Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.mft
File:                     n2-3lUF5qWZrTLav40bR4h7DDkU.mft (raw, json)
Hash identifier:          FGznirLGeZ2SmIH8+I7gHHAu7KUxFgBp1m3NFUw4ThY=
Subject key identifier:   C4:8C:9F:80:E4:48:07:F3:5D:DB:32:C2:C5:BC:5B:64:37:BB:46:F0
Authority key identifier: 9F:6F:B7:95:41:79:A9:66:6B:4C:B6:AF:E3:46:D1:E2:1E:C3:0E:45
Certificate issuer:       /CN=9f6fb7954179a9666b4cb6afe346d1e21ec30e45
Certificate serial:       0196CCBCD60E6CF988B963BF59B6D0776F13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n2-3lUF5qWZrTLav40bR4h7DDkU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.mft
Manifest number:          153F
Signing time:             Wed 14 May 2025 03:00:49 +0000
Manifest this update:     Wed 14 May 2025 03:00:49 +0000
Manifest next update:     Thu 15 May 2025 03:00:49 +0000
Files and hashes:         1: Jzi6jJ9SZ3rViS6uZE0u8bf720A.roa (hash: eJjmExeoetRrFmsV6X8Y7xVRrkNxyQjjkQ/pmteWEY0=)
                          2: cCtlVAhKMx_L9MmcKQdhGeXgd7A.roa (hash: Q1si7hVwLSegXDVNPXeui2AkeRgS0Epsk3MKoikvRr4=)
                          3: n2-3lUF5qWZrTLav40bR4h7DDkU.crl (hash: 4T7Rhf7fu7wzu/Gjveh90fyVWXse9PdiVJckCgPFmJ0=)
                          4: ozXKoKdXVNYBzwo0Mz0MILNjdCg.roa (hash: Ve119gf9TbBJ6X/Ot4F8LURtnL5ENbzhaQXEL2/zcYA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n2-3lUF5qWZrTLav40bR4h7DDkU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 22:19:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:cc:bc:d6:0e:6c:f9:88:b9:63:bf:59:b6:d0:77:6f:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f6fb7954179a9666b4cb6afe346d1e21ec30e45
        Validity
            Not Before: May 14 03:00:49 2025 GMT
            Not After : May 15 03:00:49 2025 GMT
        Subject: CN=c48c9f80e44807f35ddb32c2c5bc5b6437bb46f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:5a:03:2b:56:ef:fb:05:29:69:7d:13:30:21:
                    15:2b:ae:2d:84:60:fd:0c:4e:91:5f:b1:6e:f6:67:
                    6d:fb:df:2e:a5:97:fe:ed:1a:ff:6e:d9:c8:a6:01:
                    2e:4c:6a:dc:97:25:05:b1:04:8b:69:96:ae:77:d2:
                    07:48:0c:d0:96:1c:4b:27:ad:66:93:ea:0b:00:1c:
                    cd:a3:54:5e:f6:ff:04:66:7c:96:75:e0:61:57:15:
                    eb:19:e8:63:76:4e:3e:e9:e5:47:d5:3b:60:d6:a5:
                    61:87:f3:56:1b:75:e4:9a:00:3a:3c:e0:87:3c:40:
                    07:7d:da:a4:d8:f1:d3:98:e5:04:e6:74:49:c7:28:
                    97:2a:2d:d5:0d:e6:20:c5:5f:84:1f:7b:75:d9:22:
                    f5:9e:31:8c:6e:6c:26:39:86:1f:3d:f9:49:5f:a9:
                    51:88:5b:24:87:59:d6:ed:e7:7c:18:d6:3a:51:29:
                    77:41:62:d4:64:56:2f:7c:ef:e0:58:69:08:eb:7d:
                    06:5c:c1:98:6d:b2:43:2e:a5:98:19:1e:4b:bd:48:
                    4d:ea:d6:83:b9:86:26:36:b8:df:59:f4:a9:15:c5:
                    61:85:e4:7d:4e:68:a7:9a:ad:14:4d:9b:93:0e:fa:
                    bf:a2:05:89:7c:ac:36:cd:e3:5a:b7:1c:b4:e2:a8:
                    b9:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:8C:9F:80:E4:48:07:F3:5D:DB:32:C2:C5:BC:5B:64:37:BB:46:F0
            X509v3 Authority Key Identifier:
                keyid:9F:6F:B7:95:41:79:A9:66:6B:4C:B6:AF:E3:46:D1:E2:1E:C3:0E:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n2-3lUF5qWZrTLav40bR4h7DDkU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:85:46:d9:65:8b:7d:a4:c3:04:bb:5b:8a:f3:bd:51:fc:2d:
         94:5f:1c:ac:0e:5f:63:b2:b4:01:bc:84:ed:ac:0f:07:2b:f9:
         12:45:9e:82:21:29:11:2b:66:00:a0:1a:1a:ea:98:cb:45:7a:
         12:73:d9:3f:5c:b0:cc:19:d7:30:5b:fd:e6:2a:3a:24:ce:21:
         26:45:d5:d3:c5:c2:05:c2:11:1e:90:0a:71:8c:bb:c8:b0:83:
         8f:de:60:e6:61:78:85:16:96:02:80:a1:e2:f6:d6:34:be:0a:
         87:ae:3d:c0:77:cc:0e:e0:ce:3a:4c:78:5a:c4:1e:41:2b:42:
         67:e1:09:35:bf:fc:52:06:fa:68:c3:f9:51:f6:56:93:eb:52:
         da:16:5f:b5:da:58:83:e3:9d:7f:b7:8f:1a:49:31:4c:47:6a:
         54:bd:5c:f8:69:58:3f:7f:40:b3:5f:dd:bf:de:67:0e:ca:56:
         91:30:3b:af:a4:c1:ef:24:45:fb:a6:bd:ef:fa:10:a8:39:0a:
         ce:65:70:d1:3d:dc:b6:94:2c:ba:05:44:7a:fb:ee:b3:48:df:
         a2:b5:ae:88:a5:88:e7:6b:c8:73:fd:8d:ee:ed:23:cd:a0:b9:
         43:90:6a:56:8a:ee:bb:25:19:eb:07:28:3c:e8:10:b4:df:62:
         48:e4:a0:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 06:37:07 2025 by rpki-client