Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/e35ac1-05d1-406d-b668-36eaf7948531/1/NltKurcWrRQHqQLlF2Vg7MN8lm0.mft
File:                     NltKurcWrRQHqQLlF2Vg7MN8lm0.mft (raw, json)
Hash identifier:          12odXIE+xZ6pbHnanznZDVUu4zuD8DMd/pXm0Bxg/h4=
Subject key identifier:   83:88:A6:20:F0:21:F7:9E:77:29:DD:A9:28:21:C0:CE:4B:88:07:30
Authority key identifier: 36:5B:4A:BA:B7:16:AD:14:07:A9:02:E5:17:65:60:EC:C3:7C:96:6D
Certificate issuer:       /CN=365b4abab716ad1407a902e5176560ecc37c966d
Certificate serial:       0196BC003C32FA97C3D0201D49EF60EADA03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NltKurcWrRQHqQLlF2Vg7MN8lm0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/e35ac1-05d1-406d-b668-36eaf7948531/1/NltKurcWrRQHqQLlF2Vg7MN8lm0.mft
Manifest number:          0E98
Signing time:             Sat 10 May 2025 21:00:54 +0000
Manifest this update:     Sat 10 May 2025 21:00:54 +0000
Manifest next update:     Sun 11 May 2025 21:00:54 +0000
Files and hashes:         1: 663owoCy0geoSEBq18zjFiT7Z94.roa (hash: 1TSeYE3XDa7rGIOANkOioACjFE0zrxWJZSCcKrx3NcU=)
                          2: KIM-NbEkTbitOU_rhpt4qAs9-Oo.roa (hash: H4xfbttPRqY/FlOJMk6QaNDUIdoa4V9nPRdLB2/KbPU=)
                          3: LD0Ui4wMeU8IWaHDiSVwgyowOUw.roa (hash: 31h6z+WARy6dkl6qHeADOyyrJnTIy/84Jsu1HRgGL7A=)
                          4: NltKurcWrRQHqQLlF2Vg7MN8lm0.crl (hash: E4fi/+wQu3cqUoVd2qb3+j9xRKUdeHBvSQxUCuHtdwY=)
                          5: u8gM57Vzy83m5elKcN7yP_JfkD0.roa (hash: 11ORynfloHVoIfYWzniyOLKFlZYtVFhIVMRALKTSBUQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/e35ac1-05d1-406d-b668-36eaf7948531/1/NltKurcWrRQHqQLlF2Vg7MN8lm0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/e35ac1-05d1-406d-b668-36eaf7948531/1/NltKurcWrRQHqQLlF2Vg7MN8lm0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NltKurcWrRQHqQLlF2Vg7MN8lm0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 21:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bc:00:3c:32:fa:97:c3:d0:20:1d:49:ef:60:ea:da:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=365b4abab716ad1407a902e5176560ecc37c966d
        Validity
            Not Before: May 10 21:00:54 2025 GMT
            Not After : May 11 21:00:54 2025 GMT
        Subject: CN=8388a620f021f79e7729dda92821c0ce4b880730
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:87:42:93:61:9a:13:9a:57:b8:ad:fe:26:da:
                    57:e0:05:b8:e6:2d:eb:b4:e9:c3:f2:6d:70:0c:d3:
                    b8:00:b2:52:9b:22:d2:8f:97:5d:db:73:b3:4d:c8:
                    6f:fe:27:cf:e9:a0:01:c3:e9:eb:f3:6d:d8:bd:f0:
                    da:1f:17:5c:72:b5:f4:f6:07:28:f1:2e:29:25:be:
                    2e:03:29:c3:f0:bb:28:96:68:73:78:5c:e7:8f:f8:
                    9d:07:30:9a:8b:5e:fe:3c:b9:85:fb:de:e6:9f:76:
                    84:83:ce:97:e4:92:fc:2a:e2:3f:f6:4b:c3:b1:93:
                    59:ff:5e:85:30:b1:5c:fb:d9:0a:64:52:a2:d9:38:
                    94:c1:22:49:c3:b5:1c:f6:b3:e4:75:d8:e5:22:52:
                    14:9b:ec:99:41:23:8d:23:0d:48:4c:fb:be:23:51:
                    00:ed:e9:b5:67:83:36:80:88:42:71:6b:2c:5f:25:
                    97:bb:b6:79:64:f0:a4:2f:e0:4a:fb:c2:75:b0:0b:
                    09:72:da:67:40:9b:2e:25:ec:b6:79:d6:fd:3b:c7:
                    a3:30:83:be:8e:93:0d:fd:29:2e:5d:aa:e9:30:ce:
                    12:c9:92:0f:db:f7:c7:01:61:88:20:d6:9b:46:8f:
                    f9:9b:77:fd:13:05:18:9b:8f:31:63:10:00:d5:cd:
                    26:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:88:A6:20:F0:21:F7:9E:77:29:DD:A9:28:21:C0:CE:4B:88:07:30
            X509v3 Authority Key Identifier:
                keyid:36:5B:4A:BA:B7:16:AD:14:07:A9:02:E5:17:65:60:EC:C3:7C:96:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NltKurcWrRQHqQLlF2Vg7MN8lm0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/e35ac1-05d1-406d-b668-36eaf7948531/1/NltKurcWrRQHqQLlF2Vg7MN8lm0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/e35ac1-05d1-406d-b668-36eaf7948531/1/NltKurcWrRQHqQLlF2Vg7MN8lm0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:e1:68:c1:47:53:4c:44:fc:b7:47:75:f5:9e:1a:fe:15:0e:
         89:d1:77:47:54:89:a7:89:0f:b6:67:d6:ff:87:ab:09:e0:b9:
         4b:04:46:00:5b:4d:da:38:fb:4e:a3:19:6b:0d:b2:09:3c:9c:
         f7:09:62:70:82:f0:a3:be:85:62:b0:8d:74:63:b6:8e:46:1e:
         48:3e:7c:3b:0a:09:1f:93:99:8b:d3:24:b0:9a:a5:f7:9d:3c:
         0a:e8:68:40:7f:08:bd:37:f1:e3:45:24:26:7f:ea:2e:90:2e:
         cc:7e:c9:4d:ed:b2:42:df:14:5b:21:6f:7c:63:be:3a:97:68:
         47:e9:20:cd:46:ba:f7:5c:4e:1a:35:ef:df:d0:fb:6e:36:39:
         b1:e4:b8:d2:ca:33:8b:6d:4c:da:ef:25:81:f0:19:51:d7:2e:
         43:af:a3:dc:fd:ca:7e:8b:eb:cf:d9:6c:23:58:0c:40:ba:6f:
         ad:fb:a0:be:3d:b4:30:13:58:91:6f:a4:2f:a0:a8:d9:40:50:
         ab:16:49:0b:90:d3:ba:95:47:2c:1d:88:b1:b2:9b:09:70:45:
         e0:8c:19:2e:25:b4:9b:cd:3f:05:ab:25:8a:39:20:fb:b3:ca:
         c5:1b:56:00:6c:50:12:4e:7c:f2:51:bd:6c:29:27:c4:3a:3d:
         67:26:fc:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 05:08:58 2025 by rpki-client