Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/47d21c-604b-47d8-a333-708b68c856cf/1/ngpS_uIoDW8jG7aiYibmU1Fw8f4.mft
File:                     ngpS_uIoDW8jG7aiYibmU1Fw8f4.mft (raw, json)
Hash identifier:          gNPEfLuRCFZDMwCfl0zQnpVlzHuoqDU67bva9zTDSME=
Subject key identifier:   1A:A8:86:E0:2C:A5:E8:13:E8:54:A0:6F:3F:5A:FA:08:2C:AA:D3:FB
Authority key identifier: 9E:0A:52:FE:E2:28:0D:6F:23:1B:B6:A2:62:26:E6:53:51:70:F1:FE
Certificate issuer:       /CN=9e0a52fee2280d6f231bb6a26226e6535170f1fe
Certificate serial:       0196458DAD82A162FAE132A18B42723428D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ngpS_uIoDW8jG7aiYibmU1Fw8f4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/47d21c-604b-47d8-a333-708b68c856cf/1/ngpS_uIoDW8jG7aiYibmU1Fw8f4.mft
Manifest number:          113C
Signing time:             Thu 17 Apr 2025 21:00:35 +0000
Manifest this update:     Thu 17 Apr 2025 21:00:35 +0000
Manifest next update:     Fri 18 Apr 2025 21:00:35 +0000
Files and hashes:         1: 96ceGnLozFWN_QTriAA9ffT0NZo.roa (hash: xYD9mhJQTnDUO7IrqsbDyJlQ0+k0aFVeTHj0N17MtSI=)
                          2: ngpS_uIoDW8jG7aiYibmU1Fw8f4.crl (hash: fKYOQgB2h5zp9NctVk9nyhSHUwkQFlEZaqGT86Y9vmE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/47d21c-604b-47d8-a333-708b68c856cf/1/ngpS_uIoDW8jG7aiYibmU1Fw8f4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/47d21c-604b-47d8-a333-708b68c856cf/1/ngpS_uIoDW8jG7aiYibmU1Fw8f4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ngpS_uIoDW8jG7aiYibmU1Fw8f4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 21:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:45:8d:ad:82:a1:62:fa:e1:32:a1:8b:42:72:34:28:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e0a52fee2280d6f231bb6a26226e6535170f1fe
        Validity
            Not Before: Apr 17 21:00:35 2025 GMT
            Not After : Apr 18 21:00:35 2025 GMT
        Subject: CN=1aa886e02ca5e813e854a06f3f5afa082caad3fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:2e:bf:c3:9a:4a:08:39:e7:2f:a9:4c:d4:c4:
                    51:e7:ad:b8:9e:2f:b5:29:aa:61:83:00:b4:85:24:
                    a1:fe:95:6b:83:9e:a5:3c:d8:d9:8d:ce:46:72:7d:
                    07:50:e6:e6:e7:dd:c7:8f:d3:c5:40:2f:5b:21:8a:
                    6b:e9:04:69:22:a1:2c:1e:36:55:db:36:1a:08:f1:
                    39:59:97:67:c1:36:d4:5b:e0:63:04:34:6e:09:d3:
                    ad:14:69:af:f0:da:37:13:6a:51:d4:cf:93:d2:04:
                    d0:3f:25:5a:aa:5a:af:48:f4:a2:db:da:d0:0a:97:
                    de:ce:c1:a3:5d:27:12:6a:30:fd:47:25:fb:df:55:
                    9b:09:d6:24:14:11:84:97:86:4d:5e:30:18:ee:87:
                    7d:7e:e3:94:e2:72:a6:5a:24:77:3a:e6:3c:55:f9:
                    e0:06:05:bc:d0:73:4c:f6:2a:fe:92:33:d5:c7:4f:
                    b6:4c:93:92:f3:5c:c8:61:70:d7:56:a5:a1:b8:69:
                    20:65:ee:70:ee:53:58:ec:f8:1d:e3:9f:5e:f0:dc:
                    08:59:41:e8:43:47:67:ba:a0:57:29:ca:0e:54:19:
                    c3:bb:80:3e:6a:65:62:e1:5a:eb:29:4d:33:69:35:
                    6f:89:cb:b7:6a:4b:56:b2:29:8f:cb:e8:9e:75:ef:
                    f5:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:A8:86:E0:2C:A5:E8:13:E8:54:A0:6F:3F:5A:FA:08:2C:AA:D3:FB
            X509v3 Authority Key Identifier:
                keyid:9E:0A:52:FE:E2:28:0D:6F:23:1B:B6:A2:62:26:E6:53:51:70:F1:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ngpS_uIoDW8jG7aiYibmU1Fw8f4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/47d21c-604b-47d8-a333-708b68c856cf/1/ngpS_uIoDW8jG7aiYibmU1Fw8f4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/47d21c-604b-47d8-a333-708b68c856cf/1/ngpS_uIoDW8jG7aiYibmU1Fw8f4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:a6:a1:ec:ef:87:9f:a9:6a:c7:6c:2f:70:9f:5b:9e:44:4d:
         3f:6d:9a:b9:d9:b2:54:72:d2:4c:5a:73:bb:f1:51:87:f7:0e:
         20:c5:80:4c:fc:5c:83:07:6a:42:85:f2:c3:b6:5b:0c:a1:08:
         22:28:b2:66:0f:b1:08:9f:5f:39:d0:c4:ad:8b:cc:65:fe:58:
         7e:98:e9:fe:1e:69:04:ee:69:bf:b6:6e:19:3a:c5:d6:1f:2c:
         25:69:3f:95:ad:3b:0e:cb:62:08:b3:87:c4:e5:1d:00:76:99:
         9c:26:aa:06:33:12:29:f2:e3:b2:7d:b9:7a:a3:a4:95:1e:d7:
         af:9a:56:7c:3a:9d:e4:3e:16:fb:e1:ee:70:a0:d7:f6:b2:75:
         59:b0:09:a2:69:f3:c8:1d:74:b0:9f:76:3f:cf:49:73:18:db:
         4a:ad:ff:e9:8b:b3:a7:a8:88:35:8f:09:9f:1c:3f:09:08:d3:
         81:30:ff:55:79:97:7c:99:0a:2f:43:5d:ca:51:89:99:df:bc:
         6d:c5:9e:78:6c:fe:ec:47:32:72:38:19:ef:17:68:ee:44:67:
         49:3c:97:ea:ea:dd:ad:86:47:bd:9c:78:f4:c6:65:7f:cb:6f:
         74:35:7c:4e:7b:32:51:66:c9:66:92:d3:49:f5:ff:4f:ca:cd:
         17:8f:d3:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:51:50 2025 by rpki-client