Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/a0faca-db7f-4ed8-b11a-eec46ca82a33/1/NVi7R941Tgng_CyywfoU1x2Sbug.mft
File:                     NVi7R941Tgng_CyywfoU1x2Sbug.mft (raw, json)
Hash identifier:          fRe14+e55a2r7ADU90wtt6I8QKHUH/9oWa1TF09Zw40=
Subject key identifier:   17:6B:05:76:C9:EE:07:11:A8:86:C8:18:49:AB:31:CA:46:57:4D:A5
Authority key identifier: 35:58:BB:47:DE:35:4E:09:E0:FC:2C:B2:C1:FA:14:D7:1D:92:6E:E8
Certificate issuer:       /CN=3558bb47de354e09e0fc2cb2c1fa14d71d926ee8
Certificate serial:       01958EF3A83EF555E9E97A2F94E94A07D7ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NVi7R941Tgng_CyywfoU1x2Sbug.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/a0faca-db7f-4ed8-b11a-eec46ca82a33/1/NVi7R941Tgng_CyywfoU1x2Sbug.mft
Manifest number:          149F
Signing time:             Thu 13 Mar 2025 10:01:27 +0000
Manifest this update:     Thu 13 Mar 2025 10:01:27 +0000
Manifest next update:     Fri 14 Mar 2025 10:01:27 +0000
Files and hashes:         1: 0iLUxeXNyLeCeJPOBWFetpkhzr8.roa (hash: GzvKjvrXUQtFRvTqnLO3SZbgmgXYnbU1huTzG2YJ5xg=)
                          2: NVi7R941Tgng_CyywfoU1x2Sbug.crl (hash: qwIBf0hFpZFiXfors5jWD++tbdUqj09NXn7oU+KAhWA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/a0faca-db7f-4ed8-b11a-eec46ca82a33/1/NVi7R941Tgng_CyywfoU1x2Sbug.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/a0faca-db7f-4ed8-b11a-eec46ca82a33/1/NVi7R941Tgng_CyywfoU1x2Sbug.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NVi7R941Tgng_CyywfoU1x2Sbug.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Mar 2025 09:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:8e:f3:a8:3e:f5:55:e9:e9:7a:2f:94:e9:4a:07:d7:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3558bb47de354e09e0fc2cb2c1fa14d71d926ee8
        Validity
            Not Before: Mar 13 10:01:27 2025 GMT
            Not After : Mar 14 10:01:27 2025 GMT
        Subject: CN=176b0576c9ee0711a886c81849ab31ca46574da5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:97:03:8d:4e:ae:13:f0:5a:a4:d2:c7:c0:50:
                    92:8b:b5:e4:35:21:76:c7:9e:ed:f0:72:47:19:87:
                    81:df:0b:ff:a8:fd:4b:48:67:94:f0:a0:18:24:11:
                    e6:42:d3:de:b1:09:0c:10:a8:95:e8:49:67:88:13:
                    a2:89:34:bf:b6:d6:ce:4f:d7:67:80:92:ff:31:9c:
                    33:e7:b2:a2:e7:16:8c:8c:f6:89:13:05:7e:1b:27:
                    fc:44:18:b6:65:54:f5:98:46:7d:e5:5a:c5:aa:28:
                    89:3b:b4:37:d5:96:1a:d0:dd:0d:69:b9:41:9c:2f:
                    1a:19:76:1e:44:ce:8c:22:2d:df:6e:18:40:95:14:
                    4c:84:b4:9b:bb:5a:34:c4:66:22:14:6f:3b:cd:2c:
                    71:71:de:a3:33:44:d7:8f:6d:5b:1c:b2:9a:3b:2c:
                    f6:98:9c:04:96:78:46:29:d8:24:dd:94:71:ff:e2:
                    f8:62:b7:8e:04:69:82:b7:45:01:c7:83:1b:79:9b:
                    4c:dd:55:7e:bf:10:f8:56:92:30:ee:6e:63:94:22:
                    00:1c:2b:20:53:f4:db:4f:55:d9:ca:54:cb:17:33:
                    22:66:67:fd:2e:33:3c:44:d6:4c:6b:0b:d1:2c:df:
                    b3:fa:43:36:31:75:e8:e7:77:92:58:f2:c7:d1:f0:
                    86:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:6B:05:76:C9:EE:07:11:A8:86:C8:18:49:AB:31:CA:46:57:4D:A5
            X509v3 Authority Key Identifier:
                keyid:35:58:BB:47:DE:35:4E:09:E0:FC:2C:B2:C1:FA:14:D7:1D:92:6E:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NVi7R941Tgng_CyywfoU1x2Sbug.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a0faca-db7f-4ed8-b11a-eec46ca82a33/1/NVi7R941Tgng_CyywfoU1x2Sbug.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a0faca-db7f-4ed8-b11a-eec46ca82a33/1/NVi7R941Tgng_CyywfoU1x2Sbug.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:ad:e9:92:b8:87:87:1e:31:da:99:20:dd:f7:b1:b4:3f:39:
         a7:ce:35:e4:38:7e:ff:54:4e:20:b0:8b:cc:30:8a:7c:33:3d:
         98:15:f5:66:c1:ff:71:0e:48:7a:0f:20:f8:de:a1:3b:86:2e:
         ce:d9:59:ef:11:3b:9d:50:50:b2:f7:81:49:5f:a6:46:d3:89:
         5b:2c:67:61:07:33:32:a7:a2:d5:97:7f:4e:2d:fa:4e:e4:80:
         6c:26:48:5e:72:26:c2:e8:6d:e8:16:64:c3:d9:7e:1c:64:be:
         4f:b2:1f:9a:e8:cb:42:5b:7e:88:0f:99:03:e4:fa:20:6e:9f:
         d9:1f:9d:40:db:79:9d:1b:d3:a4:18:45:95:c9:b5:8b:27:f1:
         6c:71:bc:e4:67:8d:b7:4f:3c:e8:e6:cb:29:88:9c:e6:72:3e:
         19:0e:d9:a3:e2:79:04:dc:72:2d:35:98:ed:ef:ea:3b:95:3f:
         2a:6c:ea:cb:43:05:33:42:b1:08:47:f7:9f:b1:54:a4:df:fb:
         7f:45:ec:81:87:5b:61:91:e7:08:b5:a2:84:54:4a:66:9c:a8:
         8b:8b:d0:45:34:78:c0:08:c3:03:74:82:62:f4:29:78:9a:9d:
         3e:0a:7f:bf:04:a7:60:5b:8a:a8:64:70:f2:b8:08:41:b7:df:
         f9:65:e5:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:43:28 2025 by rpki-client