Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.mft
File:                     NEcY0TWgm7UkcGtCWcq8xiblFO8.mft (raw, json)
Hash identifier:          0bCxXsUakLmL5qBajuGTJj3GD4GQ5pGckqWM6i35vwk=
Subject key identifier:   E8:90:AB:BA:CC:AB:28:07:CB:62:84:79:6B:F2:7B:ED:71:A0:D5:2A
Authority key identifier: 34:47:18:D1:35:A0:9B:B5:24:70:6B:42:59:CA:BC:C6:26:E5:14:EF
Certificate issuer:       /CN=344718d135a09bb524706b4259cabcc626e514ef
Certificate serial:       0197D029A0BE4335752CFC5502AC8C69586E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NEcY0TWgm7UkcGtCWcq8xiblFO8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.mft
Manifest number:          1555
Signing time:             Thu 03 Jul 2025 12:01:18 +0000
Manifest this update:     Thu 03 Jul 2025 12:01:18 +0000
Manifest next update:     Fri 04 Jul 2025 12:01:18 +0000
Files and hashes:         1: NEcY0TWgm7UkcGtCWcq8xiblFO8.crl (hash: zV+0Kb5j3dzUAdtcAXIx1yuadOGMUN38bltN4nElaBQ=)
                          2: sO-QyC1vz5w60dvkaCQsXtLi8YA.roa (hash: wtWXsxxZV53+P/qICncBE0LIXN7QWpyRCdTXr4pbwmE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NEcY0TWgm7UkcGtCWcq8xiblFO8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 04 Jul 2025 12:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:d0:29:a0:be:43:35:75:2c:fc:55:02:ac:8c:69:58:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=344718d135a09bb524706b4259cabcc626e514ef
        Validity
            Not Before: Jul  3 12:01:18 2025 GMT
            Not After : Jul  4 12:01:18 2025 GMT
        Subject: CN=e890abbaccab2807cb6284796bf27bed71a0d52a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:65:96:03:9f:b2:17:d0:1a:88:80:c5:5a:d8:
                    2b:42:e4:24:1c:0e:b2:a2:92:66:3e:90:0b:a4:37:
                    e9:59:18:04:10:6b:2c:bc:57:60:13:0f:74:ee:b1:
                    64:83:0f:be:47:6a:f4:82:f1:39:e1:d9:56:de:5a:
                    3b:71:b4:17:20:c4:7c:2d:fb:27:2f:dc:f3:3d:6c:
                    e5:6d:f2:2e:00:fb:90:46:7b:81:56:cb:d1:bf:85:
                    96:7d:77:f7:cd:75:88:e0:02:13:72:08:f8:b1:09:
                    0f:23:eb:ba:8e:cf:55:b7:73:c2:47:b8:14:8c:7a:
                    af:8f:80:c3:87:ae:28:95:a4:a2:94:a1:da:00:0b:
                    48:e8:e9:cf:d5:67:72:30:e4:a9:a9:9b:a4:53:00:
                    34:03:0b:79:c6:0b:fc:10:b9:ad:66:bf:ff:09:9d:
                    f4:f1:e4:3a:bd:1e:84:93:bd:bb:27:2a:a0:d9:81:
                    12:27:b2:0b:79:43:91:33:73:0a:24:e4:4b:39:50:
                    a6:8c:42:f8:aa:92:ce:51:63:15:31:ef:39:5e:bd:
                    12:39:1a:63:17:aa:9e:53:40:98:cb:5b:36:cf:1e:
                    96:29:08:a8:4c:47:c6:e5:4b:1d:1a:0e:7f:fe:d8:
                    c7:49:74:b9:60:5e:b8:78:85:ea:53:5e:f9:89:72:
                    94:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:90:AB:BA:CC:AB:28:07:CB:62:84:79:6B:F2:7B:ED:71:A0:D5:2A
            X509v3 Authority Key Identifier:
                keyid:34:47:18:D1:35:A0:9B:B5:24:70:6B:42:59:CA:BC:C6:26:E5:14:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NEcY0TWgm7UkcGtCWcq8xiblFO8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:6d:31:5e:e6:66:80:86:d0:29:90:8e:d7:d3:a9:cf:ed:35:
         31:22:6c:9f:0a:d4:64:3b:0c:b3:28:fb:8e:e4:e5:b7:56:54:
         4d:43:ab:d6:e7:e6:dd:c0:b4:b7:1e:13:fe:a9:91:53:aa:ae:
         30:0e:01:cf:af:0c:ed:b4:ee:40:a1:b0:b5:06:64:99:05:36:
         9a:8a:9a:5c:a0:84:11:db:30:9d:52:60:9b:17:b4:44:8d:d8:
         67:79:02:d0:d1:c7:a0:4a:31:4c:ef:54:41:a0:2d:7d:cb:63:
         c1:9b:05:fd:d1:d5:98:1c:b9:aa:28:aa:fe:87:22:ed:94:bf:
         31:e4:98:94:f2:73:5b:04:00:4f:57:c8:63:c0:9d:85:e7:79:
         67:98:d3:c3:5e:f4:ab:7d:9e:12:a2:72:93:a5:bb:21:a2:22:
         c1:d2:f5:6d:e8:e3:af:94:92:d2:31:8f:c0:46:d3:9d:3b:b4:
         de:70:b0:b5:93:0f:09:47:49:08:ba:8d:30:32:50:4a:fd:d3:
         01:5a:9e:71:b9:12:31:87:16:85:ad:cf:81:95:e3:f7:78:de:
         76:47:82:22:97:43:39:b2:7c:18:5f:0d:36:71:f3:3e:8d:78:
         91:4a:49:9e:cb:5a:12:ba:ac:6a:9f:98:d4:c9:38:a9:70:35:
         ec:4a:2a:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 16:24:54 2025 by rpki-client