Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/813821-24f4-485f-9c4b-433403d30a83/1/NJwCswrb8Q9x-b4PRkRCRJgmPfM.mft
File:                     NJwCswrb8Q9x-b4PRkRCRJgmPfM.mft (raw, json)
Hash identifier:          ikGzgZj7KINdgMq4nkmjL38/IGkLLzThvCWOYICzomw=
Subject key identifier:   2D:60:C8:F8:F9:10:A4:B0:B1:B7:CA:71:E2:79:CE:46:C2:47:5C:3B
Authority key identifier: 34:9C:02:B3:0A:DB:F1:0F:71:F9:BE:0F:46:44:42:44:98:26:3D:F3
Certificate issuer:       /CN=349c02b30adbf10f71f9be0f4644424498263df3
Certificate serial:       0196BD499AC3AA18211A27C5358DFE2182D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NJwCswrb8Q9x-b4PRkRCRJgmPfM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/813821-24f4-485f-9c4b-433403d30a83/1/NJwCswrb8Q9x-b4PRkRCRJgmPfM.mft
Manifest number:          1275
Signing time:             Sun 11 May 2025 03:00:39 +0000
Manifest this update:     Sun 11 May 2025 03:00:39 +0000
Manifest next update:     Mon 12 May 2025 03:00:39 +0000
Files and hashes:         1: NJwCswrb8Q9x-b4PRkRCRJgmPfM.crl (hash: XRtZrHMeXfImLOU7cadE6HQNKLSE4yJr4EVTnUWMYL0=)
                          2: OhsLBgdiLz12uE4gfFblJpOKDsM.roa (hash: +nTXnosSsmnjrvQn+59KIQoVJyqP58V74UTxUmrvxmI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/813821-24f4-485f-9c4b-433403d30a83/1/NJwCswrb8Q9x-b4PRkRCRJgmPfM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/813821-24f4-485f-9c4b-433403d30a83/1/NJwCswrb8Q9x-b4PRkRCRJgmPfM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NJwCswrb8Q9x-b4PRkRCRJgmPfM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bd:49:9a:c3:aa:18:21:1a:27:c5:35:8d:fe:21:82:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=349c02b30adbf10f71f9be0f4644424498263df3
        Validity
            Not Before: May 11 03:00:39 2025 GMT
            Not After : May 12 03:00:39 2025 GMT
        Subject: CN=2d60c8f8f910a4b0b1b7ca71e279ce46c2475c3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:fd:49:5d:19:df:c5:0b:65:2f:32:0f:f1:5a:
                    0c:3b:37:71:ad:7b:46:8f:9f:6f:3b:08:33:53:9a:
                    ee:61:d7:09:ff:4b:1d:b8:69:96:47:ab:53:15:0f:
                    87:6d:4e:ef:cc:99:05:c1:e9:fd:ab:76:14:9e:d2:
                    fc:eb:9b:51:1a:cf:79:7a:4f:31:60:23:0b:d2:a0:
                    8d:e1:06:f7:69:69:eb:43:33:b9:b9:5e:c6:39:bb:
                    19:0a:31:cd:58:ff:ec:78:f1:fe:9a:8b:e7:9d:22:
                    78:b8:41:c5:d8:ff:6b:cd:71:50:f1:c2:cc:e3:93:
                    a6:0d:31:06:0e:57:c4:de:29:03:3a:0d:00:3e:42:
                    06:55:40:8e:1d:55:18:a3:87:84:1f:ec:59:70:42:
                    50:0f:ab:3e:75:83:2f:ed:59:a8:1c:06:2e:b8:1b:
                    68:da:6e:f2:33:29:83:21:23:b0:91:db:2a:cc:1c:
                    d6:5b:bc:c5:9f:90:bd:d6:9f:29:ee:56:70:5c:44:
                    f3:05:3d:f6:12:b9:99:ab:e7:32:7b:cb:76:cb:f9:
                    97:29:e5:93:28:af:eb:13:f8:03:84:bc:91:a0:d9:
                    6b:db:53:6f:20:ef:eb:9b:79:d4:fe:82:a8:4d:2e:
                    9d:9c:06:6f:ce:3c:ec:f0:c7:da:67:3b:0b:8f:59:
                    7b:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:60:C8:F8:F9:10:A4:B0:B1:B7:CA:71:E2:79:CE:46:C2:47:5C:3B
            X509v3 Authority Key Identifier:
                keyid:34:9C:02:B3:0A:DB:F1:0F:71:F9:BE:0F:46:44:42:44:98:26:3D:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJwCswrb8Q9x-b4PRkRCRJgmPfM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/813821-24f4-485f-9c4b-433403d30a83/1/NJwCswrb8Q9x-b4PRkRCRJgmPfM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/813821-24f4-485f-9c4b-433403d30a83/1/NJwCswrb8Q9x-b4PRkRCRJgmPfM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:99:5a:7e:8d:bb:7e:3f:3b:6b:b3:b8:da:2e:35:c3:3f:79:
         13:54:ea:a7:9d:54:f0:7b:f4:0e:e7:74:be:c5:ee:51:88:d3:
         e3:a7:d3:7b:ee:1a:77:5c:ed:b5:85:d9:cd:72:a2:1a:96:8d:
         0c:f6:ea:27:76:a0:40:a6:c9:0b:3d:ae:c1:ba:8f:9a:f8:00:
         34:ff:49:59:ab:2b:98:97:c1:b0:8f:af:10:09:9b:99:39:9d:
         1b:5e:d4:be:30:4f:a3:01:d3:4d:bf:65:7e:b2:5e:b0:ab:2f:
         7b:2f:24:96:d8:a9:ff:c1:84:f1:14:89:37:90:da:b8:ee:8e:
         5e:49:77:1d:ff:51:ac:6c:83:18:a8:e0:b6:7c:1e:9a:b1:63:
         8b:0f:95:8f:5a:83:16:b2:4e:90:9a:7d:42:38:45:8f:32:68:
         71:70:19:7f:ec:24:87:fa:3a:8a:f6:b3:39:71:e8:d5:48:ce:
         9e:da:67:23:ee:72:a8:b1:26:e5:c0:e1:c6:d6:24:25:53:d5:
         4f:74:c9:ca:d6:46:4f:ef:f6:c0:32:83:20:1b:f3:1a:12:61:
         ae:84:d5:1a:1c:b3:e0:b2:ce:6d:8d:4e:1f:b1:9d:20:e1:14:
         67:54:c8:8c:00:60:eb:34:bf:a9:b8:43:ca:8d:d8:c2:bd:47:
         b4:26:37:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 07:54:26 2025 by rpki-client