Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/83afa0-64d2-4c1f-aa18-ec3d00e33bca/1/Nj4UU4ftpbCKowDWO0_DXlmDZP0.mft
File:                     Nj4UU4ftpbCKowDWO0_DXlmDZP0.mft (raw, json)
Hash identifier:          y4zYa4VVUD4Frj79nf1qO2j5fJoHz0f02ypycpaLtzg=
Subject key identifier:   7A:6D:E7:C6:1F:A2:FB:26:73:92:EB:10:85:68:13:41:8E:C6:2F:96
Authority key identifier: 36:3E:14:53:87:ED:A5:B0:8A:A3:00:D6:3B:4F:C3:5E:59:83:64:FD
Certificate issuer:       /CN=363e145387eda5b08aa300d63b4fc35e598364fd
Certificate serial:       01974AE862B4CB97729240D924D1649BB09F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nj4UU4ftpbCKowDWO0_DXlmDZP0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/83afa0-64d2-4c1f-aa18-ec3d00e33bca/1/Nj4UU4ftpbCKowDWO0_DXlmDZP0.mft
Manifest number:          0AB5
Signing time:             Sat 07 Jun 2025 15:00:32 +0000
Manifest this update:     Sat 07 Jun 2025 15:00:32 +0000
Manifest next update:     Sun 08 Jun 2025 15:00:32 +0000
Files and hashes:         1: Nj4UU4ftpbCKowDWO0_DXlmDZP0.crl (hash: DDuafjKAkup+Ok3aVo/vAVv2ImjA24996575WElLlJI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/83afa0-64d2-4c1f-aa18-ec3d00e33bca/1/Nj4UU4ftpbCKowDWO0_DXlmDZP0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/83afa0-64d2-4c1f-aa18-ec3d00e33bca/1/Nj4UU4ftpbCKowDWO0_DXlmDZP0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Nj4UU4ftpbCKowDWO0_DXlmDZP0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 15:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:e8:62:b4:cb:97:72:92:40:d9:24:d1:64:9b:b0:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=363e145387eda5b08aa300d63b4fc35e598364fd
        Validity
            Not Before: Jun  7 15:00:32 2025 GMT
            Not After : Jun  8 15:00:32 2025 GMT
        Subject: CN=7a6de7c61fa2fb267392eb10856813418ec62f96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:dd:da:bc:9f:a1:ae:af:da:fd:e7:f5:e4:14:
                    c0:df:fa:aa:f3:ae:4b:54:29:03:56:37:de:0f:82:
                    a7:ea:6c:d6:0f:17:56:95:49:be:9b:7d:d5:01:61:
                    2c:49:01:04:74:9f:ef:49:c3:9d:08:e7:97:a6:fd:
                    bf:a7:d2:38:9e:d8:3b:af:89:7a:22:59:71:8a:8c:
                    5a:ae:82:b0:f7:d7:9c:2c:09:64:f9:50:89:9b:ec:
                    1a:05:f3:59:e8:a2:b7:8e:2b:ba:a4:79:ea:b9:c5:
                    7f:db:0f:db:32:9e:4a:3d:ee:f0:c8:e2:dc:33:32:
                    9f:99:f6:50:be:44:89:03:b1:32:49:8d:3d:4b:d9:
                    26:d9:5d:7d:2b:6b:3a:ed:11:5e:95:90:ae:07:f9:
                    4c:87:b7:22:96:45:cf:18:4b:ed:93:cb:9b:c5:e3:
                    d4:db:84:78:57:11:b3:e8:e6:14:44:df:18:85:c6:
                    ef:b8:21:ea:37:a0:1d:4b:d1:e2:04:4d:e2:36:39:
                    09:66:4c:98:4d:ff:13:98:65:6e:be:8e:a0:1a:af:
                    6a:7a:f5:54:34:14:3a:bd:02:68:41:68:f4:0c:d8:
                    53:57:ce:99:81:0b:08:54:a6:d4:27:ba:68:7a:2c:
                    1c:b8:24:28:b2:6f:27:ef:97:b6:df:54:38:fa:e1:
                    bf:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:6D:E7:C6:1F:A2:FB:26:73:92:EB:10:85:68:13:41:8E:C6:2F:96
            X509v3 Authority Key Identifier:
                keyid:36:3E:14:53:87:ED:A5:B0:8A:A3:00:D6:3B:4F:C3:5E:59:83:64:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nj4UU4ftpbCKowDWO0_DXlmDZP0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/83afa0-64d2-4c1f-aa18-ec3d00e33bca/1/Nj4UU4ftpbCKowDWO0_DXlmDZP0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/83afa0-64d2-4c1f-aa18-ec3d00e33bca/1/Nj4UU4ftpbCKowDWO0_DXlmDZP0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:dd:8c:97:f1:d7:1d:ab:d3:fd:d6:db:8d:65:4d:2f:c9:2b:
         f0:cd:df:62:25:d3:1c:81:79:e3:c9:7e:0a:3c:79:36:ca:89:
         bf:55:c3:a8:9f:69:ad:ff:63:8c:86:bc:ec:b0:42:2c:99:2f:
         de:0f:f9:70:07:c6:bb:0b:f8:6f:b5:b2:97:f2:43:9c:85:b3:
         5f:cd:99:f8:6e:32:f8:15:7d:fa:87:34:15:09:19:67:f5:7d:
         72:36:12:f4:ed:75:11:99:c6:0f:89:38:7f:6a:4b:ec:64:06:
         4e:e0:b0:92:eb:6c:9d:43:6d:be:83:12:35:87:0f:51:06:ef:
         a5:de:52:2d:d6:5a:af:be:cb:e1:c9:f7:05:5d:8a:c6:a3:5d:
         e9:af:68:f1:14:9f:af:2f:95:37:84:f3:44:bd:ce:57:0c:8f:
         69:95:9d:9b:fe:95:6a:60:0f:e7:b1:92:7d:93:c9:de:38:2a:
         ee:67:1d:92:e4:09:cb:a8:66:21:ab:17:0d:35:95:b8:d8:88:
         e3:4e:0e:d3:7c:28:e7:88:36:11:57:5d:1a:04:b0:c9:1f:4a:
         bb:95:8e:31:69:34:69:e5:61:c2:48:ec:5f:f6:fa:dc:37:d4:
         58:e1:2a:c6:54:11:a1:6b:45:f7:49:d6:de:67:9c:78:33:01:
         05:15:43:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:28:46 2025 by rpki-client