Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2b3f2f-14ae-464b-9b7c-7980a2e23007/1/nVgf-JVKiXizTYSRAVRszmHEr6M.mft
File:                     nVgf-JVKiXizTYSRAVRszmHEr6M.mft (raw, json)
Hash identifier:          CB9AdePNV8DkiWRS2jG0FPWHBIJoZEuQYywOAON5z7k=
Subject key identifier:   ED:F8:7B:F0:7F:4C:92:CF:30:22:77:AE:56:18:16:82:B4:0D:3D:FA
Authority key identifier: 9D:58:1F:F8:95:4A:89:78:B3:4D:84:91:01:54:6C:CE:61:C4:AF:A3
Certificate issuer:       /CN=9d581ff8954a8978b34d849101546cce61c4afa3
Certificate serial:       0196B7EC5A0AE748ED902C8CAB4008955C3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nVgf-JVKiXizTYSRAVRszmHEr6M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/2b3f2f-14ae-464b-9b7c-7980a2e23007/1/nVgf-JVKiXizTYSRAVRszmHEr6M.mft
Manifest number:          1534
Signing time:             Sat 10 May 2025 02:00:42 +0000
Manifest this update:     Sat 10 May 2025 02:00:42 +0000
Manifest next update:     Sun 11 May 2025 02:00:42 +0000
Files and hashes:         1: nVgf-JVKiXizTYSRAVRszmHEr6M.crl (hash: VxMqUU4zgDJAsgt6BGRuPvuipI1JmE+/+3omyQJxcew=)
                          2: pbhnhbhAo7f81mspcf47i1RiwC4.roa (hash: cy6NBeCA9q+KpxmPFPQqLF3HwYWfNZwADzV/UaXEKik=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/2b3f2f-14ae-464b-9b7c-7980a2e23007/1/nVgf-JVKiXizTYSRAVRszmHEr6M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/2b3f2f-14ae-464b-9b7c-7980a2e23007/1/nVgf-JVKiXizTYSRAVRszmHEr6M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nVgf-JVKiXizTYSRAVRszmHEr6M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b7:ec:5a:0a:e7:48:ed:90:2c:8c:ab:40:08:95:5c:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d581ff8954a8978b34d849101546cce61c4afa3
        Validity
            Not Before: May 10 02:00:42 2025 GMT
            Not After : May 11 02:00:42 2025 GMT
        Subject: CN=edf87bf07f4c92cf302277ae56181682b40d3dfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:3c:00:58:cd:ff:a9:84:48:2b:8a:9e:07:cc:
                    73:d3:ff:ef:b2:48:0f:64:80:66:04:70:d8:b4:e2:
                    45:4a:e0:62:d4:11:13:9e:70:f6:0a:26:d7:76:e6:
                    23:9b:f9:5a:e9:c3:21:79:db:6f:92:c3:4f:cb:5a:
                    58:55:71:19:da:0a:14:ab:bd:d7:86:76:63:10:bc:
                    fb:d7:87:d4:ca:4d:6e:a6:83:f7:34:f2:ad:50:90:
                    07:09:88:a0:bf:a2:91:ae:61:aa:91:99:4f:04:c4:
                    43:11:2b:36:36:81:2c:ea:0d:9e:70:87:b0:aa:79:
                    3c:b1:77:39:f0:67:6b:bc:6f:1a:03:a3:aa:97:d7:
                    ed:fe:2c:b7:cf:b1:ad:c0:95:00:4d:12:d2:bf:0f:
                    a3:91:48:21:bb:1d:ba:2e:27:4a:e7:30:0f:24:0e:
                    14:e1:40:9a:80:50:31:d0:f1:7c:41:da:c2:ca:24:
                    7d:af:e8:60:5e:c3:35:e7:0c:51:9d:d6:22:93:79:
                    b0:a9:1d:57:e5:b8:11:5e:9f:60:77:7b:05:ba:c1:
                    7d:ce:95:8d:eb:8b:0a:14:9d:9f:57:3b:71:7a:5f:
                    15:d1:65:b8:c6:15:c3:79:39:38:89:be:e0:fd:72:
                    92:1b:02:a1:11:ff:09:48:d1:1a:f0:55:1e:b9:72:
                    a7:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:F8:7B:F0:7F:4C:92:CF:30:22:77:AE:56:18:16:82:B4:0D:3D:FA
            X509v3 Authority Key Identifier:
                keyid:9D:58:1F:F8:95:4A:89:78:B3:4D:84:91:01:54:6C:CE:61:C4:AF:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nVgf-JVKiXizTYSRAVRszmHEr6M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2b3f2f-14ae-464b-9b7c-7980a2e23007/1/nVgf-JVKiXizTYSRAVRszmHEr6M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2b3f2f-14ae-464b-9b7c-7980a2e23007/1/nVgf-JVKiXizTYSRAVRszmHEr6M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:c5:17:27:d5:12:82:fd:44:54:32:ef:02:91:5b:43:b3:6e:
         ed:d7:95:b4:9d:fe:15:0e:01:63:64:fe:12:cc:b3:27:2a:db:
         19:d9:2c:68:d3:40:57:fe:ef:94:62:13:cd:a5:4a:97:02:85:
         43:14:41:e8:ab:1e:30:93:36:ca:e4:ce:84:86:66:fe:25:f5:
         54:ef:83:3c:37:b4:17:74:e1:b8:1f:97:09:b4:d3:a8:64:8f:
         db:b2:7e:97:a2:5a:fb:7b:1b:59:ca:a3:32:0a:0d:21:2d:f6:
         c5:ff:92:5c:aa:d3:aa:4e:a4:bd:f2:30:ae:6e:92:a7:81:ba:
         6a:85:59:dc:99:a0:c2:69:03:c8:8c:14:46:02:72:e4:ab:45:
         28:51:5b:e7:7c:ec:42:a8:6f:b5:de:77:97:d9:ab:8d:7a:31:
         52:7c:ab:41:5e:e3:27:3b:dd:db:86:b7:8d:bf:33:b7:8e:9e:
         c3:ef:e6:e1:05:55:32:b3:c1:a8:3d:39:ad:69:a3:d3:4a:9d:
         a6:80:5e:02:46:8f:eb:c8:7b:01:a4:c3:6a:ad:42:fa:a3:aa:
         67:e8:fc:89:61:8f:d6:29:00:47:61:5c:82:cc:bd:67:14:6e:
         1e:28:1f:15:fd:72:1b:86:62:b9:5b:cc:c3:10:13:e4:9c:a9:
         98:a1:e3:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 07:21:38 2025 by rpki-client