Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/8ce83c-ccc8-45dd-b67e-a79d09644779/1/NPuMu3pio_Drqk5fRqvjHiXRfP0.mft
File:                     NPuMu3pio_Drqk5fRqvjHiXRfP0.mft (raw, json)
Hash identifier:          jJreu3gq+3gG4uX4kvx1moOi7zVOypPvHqPkd/GYn3c=
Subject key identifier:   17:24:63:05:6D:C5:58:9C:FF:3F:FC:E9:B1:DD:31:27:E7:52:3D:71
Authority key identifier: 34:FB:8C:BB:7A:62:A3:F0:EB:AA:4E:5F:46:AB:E3:1E:25:D1:7C:FD
Certificate issuer:       /CN=34fb8cbb7a62a3f0ebaa4e5f46abe31e25d17cfd
Certificate serial:       019847AD7ED892C2F965532FBFD762BEC83A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NPuMu3pio_Drqk5fRqvjHiXRfP0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/8ce83c-ccc8-45dd-b67e-a79d09644779/1/NPuMu3pio_Drqk5fRqvjHiXRfP0.mft
Manifest number:          0524
Signing time:             Sat 26 Jul 2025 17:00:09 +0000
Manifest this update:     Sat 26 Jul 2025 17:00:09 +0000
Manifest next update:     Sun 27 Jul 2025 17:00:09 +0000
Files and hashes:         1: NPuMu3pio_Drqk5fRqvjHiXRfP0.crl (hash: pz1/fP9bSK0zi6WoXmbdRKCF3nYmnb1HThGc4qvQNXs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/8ce83c-ccc8-45dd-b67e-a79d09644779/1/NPuMu3pio_Drqk5fRqvjHiXRfP0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/8ce83c-ccc8-45dd-b67e-a79d09644779/1/NPuMu3pio_Drqk5fRqvjHiXRfP0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NPuMu3pio_Drqk5fRqvjHiXRfP0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 17:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:47:ad:7e:d8:92:c2:f9:65:53:2f:bf:d7:62:be:c8:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34fb8cbb7a62a3f0ebaa4e5f46abe31e25d17cfd
        Validity
            Not Before: Jul 26 17:00:09 2025 GMT
            Not After : Jul 27 17:00:09 2025 GMT
        Subject: CN=172463056dc5589cff3ffce9b1dd3127e7523d71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:bb:0d:2a:0d:c7:c0:ab:50:42:dc:6e:4d:bf:
                    cc:a8:91:72:5f:12:44:c2:79:b7:7f:db:5d:b2:b5:
                    e9:5b:25:27:2d:da:62:df:8f:d1:f4:4f:50:7c:e0:
                    fb:29:e2:97:68:d0:ad:93:ae:ea:75:cd:04:a7:81:
                    34:a9:44:ad:03:8c:cd:8e:34:94:6d:37:70:b5:1f:
                    8c:12:7e:e6:02:d5:3e:a6:e8:4a:02:b1:cd:c0:04:
                    f9:f2:67:31:1f:f7:8a:f9:99:3c:d0:12:72:f6:04:
                    3c:e5:8f:1d:e8:ac:96:06:2b:5f:22:f5:fd:49:17:
                    62:2c:75:02:17:f5:d8:8c:db:1f:88:ef:c5:9e:53:
                    bb:37:de:82:40:55:8c:ff:01:60:08:08:22:17:0c:
                    d2:83:1e:3d:81:e3:f9:b1:8a:cd:05:a6:50:98:22:
                    a2:28:60:64:2b:e7:2d:c8:e2:be:08:23:ba:bb:fb:
                    ac:7c:82:bc:91:42:cc:6c:59:69:4e:3d:bb:b6:c1:
                    f0:10:4e:ab:20:3a:59:06:50:12:94:51:a2:e1:23:
                    3f:fa:59:ce:8c:05:1a:ae:49:2e:b0:61:51:e3:1a:
                    5c:cc:df:57:dd:c3:11:a1:c6:4d:58:d5:c8:9e:05:
                    9e:b3:aa:be:d7:42:e2:25:78:97:2e:dd:6d:5e:6c:
                    b8:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:24:63:05:6D:C5:58:9C:FF:3F:FC:E9:B1:DD:31:27:E7:52:3D:71
            X509v3 Authority Key Identifier:
                keyid:34:FB:8C:BB:7A:62:A3:F0:EB:AA:4E:5F:46:AB:E3:1E:25:D1:7C:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPuMu3pio_Drqk5fRqvjHiXRfP0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/8ce83c-ccc8-45dd-b67e-a79d09644779/1/NPuMu3pio_Drqk5fRqvjHiXRfP0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/8ce83c-ccc8-45dd-b67e-a79d09644779/1/NPuMu3pio_Drqk5fRqvjHiXRfP0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:13:b5:6f:d8:e5:d1:97:f6:bf:cf:57:ad:e3:c0:86:0a:e4:
         85:d3:f8:82:5c:09:a4:8f:94:f0:4d:35:bf:a0:34:11:c5:02:
         c8:3c:80:16:48:dc:c9:5c:6b:82:b2:0d:4b:6f:af:02:17:42:
         78:00:20:1b:d1:33:89:96:de:38:2a:75:ae:6a:86:34:25:78:
         e3:1b:5f:74:18:cf:cb:8b:bc:6c:39:f2:35:10:33:b7:20:cb:
         78:c4:06:0a:3b:b4:e3:5f:7f:36:92:5d:08:77:2b:82:22:93:
         54:5c:e9:94:5b:f4:52:03:b2:b8:db:53:6a:82:5e:86:5f:62:
         3d:b4:6f:60:74:6c:6a:a8:c2:5e:bd:25:8f:e9:a6:09:b5:dd:
         16:63:3f:4c:a1:96:b5:80:2b:0a:30:f7:27:11:bc:c5:5f:46:
         5d:86:33:39:f7:1f:ef:8c:aa:91:83:f9:07:bd:d6:7d:ce:d8:
         e9:c3:5a:d2:ad:14:4e:94:ba:fb:4e:f6:dc:30:0d:bb:4f:ad:
         37:24:0b:f0:50:4d:95:a3:8d:13:09:dc:e1:06:f2:ef:ae:cc:
         c0:08:45:d4:10:2c:85:96:d8:1c:f1:50:9c:00:ed:de:37:80:
         db:3d:02:e0:09:99:14:db:b9:21:f4:ea:34:35:0d:d7:6a:5a:
         7d:92:70:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:21:37 2025 by rpki-client