Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/5e78f6-253a-4115-ae5d-5dc80faed2dc/1/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.mft
File:                     nnQTW7B8ZUDNMHvaCMoGdLyEyTk.mft (raw, json)
Hash identifier:          43fGDm1QSoTFTw/1nOal7l7+2OmhIQo4MIjErWvzbbc=
Subject key identifier:   54:0A:5C:F7:EB:B5:60:8D:48:68:BE:C5:E0:2F:61:58:1A:40:71:D6
Authority key identifier: 9E:74:13:5B:B0:7C:65:40:CD:30:7B:DA:08:CA:06:74:BC:84:C9:39
Certificate issuer:       /CN=9e74135bb07c6540cd307bda08ca0674bc84c939
Certificate serial:       01974B1F1D8D6E2C7CFB49903ADC5A045DFB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/5e78f6-253a-4115-ae5d-5dc80faed2dc/1/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.mft
Manifest number:          1580
Signing time:             Sat 07 Jun 2025 16:00:19 +0000
Manifest this update:     Sat 07 Jun 2025 16:00:19 +0000
Manifest next update:     Sun 08 Jun 2025 16:00:19 +0000
Files and hashes:         1: 1-T1wzl3TUKiA8m5iaH9QZh9hjp0.roa (hash: JRA15qBJeMepq09VmhJeTzptT8oyDdYWsjobeMnNOAk=)
                          2: nnQTW7B8ZUDNMHvaCMoGdLyEyTk.crl (hash: 5JBw4En5qYkkMJD9xrkREtHmvemutYyM7xk+F3D8nFQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/5e78f6-253a-4115-ae5d-5dc80faed2dc/1/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/5e78f6-253a-4115-ae5d-5dc80faed2dc/1/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 16:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:1f:1d:8d:6e:2c:7c:fb:49:90:3a:dc:5a:04:5d:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e74135bb07c6540cd307bda08ca0674bc84c939
        Validity
            Not Before: Jun  7 16:00:19 2025 GMT
            Not After : Jun  8 16:00:19 2025 GMT
        Subject: CN=540a5cf7ebb5608d4868bec5e02f61581a4071d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:22:2b:1a:99:f5:7c:e8:ad:90:82:17:41:3d:
                    14:09:05:4e:49:36:6b:63:a0:51:55:b9:71:ac:31:
                    bf:7f:62:a9:40:4d:42:e7:da:40:09:1d:8f:06:87:
                    07:2c:ae:7d:28:16:c5:18:f6:42:7d:b2:d8:0b:43:
                    2a:f0:8e:1a:f2:6b:a6:3a:01:19:75:c3:84:3c:53:
                    a9:5d:8b:9f:ec:7b:dd:1b:84:7b:41:56:2d:5e:55:
                    c7:cb:26:9a:e0:da:c5:40:81:d9:db:50:e9:d7:95:
                    ea:f9:a8:a8:a7:be:08:31:ef:c3:ff:89:95:83:10:
                    df:aa:0e:78:0b:57:05:34:32:e2:d2:0f:ca:2a:d0:
                    e7:4e:d5:64:63:c7:45:07:6b:c4:14:68:33:9d:58:
                    f0:c7:1a:90:f0:17:a5:d4:19:c1:bd:15:2f:be:c3:
                    82:d6:06:19:4e:33:f4:a1:7c:99:fb:82:72:b3:53:
                    1b:33:e6:5c:59:da:75:3f:52:2e:d4:4a:a4:87:dd:
                    84:a2:25:8a:33:2f:e4:fe:37:f9:3c:76:30:81:a6:
                    16:31:33:b6:49:9f:ab:0b:d5:02:35:26:16:69:d6:
                    c0:c9:0b:e1:51:fc:3e:45:f3:d4:04:da:5c:f8:66:
                    57:27:f3:af:68:46:12:28:14:dc:32:bf:5b:3b:c8:
                    af:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:0A:5C:F7:EB:B5:60:8D:48:68:BE:C5:E0:2F:61:58:1A:40:71:D6
            X509v3 Authority Key Identifier:
                keyid:9E:74:13:5B:B0:7C:65:40:CD:30:7B:DA:08:CA:06:74:BC:84:C9:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5e78f6-253a-4115-ae5d-5dc80faed2dc/1/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5e78f6-253a-4115-ae5d-5dc80faed2dc/1/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:9f:20:09:84:ab:c4:bd:c8:bc:18:71:3b:a7:46:cf:84:37:
         49:84:11:b3:44:94:98:4e:a3:d8:27:8f:c7:e1:eb:ae:2e:02:
         89:03:53:e9:bb:c7:12:11:28:01:ea:bf:e6:02:86:9a:c9:a7:
         37:82:74:6b:af:37:09:2f:01:6d:7f:c3:2a:04:12:db:69:17:
         c0:1c:cc:f7:1b:96:b4:2c:1f:28:29:53:cc:25:df:05:82:ad:
         41:82:1f:9b:4f:2d:a8:83:ae:d6:81:d7:50:0e:41:d4:df:f3:
         b0:23:1e:44:9f:00:85:7f:16:f5:aa:03:b1:a4:a1:b1:c9:5a:
         b3:f7:9d:04:10:1d:c3:e1:b4:b3:5d:dc:c2:e0:08:ff:f1:63:
         39:ce:f3:5e:ea:64:4d:e5:7b:26:2f:55:7f:fa:22:eb:f7:02:
         24:3e:90:4f:9c:ed:98:74:af:4e:3f:b6:c7:68:15:b6:d3:13:
         28:65:dd:96:2a:20:5c:06:9a:e5:6d:60:2d:a4:92:a0:39:09:
         9d:25:93:c7:86:fe:67:d4:f8:7d:34:91:8b:72:e4:e2:23:09:
         60:ab:74:fe:ad:e9:8b:77:7e:30:24:19:fc:02:4c:9c:ee:72:
         76:24:cf:35:67:e5:9b:3c:fb:ed:67:95:e1:1e:c3:bf:ce:d2:
         40:b5:9b:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:03:01 2025 by rpki-client