Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/ccef23-5341-41cc-9ae9-61efb6f89f0a/1/nuxqatPVR_hR05uGb7FAn6GXL78.mft
File:                     nuxqatPVR_hR05uGb7FAn6GXL78.mft (raw, json)
Hash identifier:          BHrFVuitvM5kQ9XbuWfNKwub1EY8omu5ui2R7FYaDe0=
Subject key identifier:   92:14:D7:21:C7:73:70:7C:10:E9:7B:80:14:D5:E4:8C:22:A2:B5:51
Authority key identifier: 9E:EC:6A:6A:D3:D5:47:F8:51:D3:9B:86:6F:B1:40:9F:A1:97:2F:BF
Certificate issuer:       /CN=9eec6a6ad3d547f851d39b866fb1409fa1972fbf
Certificate serial:       01974C69F1E02A6D3AFA906B4B00425D9F63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nuxqatPVR_hR05uGb7FAn6GXL78.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/ccef23-5341-41cc-9ae9-61efb6f89f0a/1/nuxqatPVR_hR05uGb7FAn6GXL78.mft
Manifest number:          1579
Signing time:             Sat 07 Jun 2025 22:01:41 +0000
Manifest this update:     Sat 07 Jun 2025 22:01:41 +0000
Manifest next update:     Sun 08 Jun 2025 22:01:41 +0000
Files and hashes:         1: nuxqatPVR_hR05uGb7FAn6GXL78.crl (hash: fe2yg3zIqZ9sTS4IKhaCDfeNNQMF+p8Z/0hylHBb8B0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/ccef23-5341-41cc-9ae9-61efb6f89f0a/1/nuxqatPVR_hR05uGb7FAn6GXL78.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/ccef23-5341-41cc-9ae9-61efb6f89f0a/1/nuxqatPVR_hR05uGb7FAn6GXL78.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nuxqatPVR_hR05uGb7FAn6GXL78.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4c:69:f1:e0:2a:6d:3a:fa:90:6b:4b:00:42:5d:9f:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9eec6a6ad3d547f851d39b866fb1409fa1972fbf
        Validity
            Not Before: Jun  7 22:01:41 2025 GMT
            Not After : Jun  8 22:01:41 2025 GMT
        Subject: CN=9214d721c773707c10e97b8014d5e48c22a2b551
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:3b:58:42:0e:f8:e7:32:e1:f6:50:a9:a5:e2:
                    e8:7b:10:d4:d0:b8:89:7c:be:f2:76:8f:5d:e3:26:
                    cb:a7:ad:0c:b0:57:08:f2:48:f9:f9:a4:8a:af:16:
                    a2:73:44:ef:b9:79:2f:16:16:9c:ae:17:52:dd:5e:
                    cc:2f:50:96:2e:0c:e6:ec:e6:90:32:91:48:b5:10:
                    29:b2:7e:07:cd:25:03:76:76:41:0e:55:08:93:c2:
                    5c:d2:3c:63:dd:6a:a2:19:01:44:8d:a8:c7:03:04:
                    74:7e:ee:04:5c:9b:53:06:a4:2c:83:e3:f5:21:82:
                    c2:f2:d0:4f:e3:0d:64:05:ba:d6:4e:11:ab:0b:52:
                    22:e5:77:46:39:92:96:4b:80:5c:a7:c5:30:1a:11:
                    88:d1:e7:7e:50:b8:3a:66:aa:d9:5f:77:48:16:4f:
                    3f:34:b1:39:33:2e:65:72:4e:d4:a1:da:08:ad:7b:
                    cf:78:63:8f:03:47:e0:7d:9c:8f:56:c4:97:44:ad:
                    ce:bd:a4:39:da:0b:36:7c:b2:44:4b:fc:fc:29:5d:
                    95:e6:b3:f4:21:f3:4f:5d:da:fd:f3:42:e5:70:e9:
                    e7:e7:3c:af:3e:7e:ee:ab:40:a3:61:d7:3c:88:ae:
                    a9:cf:1c:36:f5:a9:5d:82:18:1d:4b:d5:a5:d6:72:
                    bc:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:14:D7:21:C7:73:70:7C:10:E9:7B:80:14:D5:E4:8C:22:A2:B5:51
            X509v3 Authority Key Identifier:
                keyid:9E:EC:6A:6A:D3:D5:47:F8:51:D3:9B:86:6F:B1:40:9F:A1:97:2F:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nuxqatPVR_hR05uGb7FAn6GXL78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/ccef23-5341-41cc-9ae9-61efb6f89f0a/1/nuxqatPVR_hR05uGb7FAn6GXL78.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/ccef23-5341-41cc-9ae9-61efb6f89f0a/1/nuxqatPVR_hR05uGb7FAn6GXL78.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:1b:d3:74:08:6b:e5:49:9b:f3:5b:f6:fc:01:a7:63:31:b9:
         6a:9d:15:b6:79:5e:65:f5:af:c1:19:d2:10:ed:92:e9:ed:3a:
         40:37:cb:e5:45:d4:c1:79:3c:dc:b6:26:76:15:51:ab:0c:56:
         84:81:5c:e1:d1:45:53:08:d0:d9:af:8b:8c:15:4c:d3:8d:ce:
         29:71:09:3b:7c:dd:d7:0b:b6:19:91:0c:c5:56:56:47:b4:6e:
         11:0c:0e:e1:b8:95:7d:11:43:47:49:79:05:29:c8:f5:9a:4b:
         3c:82:8d:0c:bc:0b:99:a5:95:ea:f6:6c:ca:6e:38:3d:8c:04:
         47:18:be:f6:9b:30:9a:c7:1c:15:1a:ec:f0:b2:51:7d:50:96:
         ba:56:98:22:8e:d9:f5:11:83:8a:bf:33:2b:c8:d9:e4:ef:96:
         93:5d:ff:c0:3c:4b:da:2f:e4:c9:d3:f5:9a:21:eb:bf:8d:32:
         09:71:e3:be:0b:26:84:f3:d8:dd:f8:ac:ce:eb:07:d2:e4:28:
         4f:25:08:58:76:19:26:f4:5e:4f:d8:3e:56:8c:41:26:e0:fe:
         dc:5f:62:fa:b0:54:a0:a2:9a:f2:45:86:7a:d6:2d:16:30:61:
         de:49:a3:dd:7f:f0:27:7c:5b:f4:39:46:61:08:2f:8b:69:72:
         3c:fe:34:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:44:44 2025 by rpki-client