Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/741872-a425-4367-9ac2-dcd937fd07a7/1/nU-b-Hr_AP1dshWFeBtG82-eNiY.mft
File:                     nU-b-Hr_AP1dshWFeBtG82-eNiY.mft (raw, json)
Hash identifier:          Kh+e/fOnc2TXzDGwD2HNjcOKUKnQ/1UjAKwAFJDvg/o=
Subject key identifier:   9A:EE:62:76:08:FA:80:89:BB:DF:C5:35:02:65:30:0E:76:0F:92:B2
Authority key identifier: 9D:4F:9B:F8:7A:FF:00:FD:5D:B2:15:85:78:1B:46:F3:6F:9E:36:26
Certificate issuer:       /CN=9d4f9bf87aff00fd5db21585781b46f36f9e3626
Certificate serial:       01964CA265EC9C5F5BE72553210982535BFD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nU-b-Hr_AP1dshWFeBtG82-eNiY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/741872-a425-4367-9ac2-dcd937fd07a7/1/nU-b-Hr_AP1dshWFeBtG82-eNiY.mft
Manifest number:          0195
Signing time:             Sat 19 Apr 2025 06:00:33 +0000
Manifest this update:     Sat 19 Apr 2025 06:00:33 +0000
Manifest next update:     Sun 20 Apr 2025 06:00:33 +0000
Files and hashes:         1: cThp0KEND3BT4KvCeUid-rjEug4.roa (hash: ImpSaegWwcNvwqQ9pHSgJ6wWRXJrvYa1vES4AMD51Qc=)
                          2: nU-b-Hr_AP1dshWFeBtG82-eNiY.crl (hash: 25ca5bUzM2eLyiJmea+3bP8PuWs45IAVozNz0PwZZ+8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/741872-a425-4367-9ac2-dcd937fd07a7/1/nU-b-Hr_AP1dshWFeBtG82-eNiY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/741872-a425-4367-9ac2-dcd937fd07a7/1/nU-b-Hr_AP1dshWFeBtG82-eNiY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nU-b-Hr_AP1dshWFeBtG82-eNiY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4c:a2:65:ec:9c:5f:5b:e7:25:53:21:09:82:53:5b:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d4f9bf87aff00fd5db21585781b46f36f9e3626
        Validity
            Not Before: Apr 19 06:00:33 2025 GMT
            Not After : Apr 20 06:00:33 2025 GMT
        Subject: CN=9aee627608fa8089bbdfc5350265300e760f92b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:4b:bb:f4:91:51:75:cf:c4:e6:de:06:39:a0:
                    f2:05:c8:81:60:31:30:7a:93:7e:19:8a:89:01:4a:
                    93:e9:44:f8:0c:c7:74:e3:43:90:9f:86:d5:09:be:
                    43:31:80:5f:a6:e5:22:5b:0d:d8:b4:f1:b4:02:46:
                    96:7c:e3:1a:b2:63:2c:f9:3c:d4:d3:23:87:3e:60:
                    62:02:66:31:a3:a1:3a:81:db:fb:ec:26:b8:64:6e:
                    a3:fe:3b:43:26:b5:6d:68:d5:77:75:ed:cf:60:01:
                    f3:c5:a9:25:92:b5:69:42:a4:d7:c7:41:fa:72:10:
                    17:87:e3:64:b9:e1:e0:fd:26:b7:cb:e6:22:7d:bc:
                    d1:d2:21:b5:f5:82:dc:e1:d8:b5:2e:51:5e:5a:a8:
                    e9:a3:4d:00:aa:b7:c7:12:32:3b:b7:db:69:0b:a8:
                    3d:a9:68:5c:d6:ed:e0:30:2a:d2:da:49:36:ed:08:
                    02:17:ed:6f:55:ff:a0:7a:ec:c1:fa:a2:af:3e:f6:
                    e9:24:61:0c:a7:aa:3e:44:87:67:cd:36:29:2a:14:
                    05:8a:64:db:07:86:3e:bd:ce:08:e6:50:2d:8f:53:
                    83:88:f6:f2:00:f5:33:fc:04:93:e9:d9:06:6e:41:
                    50:12:0a:8a:c7:1c:b0:9d:32:3c:79:5d:40:44:1a:
                    fe:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:EE:62:76:08:FA:80:89:BB:DF:C5:35:02:65:30:0E:76:0F:92:B2
            X509v3 Authority Key Identifier:
                keyid:9D:4F:9B:F8:7A:FF:00:FD:5D:B2:15:85:78:1B:46:F3:6F:9E:36:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nU-b-Hr_AP1dshWFeBtG82-eNiY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/741872-a425-4367-9ac2-dcd937fd07a7/1/nU-b-Hr_AP1dshWFeBtG82-eNiY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/741872-a425-4367-9ac2-dcd937fd07a7/1/nU-b-Hr_AP1dshWFeBtG82-eNiY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:8a:37:9f:b4:76:7f:bb:12:ec:c9:7b:01:37:f9:eb:40:27:
         34:2b:40:7e:9a:6a:55:b9:c4:30:3c:10:0a:8d:bf:48:1e:9e:
         34:c3:09:03:da:50:bc:4a:5d:bc:fa:e0:76:7a:51:57:95:28:
         c3:a8:46:76:98:50:86:fa:16:b7:d3:f5:7e:8a:43:da:41:cf:
         60:f8:47:fd:ad:10:2e:d2:f4:4a:05:6f:ef:c9:18:c0:b8:a6:
         f0:99:d0:79:6a:a5:37:04:39:3e:07:87:73:18:63:8d:91:ab:
         9e:23:64:98:49:c4:a1:a1:95:b9:84:e5:44:89:45:58:85:31:
         77:b1:41:6b:b8:42:0e:21:39:7e:56:e3:69:4f:6c:04:d9:44:
         f8:53:46:05:7d:25:6a:7e:5f:a9:34:e9:de:90:84:9e:fa:eb:
         80:4b:e3:0a:c9:4d:08:35:b9:b8:13:ee:50:af:ad:db:b8:87:
         65:3f:1b:83:b8:e4:44:ed:d5:a1:52:6a:13:8b:94:48:b1:72:
         d2:81:a3:12:3a:e0:08:a0:0e:0f:d2:59:81:2a:a8:13:07:05:
         b0:73:6c:4a:43:f9:c1:c1:b1:8b:3c:1f:ce:70:2a:46:ae:88:
         9d:77:ba:0a:ab:52:60:67:33:11:c6:68:36:d0:a9:f7:08:87:
         8d:c4:67:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 08:23:06 2025 by rpki-client