Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/75b43d-e742-48ea-945a-aa832db7b50a/1/nvtWQV815j-nQDpQH97druzqR1o.mft
File:                     nvtWQV815j-nQDpQH97druzqR1o.mft (raw, json)
Hash identifier:          VGrebJwS9ILM2eZsb9c3GZP729MU2BcloA/Fg5QGp80=
Subject key identifier:   81:82:24:2F:22:AB:28:B2:27:A8:E0:18:D7:D9:2E:02:04:78:64:60
Authority key identifier: 9E:FB:56:41:5F:35:E6:3F:A7:40:3A:50:1F:DE:DD:AE:EC:EA:47:5A
Certificate issuer:       /CN=9efb56415f35e63fa7403a501fdeddaeecea475a
Certificate serial:       0196CB7335496662329346BC4DE7F82F2B05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nvtWQV815j-nQDpQH97druzqR1o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/75b43d-e742-48ea-945a-aa832db7b50a/1/nvtWQV815j-nQDpQH97druzqR1o.mft
Manifest number:          153E
Signing time:             Tue 13 May 2025 21:00:47 +0000
Manifest this update:     Tue 13 May 2025 21:00:47 +0000
Manifest next update:     Wed 14 May 2025 21:00:47 +0000
Files and hashes:         1: SEfajqd6Fo8tBAWadiViUIYfxIc.roa (hash: buws3E1khkxa0hWtFXM/6/Y2Vl2k7b7xq83eMENRDLs=)
                          2: nvtWQV815j-nQDpQH97druzqR1o.crl (hash: yix6cO72Tj831VnjjbdXYpzL+MzpoQ7c8lmCCZPd0xg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/75b43d-e742-48ea-945a-aa832db7b50a/1/nvtWQV815j-nQDpQH97druzqR1o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/75b43d-e742-48ea-945a-aa832db7b50a/1/nvtWQV815j-nQDpQH97druzqR1o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nvtWQV815j-nQDpQH97druzqR1o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 14:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:cb:73:35:49:66:62:32:93:46:bc:4d:e7:f8:2f:2b:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9efb56415f35e63fa7403a501fdeddaeecea475a
        Validity
            Not Before: May 13 21:00:47 2025 GMT
            Not After : May 14 21:00:47 2025 GMT
        Subject: CN=8182242f22ab28b227a8e018d7d92e0204786460
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:94:a3:c3:b5:83:2e:39:8d:fa:64:fe:c8:18:
                    cd:1b:73:f9:f6:f8:92:8c:5d:83:b7:b9:38:37:c3:
                    39:95:6e:5b:26:c7:b9:a9:9a:7a:b4:c7:7e:70:17:
                    cd:55:c8:bb:c2:28:fb:87:05:0d:b1:7a:11:90:71:
                    04:60:8f:fc:2e:a7:91:76:e4:09:64:0d:23:d1:e4:
                    a6:38:7f:7a:b3:ff:ac:4e:3a:13:d9:a7:30:bb:66:
                    c2:ca:cd:b5:16:13:19:d5:3f:d1:1c:72:a2:82:bc:
                    09:e3:ba:b5:79:0d:61:a5:44:56:93:00:ad:e2:0a:
                    f9:a4:c1:ca:1d:7f:d2:1e:e6:f4:97:8d:ae:94:a5:
                    e3:66:c4:44:b4:c3:18:5f:99:89:89:e5:a5:8c:3b:
                    fa:34:66:a4:ec:ec:d9:df:f1:d9:06:b5:d6:ed:ef:
                    b1:ae:49:21:2b:b4:25:6e:6d:38:99:f3:47:87:89:
                    cf:2d:b2:29:a7:72:8b:99:35:1d:5d:a8:c3:69:81:
                    55:d3:c8:84:31:69:24:7e:d7:7a:fc:ea:e7:f7:f5:
                    77:1c:2a:73:43:37:f0:09:8d:97:02:40:53:57:a6:
                    42:1b:29:7f:12:34:3a:d6:fb:01:16:ea:da:ed:3b:
                    98:9e:d3:3d:fd:6a:ce:6d:db:37:1a:dc:10:e8:70:
                    cf:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:82:24:2F:22:AB:28:B2:27:A8:E0:18:D7:D9:2E:02:04:78:64:60
            X509v3 Authority Key Identifier:
                keyid:9E:FB:56:41:5F:35:E6:3F:A7:40:3A:50:1F:DE:DD:AE:EC:EA:47:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nvtWQV815j-nQDpQH97druzqR1o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/75b43d-e742-48ea-945a-aa832db7b50a/1/nvtWQV815j-nQDpQH97druzqR1o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/75b43d-e742-48ea-945a-aa832db7b50a/1/nvtWQV815j-nQDpQH97druzqR1o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:aa:6b:a3:3b:90:58:b2:d4:fe:07:ec:ce:c2:66:86:76:a1:
         fc:b9:57:67:7e:91:42:d4:0f:41:ac:97:4e:7e:e1:82:5e:b2:
         df:87:5f:06:17:a8:6f:56:08:bc:bd:62:73:b1:e0:52:47:a4:
         73:96:ca:25:b9:c6:d4:04:54:30:c4:1e:36:c8:fc:74:52:8f:
         14:8e:bc:9a:f1:84:04:c4:b1:65:1f:02:12:5a:7f:ad:ab:54:
         aa:70:53:23:a4:fd:0d:1f:e3:bc:d8:dc:7e:46:e7:0e:f7:eb:
         f8:09:00:25:ea:c3:74:bc:c4:cf:b6:9d:4f:3e:4b:0d:b0:71:
         cc:93:0d:de:05:a6:9a:b7:f0:3e:ed:da:6d:2f:b3:e4:88:5b:
         53:bb:3a:c8:ca:7f:16:6d:77:2c:24:c7:62:bf:71:40:a2:70:
         b2:69:36:b3:24:df:98:a9:fa:54:ca:45:33:0c:24:b6:4f:93:
         42:b0:53:87:6f:66:26:cf:d0:af:3b:19:6b:0d:4e:61:98:c1:
         4c:44:77:62:c3:35:ee:e1:fd:0f:aa:02:63:51:37:cd:44:59:
         ec:27:20:a2:2e:a2:55:18:0d:ba:25:8f:11:8c:fc:d3:56:fe:
         8b:9c:ac:09:f3:a8:17:f5:d5:a5:f1:7d:d4:cc:2b:c3:2f:1b:
         a0:d0:6d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 00:23:28 2025 by rpki-client