Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/np5oh-p1cqZBEwbIewzAiTl6Y1Q.mft
File:                     np5oh-p1cqZBEwbIewzAiTl6Y1Q.mft (raw, json)
Hash identifier:          L45mwYvGSdwAD3VGeHdKW1izewx6av8oUu5QFkAjUDE=
Subject key identifier:   FD:B7:3E:AB:B1:1C:7F:7E:99:CD:19:FA:F0:A5:6F:61:4D:6C:1D:39
Authority key identifier: 9E:9E:68:87:EA:75:72:A6:41:13:06:C8:7B:0C:C0:89:39:7A:63:54
Certificate issuer:       /CN=9e9e6887ea7572a6411306c87b0cc089397a6354
Certificate serial:       0196CF4FDB675224BFDEEFC249424E52AF15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/np5oh-p1cqZBEwbIewzAiTl6Y1Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/np5oh-p1cqZBEwbIewzAiTl6Y1Q.mft
Manifest number:          10F3
Signing time:             Wed 14 May 2025 15:00:39 +0000
Manifest this update:     Wed 14 May 2025 15:00:39 +0000
Manifest next update:     Thu 15 May 2025 15:00:39 +0000
Files and hashes:         1: YJ50MQnvVhHtjWvLvxqRLtfcQ7A.roa (hash: dYfbwzgf/ynRL4xNJih6ua1qw+Sw/CexFK1ACNOG+tc=)
                          2: np5oh-p1cqZBEwbIewzAiTl6Y1Q.crl (hash: 3PDK9k0OptbTxFCx7whNs0GuEz6WRSaBn+cnxiTPe+w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/np5oh-p1cqZBEwbIewzAiTl6Y1Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/np5oh-p1cqZBEwbIewzAiTl6Y1Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/np5oh-p1cqZBEwbIewzAiTl6Y1Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 May 2025 14:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:cf:4f:db:67:52:24:bf:de:ef:c2:49:42:4e:52:af:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e9e6887ea7572a6411306c87b0cc089397a6354
        Validity
            Not Before: May 14 15:00:39 2025 GMT
            Not After : May 15 15:00:39 2025 GMT
        Subject: CN=fdb73eabb11c7f7e99cd19faf0a56f614d6c1d39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:d1:5f:ca:79:98:f3:70:5a:a2:b2:d3:64:59:
                    74:9e:57:6d:50:73:b6:e8:62:ad:20:d8:e3:56:8d:
                    ee:80:23:6a:b9:a7:6f:9f:81:5e:90:a9:82:6e:01:
                    fe:ad:cd:df:c7:35:9f:36:ea:d3:a7:b6:bd:2b:16:
                    a0:bb:04:88:c3:30:74:54:18:9e:a3:da:df:a8:9b:
                    30:33:9e:35:be:f7:39:e9:9f:c5:a3:6e:4b:d6:23:
                    59:16:5a:22:d6:8f:bf:ee:ee:4f:7a:4c:15:42:1c:
                    09:4b:a4:6f:89:66:1d:83:3f:35:da:87:a3:0a:3e:
                    11:ed:b2:87:20:2d:17:0f:94:eb:3f:38:4e:e2:62:
                    10:40:03:25:00:11:ca:45:a9:52:f3:ac:9c:91:90:
                    ad:0a:22:97:aa:b7:20:22:35:e4:6c:10:c3:0d:d2:
                    e9:b2:59:7e:c3:d3:f7:90:33:97:2b:c7:fa:aa:4d:
                    8f:2e:fc:25:d5:86:3a:67:e5:b3:88:81:6c:82:67:
                    0d:67:19:75:e0:d8:0c:26:46:d5:fc:a8:ca:60:1f:
                    29:c7:a9:37:9c:00:90:9e:0a:1f:f1:10:ea:c1:97:
                    49:f2:b3:7a:e2:5f:a8:61:d5:3d:4a:2f:cd:d3:88:
                    2c:c4:a5:75:c6:a0:b5:91:a3:aa:7e:6e:0f:f9:a7:
                    07:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:B7:3E:AB:B1:1C:7F:7E:99:CD:19:FA:F0:A5:6F:61:4D:6C:1D:39
            X509v3 Authority Key Identifier:
                keyid:9E:9E:68:87:EA:75:72:A6:41:13:06:C8:7B:0C:C0:89:39:7A:63:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/np5oh-p1cqZBEwbIewzAiTl6Y1Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/np5oh-p1cqZBEwbIewzAiTl6Y1Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/np5oh-p1cqZBEwbIewzAiTl6Y1Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:bc:79:de:bb:1c:7c:40:13:89:9f:fd:a2:d8:a3:e5:5a:d8:
         7c:2f:93:71:3f:68:50:47:2a:d3:db:9e:7d:ae:8e:0e:6b:dc:
         18:79:eb:74:56:12:3a:6a:64:b3:44:71:23:46:24:0a:31:cf:
         4c:0c:26:67:c8:97:a1:92:c8:6a:f6:fd:35:f8:c8:07:9a:20:
         48:97:88:d6:2a:a8:91:32:31:3f:6f:20:c3:e2:d4:50:74:f1:
         17:e9:3e:21:af:39:a7:b3:e0:99:e7:2a:ac:b2:13:c5:a1:f2:
         37:98:01:8b:a2:c1:8e:1f:ca:2e:e1:3d:e6:fd:30:71:cf:5b:
         07:90:e8:d2:7c:b4:ed:47:57:a6:44:52:11:af:a6:1f:da:a3:
         b0:8f:fc:68:7d:a4:8f:94:32:f2:3e:f7:fe:e6:6f:53:6d:cc:
         f7:65:cf:e1:7c:96:76:bd:e1:77:4d:57:a3:a0:ce:e0:10:20:
         fd:7c:f6:01:df:86:48:48:3b:0f:0e:20:4e:21:5f:62:19:f3:
         1b:cd:38:67:b4:a0:2e:9c:14:e5:4e:83:48:f0:b6:d0:c7:af:
         2f:d8:9a:d2:5a:91:02:87:45:7e:a9:c1:ff:04:f5:dc:7d:0a:
         7e:ef:b5:5a:b4:f2:48:66:1b:bf:bc:00:f3:e3:3f:eb:f1:4b:
         5f:19:2b:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 21:11:02 2025 by rpki-client