Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/308179-be69-4c10-8694-fbd399a4475e/1/NNUZJHQCvPvfDs6QIK1kYi6dO64.mft
File:                     NNUZJHQCvPvfDs6QIK1kYi6dO64.mft (raw, json)
Hash identifier:          imNsg+hF3HkagpDMQz7o7JyXNOdPRfnlYrZ6vGMAE80=
Subject key identifier:   3E:58:69:4A:0A:5B:8D:0E:E2:F2:21:BE:74:2C:D0:68:FB:A9:F3:E5
Authority key identifier: 34:D5:19:24:74:02:BC:FB:DF:0E:CE:90:20:AD:64:62:2E:9D:3B:AE
Certificate issuer:       /CN=34d519247402bcfbdf0ece9020ad64622e9d3bae
Certificate serial:       01976960C54AC6699DAB0ACD9593E28D0054
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NNUZJHQCvPvfDs6QIK1kYi6dO64.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/308179-be69-4c10-8694-fbd399a4475e/1/NNUZJHQCvPvfDs6QIK1kYi6dO64.mft
Manifest number:          0E1F
Signing time:             Fri 13 Jun 2025 13:00:39 +0000
Manifest this update:     Fri 13 Jun 2025 13:00:39 +0000
Manifest next update:     Sat 14 Jun 2025 13:00:39 +0000
Files and hashes:         1: 1-UL9cqmZR86h5znGrLr9rng1OoA.roa (hash: E9P7J2BtII/1SfdjE4hkF/I8cNTQ+7Tkvjo9UHiDiQ4=)
                          2: 16Vx9JFdsAydCBt8o5HI01kMvEY.roa (hash: uE6o+4HCde5Q2IcMEoOR7KpTVTAt1VCw3Ve7SEAAgA8=)
                          3: AVkM8pQNQe4Lv2gygeYw_iwNR8o.roa (hash: eBDfXYDOLbSmgkFxViph+uhEyXOWfI38ugg/5BV4TtY=)
                          4: NNUZJHQCvPvfDs6QIK1kYi6dO64.crl (hash: o2FXoCVBkdHyBwfKY1mrXdmiDFOqgc14NNfUyfkHnos=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/308179-be69-4c10-8694-fbd399a4475e/1/NNUZJHQCvPvfDs6QIK1kYi6dO64.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/308179-be69-4c10-8694-fbd399a4475e/1/NNUZJHQCvPvfDs6QIK1kYi6dO64.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NNUZJHQCvPvfDs6QIK1kYi6dO64.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 07:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:60:c5:4a:c6:69:9d:ab:0a:cd:95:93:e2:8d:00:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34d519247402bcfbdf0ece9020ad64622e9d3bae
        Validity
            Not Before: Jun 13 13:00:39 2025 GMT
            Not After : Jun 14 13:00:39 2025 GMT
        Subject: CN=3e58694a0a5b8d0ee2f221be742cd068fba9f3e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:bc:0b:22:6f:7e:4c:7e:2b:53:17:6e:c3:9f:
                    28:02:7e:8c:8a:e3:f8:96:2c:39:0a:e4:9a:41:89:
                    6b:93:ad:f3:a8:79:5b:03:6b:f0:1a:e0:78:0f:60:
                    1c:3b:f0:72:d0:c9:45:23:63:b3:e5:2d:4a:ab:c7:
                    50:09:41:a9:88:00:cd:eb:63:01:6c:19:79:45:19:
                    64:04:3b:5a:e5:72:25:ca:65:22:5a:2a:4b:0e:4d:
                    c0:ac:55:f0:f8:9f:13:bd:75:6e:fd:3d:bd:52:ad:
                    bf:d3:80:19:0d:38:01:a3:f2:1e:75:bf:b1:fe:95:
                    c9:4f:26:af:76:7e:4e:e9:54:11:ab:b2:32:82:58:
                    e7:6a:51:00:48:14:80:94:ae:3c:c0:52:b6:16:61:
                    b1:af:a6:26:02:e6:e2:18:ab:c4:ed:53:e8:d3:21:
                    94:e1:93:27:28:cb:d7:79:91:aa:9e:64:a4:84:81:
                    0c:4e:53:ee:ae:65:2e:96:21:3b:10:eb:b1:a6:11:
                    93:36:11:21:05:34:08:5e:6c:0b:b8:53:44:b7:da:
                    73:b7:78:07:23:38:9b:5d:c4:e1:26:b5:b9:e5:e8:
                    e5:b4:c2:5b:e1:ac:04:e6:42:1f:89:71:bf:a6:cf:
                    a2:51:59:40:00:d6:f8:64:cf:a8:6c:7b:b2:0c:db:
                    e1:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:58:69:4A:0A:5B:8D:0E:E2:F2:21:BE:74:2C:D0:68:FB:A9:F3:E5
            X509v3 Authority Key Identifier:
                keyid:34:D5:19:24:74:02:BC:FB:DF:0E:CE:90:20:AD:64:62:2E:9D:3B:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NNUZJHQCvPvfDs6QIK1kYi6dO64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/308179-be69-4c10-8694-fbd399a4475e/1/NNUZJHQCvPvfDs6QIK1kYi6dO64.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/308179-be69-4c10-8694-fbd399a4475e/1/NNUZJHQCvPvfDs6QIK1kYi6dO64.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:74:29:6c:97:59:16:7d:01:2e:ba:5a:54:10:93:a5:40:6f:
         d3:70:ba:d0:cd:81:04:56:e1:f7:60:bd:22:09:be:80:60:64:
         9f:cb:8c:16:c2:f9:e4:e6:d3:c8:ad:31:8b:4b:37:70:a3:57:
         d1:03:c8:6a:5a:1e:e9:6a:19:32:4d:15:88:d7:db:78:37:10:
         ed:d1:83:07:56:cf:d5:82:ea:35:29:99:f9:41:a4:ee:58:6f:
         3f:c4:99:fa:ca:58:70:41:4f:ac:8b:a2:3c:08:09:73:16:f5:
         b0:79:ab:c5:c0:29:9b:01:7b:10:87:2b:ba:23:0c:80:f2:32:
         57:38:3a:56:c7:60:1f:10:9b:01:4f:a7:65:91:c0:af:c6:57:
         ea:3a:a3:51:6c:2a:e4:8b:9c:ad:e5:5d:b9:31:95:48:42:9a:
         82:97:ec:b7:b5:20:01:4a:d9:a2:67:8c:66:d3:89:ec:f1:47:
         28:af:1a:28:2b:ae:7b:a7:cd:84:37:ef:a0:a1:43:91:87:42:
         07:60:81:d3:37:f4:08:d5:a4:99:00:c2:f4:20:66:a7:40:77:
         27:ee:45:3d:b9:21:3a:b2:f5:c3:ec:3b:4a:39:47:68:60:f1:
         f7:e1:55:60:4d:20:e9:a6:00:5a:f5:cd:57:13:0e:03:53:51:
         9c:34:0b:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 17:08:01 2025 by rpki-client