Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/NRfJ3pJ_p1vq73iF8NiPb00qDtY.mft
File:                     NRfJ3pJ_p1vq73iF8NiPb00qDtY.mft (raw, json)
Hash identifier:          eJUgwe0wPMZ4vLvJRU5aXHzwsOnlbXwPFFb0BqRE2D0=
Subject key identifier:   C7:98:B8:43:00:4F:84:70:90:C8:1B:D3:D2:46:2C:EC:E6:B7:75:4F
Authority key identifier: 35:17:C9:DE:92:7F:A7:5B:EA:EF:78:85:F0:D8:8F:6F:4D:2A:0E:D6
Certificate issuer:       /CN=3517c9de927fa75beaef7885f0d88f6f4d2a0ed6
Certificate serial:       0197B77C0235D9B3959285EBB1BB9A1A98FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NRfJ3pJ_p1vq73iF8NiPb00qDtY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/NRfJ3pJ_p1vq73iF8NiPb00qDtY.mft
Manifest number:          0C1D
Signing time:             Sat 28 Jun 2025 17:00:46 +0000
Manifest this update:     Sat 28 Jun 2025 17:00:46 +0000
Manifest next update:     Sun 29 Jun 2025 17:00:46 +0000
Files and hashes:         1: 4jPyPZw3fj3g3jxwKw2HWrojQOs.roa (hash: KPFbCHVHeUU2XRC/hJ8YuwMme8By/aerz2iNVWzWJ/Y=)
                          2: 98C9emKFHKSWoxnRXQ4ADLcbKPE.roa (hash: CvGthRHI4SGJQkS5NvABpgXZA0TVYZ7H8kYAxXAYLqo=)
                          3: NRfJ3pJ_p1vq73iF8NiPb00qDtY.crl (hash: bwQ30W/r4Ug8QTx4H6emDlTgQNfsOHqbSVsG6iot6Bo=)
                          4: sYrkqtslIewoX_6wadaN2UhvCQg.roa (hash: Oj08Cr1VcQgzFndi/8RHmivr+b/zmwMkws7/hKkzL0k=)
                          5: ufwXrYHICWHfHKo6i-11Xy8XxDE.roa (hash: wzviVt1JzgPyofJmjOmZiOic44Kr4jKlAuGseoOoCMs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/NRfJ3pJ_p1vq73iF8NiPb00qDtY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/NRfJ3pJ_p1vq73iF8NiPb00qDtY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NRfJ3pJ_p1vq73iF8NiPb00qDtY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:7c:02:35:d9:b3:95:92:85:eb:b1:bb:9a:1a:98:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3517c9de927fa75beaef7885f0d88f6f4d2a0ed6
        Validity
            Not Before: Jun 28 17:00:46 2025 GMT
            Not After : Jun 29 17:00:46 2025 GMT
        Subject: CN=c798b843004f847090c81bd3d2462cece6b7754f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:a9:d6:ab:12:af:fa:99:e9:ad:d3:9f:6c:2a:
                    27:7d:88:5a:af:13:b7:77:b4:8a:88:14:4e:c3:a1:
                    5b:cf:59:59:35:e1:c4:16:0e:9d:c0:45:15:50:02:
                    f8:bc:46:59:7f:06:6b:4b:ec:cb:31:1d:dc:84:ee:
                    f9:4f:fc:7a:0d:b3:0a:3d:2d:ec:37:0f:7f:fe:dd:
                    e6:3d:05:16:5c:6c:54:49:61:ca:27:ff:d1:e2:bf:
                    3b:72:d5:01:b9:09:6d:8e:00:b5:a4:88:20:4e:be:
                    0d:49:ac:b1:88:c2:f8:99:13:a4:56:21:11:25:07:
                    ee:74:fe:9d:d4:76:d5:01:87:be:ed:69:82:2e:d1:
                    09:c8:e7:5c:57:92:b5:bc:45:ff:8c:55:09:f7:8c:
                    57:be:00:5e:13:ff:1e:2d:bc:93:2e:63:0b:a2:77:
                    3e:43:65:c9:2c:89:b3:56:c8:8e:42:ea:9b:87:83:
                    45:12:95:4a:8a:94:6f:3c:ca:76:33:c1:89:b3:29:
                    2b:f1:67:5c:8a:20:8c:32:81:3e:49:d3:10:8d:d5:
                    40:12:72:8c:62:22:68:58:cf:c4:25:64:ae:f7:c1:
                    2a:90:5c:0b:41:a6:d6:0b:73:9f:b4:14:78:11:b2:
                    eb:03:e9:b6:cf:0e:15:b0:42:cf:71:ae:17:33:6d:
                    65:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:98:B8:43:00:4F:84:70:90:C8:1B:D3:D2:46:2C:EC:E6:B7:75:4F
            X509v3 Authority Key Identifier:
                keyid:35:17:C9:DE:92:7F:A7:5B:EA:EF:78:85:F0:D8:8F:6F:4D:2A:0E:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRfJ3pJ_p1vq73iF8NiPb00qDtY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/NRfJ3pJ_p1vq73iF8NiPb00qDtY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/NRfJ3pJ_p1vq73iF8NiPb00qDtY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:de:62:27:54:b3:09:dc:6f:e1:ca:bb:5e:c8:70:d8:4f:21:
         8e:b2:12:21:ee:bb:d7:82:38:ce:d6:d7:88:52:4d:5d:f7:09:
         6b:69:06:7e:26:ec:59:8b:ff:f5:14:1d:d4:27:fa:f8:c1:d3:
         39:5c:e0:89:17:94:24:38:6c:54:30:c5:07:c5:d9:e1:8d:f7:
         ff:9d:a6:20:c8:a0:d3:ba:98:95:9c:20:22:d9:0d:e1:30:1f:
         46:b5:0d:5d:77:14:02:66:cd:b9:c8:8e:f6:1d:f7:8a:40:50:
         7e:c1:5b:33:c8:3e:04:56:f3:49:ec:a2:f7:7e:91:df:22:9f:
         3f:e1:93:f8:a4:21:24:b7:7f:fb:0d:73:c9:da:78:f0:14:2e:
         0f:df:2f:9c:27:0b:4b:c4:94:96:92:88:97:cb:c3:a2:ef:12:
         dd:75:d2:77:a7:be:b9:85:b7:32:67:d3:ee:32:71:63:37:47:
         8b:13:63:c8:7c:e0:a9:7f:b6:ac:89:28:60:bc:d2:89:52:37:
         10:d7:19:e1:41:70:71:6a:db:18:be:6f:9f:ba:b2:10:72:e2:
         f3:f0:16:c9:d4:bb:b2:80:b4:54:09:83:05:31:69:5f:9f:79:
         08:26:76:d2:0e:83:ec:92:c7:62:cf:34:de:d5:c6:72:69:6b:
         8a:a8:4d:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:17:24 2025 by rpki-client