Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/022af5-862c-428e-bee8-28a4681c37d6/1/Nia55ERl8L1xPAoeBQED05EdzWc.mft
File:                     Nia55ERl8L1xPAoeBQED05EdzWc.mft (raw, json)
Hash identifier:          SCs6tLi7nocew0PoGZ/P5hYpH6bOvKpLbUAwCkjdQy4=
Subject key identifier:   E9:A6:8D:25:EC:82:BA:55:1F:D4:9D:7A:4E:86:3E:BA:86:41:DC:F1
Authority key identifier: 36:26:B9:E4:44:65:F0:BD:71:3C:0A:1E:05:01:03:D3:91:1D:CD:67
Certificate issuer:       /CN=3626b9e44465f0bd713c0a1e050103d3911dcd67
Certificate serial:       01974C68ACB114FA8ED45371A64FEB4196C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nia55ERl8L1xPAoeBQED05EdzWc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/022af5-862c-428e-bee8-28a4681c37d6/1/Nia55ERl8L1xPAoeBQED05EdzWc.mft
Manifest number:          0B63
Signing time:             Sat 07 Jun 2025 22:00:17 +0000
Manifest this update:     Sat 07 Jun 2025 22:00:17 +0000
Manifest next update:     Sun 08 Jun 2025 22:00:17 +0000
Files and hashes:         1: Nia55ERl8L1xPAoeBQED05EdzWc.crl (hash: C+StxLEpptRzL2HVDPZff2BcsWzGKcbt7yocGlBxczY=)
                          2: ijM-M3pW5i9OPaVJ9z7pdR0nkfo.roa (hash: BaCHQlpNW/709AUvEnmAV++DQu/RFZCpGAAySqc5kGo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/022af5-862c-428e-bee8-28a4681c37d6/1/Nia55ERl8L1xPAoeBQED05EdzWc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/022af5-862c-428e-bee8-28a4681c37d6/1/Nia55ERl8L1xPAoeBQED05EdzWc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Nia55ERl8L1xPAoeBQED05EdzWc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 22:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4c:68:ac:b1:14:fa:8e:d4:53:71:a6:4f:eb:41:96:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3626b9e44465f0bd713c0a1e050103d3911dcd67
        Validity
            Not Before: Jun  7 22:00:17 2025 GMT
            Not After : Jun  8 22:00:17 2025 GMT
        Subject: CN=e9a68d25ec82ba551fd49d7a4e863eba8641dcf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:62:99:de:5c:28:63:1b:d5:1c:99:b8:6f:36:
                    2b:7b:42:7c:f7:b4:87:1b:97:13:ce:2f:92:83:3a:
                    d8:88:2a:b8:ae:96:0a:20:98:88:a6:f8:77:05:c2:
                    dc:c4:6a:bb:88:4c:63:79:15:bc:05:71:87:b8:17:
                    ca:bd:71:92:07:a8:18:b1:d8:cf:38:5e:1c:a0:f4:
                    75:98:ee:45:5c:90:d9:ce:f5:32:d2:22:11:89:52:
                    a5:bb:92:77:2d:c9:6a:5b:f5:59:7d:16:a8:32:77:
                    bb:2d:3f:44:24:c6:3d:98:d5:97:95:0a:11:3b:e3:
                    9b:f3:b1:28:35:5d:e0:03:df:10:86:18:5a:92:97:
                    99:6e:37:c6:4c:7e:34:82:8d:7a:cf:36:7f:5f:44:
                    31:30:70:a4:f6:8e:74:a4:e1:37:1a:c7:54:29:04:
                    cb:11:1d:ae:66:60:a9:b6:04:f9:b0:32:51:e2:2a:
                    45:38:fc:67:93:a9:2f:52:f6:58:1b:f6:96:3c:9a:
                    52:b3:2d:b7:b3:6d:b4:05:56:e2:5b:3d:1c:59:90:
                    25:49:b2:a9:4a:94:2d:63:b5:8a:ba:20:85:a3:83:
                    d4:d4:64:6a:25:94:51:40:03:64:91:93:cf:00:22:
                    b8:f1:ac:71:56:ba:32:64:67:59:54:5e:7e:8a:7e:
                    de:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:A6:8D:25:EC:82:BA:55:1F:D4:9D:7A:4E:86:3E:BA:86:41:DC:F1
            X509v3 Authority Key Identifier:
                keyid:36:26:B9:E4:44:65:F0:BD:71:3C:0A:1E:05:01:03:D3:91:1D:CD:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nia55ERl8L1xPAoeBQED05EdzWc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/022af5-862c-428e-bee8-28a4681c37d6/1/Nia55ERl8L1xPAoeBQED05EdzWc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/022af5-862c-428e-bee8-28a4681c37d6/1/Nia55ERl8L1xPAoeBQED05EdzWc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:e5:1c:06:f1:9e:93:34:88:cc:d0:75:5f:10:15:14:e8:ac:
         6d:34:43:37:f6:9c:17:b9:da:9a:4d:2a:35:5b:9a:9c:07:aa:
         bc:7e:23:55:89:f4:0a:cc:81:11:d1:21:8c:01:51:5e:57:a3:
         1c:35:2c:1b:d9:21:94:5c:a7:af:28:57:4e:3d:ec:97:79:b3:
         42:94:aa:18:7b:de:7c:aa:fd:2b:9e:36:13:78:75:d7:62:dd:
         20:a9:1d:fe:96:57:16:18:9d:e4:65:5d:cc:67:67:a6:31:a6:
         11:4f:3e:f2:92:4c:80:f9:10:d4:51:6a:85:5e:09:85:cd:37:
         83:41:f5:f1:3c:f5:3c:0e:29:22:2e:42:45:4b:38:46:6b:53:
         f4:d7:a1:6a:af:31:59:6e:9d:0a:54:95:1a:38:61:b2:76:25:
         21:ef:a5:65:df:89:18:da:25:1f:cb:cf:52:98:41:1a:89:d1:
         14:5f:f9:3a:31:cc:3e:91:b1:81:58:a9:6c:eb:6c:6c:0c:39:
         66:90:f0:05:76:4f:61:cf:8a:52:d4:32:b4:a2:89:d0:64:33:
         42:3c:52:25:19:58:ba:1d:4b:92:09:c9:56:47:ee:1b:bc:a7:
         ba:90:be:0e:df:31:fe:ba:4a:49:a4:75:8c:49:11:ec:57:16:
         12:e2:c2:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:18:15 2025 by rpki-client