Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/16429c-9334-4705-8821-3f2eb56b2bd3/1/Nyha4i1x7yRHjwyuwPKcfdkUw8g.mft
File:                     Nyha4i1x7yRHjwyuwPKcfdkUw8g.mft (raw, json)
Hash identifier:          5sb8AZt0e7oPI/iScibfH89Utuo7u0+F9HsOhmhIhOQ=
Subject key identifier:   75:90:9E:66:E2:7B:F2:94:5D:48:45:A4:77:7D:17:D0:A8:00:DC:C3
Authority key identifier: 37:28:5A:E2:2D:71:EF:24:47:8F:0C:AE:C0:F2:9C:7D:D9:14:C3:C8
Certificate issuer:       /CN=37285ae22d71ef24478f0caec0f29c7dd914c3c8
Certificate serial:       0197654D184C17AC51E7750DCB4A2854C649
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nyha4i1x7yRHjwyuwPKcfdkUw8g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/16429c-9334-4705-8821-3f2eb56b2bd3/1/Nyha4i1x7yRHjwyuwPKcfdkUw8g.mft
Manifest number:          075A
Signing time:             Thu 12 Jun 2025 18:00:40 +0000
Manifest this update:     Thu 12 Jun 2025 18:00:40 +0000
Manifest next update:     Fri 13 Jun 2025 18:00:40 +0000
Files and hashes:         1: GfCkDNWZJC7tTqAONgQkcSI9t8c.roa (hash: ioLhHD20h58KhY7GJ61ivoHQWsANqXCHQxdSr8iWjVQ=)
                          2: Nyha4i1x7yRHjwyuwPKcfdkUw8g.crl (hash: J4nFD47ncsl0NIWcjls4ybBxTwnfDP8VwZ9da9zB628=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/16429c-9334-4705-8821-3f2eb56b2bd3/1/Nyha4i1x7yRHjwyuwPKcfdkUw8g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/16429c-9334-4705-8821-3f2eb56b2bd3/1/Nyha4i1x7yRHjwyuwPKcfdkUw8g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Nyha4i1x7yRHjwyuwPKcfdkUw8g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:65:4d:18:4c:17:ac:51:e7:75:0d:cb:4a:28:54:c6:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37285ae22d71ef24478f0caec0f29c7dd914c3c8
        Validity
            Not Before: Jun 12 18:00:40 2025 GMT
            Not After : Jun 13 18:00:40 2025 GMT
        Subject: CN=75909e66e27bf2945d4845a4777d17d0a800dcc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:4a:e3:9a:af:83:53:db:e1:77:c8:92:13:ba:
                    0c:7b:98:a3:bd:c4:63:05:34:ee:94:70:5f:4a:6d:
                    23:d7:58:6f:fc:33:40:8c:8f:11:4e:a7:60:23:1a:
                    12:70:6b:6c:0c:c0:7a:46:a9:9e:50:d7:61:40:aa:
                    47:03:8b:b0:b8:cb:c7:a0:8c:8d:ea:62:00:60:23:
                    4d:5a:35:29:68:bb:da:ec:54:67:50:7c:b4:a4:91:
                    8b:f4:ff:4f:40:9f:1d:69:2d:d3:65:b8:33:b1:14:
                    69:85:df:08:8a:c3:bd:10:2e:58:38:c8:a7:1a:39:
                    e6:5a:02:3c:53:24:a4:3d:05:4a:a5:e9:b8:4b:a4:
                    e8:ca:65:09:0b:4f:71:8f:06:c6:66:b1:0b:dc:bf:
                    9e:5c:18:60:ac:e2:78:5c:58:4b:af:a4:cb:4d:dc:
                    b4:1a:d6:f0:b8:05:14:00:f5:ef:65:bb:d2:e9:59:
                    5b:97:9a:e4:4a:82:ab:51:31:74:ce:3b:8a:fd:98:
                    59:38:b2:a2:88:da:78:51:d2:58:85:ca:98:ee:0c:
                    b4:19:9b:f1:19:4f:df:5b:9c:49:b7:ee:c6:c2:02:
                    c1:b3:23:39:20:b7:3d:97:7e:9d:e6:e1:b1:c0:35:
                    c7:2d:cb:e0:d1:13:40:e0:05:40:57:4b:50:89:f1:
                    bf:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:90:9E:66:E2:7B:F2:94:5D:48:45:A4:77:7D:17:D0:A8:00:DC:C3
            X509v3 Authority Key Identifier:
                keyid:37:28:5A:E2:2D:71:EF:24:47:8F:0C:AE:C0:F2:9C:7D:D9:14:C3:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nyha4i1x7yRHjwyuwPKcfdkUw8g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/16429c-9334-4705-8821-3f2eb56b2bd3/1/Nyha4i1x7yRHjwyuwPKcfdkUw8g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/16429c-9334-4705-8821-3f2eb56b2bd3/1/Nyha4i1x7yRHjwyuwPKcfdkUw8g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:97:2c:bd:15:cc:99:4d:3a:a7:70:f4:7f:97:8a:5c:7d:3e:
         8d:84:df:5a:42:43:d5:96:f9:b2:1d:71:50:8e:52:c7:98:ea:
         09:20:2b:88:6b:b9:73:b2:d5:1e:63:df:49:38:b8:7e:73:f0:
         78:48:3b:bf:05:c4:b0:4a:5d:a7:aa:28:bd:57:e4:d4:61:85:
         9f:d5:64:89:a4:b9:cf:d0:c7:2b:a4:a1:fd:7f:ed:09:b4:3e:
         70:8f:c3:24:99:ee:e4:27:77:5d:c7:c1:3e:06:0e:38:8b:27:
         c9:ff:ab:6f:8f:97:20:64:f7:a0:e7:05:6d:c7:35:74:41:8e:
         61:fa:03:ba:0f:f4:b3:5e:46:36:df:19:5e:c3:cc:14:d4:d8:
         20:ab:55:5c:f2:3e:a2:d5:19:3b:46:d8:13:2c:d7:a2:18:e2:
         77:fb:6e:13:ad:7e:55:4b:ae:ac:5e:66:6d:9b:97:51:37:3c:
         01:97:73:5f:d6:4a:a7:cb:95:df:d1:d2:66:7a:1d:2c:f4:b3:
         a8:13:aa:d5:4b:72:98:20:0c:f7:4c:e0:39:b6:b8:4a:3e:b2:
         ad:4a:45:4b:16:3b:23:d3:30:c6:2f:87:fd:62:6d:36:2e:90:
         ce:ca:82:59:56:2a:f2:36:b5:63:e3:39:f0:6e:aa:c8:47:89:
         70:6d:6e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 20:55:39 2025 by rpki-client