Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/NrVfs00p-WJUUTKgJbUmRP3_v28.mft
File:                     NrVfs00p-WJUUTKgJbUmRP3_v28.mft (raw, json)
Hash identifier:          /TJPo78lN3yjY+WYggGF/+LZOWAI5vmseuWMYkd/+ac=
Subject key identifier:   7F:5D:CC:B0:40:B7:E9:6D:36:10:5B:C1:60:1E:10:05:7B:16:03:AC
Authority key identifier: 36:B5:5F:B3:4D:29:F9:62:54:51:32:A0:25:B5:26:44:FD:FF:BF:6F
Certificate issuer:       /CN=36b55fb34d29f962545132a025b52644fdffbf6f
Certificate serial:       01960C43B3C787627A81F049020577DAF9F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NrVfs00p-WJUUTKgJbUmRP3_v28.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/NrVfs00p-WJUUTKgJbUmRP3_v28.mft
Manifest number:          10B5
Signing time:             Sun 06 Apr 2025 18:01:25 +0000
Manifest this update:     Sun 06 Apr 2025 18:01:25 +0000
Manifest next update:     Mon 07 Apr 2025 18:01:25 +0000
Files and hashes:         1: 7dJIur2rO8jTQ_NHZt4L26PKtBw.roa (hash: fR/fcQi32Cz8cbo8M3f8TE+0bMDxdxf78ySV2CU/bwY=)
                          2: EzVC6hFH0RtKA1lARrwdwMJ07Q0.roa (hash: 2S3sYcvaMN06mor0RfdxJiX/gftEZ6TMLtUoAQi1mDE=)
                          3: NrVfs00p-WJUUTKgJbUmRP3_v28.crl (hash: ICRgIoS3+tRFvqTP/SN1q4upKxx69L5OSAFpm1x553I=)
                          4: Wqg9hZ9wuWYWaqC8TF_Eeg_AEfc.roa (hash: 0aRSdpBzh4xSW9RCKPtMxwA4FTF50Xso2kHVHvgf+yc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/NrVfs00p-WJUUTKgJbUmRP3_v28.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/NrVfs00p-WJUUTKgJbUmRP3_v28.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NrVfs00p-WJUUTKgJbUmRP3_v28.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 07 Apr 2025 10:07:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:0c:43:b3:c7:87:62:7a:81:f0:49:02:05:77:da:f9:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36b55fb34d29f962545132a025b52644fdffbf6f
        Validity
            Not Before: Apr  6 18:01:25 2025 GMT
            Not After : Apr  7 18:01:25 2025 GMT
        Subject: CN=7f5dccb040b7e96d36105bc1601e10057b1603ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:24:57:3b:eb:e8:00:40:39:e4:be:7c:fd:2e:
                    b9:fc:d5:14:0b:ad:ad:f6:b7:31:a5:50:8c:00:c2:
                    36:9a:78:d8:91:e0:46:b4:51:56:5f:4e:87:bf:2f:
                    99:6c:b8:31:c5:a1:6a:ae:32:a5:8f:9a:7d:fb:43:
                    37:28:98:36:38:61:f1:11:c2:3c:df:4e:4d:ae:a6:
                    7a:9e:67:f4:ba:9f:77:e0:40:69:6a:85:4c:37:bf:
                    a5:1f:01:e5:b9:15:1b:f9:26:30:18:15:7c:dc:2b:
                    0a:2d:ec:83:8b:f6:fa:91:bc:1a:36:ed:35:a4:80:
                    ba:69:f0:de:79:4e:b8:4b:c9:4d:2a:ba:e5:a8:2e:
                    af:31:4e:eb:e4:32:60:c3:4d:d9:72:94:f0:b8:aa:
                    48:0b:5b:00:12:54:bd:e7:31:da:96:e9:16:3c:fb:
                    2a:c2:2b:e6:4a:cb:8f:a4:d9:6f:75:be:cb:8a:a9:
                    e7:c5:32:ed:de:53:62:73:91:86:c4:bc:03:7e:0c:
                    18:9e:e4:57:5b:eb:01:ae:4b:06:44:6c:39:e1:cb:
                    0e:89:74:3c:f8:96:1d:0c:a0:92:2c:30:1a:23:43:
                    a5:6d:a9:ed:54:fa:ea:3e:43:2d:9c:76:92:d2:0f:
                    5e:5e:91:da:29:a8:46:fc:97:d1:ab:85:cd:cf:41:
                    34:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:5D:CC:B0:40:B7:E9:6D:36:10:5B:C1:60:1E:10:05:7B:16:03:AC
            X509v3 Authority Key Identifier:
                keyid:36:B5:5F:B3:4D:29:F9:62:54:51:32:A0:25:B5:26:44:FD:FF:BF:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NrVfs00p-WJUUTKgJbUmRP3_v28.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/NrVfs00p-WJUUTKgJbUmRP3_v28.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/NrVfs00p-WJUUTKgJbUmRP3_v28.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:ef:88:c4:e5:53:66:be:ab:f2:fe:0d:81:b7:be:a5:a0:79:
         e7:4b:ae:9f:cd:9f:ae:87:5a:06:2f:62:c4:3b:9f:e8:d4:d5:
         72:e1:c2:cb:8d:a2:aa:eb:75:e3:d0:fc:df:1d:e0:6d:47:5b:
         cf:94:74:dc:c5:b8:4f:78:51:4a:11:a4:73:95:29:1d:79:e3:
         3a:3e:09:2b:0c:31:dd:d8:f5:58:b8:9e:69:86:ea:3e:6d:0c:
         05:ec:9e:bf:a5:ab:33:49:a5:cd:07:62:d3:7e:ff:c5:5b:b0:
         b3:7b:5c:43:26:44:b6:57:e5:63:8f:d4:a2:ae:03:69:58:4f:
         48:77:34:a6:a8:8e:4c:3e:e1:08:da:46:ae:64:9c:da:1b:97:
         25:e3:78:ea:b5:12:f9:ec:bd:7f:4e:5b:0c:68:2e:f5:62:3a:
         ec:c0:71:29:28:d4:9a:25:e6:59:4e:cc:1d:01:b1:14:a5:48:
         9b:60:82:b1:2f:df:11:c9:79:46:f9:23:e7:bb:ed:37:d6:dd:
         29:2d:1c:78:23:fe:70:d8:fa:1f:4f:aa:3f:55:6c:f1:5a:c8:
         a2:85:1a:4b:5b:23:ff:e9:cc:2e:39:d3:56:e3:ba:ee:58:1e:
         6a:6c:6a:e6:4f:77:dd:ef:01:21:8d:59:b8:d5:c6:de:db:01:
         34:cf:0e:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:07:13 2025 by rpki-client