Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/8ce83c-ccc8-45dd-b67e-a79d09644779/1/NPuMu3pio_Drqk5fRqvjHiXRfP0.mft
File:                     NPuMu3pio_Drqk5fRqvjHiXRfP0.mft (raw, json)
Hash identifier:          j05h2ceL2uBoSuMoeZ8AEUTmANVsxt/+y6VHc7ruC5g=
Subject key identifier:   17:06:99:E3:FC:3B:31:17:96:1F:53:A0:FB:1E:23:B1:5B:D7:8D:50
Authority key identifier: 34:FB:8C:BB:7A:62:A3:F0:EB:AA:4E:5F:46:AB:E3:1E:25:D1:7C:FD
Certificate issuer:       /CN=34fb8cbb7a62a3f0ebaa4e5f46abe31e25d17cfd
Certificate serial:       0197B6D79EF8563A9D034D6333A50EDBBD93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NPuMu3pio_Drqk5fRqvjHiXRfP0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/8ce83c-ccc8-45dd-b67e-a79d09644779/1/NPuMu3pio_Drqk5fRqvjHiXRfP0.mft
Manifest number:          04D9
Signing time:             Sat 28 Jun 2025 14:01:13 +0000
Manifest this update:     Sat 28 Jun 2025 14:01:13 +0000
Manifest next update:     Sun 29 Jun 2025 14:01:13 +0000
Files and hashes:         1: NPuMu3pio_Drqk5fRqvjHiXRfP0.crl (hash: Lv4xAdrH89IckJeS44mtAqFpb++ePuT5SEK1A3devWE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/8ce83c-ccc8-45dd-b67e-a79d09644779/1/NPuMu3pio_Drqk5fRqvjHiXRfP0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/8ce83c-ccc8-45dd-b67e-a79d09644779/1/NPuMu3pio_Drqk5fRqvjHiXRfP0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NPuMu3pio_Drqk5fRqvjHiXRfP0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:d7:9e:f8:56:3a:9d:03:4d:63:33:a5:0e:db:bd:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34fb8cbb7a62a3f0ebaa4e5f46abe31e25d17cfd
        Validity
            Not Before: Jun 28 14:01:13 2025 GMT
            Not After : Jun 29 14:01:13 2025 GMT
        Subject: CN=170699e3fc3b3117961f53a0fb1e23b15bd78d50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:bd:35:1f:2b:3b:69:5e:ba:7c:30:2d:67:f1:
                    fe:b5:6d:4b:56:13:96:88:c8:82:77:bc:02:e1:78:
                    0b:c9:01:87:ad:1d:35:a7:40:ad:17:2d:dd:ac:2b:
                    0f:56:13:58:35:ff:0a:ec:ae:27:22:8d:03:d9:aa:
                    c0:76:8f:73:88:8f:b5:b5:14:0e:d7:5f:ea:a5:d4:
                    56:40:b4:98:6a:25:19:24:4a:5b:2f:79:10:61:ba:
                    a7:1d:a5:f1:62:c5:2f:8b:9f:4c:70:62:5e:2a:a3:
                    dc:c8:c3:07:9e:4c:99:8f:c8:09:88:c4:5c:9e:38:
                    25:7a:b9:7f:8b:63:1b:49:41:b6:f1:8a:ef:ea:7e:
                    e8:28:6d:6a:10:46:b5:1a:1a:06:cc:9c:8e:02:58:
                    57:48:46:66:95:74:b1:88:37:92:57:ca:2c:35:88:
                    97:ff:3a:ce:23:64:4e:67:ef:fc:a3:6f:4b:ef:1a:
                    89:1a:e0:b0:6d:c5:fb:d6:e3:0e:d4:0c:fb:37:de:
                    52:9e:1c:f7:9a:4a:ab:95:82:ff:d5:ab:7b:d5:12:
                    cd:e4:35:67:05:41:77:ef:c6:8a:84:a4:55:d7:ab:
                    13:d8:f8:c2:7f:20:f2:07:06:06:94:9c:10:a5:f7:
                    fb:46:8e:02:b3:04:57:6a:04:c5:cd:ab:fc:f3:11:
                    1e:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:06:99:E3:FC:3B:31:17:96:1F:53:A0:FB:1E:23:B1:5B:D7:8D:50
            X509v3 Authority Key Identifier:
                keyid:34:FB:8C:BB:7A:62:A3:F0:EB:AA:4E:5F:46:AB:E3:1E:25:D1:7C:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPuMu3pio_Drqk5fRqvjHiXRfP0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/8ce83c-ccc8-45dd-b67e-a79d09644779/1/NPuMu3pio_Drqk5fRqvjHiXRfP0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/8ce83c-ccc8-45dd-b67e-a79d09644779/1/NPuMu3pio_Drqk5fRqvjHiXRfP0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:ac:ee:62:3b:49:76:22:77:1c:5a:53:fa:79:54:73:8c:07:
         11:51:5b:3a:6b:3f:4f:8c:77:69:06:8c:a5:89:28:31:c6:4a:
         3e:66:5a:3e:03:15:cb:6e:a9:39:4d:06:5b:f1:2f:aa:d2:13:
         14:cf:05:7b:7c:51:42:a2:49:69:43:b6:7f:26:a3:a5:c1:ec:
         89:fc:21:5b:6e:7c:f6:0b:39:0a:16:cc:c3:47:e2:f6:b3:cd:
         db:6e:1c:55:73:b1:c0:32:0d:ad:8d:b0:5b:a3:a0:ca:87:40:
         28:f1:89:9e:99:ef:e7:21:c9:0f:9a:d7:5e:16:30:30:ed:7d:
         b1:fd:ec:d8:ed:24:35:cc:9a:ba:8f:3a:c1:42:4b:8a:b4:47:
         89:70:b7:06:4d:1f:75:1e:48:8c:b0:6a:6c:07:02:ee:c7:38:
         0f:38:60:60:de:73:a6:dc:77:ba:c3:ce:8f:3c:30:69:27:28:
         47:12:73:55:21:fb:0a:b4:ad:f7:45:4d:a6:44:bc:22:11:b6:
         0e:77:a8:95:ab:4b:ac:08:d8:7d:f7:67:6d:68:2a:d5:ef:2c:
         e0:ba:87:26:4c:51:31:6c:ee:3f:39:2f:fc:c2:e2:00:c4:ce:
         e4:8c:50:ab:6b:e3:70:96:19:99:03:5f:40:a9:91:e1:e8:88:
         30:6e:20:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:11:33 2025 by rpki-client