Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.mft
File:                     NiQhSOPmNqkDQ_PpUES439udHNk.mft (raw, json)
Hash identifier:          tAAv3a5Pq9LNmKTnYsDjwAT9pKj8AJkIF+8Wh4ldwZU=
Subject key identifier:   5B:EF:3E:61:97:D0:6E:F4:78:97:3D:36:19:0E:02:44:C6:8F:4F:1D
Authority key identifier: 36:24:21:48:E3:E6:36:A9:03:43:F3:E9:50:44:B8:DF:DB:9D:1C:D9
Certificate issuer:       /CN=36242148e3e636a90343f3e95044b8dfdb9d1cd9
Certificate serial:       019771F5D8FFC1355F992DF503FADD9564D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NiQhSOPmNqkDQ_PpUES439udHNk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.mft
Manifest number:          EC
Signing time:             Sun 15 Jun 2025 05:00:26 +0000
Manifest this update:     Sun 15 Jun 2025 05:00:26 +0000
Manifest next update:     Mon 16 Jun 2025 05:00:26 +0000
Files and hashes:         1: NiQhSOPmNqkDQ_PpUES439udHNk.crl (hash: Ov9nFJYKBdx7r/JEUVejN1a9RTDzNamGdS20ZlWJ7xA=)
                          2: zIR-Nz3H2D4s_KM8Bm98PoR8Mws.roa (hash: vxeo0iUuDX5Ze9Stf4uTh6KeWV+Vu5qvbWwTZuqVEFY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NiQhSOPmNqkDQ_PpUES439udHNk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 04:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:71:f5:d8:ff:c1:35:5f:99:2d:f5:03:fa:dd:95:64:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36242148e3e636a90343f3e95044b8dfdb9d1cd9
        Validity
            Not Before: Jun 15 05:00:26 2025 GMT
            Not After : Jun 16 05:00:26 2025 GMT
        Subject: CN=5bef3e6197d06ef478973d36190e0244c68f4f1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d3:5a:a8:dc:60:d5:29:b8:1e:d4:15:2c:9b:
                    f7:cc:cb:e1:a2:0b:fe:79:56:db:31:ea:0d:ac:5c:
                    fc:dc:03:52:9d:8d:ae:d5:4a:b3:30:e0:e1:91:61:
                    2a:a4:16:3f:0d:24:f9:f5:bb:ab:30:f1:4b:02:0f:
                    c1:7d:83:d2:7a:c8:5a:a5:de:44:12:de:7c:72:3c:
                    2d:d2:a5:d0:d9:93:ae:db:14:be:23:65:33:fe:84:
                    c5:76:6d:ee:1e:a5:68:8d:b7:2c:72:de:b1:fe:d0:
                    a6:3c:14:ba:19:d4:d5:6d:37:6e:a2:02:75:c2:ee:
                    5d:02:42:b9:20:8d:b0:cf:90:57:97:b1:a5:9a:1d:
                    87:79:95:1e:b7:bc:3a:72:a1:ce:3e:12:18:67:74:
                    8c:85:07:4e:ea:5d:e6:0f:59:0b:3d:5b:c6:08:90:
                    2f:c5:32:8e:dc:c2:b6:2b:b9:95:10:c2:a0:67:4b:
                    64:20:00:76:31:70:c8:92:93:4d:4d:62:4b:f5:7c:
                    31:8f:ce:b5:13:6d:6c:d2:00:54:19:33:c3:0a:ed:
                    a2:ea:17:e8:e5:01:5e:0c:cf:41:07:d5:2c:0a:5e:
                    aa:78:23:5a:bb:d9:8f:d2:06:d4:4b:b0:28:0e:4c:
                    1a:6f:75:e3:d6:81:19:02:14:7d:cf:ba:bb:dc:5e:
                    60:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:EF:3E:61:97:D0:6E:F4:78:97:3D:36:19:0E:02:44:C6:8F:4F:1D
            X509v3 Authority Key Identifier:
                keyid:36:24:21:48:E3:E6:36:A9:03:43:F3:E9:50:44:B8:DF:DB:9D:1C:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NiQhSOPmNqkDQ_PpUES439udHNk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:0a:34:de:42:2e:6d:44:b0:b1:08:fd:7a:14:8a:23:48:06:
         2b:90:58:dd:78:92:6e:32:56:d9:1f:1e:0f:a5:16:a4:4f:8f:
         bb:0f:ca:a1:5e:dd:8a:35:f9:3d:8a:c3:f0:8b:51:4b:49:62:
         ba:85:04:5f:f0:b8:69:d0:f9:9d:c7:23:ae:17:64:b4:2c:a9:
         40:25:30:4d:2b:d3:8c:1f:4f:ad:9e:4b:a1:dd:4e:ea:39:0b:
         ca:1d:ca:04:93:8e:fe:ee:fe:56:05:42:b8:6e:f5:94:6e:06:
         4e:f0:d0:bb:eb:40:14:b8:8c:9e:4f:eb:f6:80:dc:9a:17:16:
         ef:45:2f:96:f4:9f:7c:3b:b4:db:d8:f0:d3:99:55:74:93:88:
         13:55:3d:1a:aa:21:4f:76:a3:12:75:16:3d:72:b6:0c:cc:22:
         f5:f8:3b:ac:2f:45:6c:b6:61:13:cb:8c:3e:cb:36:11:ac:40:
         71:4f:12:18:22:63:13:07:8e:85:fd:d1:e5:59:08:d8:ee:48:
         77:53:9f:c8:79:77:3d:cf:ee:87:94:12:11:6d:a3:db:8e:91:
         f4:e4:70:52:d5:85:b4:c1:4f:36:27:44:eb:88:33:de:e5:b5:
         4b:1e:73:b4:dc:58:ee:a1:5c:27:de:e1:3b:db:b5:e8:5f:56:
         22:2f:98:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 11:52:50 2025 by rpki-client