Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/0c8db6-71fd-4320-a0dc-186080ed9002/1/NrzwGgmAWLhROxb9nksbI4_Nb1g.mft
File:                     NrzwGgmAWLhROxb9nksbI4_Nb1g.mft (raw, json)
Hash identifier:          vSmNO13D3w+hwXMtW/6fAZsu2SeE3hd6xCosdC73FoI=
Subject key identifier:   B7:E1:AE:68:7A:4D:6F:E0:5A:A4:96:F2:B0:B2:61:50:84:BB:12:2F
Authority key identifier: 36:BC:F0:1A:09:80:58:B8:51:3B:16:FD:9E:4B:1B:23:8F:CD:6F:58
Certificate issuer:       /CN=36bcf01a098058b8513b16fd9e4b1b238fcd6f58
Certificate serial:       019678689F541944C0474B6E994427C4D194
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NrzwGgmAWLhROxb9nksbI4_Nb1g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/0c8db6-71fd-4320-a0dc-186080ed9002/1/NrzwGgmAWLhROxb9nksbI4_Nb1g.mft
Manifest number:          BD
Signing time:             Sun 27 Apr 2025 18:00:44 +0000
Manifest this update:     Sun 27 Apr 2025 18:00:44 +0000
Manifest next update:     Mon 28 Apr 2025 18:00:44 +0000
Files and hashes:         1: AfyofESsKziO9R3ILuO1YYWUdu8.roa (hash: nUxsrIBKiuHD8xm10VmDY98apv5y2MdixCNIXLJz49Q=)
                          2: NrzwGgmAWLhROxb9nksbI4_Nb1g.crl (hash: tSsK2iXvWMO11Q1OxxKugMrmXOGygV69E7oNY0/ywh8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/0c8db6-71fd-4320-a0dc-186080ed9002/1/NrzwGgmAWLhROxb9nksbI4_Nb1g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/0c8db6-71fd-4320-a0dc-186080ed9002/1/NrzwGgmAWLhROxb9nksbI4_Nb1g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NrzwGgmAWLhROxb9nksbI4_Nb1g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:78:68:9f:54:19:44:c0:47:4b:6e:99:44:27:c4:d1:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36bcf01a098058b8513b16fd9e4b1b238fcd6f58
        Validity
            Not Before: Apr 27 18:00:44 2025 GMT
            Not After : Apr 28 18:00:44 2025 GMT
        Subject: CN=b7e1ae687a4d6fe05aa496f2b0b2615084bb122f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:0e:00:a1:55:bc:fa:e1:cf:eb:de:19:a2:50:
                    e4:d8:43:04:f4:93:d0:0d:79:3b:9e:28:9e:ee:5c:
                    92:88:26:eb:4f:8b:02:80:46:14:f7:04:ab:ff:c7:
                    61:07:c4:b5:49:04:51:52:89:e6:92:b7:e5:ce:db:
                    60:04:df:bc:69:77:fe:8f:f1:a2:79:37:bc:dd:ef:
                    2a:7f:1b:c8:fe:f9:ed:a8:fb:84:34:b0:06:eb:c6:
                    e7:16:37:3d:82:06:c8:a4:b9:7a:ed:ed:d2:92:a7:
                    76:d1:54:58:f6:fb:d2:05:d8:15:89:e1:29:f1:8a:
                    d0:88:c2:a2:97:69:ca:42:79:b7:73:b0:dc:be:e9:
                    7a:65:db:3c:b4:2b:6a:31:b2:e3:05:25:86:dd:f0:
                    55:32:11:83:1c:04:0a:0f:8e:44:7e:5b:19:f3:e6:
                    9a:a2:94:4e:65:5c:bb:6d:86:49:aa:6e:46:fc:84:
                    f4:35:95:1c:84:9b:b7:03:39:8d:e0:93:65:46:ea:
                    b2:10:d9:ed:fc:4e:3f:ed:4a:c3:72:f0:dc:c1:45:
                    91:56:38:46:49:5e:3f:5e:51:80:e4:37:d9:0b:0e:
                    f4:95:fd:f3:78:c4:ec:2e:16:81:25:6d:06:ac:61:
                    6b:05:5f:e5:84:c5:67:93:99:1c:53:b2:a2:5c:14:
                    48:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:E1:AE:68:7A:4D:6F:E0:5A:A4:96:F2:B0:B2:61:50:84:BB:12:2F
            X509v3 Authority Key Identifier:
                keyid:36:BC:F0:1A:09:80:58:B8:51:3B:16:FD:9E:4B:1B:23:8F:CD:6F:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NrzwGgmAWLhROxb9nksbI4_Nb1g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/0c8db6-71fd-4320-a0dc-186080ed9002/1/NrzwGgmAWLhROxb9nksbI4_Nb1g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/0c8db6-71fd-4320-a0dc-186080ed9002/1/NrzwGgmAWLhROxb9nksbI4_Nb1g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:4e:a1:57:52:13:f6:03:8c:8b:9a:4b:28:77:19:40:67:ef:
         f0:8c:3d:78:3f:f9:d4:e6:65:d6:9c:20:6d:4c:79:29:ab:26:
         f1:8f:8a:0c:51:2b:1d:68:d3:b3:53:e8:59:7d:33:0b:d9:ad:
         58:96:f3:ed:48:81:02:a1:99:45:28:db:97:74:fa:9b:95:84:
         38:70:27:62:4c:cb:75:24:16:cc:52:be:0f:b9:00:f3:93:a1:
         09:03:8c:ff:f6:a2:c3:18:ad:d3:35:8d:52:c3:01:2b:22:e7:
         55:30:ca:61:bb:03:44:f0:8e:98:e3:e9:18:0d:6a:28:e8:36:
         cf:a8:e7:45:91:8c:9e:6a:89:3d:57:49:ec:8e:b5:49:6a:42:
         2e:b8:6c:a8:49:47:dd:90:f3:c4:c4:36:fd:ce:8b:73:08:9e:
         88:57:5c:61:b7:6d:a0:a6:a0:14:03:a6:c8:a4:d0:67:3a:a3:
         11:25:4b:1c:0e:6d:a9:90:b5:3c:64:06:35:e5:10:f5:fd:e5:
         72:a7:59:52:f8:b1:8a:28:f7:c0:46:b5:8a:7b:5a:f3:ac:3b:
         db:a1:8b:cb:b3:00:23:a0:b5:bc:59:77:f8:b0:91:cb:3e:bd:
         a4:82:b4:49:74:11:fd:45:b8:70:d6:b5:e8:2b:0a:84:b8:b7:
         60:30:99:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:12:36 2025 by rpki-client