4:76:39:b7:8e:18:ca:e6:1b:a3:68:86:54:f9:
         c7:02:e6:82:f6:57:74:4f:fd:43:08:90:2d:2a:a2:bd:2e:14:
         4d:bb:c5:f9:ab:16:a9:d5:b1:bc:c4:dd:e7:ca:58:55:4d:c9:
         5e:96:44:d4:93:bb:56:ff:c2:74:3b:33:3c:77:88:5f:7d:29:
         42:cc:f2:cc:52:6c:4b:5a:f0:24:44:6a:c3:df:2d:30:3a:15:
         77:95:9b:16:57:14:e5:c6:13:93:da:e0:7e:ba:89:28:a4:65:
         fb:ed:cc:10:ef:8e:ec:af:c6:70:c6:25:e1:14:1e:25:09:53:
         ee:8c:86:69:c9:dc:a1:12:69:f8:76:a6:54:bd:94:7a:d0:13:
         f2:6e:12:33:27:68:08:8d:5e:98:ba:f1:e1:95:75:44:bf:c0:
         b8:4f:e1:70:75:27:98:d7:ce:69:42:b0:f4:c0:be:6d:6d:5c:
         e0:0b:12:9b:44:de:a7:e5:b5:5b:b5:f1:94:8a:da:62:f9:dc:
         8c:81:23:94:9e:2b:e2:49:7d:54:c7:f5:09:6b:7d:5a:20:81:
         28:dc:cf:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:01:49 2025 by rpki-client