Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/ee2d10-ebb0-41ba-9981-3f06829e0f5c/1/NJBCTGiP9Rn7niBNjxWIVTRVsVE.mft
File:                     NJBCTGiP9Rn7niBNjxWIVTRVsVE.mft (raw, json)
Hash identifier:          2PNHNUhZzxk93Ho8VTF4SGlT6i4PlI7H0AX+hnxlQBk=
Subject key identifier:   0B:18:7A:8D:C7:F0:57:45:B6:57:F9:EE:C9:3B:19:FB:11:91:9D:E3
Authority key identifier: 34:90:42:4C:68:8F:F5:19:FB:9E:20:4D:8F:15:88:55:34:55:B1:51
Certificate issuer:       /CN=3490424c688ff519fb9e204d8f1588553455b151
Certificate serial:       019751C6739F3F6926575FF4756E0A17E393
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NJBCTGiP9Rn7niBNjxWIVTRVsVE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/ee2d10-ebb0-41ba-9981-3f06829e0f5c/1/NJBCTGiP9Rn7niBNjxWIVTRVsVE.mft
Manifest number:          046F
Signing time:             Sun 08 Jun 2025 23:00:49 +0000
Manifest this update:     Sun 08 Jun 2025 23:00:49 +0000
Manifest next update:     Mon 09 Jun 2025 23:00:49 +0000
Files and hashes:         1: HPg8Ft7vHOJTKGGcMCV_EbNyeNU.roa (hash: 4TmjFkVE8RpewKQV2NBEk3fhlkdiSYaPUvJ9IIqxwAI=)
                          2: NJBCTGiP9Rn7niBNjxWIVTRVsVE.crl (hash: BffiTyUaTqswu33oWytzQy9yJMTM6mpAzg8WHJBTELs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/ee2d10-ebb0-41ba-9981-3f06829e0f5c/1/NJBCTGiP9Rn7niBNjxWIVTRVsVE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/ee2d10-ebb0-41ba-9981-3f06829e0f5c/1/NJBCTGiP9Rn7niBNjxWIVTRVsVE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NJBCTGiP9Rn7niBNjxWIVTRVsVE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 17:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:51:c6:73:9f:3f:69:26:57:5f:f4:75:6e:0a:17:e3:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3490424c688ff519fb9e204d8f1588553455b151
        Validity
            Not Before: Jun  8 23:00:49 2025 GMT
            Not After : Jun  9 23:00:49 2025 GMT
        Subject: CN=0b187a8dc7f05745b657f9eec93b19fb11919de3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:8e:ca:d7:bd:27:e1:74:8f:1a:35:11:ce:b4:
                    8f:aa:00:5a:0b:3b:62:d3:3a:99:2a:68:cb:bf:0d:
                    18:38:2d:cc:c9:05:86:ad:9a:7a:77:8d:ad:a2:dd:
                    c2:3d:20:6a:93:17:4d:4e:b5:69:93:45:ae:d0:8b:
                    11:2c:d8:34:1f:f4:05:0e:d6:dc:f6:5a:64:f7:a2:
                    62:9f:52:77:7c:44:23:77:46:20:03:03:4b:5e:af:
                    70:40:73:a1:3b:bf:89:07:51:a1:e2:99:15:57:b6:
                    68:b6:1e:53:cd:65:c0:31:ba:1a:32:40:31:5a:f4:
                    ad:f5:26:21:0b:5f:b7:4e:9e:49:94:58:61:33:8b:
                    ed:07:f3:48:8d:86:be:42:5f:1f:77:af:6c:a0:18:
                    ef:fd:a6:60:41:45:83:be:b8:53:30:d4:b7:fe:23:
                    f2:d3:3b:c5:cf:de:dd:0c:72:03:36:25:76:34:80:
                    ae:d1:e1:f9:67:6d:a8:08:3f:33:b7:65:34:5e:e0:
                    c8:10:15:66:a6:8d:7e:3c:d5:26:af:43:00:95:f7:
                    33:ee:8e:01:b4:ee:c4:36:95:f1:8b:02:37:06:3b:
                    17:bc:c3:e2:b3:6c:94:81:8e:1b:c1:bc:3d:93:20:
                    43:20:df:35:1d:51:eb:0b:92:1f:6f:9c:89:48:e9:
                    b4:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:18:7A:8D:C7:F0:57:45:B6:57:F9:EE:C9:3B:19:FB:11:91:9D:E3
            X509v3 Authority Key Identifier:
                keyid:34:90:42:4C:68:8F:F5:19:FB:9E:20:4D:8F:15:88:55:34:55:B1:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJBCTGiP9Rn7niBNjxWIVTRVsVE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ee2d10-ebb0-41ba-9981-3f06829e0f5c/1/NJBCTGiP9Rn7niBNjxWIVTRVsVE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ee2d10-ebb0-41ba-9981-3f06829e0f5c/1/NJBCTGiP9Rn7niBNjxWIVTRVsVE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:92:6f:1d:15:59:ae:1e:7f:1c:e1:95:f0:19:60:0b:e1:b6:
         1b:5f:63:27:7f:96:25:9b:88:c3:a0:89:d8:2d:2f:09:62:17:
         5a:58:86:bc:9c:2f:5a:e5:a3:1d:32:d5:83:9c:5e:02:0d:62:
         9d:bf:fc:a5:24:7f:18:f8:67:17:33:18:ea:e7:81:7c:86:e4:
         73:e2:40:c6:6a:1c:57:74:43:bc:6d:b1:eb:43:cb:40:08:77:
         0a:f2:bf:0f:27:45:7e:d5:6c:61:15:01:7f:a0:19:02:5a:5a:
         e1:c4:0e:84:fb:00:6b:4c:4b:47:63:70:0e:f9:16:3e:c0:09:
         1f:7b:e5:32:ab:4d:b9:7f:29:3e:c8:ea:2b:d2:05:b2:fa:13:
         23:94:3f:c1:4e:c3:3a:c9:f7:24:b6:d5:2a:8d:a4:f1:22:7f:
         b6:c6:f8:4c:22:71:12:07:d8:2d:c2:56:49:2a:1c:a6:37:e8:
         a4:c5:61:be:1f:f1:e4:04:c6:9d:33:31:00:33:bc:27:8b:47:
         f3:b8:52:ff:d7:63:79:e0:96:50:65:6d:9e:6c:69:f1:23:78:
         1a:bc:61:dc:45:04:18:1c:02:5c:29:10:1d:81:e3:35:3d:03:
         f2:33:b1:fd:7d:63:4a:d3:9d:b3:d7:5f:69:6c:d2:2e:9c:b1:
         f1:44:5d:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 02:07:06 2025 by rpki-client