Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/ed4e2c-e5ad-417a-8788-11824406bd5d/1/nOTmWuzJXURqDLZAuXZvoPgVDjw.mft
File:                     nOTmWuzJXURqDLZAuXZvoPgVDjw.mft (raw, json)
Hash identifier:          AgSYMdAtzI4MyrHgHGZPDyp9yuHysDwRF9tefHQ2NWw=
Subject key identifier:   D1:47:AB:06:6C:E9:34:60:DD:B6:EF:1F:D9:0B:ED:D1:BB:87:D1:92
Authority key identifier: 9C:E4:E6:5A:EC:C9:5D:44:6A:0C:B6:40:B9:76:6F:A0:F8:15:0E:3C
Certificate issuer:       /CN=9ce4e65aecc95d446a0cb640b9766fa0f8150e3c
Certificate serial:       0197654D228714C6DFA00517EACBD352FE1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nOTmWuzJXURqDLZAuXZvoPgVDjw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/ed4e2c-e5ad-417a-8788-11824406bd5d/1/nOTmWuzJXURqDLZAuXZvoPgVDjw.mft
Manifest number:          0E8E
Signing time:             Thu 12 Jun 2025 18:00:43 +0000
Manifest this update:     Thu 12 Jun 2025 18:00:43 +0000
Manifest next update:     Fri 13 Jun 2025 18:00:43 +0000
Files and hashes:         1: nOTmWuzJXURqDLZAuXZvoPgVDjw.crl (hash: ls0ZeFqlDAQURaB7w7mcDWMvTlelz+tW4iFYtSH/6x0=)
                          2: wnex2LpnDh2tDYAOL_JlA2jqYbg.roa (hash: jkFPmngwGBf/VR9fqzS0+q+xo9EQNuNbpIxHsY+rxw0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/ed4e2c-e5ad-417a-8788-11824406bd5d/1/nOTmWuzJXURqDLZAuXZvoPgVDjw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/ed4e2c-e5ad-417a-8788-11824406bd5d/1/nOTmWuzJXURqDLZAuXZvoPgVDjw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nOTmWuzJXURqDLZAuXZvoPgVDjw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:65:4d:22:87:14:c6:df:a0:05:17:ea:cb:d3:52:fe:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ce4e65aecc95d446a0cb640b9766fa0f8150e3c
        Validity
            Not Before: Jun 12 18:00:43 2025 GMT
            Not After : Jun 13 18:00:43 2025 GMT
        Subject: CN=d147ab066ce93460ddb6ef1fd90bedd1bb87d192
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:1a:a0:8d:d9:1c:44:98:e8:c6:65:27:63:56:
                    0e:2f:5b:13:dc:9c:65:92:8e:36:cc:f3:73:68:29:
                    db:7f:fb:98:01:50:25:44:c2:2e:22:ff:e6:0f:ac:
                    01:06:9d:e8:05:ec:1e:47:62:f8:3c:02:23:1e:e5:
                    c6:0d:af:cc:0b:ba:e6:31:83:a2:ef:b6:d2:45:c0:
                    50:0c:f9:fa:71:40:9d:5a:5b:93:83:4b:ea:5a:65:
                    48:33:05:f1:67:e6:09:80:49:e8:08:fe:80:7c:d3:
                    a6:ce:51:a0:1b:54:96:b2:80:e9:2b:3c:f8:84:8e:
                    c3:7b:ee:19:0a:a7:82:9c:f7:3f:bb:97:8d:f1:e5:
                    9f:82:85:e0:9a:24:e8:7d:0b:e8:e4:93:82:17:d5:
                    38:18:27:1b:68:90:5f:67:bf:ea:83:48:a8:ae:3b:
                    69:d0:27:e8:d8:d0:23:51:97:a3:d8:75:a6:77:79:
                    2a:bc:c4:93:51:f3:fe:d8:68:7c:6f:7e:8d:e8:bd:
                    cf:a7:7a:f8:d6:80:76:3e:4f:4e:b4:ce:2f:4b:a8:
                    96:fc:81:07:da:7e:af:11:2b:52:12:07:11:0f:72:
                    4b:4c:4e:cf:77:21:7c:92:42:af:3a:5c:09:28:a3:
                    bf:e4:c1:7b:2d:81:44:85:62:d2:c0:a9:5c:d5:2d:
                    e1:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:47:AB:06:6C:E9:34:60:DD:B6:EF:1F:D9:0B:ED:D1:BB:87:D1:92
            X509v3 Authority Key Identifier:
                keyid:9C:E4:E6:5A:EC:C9:5D:44:6A:0C:B6:40:B9:76:6F:A0:F8:15:0E:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nOTmWuzJXURqDLZAuXZvoPgVDjw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ed4e2c-e5ad-417a-8788-11824406bd5d/1/nOTmWuzJXURqDLZAuXZvoPgVDjw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ed4e2c-e5ad-417a-8788-11824406bd5d/1/nOTmWuzJXURqDLZAuXZvoPgVDjw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:a5:05:f7:28:7f:2b:a9:33:4b:7d:5b:b1:52:33:70:59:08:
         bd:52:5d:f7:07:9f:69:f0:a0:cd:04:d7:a2:7e:2b:2d:d7:6b:
         81:6b:3b:1c:1b:7c:58:7b:bc:5b:00:3a:41:4e:d9:ae:57:5a:
         b8:3b:24:b6:30:c9:9b:59:7b:d8:b2:6a:67:d2:cb:11:16:7c:
         0d:f4:a3:e3:b4:c6:48:27:38:a7:a6:97:4a:07:fb:15:44:3c:
         2c:f5:eb:8e:b6:6b:e9:7a:ba:82:53:aa:6b:fd:7f:97:e5:39:
         d1:04:23:a0:47:3a:b0:e6:1e:ca:1d:1e:07:de:0d:4c:e3:e3:
         a9:a0:55:75:3e:ad:5c:aa:1a:b0:3d:32:d5:a1:c8:7b:08:05:
         50:00:34:40:f1:12:bf:be:33:3c:78:f2:e9:f2:38:b4:b9:58:
         0e:8e:0d:c8:45:4d:6e:21:71:9d:06:fb:99:d4:2f:7b:43:99:
         b0:2e:58:a3:0a:c7:7b:38:ba:f8:4d:f1:b6:15:af:ef:1c:e1:
         95:be:c9:25:7c:73:d3:fd:14:7d:c1:4a:15:c9:1f:18:8c:6e:
         f4:cf:a8:f6:7d:ff:68:19:6f:cb:ae:c4:35:2a:40:99:31:6c:
         cf:1f:b4:a8:63:a0:5a:21:4a:cc:a1:10:d4:bc:f7:63:4c:8b:
         4d:90:ec:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 21:29:26 2025 by rpki-client