Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/91070a-0a96-49df-acff-ec567575418b/1/NUgzKLASxNGWj8IF3gJK8vmx2rw.mft
File:                     NUgzKLASxNGWj8IF3gJK8vmx2rw.mft (raw, json)
Hash identifier:          CgXjePFMh5c2TTV5qdH121mxPD7XWMe/XOllgM7liLY=
Subject key identifier:   B0:53:DC:99:19:37:36:31:EB:B3:14:4D:5E:6F:E0:87:74:2A:84:A7
Authority key identifier: 35:48:33:28:B0:12:C4:D1:96:8F:C2:05:DE:02:4A:F2:F9:B1:DA:BC
Certificate issuer:       /CN=35483328b012c4d1968fc205de024af2f9b1dabc
Certificate serial:       01976B1841AB6679BE8FE457054B92D8157E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NUgzKLASxNGWj8IF3gJK8vmx2rw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/91070a-0a96-49df-acff-ec567575418b/1/NUgzKLASxNGWj8IF3gJK8vmx2rw.mft
Manifest number:          022D
Signing time:             Fri 13 Jun 2025 21:00:41 +0000
Manifest this update:     Fri 13 Jun 2025 21:00:41 +0000
Manifest next update:     Sat 14 Jun 2025 21:00:41 +0000
Files and hashes:         1: NUgzKLASxNGWj8IF3gJK8vmx2rw.crl (hash: Hijh5NYbkHWokpNOzsoCVkoeBiCJK+w7xNrHiQ6RnRw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/91070a-0a96-49df-acff-ec567575418b/1/NUgzKLASxNGWj8IF3gJK8vmx2rw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/91070a-0a96-49df-acff-ec567575418b/1/NUgzKLASxNGWj8IF3gJK8vmx2rw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NUgzKLASxNGWj8IF3gJK8vmx2rw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 18:59:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6b:18:41:ab:66:79:be:8f:e4:57:05:4b:92:d8:15:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35483328b012c4d1968fc205de024af2f9b1dabc
        Validity
            Not Before: Jun 13 21:00:41 2025 GMT
            Not After : Jun 14 21:00:41 2025 GMT
        Subject: CN=b053dc9919373631ebb3144d5e6fe087742a84a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:92:db:30:90:80:68:df:a0:55:8e:a0:f2:77:
                    fd:23:fb:4a:08:e5:bd:0f:bd:55:8d:5b:49:6a:8b:
                    70:a4:3a:22:18:f8:d2:95:26:aa:11:a2:d0:64:3e:
                    b3:6c:c0:ff:cb:d7:63:14:24:2a:76:89:25:40:72:
                    ed:c3:ed:5a:c5:de:f5:0d:91:9d:4f:50:f4:14:54:
                    97:aa:1e:f8:2f:b4:fb:09:9f:b2:0a:08:fd:fa:86:
                    c9:a5:b0:50:e3:e8:9b:80:02:bb:34:e8:14:51:f3:
                    e2:74:7d:49:de:83:07:10:d3:00:8e:66:e0:3d:c2:
                    f2:f0:25:6f:cb:e0:84:40:8d:0a:d8:8c:63:48:9f:
                    fe:38:b6:86:d9:01:7a:be:d0:12:2b:e8:de:a8:53:
                    1b:40:ce:47:6e:f9:57:16:fe:2b:2c:dd:7b:dd:51:
                    af:71:3e:32:e7:c0:a0:65:e8:5c:55:bf:82:6f:b3:
                    b5:76:c7:df:f8:73:e6:4e:5e:4d:26:3a:57:93:be:
                    26:af:8b:d8:c0:88:6e:95:83:ec:f2:de:03:67:e3:
                    2d:79:78:9a:aa:93:7b:66:1c:6c:51:e5:d4:84:db:
                    78:b1:c6:3f:5f:76:66:72:40:61:c1:35:86:10:9e:
                    85:3a:a1:7f:02:7e:55:88:27:e2:2f:2d:6d:fc:e6:
                    75:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:53:DC:99:19:37:36:31:EB:B3:14:4D:5E:6F:E0:87:74:2A:84:A7
            X509v3 Authority Key Identifier:
                keyid:35:48:33:28:B0:12:C4:D1:96:8F:C2:05:DE:02:4A:F2:F9:B1:DA:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NUgzKLASxNGWj8IF3gJK8vmx2rw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/91070a-0a96-49df-acff-ec567575418b/1/NUgzKLASxNGWj8IF3gJK8vmx2rw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/91070a-0a96-49df-acff-ec567575418b/1/NUgzKLASxNGWj8IF3gJK8vmx2rw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:f3:d3:20:a3:ca:80:eb:1a:d5:c6:bd:0f:76:8b:e9:73:7b:
         5d:1d:78:84:7b:e3:89:2e:a3:c4:89:35:61:82:e4:a8:58:8e:
         1a:b8:51:e1:c1:84:fe:e6:8f:5c:75:d0:c8:ef:84:5a:a0:8a:
         a7:aa:4c:83:a7:56:b6:b7:a0:a0:14:01:4a:28:94:08:15:08:
         78:9b:c9:85:49:87:f4:f6:e4:f3:f1:73:1e:3b:c9:54:23:67:
         82:f2:66:b1:cc:2b:c4:0d:c0:6c:20:61:89:b5:d5:48:63:c5:
         83:43:36:c0:1a:a1:49:1b:41:40:24:ca:23:bf:8c:c1:93:34:
         00:1f:cd:8b:4d:7d:d8:e4:7a:cb:24:cc:74:f8:5b:43:5f:b6:
         83:b3:c7:97:a4:35:ea:d4:72:03:2b:62:9a:e0:92:0b:e1:a6:
         4b:45:20:99:17:a1:b4:0c:31:f4:80:ac:6b:ec:9b:f1:4d:45:
         ae:17:e9:2f:8b:b9:1b:d7:ce:b2:46:42:ba:1a:c2:8a:88:c5:
         ed:33:e3:37:e6:2b:d9:72:2b:6c:b0:05:13:dc:8a:d8:1f:7a:
         4a:a4:f7:40:39:3c:b9:c4:ca:c6:f7:ae:2b:2d:83:cf:61:71:
         15:71:5e:02:b7:d5:00:4f:81:2e:cf:00:5d:c7:81:85:8b:81:
         f1:14:63:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 03:17:28 2025 by rpki-client