Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.mft
File:                     NZxyQ77y3Hda5naSiJ1dJsGy0Ug.mft (raw, json)
Hash identifier:          qzgX+NsAbADWez4Ff2cIFZCkD3gEbfRHA14ZR0xhNMw=
Subject key identifier:   8E:A9:F1:60:85:A8:BE:45:44:9A:FA:4E:EC:88:F0:D3:D3:59:04:B7
Authority key identifier: 35:9C:72:43:BE:F2:DC:77:5A:E6:76:92:88:9D:5D:26:C1:B2:D1:48
Certificate issuer:       /CN=359c7243bef2dc775ae67692889d5d26c1b2d148
Certificate serial:       0196C916B3EB28D725BB4B0EBA42DA6D710B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.mft
Manifest number:          1261
Signing time:             Tue 13 May 2025 10:00:30 +0000
Manifest this update:     Tue 13 May 2025 10:00:30 +0000
Manifest next update:     Wed 14 May 2025 10:00:30 +0000
Files and hashes:         1: NZxyQ77y3Hda5naSiJ1dJsGy0Ug.crl (hash: Cd5v3hxPiDsNz7q4OgB4D+9b0W2F5IalihtzXEzNIWc=)
                          2: UlJ9oB76eWY6RVDQIa5ElxGCtDY.roa (hash: a/bIJ0G7k9sAULUVW4Q26EjooAyLCFQQeertx5zrtWc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 10:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c9:16:b3:eb:28:d7:25:bb:4b:0e:ba:42:da:6d:71:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=359c7243bef2dc775ae67692889d5d26c1b2d148
        Validity
            Not Before: May 13 10:00:30 2025 GMT
            Not After : May 14 10:00:30 2025 GMT
        Subject: CN=8ea9f16085a8be45449afa4eec88f0d3d35904b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:7d:4c:57:ee:f2:25:d0:ce:76:cf:39:05:3f:
                    8f:de:9b:96:d9:70:a9:91:dd:06:6a:0d:21:08:92:
                    e0:41:66:24:da:da:56:f3:80:c9:c0:32:de:a1:20:
                    f9:48:e4:0b:bc:c8:bd:4b:cc:79:67:e4:34:fa:4a:
                    50:77:c2:a1:39:bc:19:85:3a:99:32:ac:da:95:1b:
                    02:cb:99:cd:1b:d7:c5:fa:b0:ad:a3:3d:57:21:8b:
                    f1:36:a2:30:2f:30:7c:ef:e1:87:76:ab:30:15:99:
                    05:c7:90:e7:33:77:d7:c6:95:48:39:ed:a5:ce:5c:
                    d2:69:6f:c5:84:ba:ea:35:d2:00:33:35:da:03:35:
                    6a:76:f8:03:3c:d6:10:0f:78:61:1c:2d:23:65:aa:
                    ba:e3:95:22:de:5e:34:bf:58:fc:be:78:a9:a4:0c:
                    48:22:1d:83:54:de:68:42:51:1e:42:e4:a6:cc:f9:
                    36:6d:3c:3e:64:85:29:d0:6d:53:d0:02:e3:67:b1:
                    5f:87:e3:a9:8d:ad:69:bd:f2:1a:4e:86:85:ea:65:
                    e8:10:fe:92:57:f7:63:aa:8b:34:ff:bd:09:72:0d:
                    5d:10:c7:29:d5:fd:37:f4:ce:08:a5:6b:8e:b2:56:
                    68:5b:02:12:b2:23:51:bb:26:a7:8c:29:c4:61:f8:
                    3d:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:A9:F1:60:85:A8:BE:45:44:9A:FA:4E:EC:88:F0:D3:D3:59:04:B7
            X509v3 Authority Key Identifier:
                keyid:35:9C:72:43:BE:F2:DC:77:5A:E6:76:92:88:9D:5D:26:C1:B2:D1:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/555bc9-4e19-4828-8eba-61ffb6506644/1/NZxyQ77y3Hda5naSiJ1dJsGy0Ug.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:2e:2c:6b:b7:b3:88:17:7b:3a:17:c6:8a:61:fc:4b:9f:e9:
         75:a5:ee:4f:15:08:3f:6e:a6:86:d4:35:31:40:33:b4:89:c7:
         ed:61:1d:17:4c:eb:b5:23:40:96:7f:86:dc:78:12:8a:38:e1:
         8b:5d:65:80:30:d7:d4:6b:7c:08:b4:bc:4f:21:64:e3:47:11:
         f5:b6:eb:a4:34:2b:98:cb:80:56:8c:05:4d:d2:8c:8d:fe:8d:
         89:9b:08:e4:67:cf:c1:0c:39:77:56:f2:24:53:67:a4:42:bd:
         2a:25:ec:60:18:25:c2:f8:1a:c8:3a:44:39:14:bc:6a:e9:61:
         d6:fd:b7:b8:d0:9a:8f:c1:b8:75:fd:ff:90:ca:76:ae:3b:b6:
         c6:dd:16:cb:04:12:15:27:02:25:65:f2:e3:ea:bc:45:f9:34:
         62:dc:6f:74:d1:7a:0a:2f:1b:e7:cd:07:18:1e:1c:fd:bc:8a:
         17:3e:fb:5f:b5:ea:6b:00:15:17:71:3d:e7:e4:4d:ad:58:b5:
         d7:79:23:5f:61:d8:6c:fe:98:58:ce:c2:11:b8:72:85:65:fc:
         1c:5b:81:c3:3d:e6:99:dd:09:90:3d:ce:69:22:27:7a:16:78:
         16:84:07:cc:21:dc:39:f8:68:82:1d:80:4a:f3:61:85:85:10:
         37:a6:23:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 15:10:52 2025 by rpki-client