Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.mft
File:                     NpL-31nGDTJU43qcjs3hHJuhKCo.mft (raw, json)
Hash identifier:          jo58AsFzjttwxOyn6sbJkVgZpm2mPpmvxTw7wyRB2k8=
Subject key identifier:   F1:8D:9C:E7:F9:13:F4:0E:F8:6A:7F:51:2F:BA:B8:65:9A:33:11:12
Authority key identifier: 36:92:FE:DF:59:C6:0D:32:54:E3:7A:9C:8E:CD:E1:1C:9B:A1:28:2A
Certificate issuer:       /CN=3692fedf59c60d3254e37a9c8ecde11c9ba1282a
Certificate serial:       01962D19025A65D9A0A4F9769E2E39ABF4BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.mft
Manifest number:          1593
Signing time:             Sun 13 Apr 2025 03:02:15 +0000
Manifest this update:     Sun 13 Apr 2025 03:02:15 +0000
Manifest next update:     Mon 14 Apr 2025 03:02:15 +0000
Files and hashes:         1: 1-GJhYiuUUrP8RhmBh0USv-VEBfA.roa (hash: yv0HSZPQLPjAOK0Qjg6MUOpe4+d1qLZAv2u1ddULbTs=)
                          2: 8zzToX2_MSbXjPU6GvHQQ_9Dvvk.roa (hash: wilJSEirQsqEx26ndpfgfkDVvj+zVkzSkCh5uXU9fHI=)
                          3: NpL-31nGDTJU43qcjs3hHJuhKCo.crl (hash: OnXYDSZm6Xi1hqsvKR9kOOkc1FF1ry/JizgqDlz92Zw=)
                          4: bHL_tTznnHPbHP4F0hJKIReYm6M.roa (hash: R72+H7qsqTY9GklcA/NGuJeZ8wkSyMWhn933bwOHpJE=)
                          5: i16ilfmrEmGll-8P1By27TRNxjs.roa (hash: b9oY0GhLijC6RRV6+0ZoYX7cAxCSwlkMlJ1wrgHM1qc=)
                          6: q8AP7H93ZbNKPWz_Zh0y6fK8m7g.roa (hash: Jd2YHA+NTHYb6+qWLH1KGDGjnXW6xUSmZVAZe2REuGQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 13 Apr 2025 23:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:19:02:5a:65:d9:a0:a4:f9:76:9e:2e:39:ab:f4:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3692fedf59c60d3254e37a9c8ecde11c9ba1282a
        Validity
            Not Before: Apr 13 03:02:15 2025 GMT
            Not After : Apr 14 03:02:15 2025 GMT
        Subject: CN=f18d9ce7f913f40ef86a7f512fbab8659a331112
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:fa:33:37:9e:54:4e:db:15:a0:7a:bc:d0:1d:
                    02:9e:bb:f7:4f:8d:cb:b0:ca:60:d7:23:70:7a:36:
                    59:77:a3:a1:71:b4:ed:3a:07:fc:9d:a5:b2:2b:5f:
                    cf:49:c2:89:01:71:00:ad:bf:fa:d4:f0:e5:2b:00:
                    08:03:11:6f:0a:9a:69:0c:88:29:51:93:5f:58:4a:
                    53:da:8e:a9:22:48:82:e2:4a:35:26:73:73:bb:f3:
                    00:7b:9b:59:4b:6f:c1:1e:ae:24:5a:cb:d9:a4:63:
                    91:dc:f7:be:ce:45:a8:04:d0:3e:ae:5d:5e:92:c9:
                    f8:82:f7:e9:80:42:f2:1a:20:86:84:31:0e:da:09:
                    7a:2f:06:4f:43:99:5a:5d:1c:84:7f:de:bb:b5:a9:
                    fd:a8:b9:5a:db:a0:46:4f:a4:30:2d:f6:fa:7a:66:
                    f9:58:0e:7b:af:e7:68:42:4c:39:53:32:c7:d8:f1:
                    99:90:18:17:b3:43:40:fa:77:1c:7d:10:db:25:ab:
                    50:22:61:a1:f9:55:24:e6:d4:7f:ce:82:89:89:3e:
                    9f:75:21:f6:bb:bf:8d:53:57:19:14:42:33:5a:91:
                    f7:95:f5:0c:3c:4f:f8:45:95:b1:6c:04:50:f0:4b:
                    3b:e8:c0:1c:fa:4a:23:b7:7b:36:1c:c0:5c:3d:3d:
                    41:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:8D:9C:E7:F9:13:F4:0E:F8:6A:7F:51:2F:BA:B8:65:9A:33:11:12
            X509v3 Authority Key Identifier:
                keyid:36:92:FE:DF:59:C6:0D:32:54:E3:7A:9C:8E:CD:E1:1C:9B:A1:28:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:02:f7:f8:b4:a3:3a:2d:41:78:8c:59:0b:4f:d5:ae:50:40:
         7c:c4:9f:46:58:ad:b5:eb:94:fe:6c:c8:bc:0b:57:85:c1:32:
         c8:57:21:ea:9b:56:40:a7:b2:43:be:8c:b2:ca:bc:02:62:41:
         7d:73:1f:e9:58:c8:d5:2a:9b:15:a4:4e:bf:31:bd:cb:b5:f8:
         ce:1b:fe:78:0d:f6:e8:dd:00:c1:f7:21:73:83:c9:ba:ab:8c:
         8c:28:92:a5:2a:2d:f8:62:e9:f2:69:a7:be:5b:c4:d1:06:4b:
         fe:a3:ca:2f:5f:cb:93:3f:9d:a6:29:16:f0:4b:c6:59:5b:af:
         04:97:a7:37:dd:78:61:39:a0:2d:70:1f:02:19:16:c2:a0:00:
         a7:8a:78:03:38:67:62:7e:ab:09:93:fe:82:3b:96:85:43:82:
         72:5a:4c:3a:9f:88:43:eb:5d:7d:28:43:2d:dc:38:ac:b3:71:
         b1:0f:27:4a:31:25:ef:ef:bc:d4:30:8c:95:2b:25:98:0b:4a:
         8a:bf:a7:c1:73:82:1f:36:a0:b2:74:db:35:d5:13:c0:55:6e:
         fa:2e:ad:1e:fa:72:f8:69:ac:73:56:1f:86:82:06:f7:ef:44:
         24:52:2f:85:8d:ad:ec:4d:da:02:f0:31:cf:31:79:0a:7d:af:
         17:f6:dc:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 07:27:29 2025 by rpki-client