Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/7e1d94-1854-473d-8753-18ded80b4b5d/1/NldL5q52zVI7M3h8-9tpJkJj0HQ.mft
File:                     NldL5q52zVI7M3h8-9tpJkJj0HQ.mft (raw, json)
Hash identifier:          rmtDiCPnoyV8VKsQqJhRbxEQDmKIWFgkUOGMM9hwGAc=
Subject key identifier:   50:1F:25:F5:BD:00:E4:40:4D:10:66:BE:60:B8:C1:B3:05:00:6D:AE
Authority key identifier: 36:57:4B:E6:AE:76:CD:52:3B:33:78:7C:FB:DB:69:26:42:63:D0:74
Certificate issuer:       /CN=36574be6ae76cd523b33787cfbdb69264263d074
Certificate serial:       0197B70EF6C6A5EF49B2BF5E30AE4D8BFEAB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NldL5q52zVI7M3h8-9tpJkJj0HQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/7e1d94-1854-473d-8753-18ded80b4b5d/1/NldL5q52zVI7M3h8-9tpJkJj0HQ.mft
Manifest number:          15B9
Signing time:             Sat 28 Jun 2025 15:01:40 +0000
Manifest this update:     Sat 28 Jun 2025 15:01:40 +0000
Manifest next update:     Sun 29 Jun 2025 15:01:40 +0000
Files and hashes:         1: 1-gyxFvtsdFvYTZX0Y9fbT2PSGFM.roa (hash: EABdk5cioKlboVX+5roxKxOS78qf+VdGIdGNtobQ0pE=)
                          2: KArVYyPO9fBEhTTRJ1tDthlJCOw.roa (hash: a0gp1BPnbKmQpx9TqJhgPqer5KuegL1mEbSjNdCn0ek=)
                          3: NldL5q52zVI7M3h8-9tpJkJj0HQ.crl (hash: 1yLDh8/Bec2eKg6b32ZfnIDJ9d0yl1OHEsciVCCIlt4=)
                          4: SErRHgSbJegvTKQp5_vKPuL-I0M.roa (hash: 5izdqURGD+Gcq0q1le3LSPtQmkAtZ+szcc8AfWWlrxM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/7e1d94-1854-473d-8753-18ded80b4b5d/1/NldL5q52zVI7M3h8-9tpJkJj0HQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/7e1d94-1854-473d-8753-18ded80b4b5d/1/NldL5q52zVI7M3h8-9tpJkJj0HQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NldL5q52zVI7M3h8-9tpJkJj0HQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0e:f6:c6:a5:ef:49:b2:bf:5e:30:ae:4d:8b:fe:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36574be6ae76cd523b33787cfbdb69264263d074
        Validity
            Not Before: Jun 28 15:01:40 2025 GMT
            Not After : Jun 29 15:01:40 2025 GMT
        Subject: CN=501f25f5bd00e4404d1066be60b8c1b305006dae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:49:e0:38:5e:26:cf:13:4f:ed:d3:94:7f:5f:
                    f5:fb:69:be:55:04:31:c4:6c:10:f2:53:87:ce:0c:
                    de:1c:6e:4e:e1:31:62:62:b3:94:e6:d4:e2:8f:c2:
                    b3:de:71:cf:65:8f:c7:a4:e4:40:5a:6a:4a:8c:d7:
                    17:3f:2e:82:6b:5c:26:5a:17:87:6c:8e:69:f4:0d:
                    e5:e6:b7:b4:4a:c3:d6:d2:15:ad:dc:ce:2e:21:3a:
                    63:36:fb:b9:4c:19:e6:46:20:5e:57:6e:f8:92:61:
                    39:8b:24:e0:80:cf:f1:85:00:23:93:16:fe:60:81:
                    04:1f:e5:bf:3f:35:ef:78:c0:11:4e:c1:18:83:2b:
                    2c:5c:0c:a6:41:af:48:ee:7f:49:85:1a:35:10:fc:
                    14:0e:d3:1a:f8:bc:dc:b5:d6:a7:f2:a3:c8:e9:62:
                    a2:c9:9a:e7:6a:53:3a:ab:af:e5:82:93:9b:56:8e:
                    a6:9a:5c:75:08:bd:2e:1e:28:62:cd:5d:17:fb:42:
                    a6:e0:fb:b1:93:ac:f7:05:43:d8:fc:33:38:5c:76:
                    5b:08:0d:b6:f3:fe:63:a4:73:ce:b4:db:7e:50:6a:
                    b1:11:6e:f5:43:26:0f:73:2e:5e:fd:8e:5b:61:28:
                    3c:fb:c9:23:d7:31:6a:36:16:0c:ab:11:e8:6c:06:
                    4c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:1F:25:F5:BD:00:E4:40:4D:10:66:BE:60:B8:C1:B3:05:00:6D:AE
            X509v3 Authority Key Identifier:
                keyid:36:57:4B:E6:AE:76:CD:52:3B:33:78:7C:FB:DB:69:26:42:63:D0:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NldL5q52zVI7M3h8-9tpJkJj0HQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/7e1d94-1854-473d-8753-18ded80b4b5d/1/NldL5q52zVI7M3h8-9tpJkJj0HQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/7e1d94-1854-473d-8753-18ded80b4b5d/1/NldL5q52zVI7M3h8-9tpJkJj0HQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:c6:91:ce:d4:2c:fd:ef:df:d0:2d:a2:3b:9d:cd:12:28:8d:
         79:a6:57:bb:5a:ac:2c:3a:3c:15:cd:92:1f:7c:3e:3b:72:2a:
         6c:3d:2a:58:dd:56:1b:ff:6a:f1:db:d7:e8:cc:1c:7f:61:87:
         73:b5:d7:b1:7b:4e:1e:be:cd:fd:65:d4:b5:d8:c8:5d:53:7f:
         48:97:38:7a:18:86:9b:79:98:34:1c:83:66:06:a4:37:6a:c8:
         4a:c7:47:21:1b:c9:61:94:14:dc:90:81:52:cf:47:03:3f:dc:
         c9:e3:5a:a7:43:b3:85:a4:c1:d2:03:25:c1:ba:47:5e:1a:a0:
         85:2f:40:3b:39:5a:51:81:88:49:2d:03:36:41:bb:af:67:eb:
         af:cc:aa:bb:fa:ea:b1:b3:d3:d9:e1:a6:9a:99:f8:66:2d:35:
         9d:d5:43:00:3f:f4:51:fc:eb:51:54:46:eb:75:5f:e8:ae:ae:
         ac:d4:e0:85:57:8a:02:92:0d:28:e8:11:a2:e2:57:b9:42:b1:
         df:98:37:86:c5:3a:9a:b3:20:78:6c:cb:9f:67:63:58:de:7f:
         5e:06:ad:fd:1c:ab:78:fb:f7:ef:75:56:65:e9:68:8e:db:3a:
         04:f3:9f:a7:b8:c3:a6:12:95:64:98:a5:2b:96:fe:b1:ac:a9:
         b2:58:45:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:57:23 2025 by rpki-client