Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/0ca59b-32d1-46a2-be48-0c33e1264d7f/1/u5NpM9w6oDs9qgbls4c_Nb2rVdI.mft
File:                     u5NpM9w6oDs9qgbls4c_Nb2rVdI.mft (raw, json)
Hash identifier:          q7rjuaKxPX2zQ1sTwBfO+KIedEoSmH3BUERGcsGyvYk=
Subject key identifier:   3E:0C:36:AE:AB:46:3F:42:A2:4C:58:F1:8C:6E:72:4C:68:4D:A4:CF
Authority key identifier: BB:93:69:33:DC:3A:A0:3B:3D:AA:06:E5:B3:87:3F:35:BD:AB:55:D2
Certificate issuer:       /CN=bb936933dc3aa03b3daa06e5b3873f35bdab55d2
Certificate serial:       0197703EFD1D0622F957BB07437F0F539F72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u5NpM9w6oDs9qgbls4c_Nb2rVdI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/0ca59b-32d1-46a2-be48-0c33e1264d7f/1/u5NpM9w6oDs9qgbls4c_Nb2rVdI.mft
Manifest number:          036B
Signing time:             Sat 14 Jun 2025 21:01:05 +0000
Manifest this update:     Sat 14 Jun 2025 21:01:05 +0000
Manifest next update:     Sun 15 Jun 2025 21:01:05 +0000
Files and hashes:         1: 1-d2k_vU-BkEDRcLdH-TIekg9VxQ.roa (hash: BNmjLGfRynwPkim2jPmJ7ZmYJ2M4K6NMjQ6A9ZIWsHE=)
                          2: u5NpM9w6oDs9qgbls4c_Nb2rVdI.crl (hash: nCx7eG5HpV8uWlmFFy+g8v3STzKGZu34NEKSdKmkGRk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/0ca59b-32d1-46a2-be48-0c33e1264d7f/1/u5NpM9w6oDs9qgbls4c_Nb2rVdI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/0ca59b-32d1-46a2-be48-0c33e1264d7f/1/u5NpM9w6oDs9qgbls4c_Nb2rVdI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u5NpM9w6oDs9qgbls4c_Nb2rVdI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 19:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:70:3e:fd:1d:06:22:f9:57:bb:07:43:7f:0f:53:9f:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb936933dc3aa03b3daa06e5b3873f35bdab55d2
        Validity
            Not Before: Jun 14 21:01:05 2025 GMT
            Not After : Jun 15 21:01:05 2025 GMT
        Subject: CN=3e0c36aeab463f42a24c58f18c6e724c684da4cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:11:8e:c5:ee:ac:7e:20:93:35:84:28:24:dc:
                    fd:f0:ba:4b:2d:a5:71:ee:4d:a0:f7:c6:fe:e3:e4:
                    c0:b4:60:4a:b0:f0:e9:8f:7a:1e:66:8e:6b:46:34:
                    97:f1:2b:62:d5:5f:86:e8:26:46:38:f5:26:a4:f7:
                    20:f8:56:46:80:cd:05:d7:d9:28:0c:01:0b:d3:04:
                    6b:8f:f1:78:5d:00:6b:f5:bc:d9:57:a5:44:25:d7:
                    c6:c7:94:4c:ef:f0:21:13:cc:af:92:68:ad:56:47:
                    d1:f7:45:4b:06:86:ef:e3:e6:d9:4e:27:7f:e2:6c:
                    d1:fb:63:9a:db:0c:e0:4d:c5:61:2b:cd:81:7f:1d:
                    8d:92:d8:81:56:c7:d6:8c:94:b0:a5:37:86:de:94:
                    83:e2:cc:54:36:79:24:85:11:88:dc:56:9c:f7:3a:
                    e3:ef:e0:4f:7f:62:93:b5:77:b8:3e:9f:fe:77:c7:
                    8a:c2:bc:01:46:c6:66:93:17:4f:59:77:19:e1:df:
                    86:54:24:3a:a8:07:bb:20:1e:09:08:98:2a:04:4f:
                    f6:ec:57:87:b8:ef:3d:56:74:08:d1:32:b9:43:33:
                    2d:76:6f:07:d6:4d:77:56:e9:11:e0:26:d0:0e:b6:
                    01:4f:a4:86:91:47:21:3d:59:57:4f:b8:16:c3:4e:
                    03:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:0C:36:AE:AB:46:3F:42:A2:4C:58:F1:8C:6E:72:4C:68:4D:A4:CF
            X509v3 Authority Key Identifier:
                keyid:BB:93:69:33:DC:3A:A0:3B:3D:AA:06:E5:B3:87:3F:35:BD:AB:55:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u5NpM9w6oDs9qgbls4c_Nb2rVdI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0ca59b-32d1-46a2-be48-0c33e1264d7f/1/u5NpM9w6oDs9qgbls4c_Nb2rVdI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0ca59b-32d1-46a2-be48-0c33e1264d7f/1/u5NpM9w6oDs9qgbls4c_Nb2rVdI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:e7:ba:2d:76:f7:49:91:52:61:1c:71:b0:72:5e:4e:27:fd:
         4f:02:05:ad:43:87:f0:97:04:81:dd:89:7f:89:09:cc:44:9f:
         74:4f:4f:07:15:71:af:fc:1d:67:03:d3:c0:30:58:45:82:9b:
         6a:ff:c6:fd:4d:6c:fc:bb:bd:0b:d7:e1:08:a2:84:41:04:83:
         a7:39:23:4a:9f:13:46:17:ba:58:23:4f:78:ef:2f:96:61:24:
         85:26:98:fa:ce:e6:fc:5b:62:db:54:56:fe:fb:89:a6:c0:8f:
         57:63:33:d7:cc:8d:24:b7:16:54:17:e7:e0:44:57:83:4e:9a:
         44:1a:12:4f:8f:85:a0:32:75:51:03:6c:08:98:e8:3e:d9:a2:
         9b:5b:78:cd:b2:b2:2a:23:fa:67:2c:85:90:e4:f1:8b:4f:f5:
         05:68:bc:69:89:6f:7f:bc:c2:b6:3f:09:98:f4:24:0e:1c:30:
         31:1d:90:bd:7f:59:da:7c:91:0a:d3:78:0b:55:f7:15:1a:61:
         ff:fb:e6:99:3a:80:ef:d4:7c:9c:00:8f:d0:e2:40:a1:b7:8f:
         7e:7a:e4:f3:92:06:83:59:24:3e:26:d5:35:a3:7f:1a:82:f9:
         1c:dc:21:fe:11:75:e8:4a:53:8f:09:fc:20:a6:80:a1:8c:c5:
         d6:b5:dc:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:13:44 2025 by rpki-client