Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/Nr1KOC2uK-XLmLNeWgSNA7TMvis.mft
File:                     Nr1KOC2uK-XLmLNeWgSNA7TMvis.mft (raw, json)
Hash identifier:          kv2UY+RjGK9Y45o5SnQMV9BGBLge5mHUotHqyTw+jcw=
Subject key identifier:   B1:0F:40:D5:4E:0B:96:C6:DB:68:D7:88:BB:00:DA:E8:F3:DF:F0:75
Authority key identifier: 36:BD:4A:38:2D:AE:2B:E5:CB:98:B3:5E:5A:04:8D:03:B4:CC:BE:2B
Certificate issuer:       /CN=36bd4a382dae2be5cb98b35e5a048d03b4ccbe2b
Certificate serial:       0197B6A11B6A2BB590C0BEC96DB51CFC1112
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nr1KOC2uK-XLmLNeWgSNA7TMvis.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/Nr1KOC2uK-XLmLNeWgSNA7TMvis.mft
Manifest number:          08FC
Signing time:             Sat 28 Jun 2025 13:01:40 +0000
Manifest this update:     Sat 28 Jun 2025 13:01:40 +0000
Manifest next update:     Sun 29 Jun 2025 13:01:40 +0000
Files and hashes:         1: C-H7cUZDR8Fn5bAwbFaXEXvgd-E.roa (hash: HsvEFF3yXL6NktNRceT9btK/0vgIKnScyehQHmjIyPs=)
                          2: Nr1KOC2uK-XLmLNeWgSNA7TMvis.crl (hash: /9ojVgtc1/pOptNTtXLblI3/jj/el/2FSeieiKteD4c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/Nr1KOC2uK-XLmLNeWgSNA7TMvis.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/Nr1KOC2uK-XLmLNeWgSNA7TMvis.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Nr1KOC2uK-XLmLNeWgSNA7TMvis.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a1:1b:6a:2b:b5:90:c0:be:c9:6d:b5:1c:fc:11:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36bd4a382dae2be5cb98b35e5a048d03b4ccbe2b
        Validity
            Not Before: Jun 28 13:01:40 2025 GMT
            Not After : Jun 29 13:01:40 2025 GMT
        Subject: CN=b10f40d54e0b96c6db68d788bb00dae8f3dff075
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:08:c1:3b:73:b4:e1:e8:76:9c:6b:df:c7:19:
                    77:fd:11:07:a3:4f:f7:54:b4:eb:55:86:f3:d8:42:
                    64:ba:c7:a1:30:ce:8b:69:7c:62:40:a6:84:b0:0a:
                    70:fd:83:53:4b:3f:10:19:ae:c1:f5:28:8c:01:66:
                    8c:21:0a:c2:9f:9b:71:81:05:13:92:45:35:a1:13:
                    f4:fb:35:cc:e9:1b:b8:b9:c1:cd:b8:08:31:5b:1f:
                    e4:d9:d0:23:93:7c:5e:3e:2f:a2:31:33:6e:0b:89:
                    22:1b:13:56:49:ef:f0:8f:c1:56:39:03:10:8a:32:
                    ca:73:fa:08:42:95:cd:42:f0:f0:b2:72:22:53:73:
                    1e:01:44:88:ed:0a:be:dc:db:82:66:08:81:c9:b5:
                    21:8c:76:17:df:89:2b:a2:63:cb:6b:cf:da:19:25:
                    6d:63:60:c8:99:5f:79:12:40:7c:72:d7:d8:44:86:
                    cc:80:31:48:00:4b:f5:42:28:8c:05:a5:49:a9:41:
                    7d:98:a5:37:e0:40:e9:fd:75:b3:ef:5b:e4:db:cf:
                    5a:15:5b:36:46:4c:f8:db:dd:5f:10:f9:78:2e:7d:
                    6e:d7:b8:29:d5:e6:ef:9f:f5:17:aa:a9:13:99:e1:
                    b9:2a:a1:d9:d1:32:6d:62:09:9a:f6:3b:81:a5:74:
                    15:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:0F:40:D5:4E:0B:96:C6:DB:68:D7:88:BB:00:DA:E8:F3:DF:F0:75
            X509v3 Authority Key Identifier:
                keyid:36:BD:4A:38:2D:AE:2B:E5:CB:98:B3:5E:5A:04:8D:03:B4:CC:BE:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nr1KOC2uK-XLmLNeWgSNA7TMvis.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/Nr1KOC2uK-XLmLNeWgSNA7TMvis.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/Nr1KOC2uK-XLmLNeWgSNA7TMvis.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:d6:51:0f:8d:41:60:ed:20:e9:89:e2:04:3b:e5:3e:23:64:
         af:20:cd:01:0f:cd:5b:01:ab:8e:a9:8d:17:ab:16:16:d0:06:
         3d:c7:be:3d:8a:e4:33:50:26:2b:96:c4:6e:26:fe:78:58:1c:
         6d:7f:79:14:4b:35:af:e0:24:5f:2e:b0:90:bf:16:b1:1d:8a:
         6f:f9:1f:83:79:8f:cc:ea:09:00:88:33:b8:6b:e2:e8:6a:39:
         8d:ca:8e:86:db:c3:3a:02:ad:e8:42:e4:12:9e:08:a4:2d:b6:
         fe:ba:ed:5f:ff:c3:c9:fa:bb:3a:60:d1:67:62:a9:aa:56:dd:
         27:9a:3f:d1:57:55:ad:1f:17:55:00:fc:1a:44:e8:3e:51:b6:
         19:cf:c7:43:e5:a9:5b:d6:da:80:fb:be:14:13:38:a8:cf:53:
         01:73:fc:35:f4:34:bd:c7:86:c0:b9:53:90:a9:73:1b:f2:08:
         1e:71:b7:a8:c9:2a:ad:a9:7c:67:d0:e7:94:95:3e:fe:45:a3:
         47:9b:93:cc:3c:86:da:7b:28:20:67:3c:0e:e6:db:cf:54:6e:
         65:9c:19:c7:0b:36:0f:21:27:70:19:da:23:6a:fc:4c:68:06:
         f4:20:3e:6b:64:38:bd:dd:e7:0e:be:36:aa:d2:68:7b:27:76:
         3d:3a:d2:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:22:06 2025 by rpki-client