Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.mft
File:                     NiQhSOPmNqkDQ_PpUES439udHNk.mft (raw, json)
Hash identifier:          5+UKBqRGgikvVXvxEwm4ejuxrhjMZRMeSY35aSw7vgU=
Subject key identifier:   0F:0D:90:A4:CB:EC:C2:EB:74:2D:30:61:38:25:8B:4D:9A:6B:CA:4D
Authority key identifier: 36:24:21:48:E3:E6:36:A9:03:43:F3:E9:50:44:B8:DF:DB:9D:1C:D9
Certificate issuer:       /CN=36242148e3e636a90343f3e95044b8dfdb9d1cd9
Certificate serial:       01976A3C5A501C238524720A61DBD199343D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NiQhSOPmNqkDQ_PpUES439udHNk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.mft
Manifest number:          E8
Signing time:             Fri 13 Jun 2025 17:00:29 +0000
Manifest this update:     Fri 13 Jun 2025 17:00:29 +0000
Manifest next update:     Sat 14 Jun 2025 17:00:29 +0000
Files and hashes:         1: NiQhSOPmNqkDQ_PpUES439udHNk.crl (hash: hHmZtfCoEugH0t9wJ6kz/GS4rsOIsTXYEXypTVeGIKY=)
                          2: zIR-Nz3H2D4s_KM8Bm98PoR8Mws.roa (hash: vxeo0iUuDX5Ze9Stf4uTh6KeWV+Vu5qvbWwTZuqVEFY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NiQhSOPmNqkDQ_PpUES439udHNk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 16:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6a:3c:5a:50:1c:23:85:24:72:0a:61:db:d1:99:34:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36242148e3e636a90343f3e95044b8dfdb9d1cd9
        Validity
            Not Before: Jun 13 17:00:29 2025 GMT
            Not After : Jun 14 17:00:29 2025 GMT
        Subject: CN=0f0d90a4cbecc2eb742d306138258b4d9a6bca4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:88:76:bd:be:c5:27:f2:9c:3f:41:29:a0:c7:
                    21:e3:6d:bc:37:4e:db:da:16:86:a6:76:fc:94:b1:
                    dc:52:c3:67:37:6f:3d:ac:21:ef:4f:c8:94:95:a6:
                    13:d8:54:3a:88:70:10:26:7b:f8:6c:a6:1d:93:cb:
                    b0:0a:d3:75:d6:f9:14:c8:3f:ad:e1:1c:f4:b2:f4:
                    96:8b:22:50:bf:c3:81:7e:78:e8:d8:1b:fb:61:50:
                    78:53:4d:20:e1:d2:a4:5a:fc:81:65:84:f9:81:31:
                    02:5a:4a:b6:cc:c2:de:1a:8f:c2:e6:64:64:06:65:
                    95:5a:7d:74:34:45:2c:d6:14:a8:a8:be:75:e1:58:
                    d9:14:81:23:c7:a8:d2:a7:24:2a:49:0e:a4:1b:2d:
                    65:cd:4a:ef:de:ee:20:2d:14:41:68:e1:ec:7d:a7:
                    d8:aa:00:39:c9:b3:1e:15:db:e5:c9:eb:35:92:80:
                    ba:aa:47:62:63:b0:fc:00:94:82:71:76:fa:50:69:
                    a0:29:67:bd:c7:76:58:8a:3e:c7:1e:40:8b:12:bc:
                    e4:39:bb:59:90:99:0b:4c:d5:64:bd:78:f7:c2:70:
                    23:18:f0:8d:84:49:43:a8:64:a8:ee:63:f7:08:3b:
                    5f:82:de:9f:60:5c:17:36:c5:73:2d:d5:7c:fb:4d:
                    a8:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:0D:90:A4:CB:EC:C2:EB:74:2D:30:61:38:25:8B:4D:9A:6B:CA:4D
            X509v3 Authority Key Identifier:
                keyid:36:24:21:48:E3:E6:36:A9:03:43:F3:E9:50:44:B8:DF:DB:9D:1C:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NiQhSOPmNqkDQ_PpUES439udHNk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:74:2c:9e:34:2d:55:cb:bf:54:75:b3:1e:79:fb:51:fa:9c:
         3f:53:63:65:f3:40:09:d9:80:70:f2:55:c3:4a:cf:2f:c1:6d:
         12:9d:15:89:14:a2:57:8d:5e:6e:96:90:d5:87:76:07:87:df:
         c7:64:03:13:ef:61:b7:47:87:85:49:93:53:35:8d:a1:5d:00:
         9c:b2:e3:6e:e7:5e:2d:5b:04:8c:6d:84:c7:44:e7:dd:ed:e6:
         d1:3e:5c:63:c7:44:9e:6b:8e:1f:e9:11:68:ea:3f:41:21:2a:
         b2:02:73:fe:3d:91:a7:88:37:f0:ef:85:2d:c3:f9:fc:e3:b4:
         9c:8f:17:be:c5:6a:9e:d1:60:67:42:d7:99:0d:4e:c9:a6:52:
         e4:55:ca:ff:46:db:3e:2e:dc:d2:86:c2:eb:fb:46:b4:22:8c:
         df:dd:9b:ba:fe:54:ee:1e:22:87:56:9a:ed:f7:42:3b:09:22:
         ca:f9:d1:cb:aa:5a:16:d5:29:f0:21:17:c6:37:bd:de:f3:eb:
         3e:36:62:04:01:be:51:d9:9d:c5:d9:f1:2b:ac:1a:3b:59:8b:
         03:eb:c0:90:96:6c:19:29:01:d4:af:ab:9c:ad:2b:d6:3c:d3:
         b2:b5:c4:ef:c9:73:44:40:36:d9:5f:ca:1f:54:40:5a:37:71:
         fd:e7:68:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 22:35:32 2025 by rpki-client