Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft
File:                     NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft (raw, json)
Hash identifier:          VnlQNOuRWl5Rp3Rsc8zZW/2NxLmueFTffic0pbElZ68=
Subject key identifier:   DE:30:96:0F:AB:42:8C:0A:58:45:A6:F9:FE:35:FC:ED:88:1D:C3:D6
Authority key identifier: 36:22:FC:2F:8A:D8:B0:08:35:7D:BE:6F:01:95:96:0C:9D:E6:1B:D5
Certificate issuer:       /CN=3622fc2f8ad8b008357dbe6f0195960c9de61bd5
Certificate serial:       01974AB1A71418E7F86DAD9310ED919CD8E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft
Manifest number:          0A25
Signing time:             Sat 07 Jun 2025 14:00:45 +0000
Manifest this update:     Sat 07 Jun 2025 14:00:45 +0000
Manifest next update:     Sun 08 Jun 2025 14:00:45 +0000
Files and hashes:         1: C0uiO_SbsEDc0tLkrH3qOQghgck.roa (hash: l6nudC+hnX+HTOH70KjEsckS/CblYhfgW6Lz16yxKjw=)
                          2: CatpJtFda_C5L7VOLYcMS7IQGMg.roa (hash: idVH/OL7AqXzhoz+Z8IbgG5ci5Pbk+MePCPcgx0hXD0=)
                          3: IilMeITi2WRlzRXCm9op0c2uedk.roa (hash: UrspHFNf1bj1Z6XmUbLX3sSXcdX5yH0r772wbyb2ttQ=)
                          4: NiL8L4rYsAg1fb5vAZWWDJ3mG9U.crl (hash: 0SyF+BUvRVd4QQNPI9hqCbQOIf3Rv4ShIDiTHqjurL0=)
                          5: pAzvrIoWwcHpcNO5iNiHfwLiAJA.roa (hash: DLnt9qWRp3EI4stZNmwt/HobGa97g3RTR8iRLREX4YA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:b1:a7:14:18:e7:f8:6d:ad:93:10:ed:91:9c:d8:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3622fc2f8ad8b008357dbe6f0195960c9de61bd5
        Validity
            Not Before: Jun  7 14:00:45 2025 GMT
            Not After : Jun  8 14:00:45 2025 GMT
        Subject: CN=de30960fab428c0a5845a6f9fe35fced881dc3d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:49:b5:63:ec:af:6b:51:47:f6:7e:b7:09:88:
                    6f:8b:f9:83:83:91:35:a1:fe:4c:17:75:72:4a:7b:
                    f9:05:91:a0:6d:2c:6a:0d:47:bd:f9:e4:a1:c3:0b:
                    da:f2:37:f3:ff:e9:f4:aa:f7:5a:32:80:39:92:df:
                    9a:e6:cb:7e:8b:79:80:46:e7:bc:29:1d:4e:19:61:
                    c7:07:eb:6f:67:19:f8:b8:e9:4c:5e:cc:79:4f:00:
                    d4:28:11:38:84:f7:83:56:e0:25:a1:93:88:29:19:
                    84:fb:d0:3e:2c:76:8b:bd:25:5d:20:49:68:e2:c0:
                    86:f5:bb:f6:a9:49:4b:45:b0:0c:6e:17:72:3c:4c:
                    0e:c3:94:0e:26:a4:ad:fb:15:8e:44:b0:6e:01:11:
                    6d:f3:08:0f:e9:25:dc:d6:39:84:b7:06:1b:35:8a:
                    d0:b3:28:df:95:dd:af:df:75:62:df:78:ca:bf:30:
                    84:9b:be:a2:fe:27:f2:5b:ec:d4:8b:ae:c8:22:4a:
                    15:1d:4e:4e:ff:a4:81:b1:45:2c:7e:10:07:9e:e0:
                    33:d7:d9:5b:90:61:17:47:fc:2e:4e:35:d8:d5:5d:
                    67:86:1b:9c:2a:09:5c:26:eb:2d:ff:9f:18:18:d4:
                    32:2a:58:d7:1f:0d:07:f8:e4:47:cb:85:8d:3f:37:
                    97:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:30:96:0F:AB:42:8C:0A:58:45:A6:F9:FE:35:FC:ED:88:1D:C3:D6
            X509v3 Authority Key Identifier:
                keyid:36:22:FC:2F:8A:D8:B0:08:35:7D:BE:6F:01:95:96:0C:9D:E6:1B:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:66:b0:8a:7d:9e:51:a4:b7:9f:f6:b6:9b:22:79:95:8c:b7:
         4c:f7:5b:a9:48:53:ec:a4:8a:08:75:69:33:92:25:14:22:26:
         de:0b:23:f7:33:d3:e6:c8:c3:7b:3a:7e:a2:c0:0d:27:4a:10:
         e8:60:5f:ed:a9:26:79:fa:08:ab:f5:c8:40:51:bc:0a:77:80:
         82:c5:cd:56:00:00:9b:ea:dd:85:59:3e:38:42:0a:00:78:69:
         85:21:a0:a8:6d:c9:03:24:4a:48:00:bd:61:e5:76:fb:c1:cc:
         7c:97:2e:44:3a:e1:ab:a2:cb:1e:1f:a5:49:52:a4:d3:55:e8:
         4d:26:52:61:10:c7:12:b2:3e:cf:96:f9:59:3d:8b:82:64:c0:
         af:e0:a4:25:e1:6c:99:2a:c0:dd:66:2d:f0:74:9c:0c:02:09:
         35:22:7a:9c:ed:38:21:54:05:a3:8a:f5:fe:a3:fa:38:aa:be:
         99:63:f1:56:1e:c0:9a:45:84:b0:07:00:ba:7e:4b:b5:60:38:
         07:38:27:4e:a1:35:8b:c5:08:b6:2c:1e:c6:06:06:ba:03:29:
         f6:5c:ce:85:58:9d:c0:62:3e:5d:7f:d2:77:3c:f6:dd:e2:92:
         7f:d5:14:56:4b:88:6b:d3:b1:15:52:00:7b:da:0b:ac:4b:4a:
         bb:29:f3:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 19:50:14 2025 by rpki-client