Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/7d0efe-709d-4d11-b692-0e230806b579/1/nlf4Q7F__OqpuGNlgf5NVONG3cw.mft
File:                     nlf4Q7F__OqpuGNlgf5NVONG3cw.mft (raw, json)
Hash identifier:          2rrrBF4bAiY/ssAkfoNGEyBTDuWX9ATKNGzgsziejvY=
Subject key identifier:   E1:EF:0A:AC:CD:A4:D6:D3:31:92:1B:0F:2B:74:FD:E6:BF:00:FF:57
Authority key identifier: 9E:57:F8:43:B1:7F:FC:EA:A9:B8:63:65:81:FE:4D:54:E3:46:DD:CC
Certificate issuer:       /CN=9e57f843b17ffceaa9b8636581fe4d54e346ddcc
Certificate serial:       01975D25FCA0FE670DDA4F6FA5E7570178C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nlf4Q7F__OqpuGNlgf5NVONG3cw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/7d0efe-709d-4d11-b692-0e230806b579/1/nlf4Q7F__OqpuGNlgf5NVONG3cw.mft
Manifest number:          0BDB
Signing time:             Wed 11 Jun 2025 04:00:59 +0000
Manifest this update:     Wed 11 Jun 2025 04:00:59 +0000
Manifest next update:     Thu 12 Jun 2025 04:00:59 +0000
Files and hashes:         1: IFXNgHuEN8ycsfhuA4dEpX7GYeY.roa (hash: 0NAgcHKOW4VLEuD8zIQn9OzSwjmjjTPr1tkjSBELdjk=)
                          2: nlf4Q7F__OqpuGNlgf5NVONG3cw.crl (hash: 4klapOuEPeIPcobVp5ZoTeVaCSRKYwNSiPolkFZRjts=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/7d0efe-709d-4d11-b692-0e230806b579/1/nlf4Q7F__OqpuGNlgf5NVONG3cw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/7d0efe-709d-4d11-b692-0e230806b579/1/nlf4Q7F__OqpuGNlgf5NVONG3cw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nlf4Q7F__OqpuGNlgf5NVONG3cw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Jun 2025 04:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5d:25:fc:a0:fe:67:0d:da:4f:6f:a5:e7:57:01:78:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e57f843b17ffceaa9b8636581fe4d54e346ddcc
        Validity
            Not Before: Jun 11 04:00:59 2025 GMT
            Not After : Jun 12 04:00:59 2025 GMT
        Subject: CN=e1ef0aaccda4d6d331921b0f2b74fde6bf00ff57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c3:eb:6c:80:cf:e2:42:3f:fa:98:2a:4d:51:
                    af:a2:2c:e0:d1:e3:60:86:1e:82:18:2d:96:22:0a:
                    5a:e1:5d:ad:c1:20:b5:cb:d2:92:b5:11:e0:a1:3b:
                    62:d6:cb:bd:d6:60:f2:4a:34:dd:30:3a:d2:a9:f7:
                    62:ec:eb:dd:0d:8d:f7:2f:18:ee:f5:3e:9e:4f:53:
                    80:24:e9:bf:74:a8:51:59:aa:bf:ea:05:4c:99:73:
                    91:41:14:c9:c0:ea:69:d3:d9:28:c5:f6:ef:d7:a1:
                    b4:84:03:e9:d1:fe:b9:8c:da:75:e5:85:1a:c5:4d:
                    38:00:75:06:d8:bf:24:12:cd:e3:4d:c3:96:e8:3e:
                    c8:cb:3c:07:01:56:b8:26:14:df:84:73:f1:89:82:
                    47:39:cb:1a:2b:aa:98:cc:56:be:55:de:37:e4:bb:
                    c2:42:62:f1:90:66:7b:76:fb:0b:e0:45:10:e5:0d:
                    cb:0c:9a:a7:a9:bd:a0:60:93:c0:3d:3e:e1:db:af:
                    53:1f:f0:de:de:b3:4a:02:50:7f:d4:ab:76:8d:6e:
                    94:26:d2:88:71:f8:91:e6:0c:79:77:00:07:14:ac:
                    de:3b:c8:92:50:22:89:ad:fc:78:79:3c:04:4c:75:
                    5b:50:b2:dc:47:e9:2c:26:a0:db:1c:58:dd:fb:d0:
                    23:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:EF:0A:AC:CD:A4:D6:D3:31:92:1B:0F:2B:74:FD:E6:BF:00:FF:57
            X509v3 Authority Key Identifier:
                keyid:9E:57:F8:43:B1:7F:FC:EA:A9:B8:63:65:81:FE:4D:54:E3:46:DD:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nlf4Q7F__OqpuGNlgf5NVONG3cw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/7d0efe-709d-4d11-b692-0e230806b579/1/nlf4Q7F__OqpuGNlgf5NVONG3cw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/7d0efe-709d-4d11-b692-0e230806b579/1/nlf4Q7F__OqpuGNlgf5NVONG3cw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:f7:ff:2d:06:cd:c2:c5:52:d3:70:ae:c4:c4:22:84:0b:a7:
         c3:e4:67:07:6f:b4:31:22:0f:b7:ef:29:03:a5:f1:b7:ee:c8:
         5f:83:93:42:39:c6:62:c9:9e:fd:48:cb:e0:b2:c9:a2:62:90:
         b8:c9:d5:39:b9:31:d4:4a:3f:9a:9a:e8:5d:f6:6a:bb:f3:57:
         e9:cb:22:26:00:f9:80:f5:ef:87:ff:b6:93:0c:0c:39:7a:92:
         59:5c:f7:30:dc:fe:68:0f:ae:8f:bc:b3:fa:3b:51:73:19:45:
         33:e7:55:d4:98:f5:d6:0a:cb:be:69:91:e0:8b:65:7d:cf:fb:
         0c:bb:2b:35:f7:71:22:40:a9:3b:c5:3e:c6:75:ce:d2:8d:9d:
         73:1d:90:52:01:2e:44:10:23:71:65:76:46:62:42:52:01:65:
         20:f3:df:6d:eb:89:e8:26:32:c5:73:27:46:4f:4a:96:23:d4:
         be:09:27:d7:eb:84:14:7a:8e:ed:a7:b2:1d:40:26:13:29:e1:
         65:78:9d:a0:d9:f5:fd:b2:25:fe:68:da:55:f5:da:59:2c:af:
         6a:86:a1:fd:01:90:a3:fd:02:30:5b:c7:69:44:eb:24:4f:d8:
         6d:1a:e7:cf:c0:e4:48:0c:3f:84:59:10:de:6a:48:b0:19:be:
         c0:2d:cd:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 12:22:55 2025 by rpki-client