Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/c90869-ee20-4939-840e-640c74a94cc6/1/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.mft
File:                     NUb_Rc5QVX7cTAMG4fhpSCrUI-A.mft (raw, json)
Hash identifier:          +8ZVbfWpeP38lA7FlKzVPBR7FJgxmnF7Fa8VqQ9JNpg=
Subject key identifier:   4C:02:6D:37:14:F6:28:2D:19:7F:29:1B:8F:CD:61:34:AB:D8:53:D9
Authority key identifier: 35:46:FF:45:CE:50:55:7E:DC:4C:03:06:E1:F8:69:48:2A:D4:23:E0
Certificate issuer:       /CN=3546ff45ce50557edc4c0306e1f869482ad423e0
Certificate serial:       01974742DEBD7BA50565112227955996939D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/c90869-ee20-4939-840e-640c74a94cc6/1/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.mft
Manifest number:          0736
Signing time:             Fri 06 Jun 2025 22:00:54 +0000
Manifest this update:     Fri 06 Jun 2025 22:00:54 +0000
Manifest next update:     Sat 07 Jun 2025 22:00:54 +0000
Files and hashes:         1: NUb_Rc5QVX7cTAMG4fhpSCrUI-A.crl (hash: idMJvjFsP8rp02LAQ84Q7AnJKp6xNasiQJXzhf+iDgU=)
                          2: Rv1036YGXSxZ-LNtEMTG-yB-cpE.roa (hash: 9hIhakYU1jL8ELRanjY68hTQVJc33GMXNtFCdw91hfI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/c90869-ee20-4939-840e-640c74a94cc6/1/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/c90869-ee20-4939-840e-640c74a94cc6/1/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 22:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:42:de:bd:7b:a5:05:65:11:22:27:95:59:96:93:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3546ff45ce50557edc4c0306e1f869482ad423e0
        Validity
            Not Before: Jun  6 22:00:54 2025 GMT
            Not After : Jun  7 22:00:54 2025 GMT
        Subject: CN=4c026d3714f6282d197f291b8fcd6134abd853d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:eb:93:37:6f:b1:df:0c:b8:96:98:8d:bb:b0:
                    f3:76:e3:5f:98:31:2f:b7:c1:e8:80:e4:14:4e:0e:
                    c0:63:d7:92:ac:44:96:58:2b:8a:77:84:b7:39:0d:
                    4c:ab:53:54:62:49:93:52:af:3d:31:9e:12:8d:59:
                    5b:ff:d6:f6:08:cf:a2:48:ed:f1:03:db:a9:03:14:
                    d8:03:0f:bb:f7:7a:88:cf:d7:93:dc:03:ab:88:25:
                    1d:fd:63:a7:28:ad:d7:e6:7a:32:35:30:a0:1a:b8:
                    d8:21:71:a5:dd:2a:13:b7:6c:03:8c:11:e4:02:39:
                    31:e4:f4:b8:59:db:73:31:a1:20:6b:dc:5d:c4:93:
                    77:42:5c:28:f3:b8:44:ed:14:75:50:bf:0d:f8:2f:
                    6e:6a:fe:db:32:85:90:38:d9:26:d5:08:c6:d9:d4:
                    29:85:f8:4f:41:7b:da:61:18:a6:e1:c0:28:03:ff:
                    9f:3d:12:3f:6c:a4:19:30:8e:57:39:50:9c:01:99:
                    02:db:d7:91:9c:ad:f1:38:85:5e:16:a1:7c:cd:0b:
                    ef:64:0f:74:88:09:31:fa:51:da:5c:b0:51:17:3f:
                    c5:24:80:47:96:8a:29:c8:43:2d:62:a8:8c:47:02:
                    99:5a:31:01:bd:e1:8f:9d:36:ff:f8:60:f9:29:63:
                    a6:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:02:6D:37:14:F6:28:2D:19:7F:29:1B:8F:CD:61:34:AB:D8:53:D9
            X509v3 Authority Key Identifier:
                keyid:35:46:FF:45:CE:50:55:7E:DC:4C:03:06:E1:F8:69:48:2A:D4:23:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c90869-ee20-4939-840e-640c74a94cc6/1/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c90869-ee20-4939-840e-640c74a94cc6/1/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:9e:fd:04:b2:f2:13:4a:dc:bf:b0:5b:c4:d6:c8:82:fb:f7:
         ec:dc:5a:e1:5b:18:95:03:67:6a:e4:8c:f6:f9:a1:73:d8:c1:
         f5:59:e7:e0:aa:e5:ee:73:3f:5e:13:01:2b:f2:a6:5e:bf:9e:
         a0:bd:38:43:64:db:cb:bf:70:8e:ee:75:6e:a3:99:61:7c:63:
         89:01:6c:a8:22:90:1f:16:d7:c5:9f:71:cd:c4:d2:0e:99:28:
         69:ee:10:2c:5f:d4:a7:68:af:04:51:43:06:56:a8:28:02:f3:
         32:c6:4c:f0:f9:30:42:7a:e8:c3:7b:57:ba:cd:b3:66:ad:78:
         6c:67:dc:ba:13:09:73:5d:49:a4:7b:16:53:4f:c0:d1:24:e6:
         cb:1c:da:48:6a:17:01:49:91:45:9e:df:72:b2:93:9f:d1:ee:
         0c:d1:a6:cd:b3:9d:02:62:a2:58:8b:21:26:0d:82:e5:ed:0c:
         a3:5e:ce:ed:81:73:04:4e:e8:a5:04:2d:a0:ca:6b:3e:74:b5:
         6b:36:f0:2f:4a:b1:05:2c:04:8f:70:68:a9:1c:fa:64:2f:b6:
         82:a0:4d:c7:5d:f3:45:ca:d7:d0:9b:55:e6:ef:1b:07:06:55:
         75:a2:5c:a5:fd:3d:39:31:0c:15:a3:89:20:9b:a9:6d:cd:f0:
         8c:14:65:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:14:32 2025 by rpki-client