Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/b5f80d-2a7d-4bab-aaaa-bf264a215b32/1/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.mft
File:                     ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.mft (raw, json)
Hash identifier:          6oHPEWDjlKtjnwWLVmMz4KHb3qKR311yI538L1NeAvg=
Subject key identifier:   3F:7A:3B:58:B8:AB:9B:50:B7:46:B2:00:63:62:F6:EC:85:E3:C8:6B
Authority key identifier: 9E:D7:68:29:BA:63:14:A0:35:FD:A7:99:FC:03:70:33:66:57:08:3E
Certificate issuer:       /CN=9ed76829ba6314a035fda799fc0370336657083e
Certificate serial:       01976EF51AF9260877FB79324DA12D994579
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/b5f80d-2a7d-4bab-aaaa-bf264a215b32/1/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.mft
Manifest number:          0FFF
Signing time:             Sat 14 Jun 2025 15:00:46 +0000
Manifest this update:     Sat 14 Jun 2025 15:00:46 +0000
Manifest next update:     Sun 15 Jun 2025 15:00:46 +0000
Files and hashes:         1: 2naHUDZ4rUS9i5KxyQQU_cI4UeA.roa (hash: J3JrxG9uyiuiyL3c5u4IhFuOvuYSNgMUze1zOm1bwO0=)
                          2: ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.crl (hash: g0k8MRewsSeLdaK72AYob+hRW3YDt/wMc3quZ/vESqo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/b5f80d-2a7d-4bab-aaaa-bf264a215b32/1/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/b5f80d-2a7d-4bab-aaaa-bf264a215b32/1/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 10:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6e:f5:1a:f9:26:08:77:fb:79:32:4d:a1:2d:99:45:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ed76829ba6314a035fda799fc0370336657083e
        Validity
            Not Before: Jun 14 15:00:46 2025 GMT
            Not After : Jun 15 15:00:46 2025 GMT
        Subject: CN=3f7a3b58b8ab9b50b746b2006362f6ec85e3c86b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:56:53:bf:11:14:da:f2:5f:cd:55:b7:82:7e:
                    6c:14:12:af:fe:73:fb:f4:8d:60:58:0a:3e:8a:7c:
                    6e:4b:e6:4c:13:35:d5:43:24:a8:90:16:74:25:1d:
                    2d:db:d0:6a:71:ac:a4:f0:2c:7d:ba:68:75:48:45:
                    c6:57:c3:f8:84:d6:04:d1:e1:16:6b:ba:bf:5c:73:
                    1d:58:ee:1a:65:34:05:ec:3a:22:60:d9:c8:4d:c5:
                    ca:3c:c0:2e:27:fd:00:14:c7:2c:55:cb:39:86:8d:
                    05:1e:f0:ce:f6:db:f5:8c:fd:85:2c:67:65:c3:34:
                    a7:e3:12:81:51:0c:df:64:ac:c4:23:a8:e9:10:f3:
                    2c:2e:b4:df:10:50:41:d0:6c:6a:6d:d7:de:2d:1f:
                    4d:e8:e5:b9:ce:20:6b:99:17:93:d5:49:9d:91:ca:
                    da:58:14:b2:e9:1d:be:27:d7:03:c6:d4:17:e5:bb:
                    1c:17:bb:e3:ef:20:78:93:22:91:3c:96:c0:55:fc:
                    6f:9a:01:79:b1:55:36:4d:c4:27:6a:a1:02:1a:0d:
                    da:39:8a:64:02:05:28:e9:35:92:25:fb:5f:e0:39:
                    94:e6:2c:f7:78:16:4c:98:97:02:29:7d:16:02:cb:
                    14:c5:a9:d1:f1:67:d0:0f:e4:16:26:a3:fd:a7:52:
                    40:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:7A:3B:58:B8:AB:9B:50:B7:46:B2:00:63:62:F6:EC:85:E3:C8:6B
            X509v3 Authority Key Identifier:
                keyid:9E:D7:68:29:BA:63:14:A0:35:FD:A7:99:FC:03:70:33:66:57:08:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b5f80d-2a7d-4bab-aaaa-bf264a215b32/1/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b5f80d-2a7d-4bab-aaaa-bf264a215b32/1/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:9a:9b:98:30:f2:13:3e:e5:4c:f0:67:b7:04:8a:ae:7b:ea:
         36:34:f6:e8:8a:d9:4c:55:52:5b:8d:69:17:6a:48:dc:9b:b0:
         16:bf:a5:91:cd:ab:bc:1f:68:11:40:d8:61:12:76:f6:c5:6d:
         03:1c:7b:c5:f9:4a:85:7d:e4:78:49:37:31:c7:97:0f:0e:29:
         50:1f:5f:ee:a6:7a:45:99:0e:68:d8:05:16:4b:f1:38:15:ae:
         9f:4c:ae:0e:ac:ce:d8:14:42:be:ab:21:25:38:f9:df:32:fe:
         d8:a6:c8:e6:ba:a9:ef:ca:2e:1f:f4:97:e3:4b:98:7d:12:8d:
         43:7c:5f:d9:d3:5f:58:0e:2a:45:0c:36:eb:b9:67:91:46:0c:
         3b:f3:78:8e:fb:76:92:7e:c8:5c:e5:41:a4:95:5a:d4:86:9d:
         6b:cb:92:44:1d:49:cb:de:47:f8:de:50:b4:4e:25:77:7c:0d:
         f7:1a:86:91:f1:71:30:4a:6b:bf:14:62:88:b7:bd:e2:f6:00:
         ab:be:4d:95:c1:ae:05:d4:f7:73:66:53:fb:c0:1d:a4:fa:d3:
         15:3b:7c:a8:22:47:94:7f:e3:24:11:43:a6:92:83:a1:0f:b8:
         7e:e4:29:af:7e:a4:d2:eb:2d:a6:dc:d7:f6:93:c8:36:d5:fe:
         80:05:1d:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:57:04 2025 by rpki-client