Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/nHPZRT--37gMRUO7Up_DMMH4wc4.mft
File:                     nHPZRT--37gMRUO7Up_DMMH4wc4.mft (raw, json)
Hash identifier:          WDv/EVrJ/jyP6husH/Ei+PQtHswqJf8G/4w/pGWufLQ=
Subject key identifier:   E7:8A:E0:1E:2A:3C:7A:3D:C3:10:BE:ED:55:87:B4:24:F6:DB:65:88
Authority key identifier: 9C:73:D9:45:3F:BE:DF:B8:0C:45:43:BB:52:9F:C3:30:C1:F8:C1:CE
Certificate issuer:       /CN=9c73d9453fbedfb80c4543bb529fc330c1f8c1ce
Certificate serial:       01974AE8A1DE24C56247064E0FFAC2C74D40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nHPZRT--37gMRUO7Up_DMMH4wc4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/nHPZRT--37gMRUO7Up_DMMH4wc4.mft
Manifest number:          0B32
Signing time:             Sat 07 Jun 2025 15:00:48 +0000
Manifest this update:     Sat 07 Jun 2025 15:00:48 +0000
Manifest next update:     Sun 08 Jun 2025 15:00:48 +0000
Files and hashes:         1: AMTfdcOhvN2UxA7mt3gv3KECuGg.roa (hash: k51GSY+oL6d3vSnVOqR7gGcER+6PBSvBsmHDXYmEq2c=)
                          2: IZ4_8o0uG1RVAax56_hcAW3WTtc.roa (hash: BLF9NvSAp12xGKGCWF6fmakXoIQEimqM8wkdCYNJdbY=)
                          3: OfxRKdN2bPZI0fvyGrpUm_OCPQs.roa (hash: lVQukuR8pvFzQlCkS5KRF6YO+By1WT+Hs0uHk5OATm0=)
                          4: ieAfCh_vwbBTbF3DGBJXQYMx9Pw.roa (hash: N095uXaZbk2Jvru/0oYsrQzeZ/eKCMXo6ETE3DefpcQ=)
                          5: j4cd6L8tYRDjLejdv94aClKAGXU.roa (hash: WlNinENED4PfFKrXHfbYinzDLlIPfYjUPCjvbvhk+i8=)
                          6: nHPZRT--37gMRUO7Up_DMMH4wc4.crl (hash: AFX0JOe29SJCfOzvUarICmbjY1U7PJrj3GGl863YYaY=)
                          7: xe-87aH9X1grSznD-2-c4OZyYHo.roa (hash: S80ekAfHbqsZOpsBTbZwj0DAL1iEaOufRZ1+nQUXDqE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/nHPZRT--37gMRUO7Up_DMMH4wc4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/nHPZRT--37gMRUO7Up_DMMH4wc4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nHPZRT--37gMRUO7Up_DMMH4wc4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:e8:a1:de:24:c5:62:47:06:4e:0f:fa:c2:c7:4d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c73d9453fbedfb80c4543bb529fc330c1f8c1ce
        Validity
            Not Before: Jun  7 15:00:48 2025 GMT
            Not After : Jun  8 15:00:48 2025 GMT
        Subject: CN=e78ae01e2a3c7a3dc310beed5587b424f6db6588
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:5b:03:f8:66:3e:47:cb:c7:ed:4f:6a:74:0f:
                    80:91:05:b9:e8:2d:ba:27:ff:1e:61:33:1f:d0:16:
                    e9:42:3e:fe:ce:9c:cc:d4:69:8d:fe:e5:43:eb:be:
                    7f:8a:9b:19:30:76:30:7c:a1:87:bd:a8:ad:aa:e0:
                    36:92:04:92:df:83:b3:75:2f:9f:5d:c2:a2:45:01:
                    48:e2:c2:1b:e6:54:04:20:44:bd:a7:d1:d0:e5:2f:
                    33:18:03:61:4b:d2:cf:a3:cb:17:71:f0:36:83:14:
                    2e:61:ab:fd:1d:6d:87:b7:bf:b6:fa:07:36:4e:e4:
                    90:63:e9:aa:9a:b2:80:69:6e:a0:e1:8e:38:fd:59:
                    03:29:7b:85:b7:f3:ec:66:24:1f:76:c3:d4:f2:2c:
                    d6:ad:68:c1:97:b4:7c:e0:f0:9f:a6:c3:db:d0:47:
                    7a:8c:e7:aa:f9:91:be:aa:a6:da:13:5e:61:f7:e7:
                    4b:7f:65:72:3f:dc:93:15:04:72:9f:76:c1:d6:d7:
                    1c:e5:39:fc:b9:cc:3d:8e:46:a6:b1:63:c7:83:0a:
                    61:1d:41:52:d1:cc:26:ec:1b:16:5a:5b:cd:d1:05:
                    1b:17:82:6e:ba:e3:3f:25:15:e9:e0:2d:11:4e:eb:
                    55:a2:d3:4e:58:6b:d8:1c:62:79:91:27:9d:8c:28:
                    78:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:8A:E0:1E:2A:3C:7A:3D:C3:10:BE:ED:55:87:B4:24:F6:DB:65:88
            X509v3 Authority Key Identifier:
                keyid:9C:73:D9:45:3F:BE:DF:B8:0C:45:43:BB:52:9F:C3:30:C1:F8:C1:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nHPZRT--37gMRUO7Up_DMMH4wc4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/nHPZRT--37gMRUO7Up_DMMH4wc4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/nHPZRT--37gMRUO7Up_DMMH4wc4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:61:fe:30:6c:9e:3c:87:56:c0:cc:ac:0c:a9:b3:75:74:ad:
         2c:0f:c3:b6:25:9b:ba:a2:50:14:5c:87:41:52:33:ad:c3:f2:
         c3:c7:df:06:d1:8e:09:03:81:e4:01:15:86:e6:99:fd:25:db:
         3e:de:12:31:72:b8:17:40:cf:e4:5d:e2:62:b6:a6:94:ca:2c:
         5d:74:7d:83:86:ed:12:a6:5c:87:77:0b:94:80:0a:bc:9b:5c:
         7d:4f:01:e1:2f:5b:7c:c6:dc:4d:5f:a1:59:f5:c8:46:5e:de:
         e6:3e:4f:a7:37:3c:1b:ca:3b:9d:97:34:b9:fc:3b:e6:ce:18:
         15:9c:4f:83:ba:d6:12:2c:45:81:8d:c8:ab:0d:9e:49:ec:ab:
         c3:5e:99:a3:ba:21:3e:19:71:30:c8:59:f6:00:2a:50:5b:fc:
         f4:2c:4b:3b:37:5d:27:f8:d3:79:36:04:b1:02:77:af:f0:b9:
         1c:93:1e:ac:50:99:34:1d:ca:b0:34:bf:42:e9:c1:d5:3d:96:
         50:b3:51:08:5b:9b:3a:ce:1a:90:dd:9b:94:34:8d:e2:44:ec:
         ae:80:e1:21:c0:ba:0b:58:7d:06:f0:b7:c1:71:91:d9:79:68:
         1f:ca:11:19:5a:92:8a:0f:e0:c9:07:89:00:b7:36:03:67:20:
         fb:9d:d2:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:46:52 2025 by rpki-client