Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/eac997-ce1e-459b-9436-ed7067f987d9/1/ng3k8mJ16l_C8jyLTX4G1ys7c8c.mft
File:                     ng3k8mJ16l_C8jyLTX4G1ys7c8c.mft (raw, json)
Hash identifier:          oI05va2TP3Y9cU6A+h4Tq3gmNZxHly/cLrRQ1jZwVS4=
Subject key identifier:   0E:F8:17:8F:F8:8B:2F:4C:A4:33:3C:34:C5:4D:E4:80:9B:D8:DB:AB
Authority key identifier: 9E:0D:E4:F2:62:75:EA:5F:C2:F2:3C:8B:4D:7E:06:D7:2B:3B:73:C7
Certificate issuer:       /CN=9e0de4f26275ea5fc2f23c8b4d7e06d72b3b73c7
Certificate serial:       019636F60874DB6E70029264054344DD7BB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ng3k8mJ16l_C8jyLTX4G1ys7c8c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/eac997-ce1e-459b-9436-ed7067f987d9/1/ng3k8mJ16l_C8jyLTX4G1ys7c8c.mft
Manifest number:          0647
Signing time:             Tue 15 Apr 2025 01:00:15 +0000
Manifest this update:     Tue 15 Apr 2025 01:00:15 +0000
Manifest next update:     Wed 16 Apr 2025 01:00:15 +0000
Files and hashes:         1: ng3k8mJ16l_C8jyLTX4G1ys7c8c.crl (hash: 582Ys79mNS5gJJzYTAk/5AdPtv0b9usQhrsmPBuddIg=)
                          2: z5plCbvdkup7MxI7T8lBnb_bFXc.roa (hash: gJ70ebUSb97tS8RCU2JGa9RBjyi3gQiPSVEBaoEhFFM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/eac997-ce1e-459b-9436-ed7067f987d9/1/ng3k8mJ16l_C8jyLTX4G1ys7c8c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/eac997-ce1e-459b-9436-ed7067f987d9/1/ng3k8mJ16l_C8jyLTX4G1ys7c8c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ng3k8mJ16l_C8jyLTX4G1ys7c8c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 15 Apr 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:36:f6:08:74:db:6e:70:02:92:64:05:43:44:dd:7b:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e0de4f26275ea5fc2f23c8b4d7e06d72b3b73c7
        Validity
            Not Before: Apr 15 01:00:15 2025 GMT
            Not After : Apr 16 01:00:15 2025 GMT
        Subject: CN=0ef8178ff88b2f4ca4333c34c54de4809bd8dbab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:b3:9b:90:c9:ce:43:ab:27:05:26:07:81:68:
                    24:a1:cb:f4:ab:54:ae:82:b9:41:ed:eb:3b:2b:f9:
                    16:8f:b7:e1:a7:af:e9:a3:48:f6:64:40:fe:e2:10:
                    c5:8e:8f:83:8d:85:77:be:75:34:80:0a:d1:a5:99:
                    4b:de:12:b5:d6:2e:f0:e9:58:2b:5a:7c:a1:97:dd:
                    97:0a:c1:08:8e:ec:31:1e:ec:b7:5f:f8:d5:92:48:
                    1b:55:9c:01:c0:30:e1:fa:e8:eb:37:98:78:0b:51:
                    7f:fa:56:85:10:89:63:e7:ae:07:22:21:12:c5:a4:
                    f3:ff:7e:2b:93:85:73:cf:4d:e6:4f:7a:94:b6:7a:
                    89:d1:66:11:ec:86:dc:a5:27:ff:f9:5f:61:fd:b0:
                    9a:27:e3:49:51:09:89:ba:a8:1a:6e:1c:ba:99:b4:
                    3b:8b:ed:ca:e2:07:9c:92:ca:d2:93:19:84:82:02:
                    f0:41:9b:65:e7:d5:c0:2b:19:fb:86:57:b8:e3:e5:
                    f6:58:c2:d2:b7:1e:e8:27:2e:92:1f:a3:54:ae:e2:
                    4e:3f:62:82:4c:36:dc:fa:3c:eb:85:55:f8:43:be:
                    ec:80:c4:17:be:d6:96:41:0c:f4:15:3e:32:2f:cd:
                    41:de:5c:90:ad:44:ce:a1:a6:c4:14:84:b9:29:3b:
                    a9:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:F8:17:8F:F8:8B:2F:4C:A4:33:3C:34:C5:4D:E4:80:9B:D8:DB:AB
            X509v3 Authority Key Identifier:
                keyid:9E:0D:E4:F2:62:75:EA:5F:C2:F2:3C:8B:4D:7E:06:D7:2B:3B:73:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ng3k8mJ16l_C8jyLTX4G1ys7c8c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/eac997-ce1e-459b-9436-ed7067f987d9/1/ng3k8mJ16l_C8jyLTX4G1ys7c8c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/eac997-ce1e-459b-9436-ed7067f987d9/1/ng3k8mJ16l_C8jyLTX4G1ys7c8c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:b5:e4:06:a9:cb:52:5d:0d:aa:b3:8d:cf:a0:de:92:41:21:
         ac:82:43:00:14:80:25:84:8d:72:39:54:1e:db:13:22:2a:c9:
         e1:3d:9c:ea:94:6d:d1:c4:9e:5f:9e:4a:87:89:1f:22:a0:fc:
         95:bf:08:3b:6e:1b:e1:29:88:05:a4:d0:48:0c:01:f2:4e:25:
         8e:ec:cd:a3:6d:a3:49:e0:ab:3f:76:be:7c:65:89:7e:15:29:
         dc:6d:f3:47:49:8d:36:99:06:57:04:2a:1a:12:8e:90:e5:c0:
         ff:ad:0b:3e:97:d4:52:7b:70:5b:d2:15:5e:9e:66:2b:22:92:
         83:7c:d2:16:0f:d3:fc:94:7b:55:fc:7d:d3:2b:16:d1:fd:ff:
         de:62:97:51:23:7b:23:26:cd:06:4b:52:d5:4e:65:ff:7d:5d:
         7f:e4:9c:41:f3:93:8c:1b:f2:a9:8e:aa:29:3e:cf:ae:49:89:
         62:70:cf:fe:e2:da:fb:85:a2:31:58:c1:be:b1:05:0b:dc:5d:
         20:28:f7:39:3d:09:a5:c9:70:0a:bb:68:4d:83:4b:41:08:4a:
         5e:ec:f8:8f:05:e2:19:f3:a4:eb:f1:1d:fc:f0:d8:d9:02:04:
         7f:1c:0f:3a:5d:c0:d7:d5:15:94:70:57:71:79:2f:26:1c:0e:
         19:a2:ba:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 05:17:00 2025 by rpki-client