Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/832edd-488f-44d8-810b-f7ad97c0ecbd/1/nj3BkwnmeMFIJfxyCDyh3seEP00.mft
File:                     nj3BkwnmeMFIJfxyCDyh3seEP00.mft (raw, json)
Hash identifier:          P3zpy1yzuTc1hqEoCNKyXq8faQkD3Q5+S4iYaqGwDOw=
Subject key identifier:   08:46:78:6B:AE:62:85:1C:E8:5F:E0:0C:40:06:5D:14:09:0A:C0:BC
Authority key identifier: 9E:3D:C1:93:09:E6:78:C1:48:25:FC:72:08:3C:A1:DE:C7:84:3F:4D
Certificate issuer:       /CN=9e3dc19309e678c14825fc72083ca1dec7843f4d
Certificate serial:       0197665FCAAADB4D31BF9CAD103584C842E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nj3BkwnmeMFIJfxyCDyh3seEP00.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/832edd-488f-44d8-810b-f7ad97c0ecbd/1/nj3BkwnmeMFIJfxyCDyh3seEP00.mft
Manifest number:          13A8
Signing time:             Thu 12 Jun 2025 23:00:43 +0000
Manifest this update:     Thu 12 Jun 2025 23:00:43 +0000
Manifest next update:     Fri 13 Jun 2025 23:00:43 +0000
Files and hashes:         1: JbUoXDLL57xF-6BVNBln0RftcZM.roa (hash: t8EC2530fZ+9x7+BNfg3gfNISOK9q19vZC97hYMQk9g=)
                          2: nj3BkwnmeMFIJfxyCDyh3seEP00.crl (hash: N7bhxrw44BIWXoc2LejWM8VIQUpydT9NUA7/cutUpCA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/832edd-488f-44d8-810b-f7ad97c0ecbd/1/nj3BkwnmeMFIJfxyCDyh3seEP00.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/832edd-488f-44d8-810b-f7ad97c0ecbd/1/nj3BkwnmeMFIJfxyCDyh3seEP00.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nj3BkwnmeMFIJfxyCDyh3seEP00.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 22:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:66:5f:ca:aa:db:4d:31:bf:9c:ad:10:35:84:c8:42:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e3dc19309e678c14825fc72083ca1dec7843f4d
        Validity
            Not Before: Jun 12 23:00:43 2025 GMT
            Not After : Jun 13 23:00:43 2025 GMT
        Subject: CN=0846786bae62851ce85fe00c40065d14090ac0bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:b2:e3:a1:0d:98:95:82:a9:68:ce:21:e2:c2:
                    2f:f3:91:8c:ce:52:33:53:73:81:12:c4:13:a7:15:
                    34:43:14:f4:83:6e:e4:9c:37:3d:ee:9a:d3:fc:61:
                    1e:6c:6a:66:3d:20:04:12:53:ad:68:70:12:c8:49:
                    f0:76:aa:6e:7b:d6:c4:a1:a6:36:ba:f2:50:df:42:
                    e4:26:0b:8d:fc:51:d6:fd:2b:e9:1e:ef:6e:89:a0:
                    c8:1d:29:04:b1:7b:27:39:e6:84:30:b7:82:b9:8a:
                    bb:d9:8d:85:f7:1d:dd:14:eb:79:56:66:eb:f2:fd:
                    79:aa:7e:32:49:96:a6:06:bb:af:7b:b0:96:a6:77:
                    28:31:05:1f:b4:f7:82:d2:2c:02:6a:28:dd:b0:84:
                    d4:c4:6c:48:21:45:70:39:66:c9:f8:13:33:aa:78:
                    04:fd:6c:4e:24:f6:b5:33:28:36:8c:ec:80:61:0a:
                    98:50:23:83:b0:80:ad:6b:74:4d:79:8a:45:e5:15:
                    b9:77:5a:d0:ce:60:fd:93:c2:07:08:01:ac:fb:0b:
                    06:18:9c:64:28:07:17:48:f1:5c:f7:ae:91:9a:73:
                    7f:ce:0e:76:1c:55:77:73:af:b2:06:05:0e:d1:cc:
                    79:08:29:21:12:b3:07:b7:1d:c6:0a:a6:9f:0e:ce:
                    0f:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:46:78:6B:AE:62:85:1C:E8:5F:E0:0C:40:06:5D:14:09:0A:C0:BC
            X509v3 Authority Key Identifier:
                keyid:9E:3D:C1:93:09:E6:78:C1:48:25:FC:72:08:3C:A1:DE:C7:84:3F:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nj3BkwnmeMFIJfxyCDyh3seEP00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/832edd-488f-44d8-810b-f7ad97c0ecbd/1/nj3BkwnmeMFIJfxyCDyh3seEP00.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/832edd-488f-44d8-810b-f7ad97c0ecbd/1/nj3BkwnmeMFIJfxyCDyh3seEP00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:47:12:6e:ff:6f:c8:58:24:2c:8e:90:68:8a:0b:5c:f8:23:
         2c:6d:69:2d:c2:ed:fe:60:7d:78:fb:b2:39:c3:f2:3c:f6:8a:
         1b:42:1e:0c:7a:40:11:7a:9b:cb:79:58:e2:db:63:4e:18:32:
         bb:c9:b6:8c:47:48:0b:e4:dd:d1:8a:6c:af:a1:e0:87:0a:e1:
         4d:0c:6b:f6:b9:61:d7:d5:9b:0a:f7:14:07:5f:a4:d0:06:40:
         07:d9:37:96:89:ed:d1:3c:ee:d6:55:e6:eb:17:9b:23:5d:b3:
         7a:21:8a:33:cf:30:11:e7:eb:08:a7:a1:7e:ed:25:c8:45:44:
         42:90:c7:4f:45:12:cb:1b:78:4a:d2:9e:d8:45:51:da:17:b2:
         6d:c5:73:ac:2c:dd:0c:eb:40:bd:10:51:39:1b:b8:8d:86:fb:
         32:3d:85:90:50:cb:ec:d4:3a:70:c2:6b:38:18:c0:36:fb:4a:
         53:ad:10:6a:7f:5b:3a:29:43:2d:f8:70:e3:68:03:df:ba:85:
         04:20:88:06:d9:9e:4e:79:99:c5:24:b4:c2:b6:f4:75:00:ef:
         46:5b:50:75:1e:e6:aa:16:ed:fd:68:23:ff:4d:db:60:5d:aa:
         7a:6e:41:6a:a7:17:fd:9a:7b:4f:a9:3f:71:e7:aa:39:84:fd:
         3c:24:1f:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 07:09:45 2025 by rpki-client