Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/njlEmOR5hynOmVC-NLRZqe8p9eg.mft
File:                     njlEmOR5hynOmVC-NLRZqe8p9eg.mft (raw, json)
Hash identifier:          hvbjRnw8WOi9iS7uu0wFdomiVqmdqDi+xScLJUNMU34=
Subject key identifier:   D0:2B:BB:EE:37:CD:61:AF:AD:79:62:D6:4C:99:B2:70:F1:01:F3:16
Authority key identifier: 9E:39:44:98:E4:79:87:29:CE:99:50:BE:34:B4:59:A9:EF:29:F5:E8
Certificate issuer:       /CN=9e394498e4798729ce9950be34b459a9ef29f5e8
Certificate serial:       01974967B28BC1EA39604A557DDB21AE33BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/njlEmOR5hynOmVC-NLRZqe8p9eg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/njlEmOR5hynOmVC-NLRZqe8p9eg.mft
Manifest number:          0E94
Signing time:             Sat 07 Jun 2025 08:00:22 +0000
Manifest this update:     Sat 07 Jun 2025 08:00:22 +0000
Manifest next update:     Sun 08 Jun 2025 08:00:22 +0000
Files and hashes:         1: FlCa3OSW-ZoGEi5KBDwGmjiKfj4.roa (hash: 0As+wmiLAqptvOGMh9AlarJvbJelhLhuobR6hbbvj/M=)
                          2: njlEmOR5hynOmVC-NLRZqe8p9eg.crl (hash: oJx4xX0RXG5EM1EPBer0qJOHNQxj1kMWbxm6+hHVKcw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/njlEmOR5hynOmVC-NLRZqe8p9eg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/njlEmOR5hynOmVC-NLRZqe8p9eg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/njlEmOR5hynOmVC-NLRZqe8p9eg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 08:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:67:b2:8b:c1:ea:39:60:4a:55:7d:db:21:ae:33:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e394498e4798729ce9950be34b459a9ef29f5e8
        Validity
            Not Before: Jun  7 08:00:22 2025 GMT
            Not After : Jun  8 08:00:22 2025 GMT
        Subject: CN=d02bbbee37cd61afad7962d64c99b270f101f316
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:83:3b:9b:c5:4e:d7:02:4e:cf:82:10:4c:b6:
                    04:ef:86:10:a8:14:db:ad:67:70:f5:1b:3f:1c:9e:
                    3f:c9:17:0a:ad:5b:b4:59:ac:f8:22:4e:dc:f1:56:
                    a0:65:6c:9c:36:7b:ea:bd:52:07:ff:7a:84:00:07:
                    47:51:bd:6f:6d:28:61:5d:62:bf:ca:c0:76:4e:d4:
                    ab:92:b6:4b:2d:b3:a7:65:20:ac:60:df:b2:7e:d9:
                    f4:69:4c:41:79:a3:23:7c:2a:d5:71:75:f6:45:fd:
                    90:5a:c7:0c:d5:b9:db:54:e0:24:c9:f4:3e:d3:99:
                    05:cc:0d:fa:8e:6e:c7:e1:26:d1:90:13:30:f0:4b:
                    39:c3:fd:b3:d8:be:c9:5d:44:88:45:e7:b7:c1:6c:
                    26:45:85:4c:92:fc:1a:44:98:0d:d3:c6:6b:2d:5b:
                    a7:0c:97:53:8c:0d:8e:88:c0:cd:03:a9:4a:19:02:
                    4e:b8:1b:a8:26:c5:34:89:6b:39:4a:39:4a:d1:33:
                    00:f1:4c:84:11:c4:51:65:99:2a:53:c6:9b:87:64:
                    62:8f:81:bf:44:a9:5f:b9:19:ae:4f:6a:23:c7:00:
                    d9:56:25:9a:f3:d8:d4:63:d7:7a:ac:1e:d1:5e:92:
                    c3:70:d3:fa:fc:cb:31:44:20:6d:46:e0:ee:dd:20:
                    07:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:2B:BB:EE:37:CD:61:AF:AD:79:62:D6:4C:99:B2:70:F1:01:F3:16
            X509v3 Authority Key Identifier:
                keyid:9E:39:44:98:E4:79:87:29:CE:99:50:BE:34:B4:59:A9:EF:29:F5:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njlEmOR5hynOmVC-NLRZqe8p9eg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/njlEmOR5hynOmVC-NLRZqe8p9eg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/njlEmOR5hynOmVC-NLRZqe8p9eg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:97:6e:71:5f:ba:91:05:cf:b1:2b:ea:98:4b:f5:f1:f3:28:
         23:60:6e:a0:ee:e9:47:c1:d8:7b:fd:94:a9:be:94:55:22:e8:
         be:5b:76:af:ff:ab:b7:3c:c7:b9:88:8b:83:1d:17:3f:2f:f5:
         37:08:87:23:a4:ea:6a:bc:44:b8:43:d5:2d:2c:40:ee:d5:f2:
         3c:55:a3:51:eb:fb:f2:a6:b9:a3:f8:44:90:39:81:5c:4c:cc:
         a7:a8:6a:8f:08:a0:c5:8f:bd:4c:1e:c8:18:0d:ca:f0:7f:5d:
         70:a1:b7:4b:6a:17:fb:d7:31:f5:a0:88:fe:61:b2:71:a2:66:
         ba:be:20:1c:4e:be:ea:ba:a6:f0:34:c7:28:e5:fe:73:96:f9:
         84:44:d6:69:78:46:d8:18:e9:c4:b5:b1:45:ff:3c:38:3e:af:
         af:5c:bc:11:de:06:b1:3a:74:c9:59:38:46:11:e2:90:3f:84:
         47:4b:86:f3:7b:a2:b6:2c:19:42:b9:97:59:f5:31:0a:f4:2d:
         b7:aa:5e:4e:a6:d1:af:6e:93:1e:58:7c:9e:2b:22:db:0a:37:
         71:9e:ad:76:48:48:8a:2e:4a:c1:41:95:5b:4e:97:15:73:3c:
         3f:f2:b1:60:89:d2:16:a1:2e:02:75:3b:c4:04:00:e3:5c:35:
         da:4c:c4:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:06:23 2025 by rpki-client