Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/29c8eb-61e2-4aad-9aa4-3279137fde44/1/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.mft
File:                     NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.mft (raw, json)
Hash identifier:          tmIsQwfWAhT5HBdGl+MiEdDZjJliUDkxEibEuSK9MPY=
Subject key identifier:   14:69:FF:A0:8A:E2:66:D0:67:5B:8F:A8:20:01:43:5C:B3:50:51:4E
Authority key identifier: 34:38:0C:FB:A3:4B:61:F5:DB:45:65:14:59:28:D9:E4:AD:D9:30:EB
Certificate issuer:       /CN=34380cfba34b61f5db4565145928d9e4add930eb
Certificate serial:       0197635EEF1E873C4088F3AF5F3EA44759EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/29c8eb-61e2-4aad-9aa4-3279137fde44/1/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.mft
Manifest number:          3F
Signing time:             Thu 12 Jun 2025 09:00:55 +0000
Manifest this update:     Thu 12 Jun 2025 09:00:55 +0000
Manifest next update:     Fri 13 Jun 2025 09:00:55 +0000
Files and hashes:         1: NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.crl (hash: dYlYFwXckrps+e8oYQY7C66/z8BkRhoBNluYf3phlFw=)
                          2: eNjKHdv8IHiSMT5DlWURZ12GtE8.roa (hash: 0PyZvOHXEJvjs+fUIrJG3NCT3v2ngertxaHruNIycnQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/29c8eb-61e2-4aad-9aa4-3279137fde44/1/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/29c8eb-61e2-4aad-9aa4-3279137fde44/1/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:63:5e:ef:1e:87:3c:40:88:f3:af:5f:3e:a4:47:59:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34380cfba34b61f5db4565145928d9e4add930eb
        Validity
            Not Before: Jun 12 09:00:55 2025 GMT
            Not After : Jun 13 09:00:55 2025 GMT
        Subject: CN=1469ffa08ae266d0675b8fa82001435cb350514e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a0:53:46:f0:83:1a:38:a6:85:ef:70:f2:e4:
                    7a:42:c4:92:99:d9:f9:cb:77:a0:ed:95:b9:5a:ef:
                    43:a0:2b:6e:53:7f:4a:b5:6b:ca:7f:0a:fc:43:ba:
                    6a:84:6b:ea:7f:ea:a4:b0:e4:e4:f2:f2:cf:82:a8:
                    78:02:97:68:97:b3:95:e5:10:cb:ce:e7:be:f0:96:
                    ea:bf:94:3f:6a:dc:d1:04:30:fb:27:f1:3e:08:a8:
                    1b:f8:12:53:7b:ba:e9:5b:dc:35:da:1c:47:4f:68:
                    2e:04:f1:ae:61:67:32:98:8b:07:23:6d:6f:48:d3:
                    a6:9f:60:55:51:d8:34:3a:72:09:f2:4f:3d:bd:f2:
                    96:85:bf:25:60:34:e9:b1:ae:a1:a4:03:83:a8:ca:
                    9a:fc:d5:ea:b6:0a:86:15:d3:4a:a8:1f:6b:4e:4c:
                    a7:35:3e:6e:85:7f:1f:d4:64:43:fd:66:0d:b1:ab:
                    f5:40:1f:c8:a6:9b:fa:50:6c:bf:f1:0a:47:0d:6c:
                    11:be:a1:ec:ce:b6:c8:8a:1c:07:c0:c4:a5:a6:4a:
                    38:68:62:82:d4:22:4a:27:a3:7e:0c:07:d5:dd:25:
                    92:e7:5d:d8:6c:7f:b4:47:59:f5:c9:80:e2:3e:e8:
                    1b:94:4e:42:60:4b:66:a4:ef:9a:09:72:47:d6:d4:
                    2b:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:69:FF:A0:8A:E2:66:D0:67:5B:8F:A8:20:01:43:5C:B3:50:51:4E
            X509v3 Authority Key Identifier:
                keyid:34:38:0C:FB:A3:4B:61:F5:DB:45:65:14:59:28:D9:E4:AD:D9:30:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/29c8eb-61e2-4aad-9aa4-3279137fde44/1/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/29c8eb-61e2-4aad-9aa4-3279137fde44/1/NDgM-6NLYfXbRWUUWSjZ5K3ZMOs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:40:79:98:2b:9b:36:07:31:64:c8:38:c1:90:cf:d8:dc:89:
         e2:e8:3f:bf:f8:b6:b0:31:6b:ac:81:6b:02:ee:b3:a4:92:ed:
         db:b1:9e:1b:ac:da:60:98:e8:d5:31:28:28:af:56:2f:d5:ac:
         b1:d3:53:2a:cb:69:ec:6b:e2:13:ab:97:c3:2e:40:ef:66:ab:
         7e:49:d6:7d:e1:b6:e1:87:fc:60:68:73:24:f9:3d:0a:c9:7e:
         f8:71:01:b6:a7:93:b3:02:21:a5:15:9f:69:63:8b:d5:63:e2:
         8d:f1:9a:79:c7:4d:e4:18:48:bb:17:ee:52:c2:ec:b4:e2:47:
         4b:ef:3f:5e:9b:7e:c6:d0:11:36:c1:f4:4a:ab:25:8f:a8:23:
         11:9b:f9:5b:15:db:c4:6a:d7:85:33:24:10:5e:df:8e:68:ca:
         ee:e4:5a:0e:b4:8c:76:35:c4:2b:be:76:66:17:eb:9f:3d:86:
         6c:ba:a7:8a:b5:81:a1:fd:5a:77:38:04:d3:c0:d6:8e:88:bf:
         b1:4b:dc:24:c4:5e:98:ba:87:b5:d6:b8:d4:80:4c:4b:27:48:
         63:fa:e9:c8:54:54:27:05:60:a2:70:eb:0b:f3:8f:bc:7c:13:
         e3:a5:a2:bf:9c:d6:8c:23:36:a4:ad:ea:ea:68:09:12:80:d1:
         50:36:ae:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 14:10:13 2025 by rpki-client