Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/a977ea-4a93-4618-b7ff-35b21bffad4d/1/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.mft
File:                     N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.mft (raw, json)
Hash identifier:          1kNbVVjyg9rMQKC8xdxIWXlETBR7VWK3Vyy37AaUpwo=
Subject key identifier:   E0:0B:D1:38:E8:B8:FE:F5:51:4B:FF:2C:06:FF:8E:DE:96:0F:38:BC
Authority key identifier: 37:A3:52:E1:7A:F8:7E:E2:E5:DC:17:3D:15:54:3D:A6:3B:E5:54:73
Certificate issuer:       /CN=37a352e17af87ee2e5dc173d15543da63be55473
Certificate serial:       0197B5FC213249F6620FEEB8D779E3FC1F2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/a977ea-4a93-4618-b7ff-35b21bffad4d/1/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.mft
Manifest number:          0C59
Signing time:             Sat 28 Jun 2025 10:01:29 +0000
Manifest this update:     Sat 28 Jun 2025 10:01:29 +0000
Manifest next update:     Sun 29 Jun 2025 10:01:29 +0000
Files and hashes:         1: N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.crl (hash: K/d2IUaxfs6Tv2H4N1r3XRTB/WkrJvMxm1dlBOzxLeM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/a977ea-4a93-4618-b7ff-35b21bffad4d/1/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/a977ea-4a93-4618-b7ff-35b21bffad4d/1/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b5:fc:21:32:49:f6:62:0f:ee:b8:d7:79:e3:fc:1f:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37a352e17af87ee2e5dc173d15543da63be55473
        Validity
            Not Before: Jun 28 10:01:29 2025 GMT
            Not After : Jun 29 10:01:29 2025 GMT
        Subject: CN=e00bd138e8b8fef5514bff2c06ff8ede960f38bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e3:8f:cb:b2:7c:6a:87:bf:6f:7b:48:a4:b4:
                    2e:87:90:7a:c0:9a:88:5a:7b:a1:df:79:1f:25:85:
                    f0:d3:d7:cd:b6:51:28:61:f0:03:35:8e:5e:29:e9:
                    60:a2:8c:ea:f0:53:69:10:8c:6a:d4:29:86:4a:f7:
                    f1:b3:54:c3:fc:8d:d3:c2:c4:0a:ae:17:5b:0b:a3:
                    62:aa:1b:14:9a:bb:5a:0c:e8:8a:b4:5b:5d:0a:55:
                    f4:7a:4c:a5:43:ca:23:cd:91:73:d2:d5:e6:c4:f2:
                    74:3e:0c:b7:89:8e:8c:37:31:25:1e:da:89:38:5d:
                    95:3c:36:8f:6f:60:82:39:99:c5:4a:f1:f4:33:b4:
                    ce:1c:e7:c0:01:fd:d7:97:db:54:bf:82:c7:cc:da:
                    7a:73:0e:24:91:7e:9e:fa:39:4b:75:87:0e:37:a5:
                    20:39:51:87:28:05:33:64:c4:3a:47:a5:f3:4d:af:
                    ea:97:09:30:04:dd:5b:ea:b0:39:6b:a7:2a:d8:79:
                    07:fd:60:01:3f:8d:fb:db:cb:44:85:1f:c1:4c:d7:
                    81:ae:f9:6d:7a:e7:97:e7:85:bb:1b:16:02:25:75:
                    ce:96:2c:a9:ac:22:73:4a:a2:56:4b:7e:93:34:b4:
                    c8:a8:88:75:57:54:01:27:a5:52:16:ba:ec:91:aa:
                    8b:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:0B:D1:38:E8:B8:FE:F5:51:4B:FF:2C:06:FF:8E:DE:96:0F:38:BC
            X509v3 Authority Key Identifier:
                keyid:37:A3:52:E1:7A:F8:7E:E2:E5:DC:17:3D:15:54:3D:A6:3B:E5:54:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/a977ea-4a93-4618-b7ff-35b21bffad4d/1/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/a977ea-4a93-4618-b7ff-35b21bffad4d/1/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:e4:a0:0d:e8:ae:12:e5:df:81:f7:da:ab:6e:6c:ea:3c:c8:
         05:3c:1a:cb:e9:c4:58:5a:e9:21:0f:a7:95:9e:a8:68:5d:76:
         c2:40:1c:6d:ff:bd:65:a5:ee:ad:40:d5:2d:fe:70:ee:86:8a:
         bb:3c:7a:96:8d:09:90:98:22:7c:4f:5c:bf:a2:5a:22:52:29:
         4c:99:8f:e0:1b:79:22:86:2f:7c:7e:c6:2c:fc:50:90:f9:5d:
         57:58:1b:55:97:10:69:2b:f2:9f:c1:f9:92:23:0e:f5:d4:f6:
         91:16:1e:88:ef:8c:1e:74:38:d6:a5:e3:61:18:ce:9c:ed:46:
         f6:53:53:d5:2d:ae:65:e3:a3:38:6c:41:87:08:b7:a9:82:b1:
         0f:f3:60:b9:93:0e:76:b4:0b:b3:ad:93:ca:66:eb:7d:41:40:
         ea:29:8e:4f:11:9d:ff:8c:59:fe:13:30:9e:84:33:ba:24:ee:
         0f:65:48:2a:f1:fa:10:4c:c0:83:de:17:bc:ac:0b:01:50:25:
         b1:3b:e2:3b:39:a5:a1:8d:ff:af:6e:a7:57:8e:63:83:61:93:
         cb:f1:de:7a:2e:a7:2d:52:d0:ad:36:b1:72:b8:9f:eb:d4:e4:
         a0:5e:b4:9c:f8:87:d9:dc:04:f2:a4:41:a7:1c:1d:b0:95:f7:
         57:80:82:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:43:51 2025 by rpki-client