Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/d53d7c-a832-47b3-9f94-59c23054442d/1/nv2KDm5t1Wpu-CieSxhPDKAMM90.mft
File:                     nv2KDm5t1Wpu-CieSxhPDKAMM90.mft (raw, json)
Hash identifier:          ceBiePneO+olRDRTqiBXi+XJwJiZ+tMbL+a7IfT/s9c=
Subject key identifier:   2A:82:E3:0B:19:86:7C:B5:89:E7:20:84:C1:44:C4:17:48:DB:6C:2F
Authority key identifier: 9E:FD:8A:0E:6E:6D:D5:6A:6E:F8:28:9E:4B:18:4F:0C:A0:0C:33:DD
Certificate issuer:       /CN=9efd8a0e6e6dd56a6ef8289e4b184f0ca00c33dd
Certificate serial:       0196BDEE2D4F7CA0CBFA02DBEA5FE78764EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nv2KDm5t1Wpu-CieSxhPDKAMM90.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/d53d7c-a832-47b3-9f94-59c23054442d/1/nv2KDm5t1Wpu-CieSxhPDKAMM90.mft
Manifest number:          1533
Signing time:             Sun 11 May 2025 06:00:25 +0000
Manifest this update:     Sun 11 May 2025 06:00:25 +0000
Manifest next update:     Mon 12 May 2025 06:00:25 +0000
Files and hashes:         1: QNOJOIm1SKvhgHP8ibivnBfVSQA.roa (hash: pi8uHE5UurLC5GTyPY+S33YCsYwTr9zqOvpf//OyfMo=)
                          2: nv2KDm5t1Wpu-CieSxhPDKAMM90.crl (hash: CN9ZQpkvJ6QbhVK/JTYgd6nmTt4ID/nqhgEjPO47WA8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/d53d7c-a832-47b3-9f94-59c23054442d/1/nv2KDm5t1Wpu-CieSxhPDKAMM90.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/d53d7c-a832-47b3-9f94-59c23054442d/1/nv2KDm5t1Wpu-CieSxhPDKAMM90.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nv2KDm5t1Wpu-CieSxhPDKAMM90.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bd:ee:2d:4f:7c:a0:cb:fa:02:db:ea:5f:e7:87:64:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9efd8a0e6e6dd56a6ef8289e4b184f0ca00c33dd
        Validity
            Not Before: May 11 06:00:25 2025 GMT
            Not After : May 12 06:00:25 2025 GMT
        Subject: CN=2a82e30b19867cb589e72084c144c41748db6c2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:af:df:ef:a8:8f:5c:d7:e3:15:13:0d:04:48:
                    d9:69:ae:5c:7b:9e:b5:b8:e2:4b:98:6c:26:38:19:
                    23:79:a0:34:21:6e:94:02:f5:e9:66:00:93:1f:25:
                    ef:02:b4:ed:1e:d3:18:fa:0e:b9:af:aa:3c:ee:2c:
                    64:f1:78:e3:1a:a6:ca:5f:73:0e:6f:6b:6d:32:9b:
                    ae:d8:46:da:29:7c:c7:0d:9e:40:d8:e0:7d:b4:ed:
                    3f:f2:44:31:c8:a2:f2:7c:b2:63:21:19:1c:6d:f5:
                    fe:38:2c:88:ad:06:96:ea:92:50:c7:24:14:ae:72:
                    22:87:73:2f:4e:e2:21:4a:e2:fd:f4:9c:f6:29:8d:
                    29:a3:05:c4:53:2d:de:99:5f:36:ae:11:86:44:b5:
                    e1:31:c7:f5:ae:53:de:f5:b7:46:6a:07:74:51:f8:
                    e1:cd:f7:ff:af:2e:ad:9a:04:d7:d1:3a:23:db:60:
                    60:29:04:7c:43:73:a5:98:2a:f5:27:d2:74:bc:98:
                    94:f9:a2:dd:da:6a:bd:b1:55:30:16:c4:95:38:39:
                    9f:5b:76:13:6e:45:44:44:72:2d:e9:fa:01:c2:1a:
                    26:b0:85:a3:7e:4f:9a:ce:e3:fa:56:03:a3:ee:0c:
                    0f:e2:9a:35:a5:0c:31:9c:f6:33:26:48:bc:f8:0e:
                    60:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:82:E3:0B:19:86:7C:B5:89:E7:20:84:C1:44:C4:17:48:DB:6C:2F
            X509v3 Authority Key Identifier:
                keyid:9E:FD:8A:0E:6E:6D:D5:6A:6E:F8:28:9E:4B:18:4F:0C:A0:0C:33:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nv2KDm5t1Wpu-CieSxhPDKAMM90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d53d7c-a832-47b3-9f94-59c23054442d/1/nv2KDm5t1Wpu-CieSxhPDKAMM90.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d53d7c-a832-47b3-9f94-59c23054442d/1/nv2KDm5t1Wpu-CieSxhPDKAMM90.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:91:94:0f:f8:96:72:1b:54:5c:61:c8:6f:9f:b3:d7:c4:79:
         eb:1c:39:5f:dc:dc:65:6b:23:ff:ea:9d:d3:b5:83:d8:a3:2d:
         e1:79:9d:ec:19:57:f1:07:fc:6f:d6:4c:b3:17:44:b4:dd:27:
         25:6d:70:34:4b:29:1c:34:16:6e:c3:92:2b:45:a6:5a:db:81:
         f2:10:dc:7a:d9:15:55:45:8b:ac:7f:f4:0b:40:ca:10:d9:d9:
         d6:b0:ef:01:2e:5c:0d:9c:30:08:3c:ce:3b:f9:f5:e8:0e:d4:
         58:ad:1b:af:af:c2:b0:ac:40:ed:60:f4:06:a1:8c:0a:8f:d9:
         e3:00:6d:b6:af:07:50:1f:af:4e:76:eb:2a:62:f1:7f:76:58:
         a2:9b:42:28:7b:a3:e5:8e:ca:bc:2c:06:1a:9b:fc:ba:96:34:
         c5:36:b7:7f:68:19:74:99:e4:f2:1a:60:1c:d7:0b:9e:d7:e4:
         1e:0d:93:a1:6b:4c:47:80:ea:31:c3:42:24:1e:c9:3f:e7:98:
         fa:ab:35:bb:84:68:bb:41:53:73:f9:b2:99:15:c7:6e:bd:69:
         23:e8:0b:9b:e0:28:63:9f:38:8d:8b:1e:40:d7:d5:2a:1e:9c:
         e3:9e:d6:3a:f3:cf:aa:a0:6f:b0:7b:96:3c:66:dd:f6:38:f3:
         ab:3a:38:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 09:07:30 2025 by rpki-client