Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/ac3260-7069-44f2-9ea9-394ff928f570/1/nk-ubSwl3V8vsWtPvqKE5mWMEro.mft
File:                     nk-ubSwl3V8vsWtPvqKE5mWMEro.mft (raw, json)
Hash identifier:          6mipnmTTtGNhjz7ftHnHJtX/upjYXtGH6KCw9adJGuA=
Subject key identifier:   FA:83:41:66:72:25:C0:E9:29:5D:0E:0C:D7:80:4E:57:F4:3A:B9:61
Authority key identifier: 9E:4F:AE:6D:2C:25:DD:5F:2F:B1:6B:4F:BE:A2:84:E6:65:8C:12:BA
Certificate issuer:       /CN=9e4fae6d2c25dd5f2fb16b4fbea284e6658c12ba
Certificate serial:       0196BA11376FD36062EC56871E77092601C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nk-ubSwl3V8vsWtPvqKE5mWMEro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/ac3260-7069-44f2-9ea9-394ff928f570/1/nk-ubSwl3V8vsWtPvqKE5mWMEro.mft
Manifest number:          0F2D
Signing time:             Sat 10 May 2025 12:00:12 +0000
Manifest this update:     Sat 10 May 2025 12:00:12 +0000
Manifest next update:     Sun 11 May 2025 12:00:12 +0000
Files and hashes:         1: FLJa1uRgHO4pR545s0EjhCR4g9I.roa (hash: 5Qe+7lHXv9Hk16E4Tqlbe5q64TOWj9YSYqv2nWFzqeY=)
                          2: nk-ubSwl3V8vsWtPvqKE5mWMEro.crl (hash: tijW33OvA3NjpEkjweFEyhUp0XmQgLIynyiwWjRs2lE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/ac3260-7069-44f2-9ea9-394ff928f570/1/nk-ubSwl3V8vsWtPvqKE5mWMEro.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/ac3260-7069-44f2-9ea9-394ff928f570/1/nk-ubSwl3V8vsWtPvqKE5mWMEro.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nk-ubSwl3V8vsWtPvqKE5mWMEro.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 12:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ba:11:37:6f:d3:60:62:ec:56:87:1e:77:09:26:01:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e4fae6d2c25dd5f2fb16b4fbea284e6658c12ba
        Validity
            Not Before: May 10 12:00:12 2025 GMT
            Not After : May 11 12:00:12 2025 GMT
        Subject: CN=fa8341667225c0e9295d0e0cd7804e57f43ab961
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:31:3c:7d:b0:99:80:9f:e0:7e:3f:0a:12:e8:
                    34:9d:08:21:55:8c:05:04:e4:d3:bf:8d:a7:87:eb:
                    0b:65:c9:a0:81:b6:60:23:91:c1:2c:d2:78:f7:9d:
                    0e:d9:dd:69:0c:03:54:2f:1f:25:cf:29:b6:88:a4:
                    21:24:c5:9a:52:52:c3:ed:81:ab:95:57:98:fe:7a:
                    fc:a9:f4:ea:f3:9b:03:06:53:36:36:ba:fa:97:2b:
                    fb:a9:24:10:74:ad:d6:6c:a0:4b:53:12:5b:3b:e4:
                    c6:90:37:f1:eb:18:81:da:c8:5d:d9:a9:30:f0:6c:
                    2e:5c:0e:0b:f8:2f:ab:c9:98:c3:9f:f9:6d:3c:d7:
                    21:03:c6:c6:dd:bd:a5:e5:ad:fd:e7:fa:e2:af:f3:
                    85:7c:19:1a:2f:b4:07:7e:65:98:8f:91:27:3f:57:
                    fe:a0:1d:25:36:4b:72:a6:6f:a3:e0:7b:17:43:d0:
                    18:24:f1:be:e0:68:c5:1a:b8:9a:6f:d0:ef:e9:9f:
                    9b:85:55:6b:f4:c1:52:7e:1f:40:b9:d9:46:fb:fd:
                    ef:4f:5e:52:2e:5b:97:8b:95:aa:bb:2d:ce:7a:9e:
                    88:38:6b:a2:e9:39:a0:e4:5e:43:94:c0:7a:49:7d:
                    67:6c:5e:1e:6b:d8:4f:00:b5:70:f3:ba:d4:35:59:
                    c7:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:83:41:66:72:25:C0:E9:29:5D:0E:0C:D7:80:4E:57:F4:3A:B9:61
            X509v3 Authority Key Identifier:
                keyid:9E:4F:AE:6D:2C:25:DD:5F:2F:B1:6B:4F:BE:A2:84:E6:65:8C:12:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nk-ubSwl3V8vsWtPvqKE5mWMEro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ac3260-7069-44f2-9ea9-394ff928f570/1/nk-ubSwl3V8vsWtPvqKE5mWMEro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ac3260-7069-44f2-9ea9-394ff928f570/1/nk-ubSwl3V8vsWtPvqKE5mWMEro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:c7:30:7a:25:f7:3c:10:85:74:9e:78:7a:67:69:a5:6b:81:
         5e:eb:b8:47:ad:90:60:10:ec:63:86:33:f5:ec:fa:2c:26:24:
         1e:5c:f4:da:29:5a:8f:fd:48:f5:41:92:af:45:72:64:3b:f8:
         f5:48:07:82:86:15:83:19:a5:a6:06:8f:46:14:56:e1:b0:9f:
         d1:31:f7:e7:f0:0d:39:99:c2:a2:59:38:52:79:af:b6:fc:53:
         a9:84:0c:e1:b6:52:4e:12:bb:c6:ff:a1:db:ec:8d:85:86:67:
         9e:8f:14:b4:f3:22:89:7f:bb:37:33:bc:cc:52:7c:63:ab:b5:
         a9:f7:22:2d:9a:6e:0c:71:8b:0c:0e:e0:2b:db:c7:6a:4e:dd:
         32:38:9c:4d:5b:cb:a2:f4:1d:7f:49:00:3b:d7:60:41:83:a0:
         2a:53:4a:50:dd:ce:da:0b:5b:df:c7:9e:25:de:08:13:25:2f:
         6e:7b:f0:59:df:dd:61:75:d9:48:89:4a:18:c9:92:08:0a:d3:
         9e:f5:63:5e:8b:ea:1c:2b:f2:4e:c0:ad:61:a2:2e:cf:e1:6a:
         e9:20:c7:71:40:56:cc:a7:ff:f1:39:30:bb:7f:c0:7e:1b:43:
         4a:d1:80:55:48:30:bd:17:8f:50:b2:58:bc:c3:29:d8:d0:80:
         39:0c:38:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 15:18:53 2025 by rpki-client