Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/d9aa88-6426-4933-a69a-80b96680f043/1/nuVP2fF_yXpwpb9BW3iJGxW495U.mft
File:                     nuVP2fF_yXpwpb9BW3iJGxW495U.mft (raw, json)
Hash identifier:          OT+BmjnTmDOb8g9GwTVAcFqZjDjM5x//J5ZO0Pqxp8w=
Subject key identifier:   2C:4B:C6:E8:94:2D:F8:77:87:28:38:6B:BE:70:83:19:2B:4C:B1:DB
Authority key identifier: 9E:E5:4F:D9:F1:7F:C9:7A:70:A5:BF:41:5B:78:89:1B:15:B8:F7:95
Certificate issuer:       /CN=9ee54fd9f17fc97a70a5bf415b78891b15b8f795
Certificate serial:       0197B6D780F0C5932307460BD22BFB57215D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nuVP2fF_yXpwpb9BW3iJGxW495U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/d9aa88-6426-4933-a69a-80b96680f043/1/nuVP2fF_yXpwpb9BW3iJGxW495U.mft
Manifest number:          049B
Signing time:             Sat 28 Jun 2025 14:01:05 +0000
Manifest this update:     Sat 28 Jun 2025 14:01:05 +0000
Manifest next update:     Sun 29 Jun 2025 14:01:05 +0000
Files and hashes:         1: nuVP2fF_yXpwpb9BW3iJGxW495U.crl (hash: 8d1GrWy1WG05uxh0TZBLTx+YFw4ZT5r3Ojn7aFCN4Qk=)
                          2: oeejnnEaMW40kAD0os79-L9Olv8.roa (hash: Gvc/AI8UECrR+ZR7n6+DgnfVkthLJTkqDD0SmDPbhaE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/d9aa88-6426-4933-a69a-80b96680f043/1/nuVP2fF_yXpwpb9BW3iJGxW495U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/d9aa88-6426-4933-a69a-80b96680f043/1/nuVP2fF_yXpwpb9BW3iJGxW495U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nuVP2fF_yXpwpb9BW3iJGxW495U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 14:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:d7:80:f0:c5:93:23:07:46:0b:d2:2b:fb:57:21:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ee54fd9f17fc97a70a5bf415b78891b15b8f795
        Validity
            Not Before: Jun 28 14:01:05 2025 GMT
            Not After : Jun 29 14:01:05 2025 GMT
        Subject: CN=2c4bc6e8942df8778728386bbe7083192b4cb1db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:9f:9e:c1:25:5f:54:6a:9f:da:c6:a6:0d:17:
                    9f:14:7f:57:e1:da:c7:5a:8f:62:a0:5a:9e:ae:4d:
                    e4:ea:55:e0:64:76:6c:65:9d:2b:35:43:e0:37:e1:
                    b0:50:4f:7f:c0:fe:58:0e:d5:60:d9:22:f0:a6:bb:
                    40:3d:c0:27:b9:6d:fe:d4:ad:d1:f5:93:4d:cc:e4:
                    bb:18:66:21:56:d6:ef:d4:ce:1c:43:62:a9:77:f1:
                    49:f0:0d:ff:1c:6f:29:db:d1:19:36:1b:82:3a:fb:
                    6b:a5:ad:be:f7:48:ab:f4:32:bb:8c:7f:81:1c:37:
                    9c:dd:30:2c:65:75:53:94:19:26:79:fb:e9:2f:84:
                    d0:94:eb:5e:47:00:2a:84:6c:e5:dc:96:d6:78:a6:
                    9d:91:f5:8e:f2:ff:7c:62:42:b9:fb:1d:c1:59:1d:
                    8d:8d:79:d9:16:9d:93:e8:e5:5d:37:8c:69:b3:26:
                    f8:1f:40:d9:a9:7f:83:8e:8a:47:4d:65:7f:e7:c8:
                    f4:29:d1:85:87:e3:06:73:d3:49:f5:e2:25:f6:d2:
                    cd:0a:cd:53:68:4c:66:dc:bc:a2:1f:41:6e:c1:12:
                    8d:b4:d7:0c:ad:66:38:bd:51:08:4a:55:72:81:24:
                    1c:86:11:e4:b0:20:5f:4e:dc:04:28:69:4a:76:ec:
                    f2:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:4B:C6:E8:94:2D:F8:77:87:28:38:6B:BE:70:83:19:2B:4C:B1:DB
            X509v3 Authority Key Identifier:
                keyid:9E:E5:4F:D9:F1:7F:C9:7A:70:A5:BF:41:5B:78:89:1B:15:B8:F7:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nuVP2fF_yXpwpb9BW3iJGxW495U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/d9aa88-6426-4933-a69a-80b96680f043/1/nuVP2fF_yXpwpb9BW3iJGxW495U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/d9aa88-6426-4933-a69a-80b96680f043/1/nuVP2fF_yXpwpb9BW3iJGxW495U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:ea:c9:0c:43:04:f1:fe:66:cf:96:e8:5f:b1:5f:bb:f2:d6:
         70:c0:90:e5:2f:3e:17:77:31:c4:9b:a1:54:5c:14:58:cf:8f:
         a0:2f:6e:37:1e:4f:b7:9f:e6:42:41:d5:53:c8:4e:5a:35:a7:
         a7:f7:8c:6e:92:2e:d9:85:ed:34:54:97:46:6b:3d:3b:0f:6e:
         a3:55:c5:a2:17:1a:f5:9c:80:06:a8:04:db:3f:45:ee:a0:81:
         17:d0:70:d5:a8:39:cf:f7:21:68:58:ca:51:bb:87:d8:6c:7e:
         8e:72:e9:06:f4:b5:37:be:3b:7e:fa:c3:c9:1f:f0:cd:fd:73:
         19:83:18:f6:5a:4d:47:fe:13:21:de:ef:7d:7e:00:71:99:54:
         09:28:5d:52:89:4a:6e:41:05:c9:58:ec:3a:6b:77:da:0f:00:
         33:89:d1:b9:ad:99:9e:ea:4b:e6:21:42:d7:2d:d9:1b:c3:a1:
         58:f6:33:17:93:55:19:6e:ef:52:e7:b1:5a:da:25:3f:ac:51:
         4d:81:8e:8c:a7:27:c8:fe:5d:d6:5d:b5:26:14:2e:91:99:8d:
         32:66:a7:1f:d1:28:06:1c:c7:15:ce:b3:23:a0:d4:6c:e9:91:
         b8:38:ec:15:f8:11:33:92:6a:38:37:aa:3b:3a:12:76:c4:51:
         52:c0:8f:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:30:10 2025 by rpki-client