Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/99ef87-f86c-4fac-84b6-316b03d502cc/1/neBXM--4s3ZMqT7jQJiIadlmA6o.mft
File:                     neBXM--4s3ZMqT7jQJiIadlmA6o.mft (raw, json)
Hash identifier:          oO9QGs1uGUh7E+Cc+y2ANuecdW4i9YEM7rNbee6rN3I=
Subject key identifier:   05:79:2A:06:5D:23:49:66:60:BC:2D:4F:31:88:28:10:52:9C:6C:9D
Authority key identifier: 9D:E0:57:33:EF:B8:B3:76:4C:A9:3E:E3:40:98:88:69:D9:66:03:AA
Certificate issuer:       /CN=9de05733efb8b3764ca93ee340988869d96603aa
Certificate serial:       0197493139BF2E67837DD09A3FFA05ADE59D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/neBXM--4s3ZMqT7jQJiIadlmA6o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/99ef87-f86c-4fac-84b6-316b03d502cc/1/neBXM--4s3ZMqT7jQJiIadlmA6o.mft
Manifest number:          05AC
Signing time:             Sat 07 Jun 2025 07:00:52 +0000
Manifest this update:     Sat 07 Jun 2025 07:00:52 +0000
Manifest next update:     Sun 08 Jun 2025 07:00:52 +0000
Files and hashes:         1: neBXM--4s3ZMqT7jQJiIadlmA6o.crl (hash: Ka3S31cm6YrxzqGB1ekdkrmQ+300F1K8lJlEZ9vp/PU=)
                          2: sqmMGt0eDKyreQvWI_6aFaF0fMI.roa (hash: qdLfu3h3QsYojhl/lJoW5BgE1PTZ02X+GGEq14T1m/g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/99ef87-f86c-4fac-84b6-316b03d502cc/1/neBXM--4s3ZMqT7jQJiIadlmA6o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/99ef87-f86c-4fac-84b6-316b03d502cc/1/neBXM--4s3ZMqT7jQJiIadlmA6o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/neBXM--4s3ZMqT7jQJiIadlmA6o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:31:39:bf:2e:67:83:7d:d0:9a:3f:fa:05:ad:e5:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9de05733efb8b3764ca93ee340988869d96603aa
        Validity
            Not Before: Jun  7 07:00:52 2025 GMT
            Not After : Jun  8 07:00:52 2025 GMT
        Subject: CN=05792a065d23496660bc2d4f31882810529c6c9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a3:3d:f8:b9:15:8e:41:f1:34:4a:da:ab:98:
                    35:a8:36:be:95:8d:ec:04:34:67:9f:9c:53:80:9a:
                    dc:b9:64:4f:9d:2c:2a:3a:3f:14:e4:3c:fd:e2:87:
                    c0:6a:f6:0f:9a:f8:07:89:9e:ef:6b:70:a5:d4:f5:
                    90:63:5d:0f:42:1b:f0:ce:82:dd:15:5b:6d:fd:66:
                    a9:83:a1:91:0f:05:d7:d3:1f:62:18:21:5d:e0:49:
                    e0:99:6e:11:b6:6a:5c:27:6b:5f:ef:98:cd:6d:5d:
                    b2:42:7c:82:96:ed:8a:22:d7:92:e6:37:d8:46:15:
                    e8:43:69:23:43:f1:a5:95:32:1b:9a:aa:01:c4:93:
                    e0:98:70:a5:85:a3:00:0c:c2:eb:0a:87:78:59:c8:
                    23:a0:3d:41:b5:e7:d7:46:5e:48:f8:93:43:9b:5f:
                    0d:9a:ed:27:b2:c8:87:c8:68:67:6f:ea:57:cb:e4:
                    b0:93:87:e8:09:df:38:e6:97:a1:b0:9b:43:74:a3:
                    5f:f3:04:ec:5f:81:a3:83:9d:16:2a:22:70:04:d3:
                    d0:ed:43:85:de:2c:62:a3:79:53:0b:cd:6d:5a:c9:
                    09:b6:27:59:d0:e9:07:6c:7e:14:5a:5f:c2:c1:0c:
                    7c:4e:d9:30:b3:67:e0:ac:da:9a:c2:18:2b:66:e6:
                    89:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:79:2A:06:5D:23:49:66:60:BC:2D:4F:31:88:28:10:52:9C:6C:9D
            X509v3 Authority Key Identifier:
                keyid:9D:E0:57:33:EF:B8:B3:76:4C:A9:3E:E3:40:98:88:69:D9:66:03:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/neBXM--4s3ZMqT7jQJiIadlmA6o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/99ef87-f86c-4fac-84b6-316b03d502cc/1/neBXM--4s3ZMqT7jQJiIadlmA6o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/99ef87-f86c-4fac-84b6-316b03d502cc/1/neBXM--4s3ZMqT7jQJiIadlmA6o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:ea:bf:f1:a2:06:41:fd:8c:2f:10:a5:42:01:a3:c3:e0:ba:
         03:3a:95:26:f8:cf:95:b2:5b:d9:6d:d3:73:b3:d9:18:67:fd:
         cb:d7:3a:9a:7b:dc:e2:e8:4a:05:99:83:6c:fb:cf:e7:75:23:
         d8:ac:9c:a8:f5:f1:8a:d1:00:09:a1:c9:4f:aa:ec:b9:39:1f:
         32:26:6e:7d:ff:e3:be:7c:af:65:62:1c:66:38:70:a2:7c:b1:
         92:c9:ca:ab:37:15:d8:69:d8:33:bf:de:c0:5c:ec:21:19:0c:
         f4:c4:e0:97:60:5e:d8:ca:3f:c6:1b:5c:d5:a1:d4:e8:af:b6:
         a0:b6:74:e4:18:65:26:49:15:83:d9:91:fa:9e:28:ac:85:95:
         15:0d:d1:a2:ae:64:b9:91:fe:c2:15:57:69:e5:30:8a:dd:0c:
         8a:60:aa:4e:2d:f3:84:b0:fb:01:85:a5:40:fe:f1:0c:dd:d6:
         39:1b:32:1e:47:d2:ad:93:46:b0:9c:d2:06:78:50:23:b3:9b:
         5e:79:73:b8:68:0e:dd:54:8a:a8:22:7d:8d:d6:37:89:10:a4:
         12:27:29:c6:99:aa:59:ef:57:ec:30:b7:91:81:cf:63:5f:29:
         59:1f:7a:f3:82:12:d5:e2:eb:70:28:bb:d2:b0:a4:69:9e:76:
         fe:28:89:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:35:39 2025 by rpki-client