Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.mft
File:                     nVE44frPe2XbtXX6fUckDCeLNN8.mft (raw, json)
Hash identifier:          nikYpeOBpJRIl/QJfq10DYHJnNyAlJMTHwe2bPU9/Mo=
Subject key identifier:   E9:50:19:C7:F0:F3:46:13:24:1A:4D:3A:7C:38:D1:17:96:07:85:47
Authority key identifier: 9D:51:38:E1:FA:CF:7B:65:DB:B5:75:FA:7D:47:24:0C:27:8B:34:DF
Certificate issuer:       /CN=9d5138e1facf7b65dbb575fa7d47240c278b34df
Certificate serial:       01974AE8805D1637894C21B17E51F1D16D6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nVE44frPe2XbtXX6fUckDCeLNN8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.mft
Manifest number:          158A
Signing time:             Sat 07 Jun 2025 15:00:40 +0000
Manifest this update:     Sat 07 Jun 2025 15:00:40 +0000
Manifest next update:     Sun 08 Jun 2025 15:00:40 +0000
Files and hashes:         1: EOilBiIenaox7njpqs3_DfcHwlA.roa (hash: fzNbr06IBLk41vJ4PfPSo6OIziKfU6CFjSqPnCza+iE=)
                          2: SrPm1i3skuiVEboXgAOiwvJ0e24.roa (hash: yv8h4FDHS+rMOcdFcyHu/1yEMbW/iUuOt5Oggkr9ddY=)
                          3: mpLcK6oOkOzJN_8yv56Qh9Pb3jU.roa (hash: xqGJM6N0Wj7tHelbHPs6OohD0rdA/bMhZJppwS9pXD8=)
                          4: nVE44frPe2XbtXX6fUckDCeLNN8.crl (hash: vjR3yMhVeqyQmSVXafxo8fLRcK8xWRBVVQOQ+1+uoRM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nVE44frPe2XbtXX6fUckDCeLNN8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 15:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:e8:80:5d:16:37:89:4c:21:b1:7e:51:f1:d1:6d:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d5138e1facf7b65dbb575fa7d47240c278b34df
        Validity
            Not Before: Jun  7 15:00:40 2025 GMT
            Not After : Jun  8 15:00:40 2025 GMT
        Subject: CN=e95019c7f0f34613241a4d3a7c38d11796078547
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:cc:9b:54:49:6d:e3:55:d3:1d:8f:16:d9:22:
                    f9:92:9a:27:ff:fe:5b:cf:64:74:bc:c1:f2:99:a8:
                    80:b3:11:b6:b9:22:83:1f:b2:da:8f:8a:e9:01:9e:
                    d2:e7:57:89:da:56:0c:9e:f6:88:74:5d:33:12:13:
                    2f:df:23:09:5e:a2:60:08:97:93:ad:6e:48:39:4c:
                    05:d1:21:62:af:2d:9e:0f:e5:e5:5f:2f:ca:b5:f8:
                    6c:2f:f2:2f:38:20:e4:99:a8:71:70:35:45:14:90:
                    1c:1e:a5:1f:f8:79:68:d8:4a:8d:42:a0:9d:35:69:
                    ae:e3:fc:4c:b0:c5:23:ae:d0:4e:17:89:d8:f3:b9:
                    be:ba:12:d8:96:df:ca:56:8e:27:f9:a2:88:60:aa:
                    c2:54:6d:3a:7e:12:f9:42:54:98:22:22:ee:5c:64:
                    3c:3b:27:b9:72:d0:f6:67:4f:43:33:72:69:d9:a5:
                    41:d0:37:5e:11:56:69:09:32:30:1e:1f:36:97:72:
                    af:5e:19:c8:22:a8:26:60:06:5a:9a:a9:be:57:77:
                    e2:ff:82:e6:6e:5e:fd:ea:55:55:0b:82:b1:6e:b2:
                    70:fe:29:98:b5:5e:6f:8b:05:dc:75:56:17:6b:4a:
                    e5:97:2d:3c:fb:1e:0d:3d:d5:a3:2d:16:eb:43:8e:
                    e6:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:50:19:C7:F0:F3:46:13:24:1A:4D:3A:7C:38:D1:17:96:07:85:47
            X509v3 Authority Key Identifier:
                keyid:9D:51:38:E1:FA:CF:7B:65:DB:B5:75:FA:7D:47:24:0C:27:8B:34:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nVE44frPe2XbtXX6fUckDCeLNN8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:3a:1b:3d:b9:65:8d:3c:5c:3c:4d:b4:59:93:3f:73:a7:3c:
         9e:53:6c:21:e0:9b:8f:87:fe:6d:e5:d8:f0:ef:25:6b:2b:88:
         ba:ae:04:08:76:13:9a:31:11:ad:ef:18:a6:d5:39:1d:94:9a:
         76:90:df:a6:94:ed:a0:6a:c4:5e:2b:8e:dc:c4:71:09:c0:c1:
         2d:5f:8c:d8:e1:f9:9c:de:cc:69:5c:fa:20:28:53:fb:bf:6f:
         25:1b:06:d8:f1:12:96:33:bb:f4:83:62:1c:77:a9:a6:00:34:
         69:de:95:8f:91:e3:39:5c:59:bf:78:0f:6b:21:01:5f:da:39:
         76:a2:70:32:18:2b:c1:86:8b:56:20:da:7c:ba:20:91:59:c0:
         19:f6:fa:b8:43:c1:b2:cc:36:9e:70:57:da:b5:6f:37:be:e1:
         a7:71:88:58:b6:9b:1d:ab:22:c9:f6:45:23:82:e1:ff:32:13:
         c6:f2:0b:09:3b:87:65:cd:51:67:23:9e:08:50:9b:1e:33:b4:
         88:dc:8b:09:50:da:5b:1d:be:1e:64:df:b0:58:fe:4d:fb:9a:
         f7:97:81:09:86:37:af:0a:1f:a9:a5:1d:27:a0:1e:d8:da:f9:
         e2:97:71:7c:01:16:9c:3a:1f:28:60:6d:de:e3:3d:cd:51:18:
         50:c2:4a:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:22:30 2025 by rpki-client