Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/d3f0f3-dded-42dc-82e0-e3d9531dfd2b/1/Ne95xR4_oIQzIGSqC4NgjW5BwSs.mft
File:                     Ne95xR4_oIQzIGSqC4NgjW5BwSs.mft (raw, json)
Hash identifier:          wHkXi+Cfj+fE9E63bo31SsUgIsr/cD2yVkGTLZgGtDM=
Subject key identifier:   76:E9:36:64:F1:25:BE:39:35:B2:EA:17:06:E3:72:4E:9F:0A:E1:0F
Authority key identifier: 35:EF:79:C5:1E:3F:A0:84:33:20:64:AA:0B:83:60:8D:6E:41:C1:2B
Certificate issuer:       /CN=35ef79c51e3fa084332064aa0b83608d6e41c12b
Certificate serial:       0196AC1F693171E5E1FAF7D6E2E47F571D48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ne95xR4_oIQzIGSqC4NgjW5BwSs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/d3f0f3-dded-42dc-82e0-e3d9531dfd2b/1/Ne95xR4_oIQzIGSqC4NgjW5BwSs.mft
Manifest number:          042E
Signing time:             Wed 07 May 2025 19:01:01 +0000
Manifest this update:     Wed 07 May 2025 19:01:01 +0000
Manifest next update:     Thu 08 May 2025 19:01:01 +0000
Files and hashes:         1: Ne95xR4_oIQzIGSqC4NgjW5BwSs.crl (hash: 3FAEpgDCQfZlFyxNsv7ZSsCmHbJOIc9aRx3G1AgudcE=)
                          2: iO_CtKh3Y4ZrGmH0YqMWnYKlZNg.roa (hash: P3pxw91zYoBZsgP5Nx/MtBU2YXLYa7WtbiOEl2i4Gb0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/d3f0f3-dded-42dc-82e0-e3d9531dfd2b/1/Ne95xR4_oIQzIGSqC4NgjW5BwSs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/d3f0f3-dded-42dc-82e0-e3d9531dfd2b/1/Ne95xR4_oIQzIGSqC4NgjW5BwSs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ne95xR4_oIQzIGSqC4NgjW5BwSs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 May 2025 19:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ac:1f:69:31:71:e5:e1:fa:f7:d6:e2:e4:7f:57:1d:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35ef79c51e3fa084332064aa0b83608d6e41c12b
        Validity
            Not Before: May  7 19:01:01 2025 GMT
            Not After : May  8 19:01:01 2025 GMT
        Subject: CN=76e93664f125be3935b2ea1706e3724e9f0ae10f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e2:be:f0:10:67:03:d1:ef:f1:ad:aa:38:61:
                    01:21:c3:e5:2d:9d:6a:97:52:ff:d4:57:6f:fa:cd:
                    26:fd:37:f0:ae:20:86:60:92:d1:af:b3:1e:15:26:
                    9b:70:5b:97:0d:51:55:fc:3d:8a:08:ab:47:11:e4:
                    e9:de:e3:1c:8f:d1:cc:2d:b7:db:80:a7:b7:da:96:
                    76:91:26:f2:46:0c:2a:38:82:58:54:8d:dd:48:8a:
                    40:48:d1:76:97:2e:8e:79:1d:41:33:7b:1a:49:1d:
                    3c:de:d8:66:08:96:11:46:01:cf:64:b7:c5:a2:97:
                    e4:7d:78:4b:be:b8:8e:e2:e1:6a:1a:b7:93:f3:ef:
                    2f:77:4f:9b:e6:8d:35:b0:4f:45:d4:02:b4:cd:af:
                    2d:7c:72:c7:74:e3:df:53:b9:64:95:c2:94:f9:a6:
                    0e:9d:b9:bb:f6:2a:0d:be:af:49:41:18:98:20:33:
                    60:e0:60:5b:b7:e5:cc:f5:88:7d:e8:f6:a2:ff:5b:
                    dc:43:ac:c7:af:b9:b3:a4:4c:a4:36:be:cb:3f:ab:
                    11:fc:5c:10:49:32:26:ec:b7:0b:a6:c2:23:03:42:
                    e3:bc:82:5e:75:04:a8:25:1f:28:15:cc:ff:a8:9a:
                    22:d8:3b:66:e5:3c:6c:6e:e6:78:6c:1f:fa:c6:0b:
                    09:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:E9:36:64:F1:25:BE:39:35:B2:EA:17:06:E3:72:4E:9F:0A:E1:0F
            X509v3 Authority Key Identifier:
                keyid:35:EF:79:C5:1E:3F:A0:84:33:20:64:AA:0B:83:60:8D:6E:41:C1:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ne95xR4_oIQzIGSqC4NgjW5BwSs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/d3f0f3-dded-42dc-82e0-e3d9531dfd2b/1/Ne95xR4_oIQzIGSqC4NgjW5BwSs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/d3f0f3-dded-42dc-82e0-e3d9531dfd2b/1/Ne95xR4_oIQzIGSqC4NgjW5BwSs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:01:5b:86:c4:32:57:57:1f:5e:3e:26:1a:48:7b:7e:a4:16:
         20:18:a0:47:83:86:b3:26:04:c6:51:9e:09:03:8f:ae:8d:9e:
         3a:b5:da:93:dc:f9:22:f5:92:89:5e:1e:ba:55:99:3e:ea:a8:
         0e:51:48:86:d7:d7:58:95:ec:50:f0:af:82:95:0a:f2:2d:76:
         39:ba:b2:32:cc:79:af:64:4e:e1:dd:f5:48:39:71:b3:24:90:
         c3:03:fd:4c:a3:05:1e:eb:1d:0a:27:2e:6b:74:be:0d:c9:8c:
         97:65:6f:da:c6:78:d6:90:6d:95:06:db:c3:f9:94:09:54:93:
         7f:bc:d4:c1:9e:e8:eb:f6:da:d5:1d:59:89:28:75:0a:0f:65:
         7f:3e:90:69:0c:99:9a:8c:d9:f6:38:4f:4c:60:0c:02:37:76:
         3a:d3:91:d2:70:4c:2e:74:e1:b1:3e:9b:7a:57:4e:7f:fe:1c:
         d7:eb:3f:df:28:43:eb:0d:fa:2c:9e:21:5b:67:6a:8b:f3:b2:
         14:98:d3:7b:62:84:e5:e9:31:06:e4:6a:3e:09:ee:e6:f8:3d:
         be:8b:c8:5c:9e:b4:87:b2:a9:50:9c:bc:76:31:f9:b5:3b:a6:
         cc:13:c1:44:d4:38:c3:e4:e9:88:88:3b:a9:a9:12:21:62:e3:
         9a:46:90:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 03:27:32 2025 by rpki-client