Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/263f28-e029-46c8-815b-ea26c5644640/1/nJ4hbtlwrbWem9SinbNcIj1ivJY.mft
File:                     nJ4hbtlwrbWem9SinbNcIj1ivJY.mft (raw, json)
Hash identifier:          TnIircBYUdQGVaZgyBEHJnSML85xW6fXEfK9iXERBdU=
Subject key identifier:   00:A3:87:B9:B2:C3:F8:7A:B8:F4:87:85:EA:B0:9A:A2:60:AA:6A:E9
Authority key identifier: 9C:9E:21:6E:D9:70:AD:B5:9E:9B:D4:A2:9D:B3:5C:22:3D:62:BC:96
Certificate issuer:       /CN=9c9e216ed970adb59e9bd4a29db35c223d62bc96
Certificate serial:       01968511832B751DFB602CDFD9F4833273B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nJ4hbtlwrbWem9SinbNcIj1ivJY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/263f28-e029-46c8-815b-ea26c5644640/1/nJ4hbtlwrbWem9SinbNcIj1ivJY.mft
Manifest number:          0A33
Signing time:             Wed 30 Apr 2025 05:00:39 +0000
Manifest this update:     Wed 30 Apr 2025 05:00:39 +0000
Manifest next update:     Thu 01 May 2025 05:00:39 +0000
Files and hashes:         1: FjLc6iE1HCBUPWs6XDYXgHm0OF4.roa (hash: kIa9UaUqLSZ9J3sHBlTkTWhH3Zl6GZgevA7Dd1AIyEw=)
                          2: nJ4hbtlwrbWem9SinbNcIj1ivJY.crl (hash: 8tiScPqBx5mpgDUo3hVlO7SGHZhvxntD8SRoB76WsvU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/263f28-e029-46c8-815b-ea26c5644640/1/nJ4hbtlwrbWem9SinbNcIj1ivJY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/263f28-e029-46c8-815b-ea26c5644640/1/nJ4hbtlwrbWem9SinbNcIj1ivJY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nJ4hbtlwrbWem9SinbNcIj1ivJY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 May 2025 05:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:85:11:83:2b:75:1d:fb:60:2c:df:d9:f4:83:32:73:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c9e216ed970adb59e9bd4a29db35c223d62bc96
        Validity
            Not Before: Apr 30 05:00:39 2025 GMT
            Not After : May  1 05:00:39 2025 GMT
        Subject: CN=00a387b9b2c3f87ab8f48785eab09aa260aa6ae9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:52:98:80:26:8b:de:74:ed:49:99:9d:67:e5:
                    f9:b4:a2:c4:df:1c:c7:fd:5a:8c:7c:ea:22:c3:92:
                    c5:c2:2a:20:08:8f:b7:c3:79:e8:05:2a:4d:aa:b1:
                    0f:f3:cd:56:27:b8:0a:42:16:92:74:02:ca:ae:45:
                    f7:c9:38:6b:17:d0:35:80:37:bb:65:13:44:83:7f:
                    34:07:ec:70:8b:a5:8c:23:b3:8e:f2:70:42:b8:43:
                    78:5f:38:2d:e4:f4:10:a1:29:36:97:f0:df:52:5a:
                    42:37:0c:c7:c9:cb:02:fb:4a:a1:a9:3e:f7:bf:7a:
                    4f:36:2a:d7:f4:35:66:90:bf:3d:29:bf:53:27:d3:
                    d1:84:d9:9e:dd:9b:b6:49:4f:16:13:92:86:96:c3:
                    7b:12:dd:7c:50:05:16:71:f3:0e:d5:5e:c6:81:32:
                    e4:90:f1:9e:df:6f:aa:db:5c:e0:6f:43:58:56:ee:
                    a1:2c:e0:ae:bd:70:30:ea:5b:30:9f:e6:c0:f9:f2:
                    e4:db:29:df:94:f7:c3:e3:0c:56:03:96:35:9c:0a:
                    85:eb:1b:e4:e5:34:c4:88:ed:c7:a3:06:8b:25:97:
                    e9:b2:92:24:6b:85:d9:ef:17:11:32:e1:93:70:34:
                    b5:bc:c9:43:42:0c:82:33:02:0b:61:9f:70:fe:0b:
                    17:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:A3:87:B9:B2:C3:F8:7A:B8:F4:87:85:EA:B0:9A:A2:60:AA:6A:E9
            X509v3 Authority Key Identifier:
                keyid:9C:9E:21:6E:D9:70:AD:B5:9E:9B:D4:A2:9D:B3:5C:22:3D:62:BC:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nJ4hbtlwrbWem9SinbNcIj1ivJY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/263f28-e029-46c8-815b-ea26c5644640/1/nJ4hbtlwrbWem9SinbNcIj1ivJY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/263f28-e029-46c8-815b-ea26c5644640/1/nJ4hbtlwrbWem9SinbNcIj1ivJY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:9b:a3:a6:7f:a8:d6:b1:31:cc:9a:b6:03:5f:bd:77:48:42:
         ac:49:3e:53:b9:6b:41:a8:d8:9c:57:0b:2f:20:4b:59:02:50:
         71:f7:83:b5:9f:07:88:05:2c:19:56:dc:77:96:bb:e1:56:5e:
         64:d7:10:e4:b8:d4:ac:b5:ff:36:b7:dd:ec:ae:1f:71:7f:ac:
         e8:53:a1:57:bf:90:95:74:4e:2a:a6:99:47:51:ca:0e:8c:dc:
         d1:33:6b:62:41:60:ae:e1:cf:11:9a:e3:17:33:7b:04:ad:f8:
         e6:f0:69:c2:6a:a3:b3:a3:d0:68:39:70:bf:ba:db:14:a0:93:
         14:35:a6:dd:97:7c:d6:c4:dc:c1:19:90:e2:47:2d:26:b7:2b:
         8b:b0:23:c7:f6:31:49:73:7b:21:d2:3d:8e:14:60:8d:90:86:
         04:78:f8:1f:34:f5:fc:31:b0:18:ae:e2:a7:1a:40:38:f3:44:
         d7:31:c4:2e:e1:29:19:49:26:37:66:c6:bd:61:68:75:09:14:
         90:b2:ce:f8:94:0a:72:14:83:e2:58:eb:ad:95:93:ee:91:c4:
         55:ec:97:71:35:af:e9:28:1d:30:1c:f6:c9:54:f1:69:72:e1:
         9a:e6:9b:c2:49:82:9e:2c:6a:f6:b0:0c:8f:16:6e:e1:99:f1:
         c6:4f:0d:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 11:50:16 2025 by rpki-client