Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/np5oh-p1cqZBEwbIewzAiTl6Y1Q.mft
File:                     np5oh-p1cqZBEwbIewzAiTl6Y1Q.mft (raw, json)
Hash identifier:          uP+jnyIzJE52jc7yeAOeOnK5Yxfxw1YbILy0k5Ic3UY=
Subject key identifier:   97:AB:D8:90:63:7D:C6:36:18:E5:CC:6B:13:B5:75:F2:0A:47:04:28
Authority key identifier: 9E:9E:68:87:EA:75:72:A6:41:13:06:C8:7B:0C:C0:89:39:7A:63:54
Certificate issuer:       /CN=9e9e6887ea7572a6411306c87b0cc089397a6354
Certificate serial:       019765F21A0633D76F1EC0EB6A3EC4CE7495
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/np5oh-p1cqZBEwbIewzAiTl6Y1Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/np5oh-p1cqZBEwbIewzAiTl6Y1Q.mft
Manifest number:          1141
Signing time:             Thu 12 Jun 2025 21:00:54 +0000
Manifest this update:     Thu 12 Jun 2025 21:00:54 +0000
Manifest next update:     Fri 13 Jun 2025 21:00:54 +0000
Files and hashes:         1: YJ50MQnvVhHtjWvLvxqRLtfcQ7A.roa (hash: dYfbwzgf/ynRL4xNJih6ua1qw+Sw/CexFK1ACNOG+tc=)
                          2: np5oh-p1cqZBEwbIewzAiTl6Y1Q.crl (hash: 0y/H8RbWQ3kJjVYqK5HbEDSHWKCnsYFF5JGIsj2IyBE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/np5oh-p1cqZBEwbIewzAiTl6Y1Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/np5oh-p1cqZBEwbIewzAiTl6Y1Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/np5oh-p1cqZBEwbIewzAiTl6Y1Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 21:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:65:f2:1a:06:33:d7:6f:1e:c0:eb:6a:3e:c4:ce:74:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e9e6887ea7572a6411306c87b0cc089397a6354
        Validity
            Not Before: Jun 12 21:00:54 2025 GMT
            Not After : Jun 13 21:00:54 2025 GMT
        Subject: CN=97abd890637dc63618e5cc6b13b575f20a470428
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b6:2e:04:fd:d1:88:ab:2b:b2:48:b8:c5:3b:
                    60:95:61:70:09:b2:c4:d2:98:7d:45:a9:f9:14:6f:
                    41:a2:5c:bf:a4:28:55:3a:0a:de:48:2c:70:4d:4d:
                    fa:a4:30:ef:38:3e:34:b7:cc:89:6e:b0:54:06:a1:
                    1e:26:58:ea:b8:fa:80:9e:23:a8:c9:db:ed:08:8a:
                    1a:02:88:86:b1:4f:93:b5:c2:84:13:17:ad:dd:d4:
                    45:80:d0:91:c8:2a:af:3e:94:f1:42:fe:60:71:7b:
                    9a:85:6c:2a:4a:75:56:f5:f7:a0:e1:d7:3a:d8:ee:
                    90:fc:e7:f8:f2:1e:42:99:9c:35:3f:6a:82:a7:74:
                    16:01:e6:53:87:38:ba:0a:b6:fc:6c:8c:a8:58:d6:
                    f4:19:dd:31:a8:88:13:02:d5:97:25:49:2a:28:26:
                    8c:7c:4c:97:d4:bf:60:24:17:82:48:fb:47:23:d6:
                    9f:2c:84:f8:d6:f7:87:29:3b:78:80:77:c1:f1:e9:
                    8d:ea:e5:bf:52:b4:a3:7f:e6:e2:f1:c6:37:bb:eb:
                    88:f8:ea:08:d4:95:da:d8:e2:aa:e8:49:17:f8:b6:
                    47:ec:99:d8:01:4d:d1:8c:90:b0:1b:d5:f3:e2:70:
                    41:f0:96:33:a8:42:f8:38:3c:b3:cb:33:fd:a3:0b:
                    c1:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:AB:D8:90:63:7D:C6:36:18:E5:CC:6B:13:B5:75:F2:0A:47:04:28
            X509v3 Authority Key Identifier:
                keyid:9E:9E:68:87:EA:75:72:A6:41:13:06:C8:7B:0C:C0:89:39:7A:63:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/np5oh-p1cqZBEwbIewzAiTl6Y1Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/np5oh-p1cqZBEwbIewzAiTl6Y1Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/np5oh-p1cqZBEwbIewzAiTl6Y1Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:e4:2b:e9:67:1e:50:75:93:34:03:02:bc:a4:e6:5b:b9:f5:
         91:46:ae:d7:29:f2:68:d6:7c:88:79:50:6b:2b:0a:0a:ee:5c:
         a7:a4:54:46:14:b6:b4:f8:73:aa:cc:6b:d6:c3:c7:88:7c:35:
         2e:ce:ff:c6:92:c4:4a:b8:0b:8c:02:27:35:89:05:f3:77:3d:
         7a:81:ba:2e:df:18:0c:d9:40:31:1d:4c:25:cf:e2:d4:bf:f5:
         76:b1:34:d4:e0:07:85:c5:2d:aa:c4:76:4e:89:55:db:05:3c:
         83:b4:fb:3a:8d:d1:70:a9:75:69:14:f5:1c:4c:f3:d2:13:ca:
         98:19:f4:5a:78:b7:86:58:5d:43:6d:43:c2:90:ff:32:c2:b1:
         71:66:ae:a9:57:5d:1e:14:90:11:50:1e:f7:68:46:65:3f:5d:
         a3:a5:81:f4:7e:0f:bd:2b:34:a1:b7:6a:a5:65:5e:33:93:2e:
         be:9a:f1:38:a4:12:ec:a4:54:1b:c1:2e:53:44:29:51:e3:e4:
         72:96:7a:d5:c1:9d:8e:40:41:22:66:6d:51:b8:46:1b:42:a1:
         a4:42:1a:0b:18:d4:d3:c1:3a:f4:9c:9e:a2:c9:6d:9c:e1:64:
         83:7d:2b:b9:ae:a9:f4:f3:d4:ba:e9:60:ed:88:9a:57:f6:b4:
         a1:f4:fb:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 05:53:51 2025 by rpki-client