Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/0c37c3-9990-4596-99e9-dd5ffd531571/1/njSxhiccy4nF5Ysw5wvXQQnMKEo.mft
File:                     njSxhiccy4nF5Ysw5wvXQQnMKEo.mft (raw, json)
Hash identifier:          g7M4l/GqPToMUSsp8Z9HmU0z4bsHdP52ATjgCPSrTK0=
Subject key identifier:   4A:6D:79:05:DE:57:1B:57:69:02:A1:16:0B:09:DA:F5:6A:8E:E2:B9
Authority key identifier: 9E:34:B1:86:27:1C:CB:89:C5:E5:8B:30:E7:0B:D7:41:09:CC:28:4A
Certificate issuer:       /CN=9e34b186271ccb89c5e58b30e70bd74109cc284a
Certificate serial:       0196D709ED5908730E14E8110C93999564E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/njSxhiccy4nF5Ysw5wvXQQnMKEo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/0c37c3-9990-4596-99e9-dd5ffd531571/1/njSxhiccy4nF5Ysw5wvXQQnMKEo.mft
Manifest number:          0738
Signing time:             Fri 16 May 2025 03:01:14 +0000
Manifest this update:     Fri 16 May 2025 03:01:14 +0000
Manifest next update:     Sat 17 May 2025 03:01:14 +0000
Files and hashes:         1: fc7SRnOdKWMkfm35QHjuVP63CGg.roa (hash: F0XX2FyPiZEkuc7OrHzEK+HUvlKEvHyVCeFAG2nOzHc=)
                          2: njSxhiccy4nF5Ysw5wvXQQnMKEo.crl (hash: VzMWAbQpTs3BOz0h/sihDip+WiJk1hL+99vjErjS8MU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/0c37c3-9990-4596-99e9-dd5ffd531571/1/njSxhiccy4nF5Ysw5wvXQQnMKEo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/0c37c3-9990-4596-99e9-dd5ffd531571/1/njSxhiccy4nF5Ysw5wvXQQnMKEo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/njSxhiccy4nF5Ysw5wvXQQnMKEo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 17 May 2025 03:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:d7:09:ed:59:08:73:0e:14:e8:11:0c:93:99:95:64:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e34b186271ccb89c5e58b30e70bd74109cc284a
        Validity
            Not Before: May 16 03:01:14 2025 GMT
            Not After : May 17 03:01:14 2025 GMT
        Subject: CN=4a6d7905de571b576902a1160b09daf56a8ee2b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:6e:4f:4a:a9:e1:94:72:5f:d5:53:75:9c:e6:
                    88:0d:b2:1d:4f:c4:fb:32:ac:8a:f8:6e:29:22:b5:
                    b4:59:d7:2d:79:da:27:dd:18:07:63:b3:ac:ba:b7:
                    7e:d8:69:19:26:92:66:37:f0:8d:d1:b1:7c:59:38:
                    49:ed:95:c5:6f:d8:72:5f:47:60:9c:69:f2:a6:cc:
                    bf:d6:23:d7:5b:16:11:85:c7:87:f7:3d:79:d3:41:
                    9b:19:da:d9:e7:54:1a:57:50:7e:3a:3c:1e:e0:e7:
                    f0:7d:f1:e0:af:67:1d:d8:26:3b:d1:f5:bd:9b:b7:
                    02:fb:93:e0:c0:93:11:5d:d1:82:b3:3f:c4:e8:32:
                    6c:63:5f:62:0d:4a:5f:30:f2:19:49:91:0d:d2:52:
                    f3:3e:87:24:85:c8:7f:e1:e3:1a:2d:c6:02:c7:c4:
                    f6:f9:87:21:57:f6:19:d6:ce:67:3c:be:52:08:f7:
                    c1:e3:20:95:9b:63:6c:0e:ec:f8:60:14:c6:ff:6a:
                    84:d6:f8:4a:4a:9c:ed:f4:89:52:3b:2b:61:1d:bd:
                    f7:d7:2e:20:ef:b5:a5:99:f1:50:a7:02:ad:59:a6:
                    72:5e:35:b4:25:b2:19:69:21:81:5e:86:9f:9b:e4:
                    35:97:cb:5c:41:32:90:d9:8e:e5:cd:65:f4:be:4c:
                    91:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:6D:79:05:DE:57:1B:57:69:02:A1:16:0B:09:DA:F5:6A:8E:E2:B9
            X509v3 Authority Key Identifier:
                keyid:9E:34:B1:86:27:1C:CB:89:C5:E5:8B:30:E7:0B:D7:41:09:CC:28:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njSxhiccy4nF5Ysw5wvXQQnMKEo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/0c37c3-9990-4596-99e9-dd5ffd531571/1/njSxhiccy4nF5Ysw5wvXQQnMKEo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/0c37c3-9990-4596-99e9-dd5ffd531571/1/njSxhiccy4nF5Ysw5wvXQQnMKEo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:6b:c0:57:37:5e:6c:5e:a2:12:b5:0e:e8:57:b3:3b:a6:3a:
         1c:e8:d9:12:89:94:bc:0e:bd:66:03:6d:63:cc:c7:66:79:de:
         ff:66:9e:65:2b:82:29:55:06:77:b0:89:4e:7e:93:f1:ce:71:
         77:63:ea:a0:c3:bf:bf:01:1f:c5:60:17:59:b4:44:2b:08:6e:
         d8:fe:3d:8d:5b:9b:f6:0a:09:c4:9b:ea:cc:61:86:71:50:76:
         44:66:e8:49:b9:8c:75:3a:5c:60:55:4f:d6:0c:09:0e:6b:47:
         bf:7b:af:a0:3a:67:72:fb:5a:32:f3:d6:f4:57:d7:75:6b:e4:
         11:0a:a1:27:b3:8a:d3:41:7e:9a:6f:70:ca:b0:b2:e6:9c:fb:
         86:e2:57:d1:d2:e3:a8:9f:dc:69:92:53:37:44:7b:a2:3d:c8:
         9d:f8:13:cd:e1:98:dd:f8:09:c6:cf:80:02:27:27:96:81:4c:
         fa:79:cc:59:38:52:ad:48:63:9f:10:48:79:dd:2d:8c:71:0c:
         af:77:82:71:ee:71:24:98:e5:5d:8a:60:cd:98:73:90:87:15:
         99:dc:76:ab:c0:d6:95:4d:93:62:d3:66:27:42:c1:ad:67:3e:
         34:20:fc:a7:b6:b0:5a:56:3e:cc:bd:ba:ab:12:81:3b:bb:39:
         be:65:59:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 11:36:04 2025 by rpki-client