Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.mft
File:                     nVE44frPe2XbtXX6fUckDCeLNN8.mft (raw, json)
Hash identifier:          wuP3AdA02m7/2uW6PUniaDD9ZJxc5+AUVSomR4oyM9E=
Subject key identifier:   51:5E:98:57:A7:87:5D:04:74:5B:52:79:35:88:95:E2:0F:AE:53:E1
Authority key identifier: 9D:51:38:E1:FA:CF:7B:65:DB:B5:75:FA:7D:47:24:0C:27:8B:34:DF
Certificate issuer:       /CN=9d5138e1facf7b65dbb575fa7d47240c278b34df
Certificate serial:       0197B70F0D8E325063FC24869DBF8E2375E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nVE44frPe2XbtXX6fUckDCeLNN8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.mft
Manifest number:          15C2
Signing time:             Sat 28 Jun 2025 15:01:46 +0000
Manifest this update:     Sat 28 Jun 2025 15:01:46 +0000
Manifest next update:     Sun 29 Jun 2025 15:01:46 +0000
Files and hashes:         1: EOilBiIenaox7njpqs3_DfcHwlA.roa (hash: fzNbr06IBLk41vJ4PfPSo6OIziKfU6CFjSqPnCza+iE=)
                          2: SrPm1i3skuiVEboXgAOiwvJ0e24.roa (hash: yv8h4FDHS+rMOcdFcyHu/1yEMbW/iUuOt5Oggkr9ddY=)
                          3: mpLcK6oOkOzJN_8yv56Qh9Pb3jU.roa (hash: xqGJM6N0Wj7tHelbHPs6OohD0rdA/bMhZJppwS9pXD8=)
                          4: nVE44frPe2XbtXX6fUckDCeLNN8.crl (hash: +as1kk0hzWSfp7LKZjXZuoSqdcSKph//yJ46J1Iezus=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nVE44frPe2XbtXX6fUckDCeLNN8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0f:0d:8e:32:50:63:fc:24:86:9d:bf:8e:23:75:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d5138e1facf7b65dbb575fa7d47240c278b34df
        Validity
            Not Before: Jun 28 15:01:46 2025 GMT
            Not After : Jun 29 15:01:46 2025 GMT
        Subject: CN=515e9857a7875d04745b5279358895e20fae53e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:40:42:56:f5:65:65:67:22:d2:39:19:a2:96:
                    52:92:b3:93:45:62:64:e7:e0:af:11:4d:a3:f7:b7:
                    f2:37:53:4a:44:46:7a:47:30:17:ef:2b:f2:0a:c8:
                    c3:81:09:e3:b8:84:97:1b:b3:5e:b3:b7:07:f2:72:
                    75:60:07:19:ef:f9:fd:28:79:e0:2a:62:63:78:0b:
                    a5:34:7f:7f:fb:7f:57:1d:44:90:ac:75:13:42:fc:
                    2a:b6:6c:e6:f0:bb:57:41:ff:48:bb:65:06:c6:f4:
                    15:22:54:cf:bc:41:18:d5:af:cc:6d:35:40:d5:29:
                    f4:1f:f8:17:a7:a2:17:70:06:c7:a9:40:50:56:5a:
                    8b:77:6b:66:6e:50:bd:c4:47:55:87:33:c1:0d:14:
                    0d:69:94:c6:32:5b:a0:b1:44:97:1c:f3:ce:35:b1:
                    c5:88:fe:39:0c:57:ab:70:81:91:f1:0d:e5:1a:a9:
                    2d:11:1a:98:df:b0:e8:51:80:3a:89:13:9a:41:83:
                    c9:3a:bb:05:a5:f5:c9:cc:83:42:24:e9:e3:a3:07:
                    0b:a2:59:5e:c9:ed:e5:d5:51:42:a4:07:67:6f:dc:
                    32:3b:e1:e1:a8:65:f2:ef:4c:5f:87:0b:35:30:8f:
                    38:cb:05:ef:26:7d:9c:cf:12:53:73:c2:99:ea:a8:
                    14:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:5E:98:57:A7:87:5D:04:74:5B:52:79:35:88:95:E2:0F:AE:53:E1
            X509v3 Authority Key Identifier:
                keyid:9D:51:38:E1:FA:CF:7B:65:DB:B5:75:FA:7D:47:24:0C:27:8B:34:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nVE44frPe2XbtXX6fUckDCeLNN8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:a6:3e:41:8a:23:c3:8d:2a:e9:8d:88:59:23:2f:98:d5:01:
         b3:c8:2c:6a:47:28:dd:d4:7f:6f:2c:72:48:c8:7d:65:ed:80:
         54:61:56:c8:75:69:66:22:ad:c9:6b:a7:34:f2:86:f4:88:06:
         70:67:bd:43:41:92:b9:a2:1d:9c:2d:eb:40:87:a2:2b:99:7e:
         bd:1f:66:46:24:df:83:2e:5b:5f:1f:ee:79:8b:10:4a:e3:a0:
         d0:10:b7:94:7b:a7:77:74:ff:1a:a1:0e:10:19:ea:37:a1:e7:
         7b:98:99:c0:1e:f9:c7:bb:e3:67:03:dd:61:49:42:d5:2b:5a:
         cc:04:41:1e:4a:a4:25:b8:46:b4:42:f0:57:ef:a8:51:76:6e:
         5d:2e:d8:86:91:48:67:d8:ef:b4:bd:fa:c8:56:cd:1a:9d:a4:
         bc:04:8b:f9:11:13:ae:9b:c7:69:7e:87:cf:06:8a:ec:cf:17:
         58:ce:55:52:42:5b:95:04:ea:62:a6:96:8a:f6:93:d8:2a:bb:
         40:82:53:84:4c:e1:fd:4c:3f:4c:a6:50:1d:cf:44:86:e2:22:
         c1:d2:05:78:e9:bd:a8:62:a4:1b:b2:c0:91:8e:76:bf:8f:a8:
         19:7c:14:34:64:9a:bc:17:0c:53:9b:45:38:e0:72:f1:75:24:
         c4:db:0a:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:39:51 2025 by rpki-client