Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.mft
File:                     NQBF99g86xMNjWlf_n1D2zgZ3lU.mft (raw, json)
Hash identifier:          kcDN6uSxF+fyb+fr98sGpc9Kz2ni7Bfr16CE74HfQok=
Subject key identifier:   BF:7B:3D:6E:8B:03:00:D2:B9:D7:C0:DE:79:F6:4F:2B:9E:89:71:FA
Authority key identifier: 35:00:45:F7:D8:3C:EB:13:0D:8D:69:5F:FE:7D:43:DB:38:19:DE:55
Certificate issuer:       /CN=350045f7d83ceb130d8d695ffe7d43db3819de55
Certificate serial:       01963FC283B67C909C4D6457E19AF2655198
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NQBF99g86xMNjWlf_n1D2zgZ3lU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.mft
Manifest number:          13BB
Signing time:             Wed 16 Apr 2025 18:00:34 +0000
Manifest this update:     Wed 16 Apr 2025 18:00:34 +0000
Manifest next update:     Thu 17 Apr 2025 18:00:34 +0000
Files and hashes:         1: NQBF99g86xMNjWlf_n1D2zgZ3lU.crl (hash: pvWtoXdf3O6IvJgA9qLDzm9Z9TrZ9EKDWzXmenDv2B8=)
                          2: i3NuLV9-SVOSQ4rLf1Rnzi76R8s.roa (hash: F0HuxkG9RZJHtx6EFFj7jJPD9PIqUuIoXshg3545UXg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NQBF99g86xMNjWlf_n1D2zgZ3lU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 17 Apr 2025 13:16:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:3f:c2:83:b6:7c:90:9c:4d:64:57:e1:9a:f2:65:51:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=350045f7d83ceb130d8d695ffe7d43db3819de55
        Validity
            Not Before: Apr 16 18:00:34 2025 GMT
            Not After : Apr 17 18:00:34 2025 GMT
        Subject: CN=bf7b3d6e8b0300d2b9d7c0de79f64f2b9e8971fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:00:6c:17:bd:e4:0d:30:80:20:a9:eb:a0:16:
                    2f:da:06:5d:89:32:4b:ec:ce:95:b0:4e:18:bf:d8:
                    ab:e4:a0:1f:3d:53:39:0d:88:60:e8:86:f9:a7:d0:
                    e7:33:62:9d:08:80:fe:82:94:79:3f:92:4f:b3:56:
                    15:c3:d4:3c:46:2d:b6:49:00:ae:cc:a1:1a:2d:c7:
                    a0:cc:d6:3c:7a:fb:29:38:50:f6:d3:7c:e9:2a:54:
                    71:14:b2:08:7e:ed:15:70:01:9f:a3:38:5d:ca:ee:
                    ca:43:a3:8c:82:43:af:80:d9:b8:2a:29:f7:78:6b:
                    58:a7:34:bf:ca:ec:58:9f:1e:31:59:83:5a:49:ad:
                    f2:40:db:5e:1a:35:58:01:bb:cb:81:af:7c:36:9d:
                    a3:83:0f:6d:6b:9b:cc:84:e7:b7:42:ff:01:86:31:
                    0f:4b:03:22:db:4e:8a:ab:d6:9a:07:96:b2:54:95:
                    d4:be:b5:e9:a1:fc:ac:b2:a4:4b:b6:03:a2:6b:ae:
                    ca:a9:b7:3f:36:41:53:98:dd:8f:30:14:41:34:0c:
                    48:48:d8:8c:2f:cd:fe:1d:c8:91:9a:f3:55:5e:a5:
                    bf:c3:f9:ca:1f:01:c9:62:9c:00:43:50:8e:fd:d5:
                    a9:03:7e:4b:f4:15:79:d8:d9:92:f9:b8:b9:ec:eb:
                    ff:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:7B:3D:6E:8B:03:00:D2:B9:D7:C0:DE:79:F6:4F:2B:9E:89:71:FA
            X509v3 Authority Key Identifier:
                keyid:35:00:45:F7:D8:3C:EB:13:0D:8D:69:5F:FE:7D:43:DB:38:19:DE:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NQBF99g86xMNjWlf_n1D2zgZ3lU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5043fb-ccac-4fb6-869d-48e30e2f7c36/1/NQBF99g86xMNjWlf_n1D2zgZ3lU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:84:5c:1b:90:80:cb:cb:a7:0a:ac:87:6f:1a:5b:12:96:0b:
         7c:84:95:1c:e5:c8:5a:c6:28:e3:f6:0f:95:21:ed:78:76:9e:
         97:d8:c8:bf:1f:5a:9b:d4:47:97:7e:70:21:85:27:71:17:fc:
         54:71:42:52:d2:b3:ab:2c:68:a7:be:b8:07:7e:df:4e:1e:6f:
         26:6e:92:17:f6:e6:fe:86:a2:4c:01:e5:f1:bb:1e:9c:a5:c9:
         44:c6:c5:06:e4:4e:6b:30:3f:a4:bb:5e:88:cc:da:41:3e:a6:
         0b:1c:cc:ca:52:f1:b4:fa:4f:e7:7f:87:56:e5:9e:cb:f5:60:
         c7:7e:28:93:63:88:63:7e:73:ff:ca:5b:eb:49:97:d7:06:fd:
         bb:f5:ad:d9:7b:5b:d6:dd:8f:e6:0b:32:99:c1:34:62:dd:f2:
         1d:f2:9c:8c:73:81:12:23:e2:e7:fe:8c:ed:81:d2:58:76:85:
         b5:62:a0:93:24:b3:43:eb:05:34:1d:79:0d:69:52:a5:e4:19:
         bd:41:03:92:32:9b:69:55:52:b0:03:45:8b:33:61:1e:d5:b0:
         ce:51:89:b2:c2:33:e7:1b:58:48:4a:3d:c6:2d:f9:8f:1d:ab:
         22:b8:29:bd:de:44:d6:ee:c3:25:35:a4:24:2f:c6:92:a6:fe:
         be:8f:8e:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 03:21:18 2025 by rpki-client