Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/55dc83-2707-4917-b63f-95c4e94ad0a9/1/NjVI7UYolmJIIEwv5pBl8Ne1J6M.mft
File:                     NjVI7UYolmJIIEwv5pBl8Ne1J6M.mft (raw, json)
Hash identifier:          sBIcFN49aY+pU1xR6Q4Fm7zjjtZ5fNn7QqxwvRbyM0g=
Subject key identifier:   74:D8:F1:96:2D:80:31:9F:5A:C5:49:A5:B3:33:7B:F7:9D:E5:C5:76
Authority key identifier: 36:35:48:ED:46:28:96:62:48:20:4C:2F:E6:90:65:F0:D7:B5:27:A3
Certificate issuer:       /CN=363548ed4628966248204c2fe69065f0d7b527a3
Certificate serial:       0197B70E9EC889A47BD838E7E484BE05B4D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NjVI7UYolmJIIEwv5pBl8Ne1J6M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/55dc83-2707-4917-b63f-95c4e94ad0a9/1/NjVI7UYolmJIIEwv5pBl8Ne1J6M.mft
Manifest number:          15B5
Signing time:             Sat 28 Jun 2025 15:01:17 +0000
Manifest this update:     Sat 28 Jun 2025 15:01:17 +0000
Manifest next update:     Sun 29 Jun 2025 15:01:17 +0000
Files and hashes:         1: NjVI7UYolmJIIEwv5pBl8Ne1J6M.crl (hash: aSU0AJem7LDHmGUC9DAPIeRFNea/1CpdyZZN6GFefVc=)
                          2: ZTPqCUD63V4eQMXnLn6AnTQCitU.roa (hash: ywlhEvz+62iFTUdrK6be6oxB9Yvs+N63Zrh3s7mdFzs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/55dc83-2707-4917-b63f-95c4e94ad0a9/1/NjVI7UYolmJIIEwv5pBl8Ne1J6M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/55dc83-2707-4917-b63f-95c4e94ad0a9/1/NjVI7UYolmJIIEwv5pBl8Ne1J6M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NjVI7UYolmJIIEwv5pBl8Ne1J6M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0e:9e:c8:89:a4:7b:d8:38:e7:e4:84:be:05:b4:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=363548ed4628966248204c2fe69065f0d7b527a3
        Validity
            Not Before: Jun 28 15:01:17 2025 GMT
            Not After : Jun 29 15:01:17 2025 GMT
        Subject: CN=74d8f1962d80319f5ac549a5b3337bf79de5c576
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:84:76:fa:86:41:06:e4:e5:f5:41:8b:94:9d:
                    a2:69:44:35:4c:78:94:f0:05:54:5a:a3:41:f1:86:
                    2c:2b:d4:3e:ca:1a:68:d9:52:97:94:5a:69:72:ce:
                    f4:3f:4a:b0:c8:54:76:bd:d7:ec:c6:48:58:94:0f:
                    75:87:c3:67:05:6c:4f:08:12:60:20:a8:06:82:fa:
                    0a:c1:0b:73:9a:dd:66:a5:33:7d:89:69:c4:9f:32:
                    20:30:e5:e4:c4:8d:73:54:8c:7b:c5:37:2c:27:ad:
                    df:b6:de:52:b9:fd:8c:cd:bb:75:fe:fb:90:d3:6c:
                    ce:87:9b:9e:1a:c7:8b:5d:ea:7d:8c:64:ff:b9:e3:
                    f1:1e:8e:b2:4c:fc:d1:97:5f:f0:a7:96:c3:c6:52:
                    a6:42:49:2b:c1:1c:9c:59:aa:f0:b3:83:95:14:59:
                    17:0a:6a:0a:0b:52:7f:b4:7f:06:44:15:0e:e4:2d:
                    49:37:06:03:55:d6:4c:8f:6c:cd:9a:19:7d:60:e5:
                    3c:57:c4:f7:3a:07:4a:f0:55:5e:97:7c:f1:38:c1:
                    b9:c9:50:25:fa:fe:48:ba:8d:35:4a:07:04:6f:c7:
                    17:cc:7f:1b:24:f9:d0:9f:ea:48:5c:da:c6:cb:e8:
                    cb:84:e7:b3:6c:71:7f:f9:2f:ab:62:9b:77:9f:45:
                    b0:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:D8:F1:96:2D:80:31:9F:5A:C5:49:A5:B3:33:7B:F7:9D:E5:C5:76
            X509v3 Authority Key Identifier:
                keyid:36:35:48:ED:46:28:96:62:48:20:4C:2F:E6:90:65:F0:D7:B5:27:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NjVI7UYolmJIIEwv5pBl8Ne1J6M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/55dc83-2707-4917-b63f-95c4e94ad0a9/1/NjVI7UYolmJIIEwv5pBl8Ne1J6M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/55dc83-2707-4917-b63f-95c4e94ad0a9/1/NjVI7UYolmJIIEwv5pBl8Ne1J6M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:5c:cd:d3:ba:36:fc:32:15:d8:61:1a:f1:e1:dc:69:6c:ef:
         a4:5c:7d:ae:da:aa:99:2a:c7:cd:1a:2a:72:de:2a:1e:88:9b:
         30:6c:54:31:c7:01:e2:58:84:e0:6d:df:c1:6c:c5:7e:10:9b:
         b6:b8:c8:be:12:5b:09:4d:49:14:2a:7a:fb:40:b4:c0:e2:d7:
         e7:f5:59:48:8b:e3:8b:2b:a1:a3:00:03:3a:7a:ba:e5:b6:1e:
         31:ba:cc:6f:a0:86:e0:9b:66:fb:7e:a0:73:ff:d1:66:ff:d4:
         5c:a2:40:5b:c0:6b:fc:79:79:40:1c:bf:15:87:19:f7:d8:c3:
         06:42:1d:57:27:7b:fc:86:83:ac:e1:46:34:db:b0:dd:db:49:
         df:bc:e0:78:1c:ef:cc:1e:91:5c:6f:58:08:b8:6a:e1:c4:62:
         06:9a:03:df:62:b5:c0:05:96:92:87:74:d4:8b:63:4d:6a:78:
         bf:a6:b2:dd:23:ce:4d:f8:16:7e:94:0f:63:4f:a5:80:3f:86:
         f0:b5:56:74:06:da:8f:88:f1:89:16:e1:6e:34:ad:24:e2:26:
         4d:7e:4c:34:9c:a1:d8:6d:8d:73:68:05:8b:b7:b8:bc:b5:2b:
         d5:8b:2e:16:1f:a5:4b:0b:25:d2:6c:c2:9d:14:e7:f4:78:93:
         26:e6:06:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:40:51 2025 by rpki-client