Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/8c9067-cc6d-4c4a-b661-37d15719a2d0/1/NY82t7AwW9n_68U3oadWt04E1eQ.mft
File:                     NY82t7AwW9n_68U3oadWt04E1eQ.mft (raw, json)
Hash identifier:          ruqYMRg0k0xJyCNKSKApqs1rJqjrhWoSrufNdDMAgS0=
Subject key identifier:   BC:AD:56:E9:BF:80:AE:53:56:35:6E:03:37:AE:F7:86:B0:BB:A4:BC
Authority key identifier: 35:8F:36:B7:B0:30:5B:D9:FF:EB:C5:37:A1:A7:56:B7:4E:04:D5:E4
Certificate issuer:       /CN=358f36b7b0305bd9ffebc537a1a756b74e04d5e4
Certificate serial:       019745C246D2E214743401D6F2A6805AD542
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NY82t7AwW9n_68U3oadWt04E1eQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/8c9067-cc6d-4c4a-b661-37d15719a2d0/1/NY82t7AwW9n_68U3oadWt04E1eQ.mft
Manifest number:          05B4
Signing time:             Fri 06 Jun 2025 15:00:49 +0000
Manifest this update:     Fri 06 Jun 2025 15:00:49 +0000
Manifest next update:     Sat 07 Jun 2025 15:00:49 +0000
Files and hashes:         1: 8ID8kgv1Se1rg2FGJCKuXeDTZdw.roa (hash: mtFporZGWALvI1bFzQb9Xpsj858BjBk/glbS/pmBQi4=)
                          2: NY82t7AwW9n_68U3oadWt04E1eQ.crl (hash: d4dR4nIjb5tcZKTiDERyAhxmTkEB+vNMJj2h5QFGXkA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/8c9067-cc6d-4c4a-b661-37d15719a2d0/1/NY82t7AwW9n_68U3oadWt04E1eQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/8c9067-cc6d-4c4a-b661-37d15719a2d0/1/NY82t7AwW9n_68U3oadWt04E1eQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NY82t7AwW9n_68U3oadWt04E1eQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:45:c2:46:d2:e2:14:74:34:01:d6:f2:a6:80:5a:d5:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=358f36b7b0305bd9ffebc537a1a756b74e04d5e4
        Validity
            Not Before: Jun  6 15:00:49 2025 GMT
            Not After : Jun  7 15:00:49 2025 GMT
        Subject: CN=bcad56e9bf80ae5356356e0337aef786b0bba4bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:10:2b:04:f9:f6:32:7e:50:68:28:cc:86:80:
                    d3:71:54:a6:61:ad:38:eb:cc:ec:6b:24:64:bd:e8:
                    a7:06:bc:05:0a:8d:7e:20:c4:75:45:21:af:3b:56:
                    16:c8:9a:92:5c:14:ee:bb:72:25:af:d7:c9:7e:09:
                    c6:a1:af:2b:1b:eb:c4:96:c5:2d:e1:01:ad:5a:09:
                    9e:a7:7a:bc:74:e0:d1:79:b1:94:dd:78:7f:0f:05:
                    d5:37:7b:e6:b0:45:1c:03:4e:0b:95:b9:b5:c6:91:
                    55:7c:0a:f5:04:55:26:4e:c0:7d:a7:74:4a:d0:b0:
                    0d:7a:23:7d:ee:48:16:a6:80:52:06:88:a8:3c:e1:
                    07:c7:67:d5:e2:c0:98:f2:8a:98:4d:68:60:65:06:
                    55:ce:88:96:88:45:82:6d:ad:f3:06:d5:1b:62:48:
                    d9:bf:86:82:60:99:41:7c:e0:ca:c1:f0:b6:34:24:
                    8a:5c:c6:ea:8b:77:60:c9:63:00:26:1a:c0:fe:f3:
                    87:75:7e:25:cb:fa:3f:90:d0:37:bd:32:42:77:35:
                    5b:1a:f7:a1:54:0b:3d:9d:07:56:ff:bc:e6:00:60:
                    da:8f:90:2c:7a:38:ae:2a:fe:41:15:19:d5:1a:d5:
                    43:03:9d:ff:fe:13:36:a0:53:2f:76:3f:02:5f:01:
                    2e:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:AD:56:E9:BF:80:AE:53:56:35:6E:03:37:AE:F7:86:B0:BB:A4:BC
            X509v3 Authority Key Identifier:
                keyid:35:8F:36:B7:B0:30:5B:D9:FF:EB:C5:37:A1:A7:56:B7:4E:04:D5:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NY82t7AwW9n_68U3oadWt04E1eQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8c9067-cc6d-4c4a-b661-37d15719a2d0/1/NY82t7AwW9n_68U3oadWt04E1eQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8c9067-cc6d-4c4a-b661-37d15719a2d0/1/NY82t7AwW9n_68U3oadWt04E1eQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:64:47:7c:b6:ed:dc:13:64:3e:1c:4a:fc:47:08:00:b6:a7:
         a1:74:6e:73:69:c4:98:73:d7:62:7a:a9:e3:df:9b:80:96:f3:
         ce:e7:3a:4c:26:97:0b:77:50:06:6e:11:43:60:a5:f5:e2:64:
         4e:f5:b6:86:fe:03:c3:ed:8f:11:b3:f3:6f:d8:01:7f:75:ad:
         b4:a2:7c:95:9a:81:64:28:6e:8e:cc:c8:58:92:a5:6b:fa:b6:
         e8:e8:47:4f:7f:c0:5f:74:cf:0a:b9:5a:f1:4f:c0:c2:54:df:
         86:2c:65:82:45:c1:e4:eb:72:d3:8a:9f:5f:dc:49:3f:fc:bd:
         8a:ca:bb:b6:1b:5b:13:ac:cb:d5:e9:f6:96:16:98:ce:6b:e7:
         f9:33:db:94:7a:01:84:d3:2e:0b:a0:97:d7:4d:b0:2b:c5:e4:
         2b:b0:f9:3f:79:07:8a:14:f2:eb:b3:2d:28:70:df:36:f4:23:
         52:3f:b5:82:c5:36:7b:d7:00:c0:db:e6:76:c7:c6:51:d7:15:
         8c:28:03:d3:82:c0:5b:66:64:18:00:3c:1d:b8:db:b6:39:4c:
         0b:e1:62:a1:83:8b:18:95:3d:66:3a:24:38:fa:dc:74:51:35:
         c0:de:f2:11:33:f6:f5:6a:af:ce:60:db:6a:74:f1:3f:13:ea:
         9a:53:f9:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:17:53 2025 by rpki-client