Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/NhrfV8jct7_TTprs2D42NC7Do8k.mft
File:                     NhrfV8jct7_TTprs2D42NC7Do8k.mft (raw, json)
Hash identifier:          6YO7wu4jC2Ki2E+LvrfHlCrbf9MJOk/Nbc1q/ikmWdE=
Subject key identifier:   EA:0A:E6:7A:57:FF:20:E7:E1:9A:D8:3A:F6:A4:B6:62:57:F0:59:52
Authority key identifier: 36:1A:DF:57:C8:DC:B7:BF:D3:4E:9A:EC:D8:3E:36:34:2E:C3:A3:C9
Certificate issuer:       /CN=361adf57c8dcb7bfd34e9aecd83e36342ec3a3c9
Certificate serial:       0197458B2AB119C6C567D50BEC9A62072394
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NhrfV8jct7_TTprs2D42NC7Do8k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/NhrfV8jct7_TTprs2D42NC7Do8k.mft
Manifest number:          1337
Signing time:             Fri 06 Jun 2025 14:00:37 +0000
Manifest this update:     Fri 06 Jun 2025 14:00:37 +0000
Manifest next update:     Sat 07 Jun 2025 14:00:37 +0000
Files and hashes:         1: 8GuN-54fOOWK-SbVRHbvHD1t258.roa (hash: +JAgmZYVHbTg/tn7L+SSKAVcpZBlqMe4rbmvvs3DmTY=)
                          2: KFmrVFMv5VvGN18H4jdGIeWGvn8.roa (hash: /z+1/Ei//uOKicmtTi2XHrdGdq2SuXHHljqI7g0rhfE=)
                          3: NhrfV8jct7_TTprs2D42NC7Do8k.crl (hash: dJAxgijky68oXTLwcs9foQ6t9i4pHPQ/flqLuUXPRm0=)
                          4: gaApv-P3VWnlKNagOLOw5elCXUg.roa (hash: uJOMrg9lvM87wMjmTs9ZCZY0pZU1l+jJJKNSBI4+HgI=)
                          5: mldZ02SgByZkxb9-hN-tKmR0o0s.roa (hash: DrkW1wHvYpTjqDlBZkGq/sAaUPB7borOxMsYKMVFock=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/NhrfV8jct7_TTprs2D42NC7Do8k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/NhrfV8jct7_TTprs2D42NC7Do8k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NhrfV8jct7_TTprs2D42NC7Do8k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 14:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:45:8b:2a:b1:19:c6:c5:67:d5:0b:ec:9a:62:07:23:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=361adf57c8dcb7bfd34e9aecd83e36342ec3a3c9
        Validity
            Not Before: Jun  6 14:00:37 2025 GMT
            Not After : Jun  7 14:00:37 2025 GMT
        Subject: CN=ea0ae67a57ff20e7e19ad83af6a4b66257f05952
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:7d:31:d3:bd:7d:b5:3e:13:36:bc:c9:0f:bc:
                    22:3e:a5:b1:90:b0:c4:80:fb:44:2c:50:57:bc:a2:
                    63:e4:08:39:ce:d2:6c:f9:72:1d:e0:a7:e0:e6:93:
                    d7:4f:03:f0:f4:bb:87:71:29:fb:80:e5:f1:70:63:
                    04:fc:6d:7f:a2:46:cc:6b:69:83:f4:a1:02:27:79:
                    77:89:c2:ae:58:19:59:3b:3c:de:44:2e:87:58:de:
                    fb:03:53:94:53:c0:24:b8:20:cc:9c:68:ac:c0:e1:
                    fc:51:89:6a:92:2d:9c:4e:21:7b:e2:63:3b:9a:e0:
                    61:9d:cf:21:3d:39:e3:61:62:79:ac:3d:eb:5b:fc:
                    05:ee:9f:c8:04:98:b0:f2:4e:7c:51:1d:75:b0:b7:
                    48:68:55:f8:2a:5d:05:fe:9a:56:f0:16:16:58:9b:
                    88:df:9e:dd:9d:88:af:e4:53:3e:ec:ae:46:6a:14:
                    60:64:41:d3:3a:4e:36:8a:e6:96:da:d5:10:30:03:
                    ac:19:6f:0b:2c:a0:ae:a0:43:a5:e0:9f:78:32:58:
                    96:0e:b5:1f:49:96:53:20:fc:ee:d1:46:ea:cc:f7:
                    7b:7b:a1:85:f9:4c:d8:86:d6:8d:39:ad:e5:69:a2:
                    25:55:ac:20:a0:ab:21:24:a1:a7:3e:94:75:fd:f9:
                    89:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:0A:E6:7A:57:FF:20:E7:E1:9A:D8:3A:F6:A4:B6:62:57:F0:59:52
            X509v3 Authority Key Identifier:
                keyid:36:1A:DF:57:C8:DC:B7:BF:D3:4E:9A:EC:D8:3E:36:34:2E:C3:A3:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhrfV8jct7_TTprs2D42NC7Do8k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/NhrfV8jct7_TTprs2D42NC7Do8k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/NhrfV8jct7_TTprs2D42NC7Do8k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:75:26:5e:04:12:e5:88:2a:de:76:00:61:e9:ec:17:ba:50:
         1c:d3:fc:df:66:26:7b:a1:15:90:11:ef:06:d9:56:d2:09:45:
         9a:62:32:74:69:b8:3a:57:1e:2e:5e:bd:8f:63:88:78:cf:82:
         6f:7f:43:d2:ea:bb:19:1d:56:f6:8a:65:c3:51:de:56:6a:fd:
         ba:f5:2c:95:ec:fb:67:22:7f:02:06:60:01:88:cc:6e:65:54:
         67:c1:d6:46:9b:49:76:e3:32:5d:96:6f:32:ff:35:ac:31:bf:
         94:18:16:70:93:34:24:c5:21:17:e1:71:6f:47:bf:ee:a9:85:
         88:cf:4a:0b:b4:8f:17:df:65:c1:86:a5:1a:70:19:d9:78:49:
         97:4e:18:b0:52:85:82:66:d5:bc:04:6d:02:7b:3f:6a:42:55:
         c2:99:46:e8:ac:5f:bb:50:d1:6a:8e:db:93:68:5f:42:e4:92:
         2c:20:c8:df:c3:53:00:4d:22:42:c2:a0:28:30:f9:e4:0c:f6:
         24:f3:d3:45:0d:1b:9a:4a:76:35:20:a8:44:6c:75:cc:5e:14:
         a6:fb:29:66:b1:67:a2:28:3e:1b:35:11:71:c6:3d:d9:20:bc:
         af:09:12:f4:fb:b3:76:7e:27:a6:1b:f8:0a:bc:d1:76:35:97:
         ac:2c:cc:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:10:39 2025 by rpki-client