Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/0206ff-7e87-44a6-9a56-ba3c64e14a1d/1/Njy1xqBc3UgfMEwM2V6G1yLZbTw.mft
File:                     Njy1xqBc3UgfMEwM2V6G1yLZbTw.mft (raw, json)
Hash identifier:          hNVfw+Z40Ktftz1LgMi8ZJsy79ycOFLhS/eJ0S98Nmo=
Subject key identifier:   70:40:53:1A:8F:2D:7B:40:6E:BF:5E:5C:C2:3B:09:D2:5F:96:F8:29
Authority key identifier: 36:3C:B5:C6:A0:5C:DD:48:1F:30:4C:0C:D9:5E:86:D7:22:D9:6D:3C
Certificate issuer:       /CN=363cb5c6a05cdd481f304c0cd95e86d722d96d3c
Certificate serial:       01963DD45654A263FD08E0C9874EAE653DB2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Njy1xqBc3UgfMEwM2V6G1yLZbTw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/0206ff-7e87-44a6-9a56-ba3c64e14a1d/1/Njy1xqBc3UgfMEwM2V6G1yLZbTw.mft
Manifest number:          0163
Signing time:             Wed 16 Apr 2025 09:00:48 +0000
Manifest this update:     Wed 16 Apr 2025 09:00:48 +0000
Manifest next update:     Thu 17 Apr 2025 09:00:48 +0000
Files and hashes:         1: Kzv57mrF6D4TzpWqRm4OMZsBabg.roa (hash: H8J62lGi+SVfaohRYvudVwS5cRkvujjbuKntKUtgcEc=)
                          2: Njy1xqBc3UgfMEwM2V6G1yLZbTw.crl (hash: h0o+VKAuu2FJhxHt3VgBOuoswGEHcabeil7igmQAQN0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/0206ff-7e87-44a6-9a56-ba3c64e14a1d/1/Njy1xqBc3UgfMEwM2V6G1yLZbTw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/0206ff-7e87-44a6-9a56-ba3c64e14a1d/1/Njy1xqBc3UgfMEwM2V6G1yLZbTw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Njy1xqBc3UgfMEwM2V6G1yLZbTw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 17 Apr 2025 09:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:3d:d4:56:54:a2:63:fd:08:e0:c9:87:4e:ae:65:3d:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=363cb5c6a05cdd481f304c0cd95e86d722d96d3c
        Validity
            Not Before: Apr 16 09:00:48 2025 GMT
            Not After : Apr 17 09:00:48 2025 GMT
        Subject: CN=7040531a8f2d7b406ebf5e5cc23b09d25f96f829
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c1:f2:80:51:61:0f:b1:ca:5b:c2:9f:99:a2:
                    75:88:98:2d:b7:a2:c6:99:41:87:70:58:26:3c:36:
                    e9:43:97:08:09:21:a9:f5:3c:76:f5:65:26:b7:23:
                    35:8f:c6:75:94:a0:40:f0:c6:df:4c:90:7c:ab:94:
                    69:85:b6:a8:9e:c9:7a:98:dc:8b:6c:c6:73:f9:56:
                    a4:ed:7f:16:b7:7a:78:05:e1:52:29:07:88:67:26:
                    3b:9b:6d:20:c0:0c:d8:5a:8c:9c:61:ca:11:f4:83:
                    43:7e:6e:bc:82:f6:6c:9b:c7:c2:c4:ed:18:58:44:
                    95:ca:31:f4:bc:20:c9:8a:03:d9:57:3d:fd:63:14:
                    91:40:1b:3e:e4:cd:c6:8f:c5:9a:4b:82:a0:7a:6e:
                    08:73:96:fd:f5:1c:e2:c3:17:ba:f7:4e:f5:06:ec:
                    8e:15:27:70:39:78:9a:c7:98:cb:45:4b:64:42:bf:
                    d0:e4:1f:5f:ca:54:92:23:76:68:de:d4:33:1e:d4:
                    84:7b:d4:da:d9:15:20:00:24:cb:de:74:ba:66:0e:
                    5f:8f:da:a5:cc:74:d6:d9:4a:b7:4d:96:cd:cc:7a:
                    6f:66:16:06:4a:9d:ee:be:8a:04:d2:d2:52:2f:6c:
                    28:7f:ce:11:98:90:c7:3a:a9:1b:84:c7:77:b2:b6:
                    2c:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:40:53:1A:8F:2D:7B:40:6E:BF:5E:5C:C2:3B:09:D2:5F:96:F8:29
            X509v3 Authority Key Identifier:
                keyid:36:3C:B5:C6:A0:5C:DD:48:1F:30:4C:0C:D9:5E:86:D7:22:D9:6D:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Njy1xqBc3UgfMEwM2V6G1yLZbTw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0206ff-7e87-44a6-9a56-ba3c64e14a1d/1/Njy1xqBc3UgfMEwM2V6G1yLZbTw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0206ff-7e87-44a6-9a56-ba3c64e14a1d/1/Njy1xqBc3UgfMEwM2V6G1yLZbTw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:42:67:e4:8b:37:e6:c4:ed:03:fe:93:8a:1b:1a:ba:29:a1:
         f3:5a:1a:61:6b:9d:3b:7c:37:45:24:ea:76:d7:41:b1:41:2d:
         de:03:3c:ae:ea:d3:46:30:81:7e:c5:8c:70:f9:a3:a7:1b:53:
         55:a4:9e:f6:28:ae:b2:9d:ee:f0:13:58:16:d9:0d:55:27:d8:
         94:cb:4f:ad:48:f7:57:b7:0b:16:7a:f8:90:c5:7a:f6:34:ba:
         8e:c5:da:18:b7:d5:08:4a:35:51:9d:95:39:13:f6:72:54:14:
         a1:01:2c:6c:79:f6:0d:f1:1f:f6:51:85:68:6b:1c:d3:e4:f0:
         b6:c7:cc:68:a4:cf:9e:25:65:c1:4b:c8:51:1f:04:37:74:81:
         ed:1d:76:38:da:44:a6:a6:9f:8e:a6:4c:59:73:d3:2d:98:21:
         d7:b3:ae:18:99:be:0d:43:63:d4:5a:e8:9e:30:84:2f:b8:27:
         d8:7a:2f:1c:7b:38:3b:da:ee:6f:49:22:59:4e:9a:a3:88:62:
         c1:c8:70:bb:6c:8e:1f:b2:0f:23:d2:16:13:41:2d:89:5d:63:
         f0:d9:c2:55:a7:00:13:ab:15:89:65:4c:b2:2f:59:e1:4a:9c:
         17:ad:23:f2:ce:dd:86:77:ba:89:b5:a1:f1:67:45:62:7e:f3:
         f2:3e:45:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 14:02:02 2025 by rpki-client