Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/NGyrWUu9qbRA_afTl0y9RByY5ck.mft
File:                     NGyrWUu9qbRA_afTl0y9RByY5ck.mft (raw, json)
Hash identifier:          w2IrXb+jpReogdHwKjwWQHyeRsZPiV7bUERKWSJnTgk=
Subject key identifier:   76:3F:6B:79:92:45:4C:49:D9:9D:A6:27:24:9B:6D:8D:CE:80:8B:94
Authority key identifier: 34:6C:AB:59:4B:BD:A9:B4:40:FD:A7:D3:97:4C:BD:44:1C:98:E5:C9
Certificate issuer:       /CN=346cab594bbda9b440fda7d3974cbd441c98e5c9
Certificate serial:       01974779E2FEA2BE3A6EE6E0B1B455250D42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NGyrWUu9qbRA_afTl0y9RByY5ck.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/NGyrWUu9qbRA_afTl0y9RByY5ck.mft
Manifest number:          1577
Signing time:             Fri 06 Jun 2025 23:00:59 +0000
Manifest this update:     Fri 06 Jun 2025 23:00:59 +0000
Manifest next update:     Sat 07 Jun 2025 23:00:59 +0000
Files and hashes:         1: NGyrWUu9qbRA_afTl0y9RByY5ck.crl (hash: gbLCUi9+7g93BpImvc4uuKwZEYBpfpHnVA45gLg8nGQ=)
                          2: qWxHxzkwFGcxa5jSluitx-sE42Y.roa (hash: 3aDiNAN4onF/Cdaq+yTsD+jmRJ2OmMmFOaHRV5Fmhp8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/NGyrWUu9qbRA_afTl0y9RByY5ck.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/NGyrWUu9qbRA_afTl0y9RByY5ck.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NGyrWUu9qbRA_afTl0y9RByY5ck.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:79:e2:fe:a2:be:3a:6e:e6:e0:b1:b4:55:25:0d:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=346cab594bbda9b440fda7d3974cbd441c98e5c9
        Validity
            Not Before: Jun  6 23:00:59 2025 GMT
            Not After : Jun  7 23:00:59 2025 GMT
        Subject: CN=763f6b7992454c49d99da627249b6d8dce808b94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e9:82:a7:d0:fb:83:9c:0c:93:22:23:ec:05:
                    63:c6:01:02:04:ef:48:e9:c3:51:b9:b9:a5:fc:f6:
                    a0:4c:ef:60:9f:49:c2:bc:5a:73:4e:24:c1:eb:85:
                    ee:b9:1b:6e:90:ed:2d:24:27:f1:8a:fd:eb:4a:0f:
                    92:6f:29:a7:53:8f:00:87:c1:1c:32:b4:10:18:da:
                    40:cd:04:70:bc:ed:ab:43:38:db:87:ed:3b:06:a9:
                    15:4e:11:9b:a7:cb:80:6f:f3:95:71:79:06:78:8a:
                    e8:d9:2f:c1:0f:22:73:38:0c:22:ed:13:de:f3:33:
                    b2:3d:43:6f:21:e7:6e:d0:8a:43:32:e1:de:b9:d4:
                    c0:74:11:73:61:52:8b:6e:60:e7:16:70:3f:12:0a:
                    7c:0b:cf:51:42:15:e6:63:6e:89:16:4b:96:e8:21:
                    24:fe:7e:06:9e:8c:51:2b:f0:3b:3f:e2:a7:60:2b:
                    8b:fb:4b:33:bd:51:8f:80:11:f2:67:90:fc:7f:10:
                    eb:a6:a1:7a:34:58:0b:b1:a3:10:3c:a9:86:3b:db:
                    33:43:51:a5:7b:89:e7:44:1f:3f:d2:33:ca:20:2c:
                    c0:79:f5:cd:56:62:45:47:64:f7:07:db:6d:6d:21:
                    df:ef:3b:10:36:0e:6b:72:04:fa:98:2e:67:00:e2:
                    93:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:3F:6B:79:92:45:4C:49:D9:9D:A6:27:24:9B:6D:8D:CE:80:8B:94
            X509v3 Authority Key Identifier:
                keyid:34:6C:AB:59:4B:BD:A9:B4:40:FD:A7:D3:97:4C:BD:44:1C:98:E5:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NGyrWUu9qbRA_afTl0y9RByY5ck.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/NGyrWUu9qbRA_afTl0y9RByY5ck.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/9ef66d-2d5f-49d8-904c-7a13a5efaf5e/1/NGyrWUu9qbRA_afTl0y9RByY5ck.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:56:ac:bd:d0:0e:ca:68:31:1b:31:ee:00:c3:de:36:dc:77:
         dd:a8:cb:f7:fa:ad:fa:4c:82:4a:f5:f3:a1:17:9e:e7:e5:4a:
         8b:5c:cf:9a:5a:65:d2:9c:c2:40:3c:f5:2e:6b:f7:3e:3b:d1:
         10:88:34:d0:27:4c:c6:5f:ae:38:9b:b7:69:c5:c6:86:bf:7a:
         8f:3a:06:6c:29:8a:38:7b:a0:9a:37:65:9c:3e:28:64:a5:51:
         a0:ce:88:c3:d4:fb:d4:2c:64:fa:9f:f9:40:9f:1c:8f:f6:8a:
         62:fb:5f:12:a0:9f:b3:cc:b1:0c:14:99:8c:1a:2a:1a:81:11:
         45:1c:8c:7c:19:c5:30:00:60:74:73:b3:0a:79:53:ab:69:31:
         b4:f1:0c:fb:4f:8a:3e:5d:70:7a:d2:0a:9c:f8:01:d3:fc:94:
         8d:a2:59:22:f0:ef:15:06:63:60:75:fc:35:23:94:a2:6e:0f:
         d2:3e:94:ff:f9:e1:91:a9:d3:66:07:b7:cc:47:10:3f:e8:f1:
         3a:04:09:83:2c:d1:89:ec:34:97:3b:1e:77:23:4d:71:02:df:
         09:05:19:f2:42:95:51:97:b5:7b:59:b1:a1:0a:c4:ed:6a:b6:
         1a:9f:b3:97:24:ad:30:c8:e6:c2:89:3a:7a:1e:66:21:70:18:
         aa:2b:6b:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:13:11 2025 by rpki-client