Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.mft
File:                     CNedINdqndsHW5T58ABSqyGCdrc.mft (raw, json)
Hash identifier:          xFuojWzf3cUZZ8lTNkf5KsOYGlFJ8cWapVvXZ5XXM4c=
Subject key identifier:   79:36:C8:23:F0:9E:29:D0:71:CC:71:72:B8:E6:6D:9C:40:CF:BA:8D
Authority key identifier: 08:D7:9D:20:D7:6A:9D:DB:07:5B:94:F9:F0:00:52:AB:21:82:76:B7
Certificate issuer:       /CN=08d79d20d76a9ddb075b94f9f00052ab218276b7
Certificate serial:       019748FA62AF3111F346069CA456326F5637
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CNedINdqndsHW5T58ABSqyGCdrc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.mft
Manifest number:          0F47
Signing time:             Sat 07 Jun 2025 06:00:58 +0000
Manifest this update:     Sat 07 Jun 2025 06:00:58 +0000
Manifest next update:     Sun 08 Jun 2025 06:00:58 +0000
Files and hashes:         1: CNedINdqndsHW5T58ABSqyGCdrc.crl (hash: 4XcIJjyfNRc2AkwnW6Z4Ph3K6SwIgIloWmtdqqMIrRI=)
                          2: NxR6rjQYDvK-6beKZqhb21Ma0h0.roa (hash: eDS+0w8Ojc9YalXnJemejPGahb1kTWYCKBq2prUt9qg=)
                          3: _BQI9-Z6Ir5h5KACcOfrToSjkeU.roa (hash: +8QwmWebGpDaCA9AoYcnSa24keLkeW7OwUobTrC8xMY=)
                          4: ytooMvIrVe1UKIoWb2AsvqDHusU.roa (hash: FNi924Rn+Q0YpiKfx0DUW4i6K1Um3nkEm9RbN6FN7Eg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CNedINdqndsHW5T58ABSqyGCdrc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:fa:62:af:31:11:f3:46:06:9c:a4:56:32:6f:56:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08d79d20d76a9ddb075b94f9f00052ab218276b7
        Validity
            Not Before: Jun  7 06:00:58 2025 GMT
            Not After : Jun  8 06:00:58 2025 GMT
        Subject: CN=7936c823f09e29d071cc7172b8e66d9c40cfba8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:f0:c6:ff:68:05:49:7c:7b:2b:60:79:3b:f6:
                    90:a4:38:8a:c4:ab:48:61:73:bc:b4:78:5e:30:53:
                    8f:e8:28:22:a0:66:ea:5d:b2:01:2b:5d:5e:2f:8d:
                    85:21:16:37:3a:72:56:78:27:52:3b:67:d6:ef:60:
                    ab:b2:7b:00:db:48:cc:9e:19:0a:bb:82:5f:e1:9e:
                    92:70:83:b4:87:94:1b:c1:8f:2f:d9:fc:24:35:8c:
                    a8:29:c4:ee:24:8b:ed:75:76:63:b9:f1:c5:02:24:
                    57:7a:5e:9c:b2:9f:57:fd:54:87:98:99:23:2d:36:
                    2c:ca:92:ad:f9:a6:35:6a:8c:10:62:65:37:48:0b:
                    3a:97:ad:65:6f:87:76:ad:7c:c3:80:16:f1:b5:b5:
                    47:9f:e9:37:00:6c:3c:62:c7:29:dd:d3:51:df:b4:
                    80:cf:58:e6:aa:8c:a0:e1:6b:76:62:5e:e1:23:50:
                    69:7e:55:23:f7:b7:0e:41:56:1b:12:d0:19:c2:f0:
                    a8:9b:01:89:ce:db:41:ad:55:a5:76:37:51:46:e6:
                    75:01:94:9f:0a:a9:e3:0f:af:43:3f:0e:9d:15:2f:
                    bf:31:79:a4:b7:d9:ff:e2:1f:ad:bf:cc:49:97:0b:
                    cd:0e:22:de:21:ab:b8:77:c5:78:16:55:46:8d:91:
                    75:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:36:C8:23:F0:9E:29:D0:71:CC:71:72:B8:E6:6D:9C:40:CF:BA:8D
            X509v3 Authority Key Identifier:
                keyid:08:D7:9D:20:D7:6A:9D:DB:07:5B:94:F9:F0:00:52:AB:21:82:76:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNedINdqndsHW5T58ABSqyGCdrc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:41:b9:be:71:14:51:67:4d:16:54:bc:02:62:bb:4a:20:4c:
         f2:7e:bc:64:5b:b8:d0:4b:12:34:c8:e2:0d:00:11:08:db:75:
         58:2c:3d:2b:73:c5:75:7a:26:c3:1d:2f:ae:a5:85:10:58:96:
         a9:ad:91:da:a2:ea:76:ec:d5:23:cd:0a:e3:a7:12:7e:2b:90:
         a4:5f:03:c2:67:af:87:d9:59:b3:9d:c4:7b:c4:56:16:f5:8a:
         fc:be:4a:43:83:8a:c2:61:0f:b4:07:d2:10:7b:2a:76:62:0b:
         3f:7a:35:2a:34:f3:55:d7:f2:6f:14:92:e0:9e:5b:ac:49:bd:
         46:16:d2:f0:4e:bf:12:9d:9b:d4:e1:4f:6c:34:aa:53:22:07:
         c1:9c:18:79:c6:16:78:8b:2e:36:ff:aa:12:eb:73:23:23:80:
         71:d0:53:d1:eb:d7:e2:79:a5:6c:73:f1:64:36:77:55:d0:50:
         f3:2f:2b:e6:5e:41:23:3a:d9:d7:a3:4d:36:03:17:33:84:40:
         78:41:f5:1f:f2:76:5d:44:45:71:43:a6:ae:7b:8a:aa:4d:35:
         58:8a:76:10:8e:5f:7f:c5:3a:66:13:1a:95:11:ce:20:ea:dd:
         f1:b4:ea:52:ab:58:88:bc:45:04:d8:4f:57:f4:00:9a:fe:b0:
         ec:69:d2:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:23:21 2025 by rpki-client