Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nbtiWqVb2O81QQr93Sorw1iiXtE.mft
File:                     nbtiWqVb2O81QQr93Sorw1iiXtE.mft (raw, json)
Hash identifier:          8copVJ0CVuUWdrrrnZCgmdbQuLRx3T5XUhhm2ow6yZ4=
Subject key identifier:   7B:9C:87:92:5D:33:70:BD:D0:2D:DC:71:BE:B0:35:0E:D8:CD:2E:52
Authority key identifier: 9D:BB:62:5A:A5:5B:D8:EF:35:41:0A:FD:DD:2A:2B:C3:58:A2:5E:D1
Certificate issuer:       /CN=9dbb625aa55bd8ef35410afddd2a2bc358a25ed1
Certificate serial:       0197493172B1F9222C7CA3E4AC04333588C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nbtiWqVb2O81QQr93Sorw1iiXtE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nbtiWqVb2O81QQr93Sorw1iiXtE.mft
Manifest number:          0285
Signing time:             Sat 07 Jun 2025 07:01:06 +0000
Manifest this update:     Sat 07 Jun 2025 07:01:06 +0000
Manifest next update:     Sun 08 Jun 2025 07:01:06 +0000
Files and hashes:         1: F_kIbrNoezU2xST1IGJ7znM97So.roa (hash: SL4bD3bCY+6YeKuV14y0PigmsFs9RgYCxYhDjlPIAW4=)
                          2: nbtiWqVb2O81QQr93Sorw1iiXtE.crl (hash: 4zCbuxzQi+rye4yOXZjP/5o22mvmnkCDb9NIYvMSwgw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nbtiWqVb2O81QQr93Sorw1iiXtE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nbtiWqVb2O81QQr93Sorw1iiXtE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nbtiWqVb2O81QQr93Sorw1iiXtE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 07:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:31:72:b1:f9:22:2c:7c:a3:e4:ac:04:33:35:88:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9dbb625aa55bd8ef35410afddd2a2bc358a25ed1
        Validity
            Not Before: Jun  7 07:01:06 2025 GMT
            Not After : Jun  8 07:01:06 2025 GMT
        Subject: CN=7b9c87925d3370bdd02ddc71beb0350ed8cd2e52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:95:ad:98:3f:d2:a4:b2:3a:44:41:64:14:d2:
                    fc:e9:26:b3:ea:d1:9d:d3:7e:32:4a:b6:e4:a8:27:
                    ca:fa:64:b6:ea:76:d2:b5:60:81:58:c4:5f:ac:4e:
                    dd:1b:f8:30:37:36:95:a1:52:32:82:d5:7c:02:4d:
                    76:62:00:77:47:f5:81:ed:79:b9:27:97:ac:e2:5b:
                    b0:91:10:17:49:98:58:09:9e:9d:0c:40:ba:4b:56:
                    9f:3f:41:6c:76:66:b2:6b:6d:79:b0:41:fd:a1:d4:
                    57:a7:9e:47:f4:8a:b8:17:5e:ee:a3:75:b8:88:50:
                    dd:b7:06:c0:83:b1:31:b4:96:fb:83:26:ef:1c:d4:
                    73:ac:3f:de:ec:1f:8f:87:d4:e1:dc:60:3e:67:90:
                    dc:67:93:a9:47:16:5f:ef:e8:50:aa:1a:96:13:d5:
                    cc:9c:c4:6e:12:06:6e:d2:a4:d9:f0:40:f2:2a:02:
                    f4:43:8f:0c:76:23:c7:5a:25:66:27:e4:cd:3d:72:
                    f6:bb:1b:4c:a8:d5:db:ef:af:c2:a8:b4:61:f3:ed:
                    8b:6f:88:8a:57:d7:72:fb:2c:24:28:b0:58:02:dc:
                    28:2d:7a:f7:55:77:9a:e6:3d:3c:66:e9:02:a6:b1:
                    fb:48:08:93:d1:c2:c6:15:01:78:67:76:d1:69:f6:
                    c4:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:9C:87:92:5D:33:70:BD:D0:2D:DC:71:BE:B0:35:0E:D8:CD:2E:52
            X509v3 Authority Key Identifier:
                keyid:9D:BB:62:5A:A5:5B:D8:EF:35:41:0A:FD:DD:2A:2B:C3:58:A2:5E:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nbtiWqVb2O81QQr93Sorw1iiXtE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nbtiWqVb2O81QQr93Sorw1iiXtE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nbtiWqVb2O81QQr93Sorw1iiXtE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:6c:df:e4:97:e5:49:50:22:d2:b5:cd:02:08:2e:f6:5e:d6:
         29:31:e0:e2:fa:76:cd:79:a9:6b:08:fe:e9:3d:e2:bd:46:89:
         c8:fd:07:6e:ff:cd:23:bb:fd:eb:d9:c3:4c:10:24:2a:ca:2f:
         07:a1:8f:99:7b:bb:2a:e5:d1:24:18:61:eb:15:05:0f:d0:c3:
         b2:61:bc:fc:a5:f9:df:ae:88:ae:fa:b0:0b:a4:ee:6f:8e:4a:
         58:59:70:fc:22:cb:42:f3:b7:e7:80:75:ac:47:90:c9:8a:c0:
         66:6b:4e:37:63:29:53:17:7f:89:85:d4:9f:26:15:7a:4b:e2:
         97:1a:6f:aa:69:53:ef:22:2e:a5:41:67:cc:27:ae:93:de:67:
         2b:6a:3f:0e:5f:80:6e:f5:c4:9f:bc:30:a0:b4:03:b7:3a:b5:
         45:7a:17:d0:e2:44:1c:f7:44:76:5c:3b:23:71:b1:f4:ad:19:
         0d:93:23:ed:ea:e8:ef:cf:d0:ef:8d:c2:9e:9e:a3:c5:25:24:
         d2:6b:1a:79:46:6c:ca:7b:d9:52:9c:a8:e6:4b:15:e3:10:27:
         c8:6c:df:25:ca:a0:e8:a2:6d:a2:3b:da:c5:30:57:de:8a:51:
         6d:8b:5d:59:cf:0c:2b:34:ad:16:d6:b3:f7:b7:5b:62:f0:6a:
         16:c5:7c:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:38:37 2025 by rpki-client