Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/55dc83-2707-4917-b63f-95c4e94ad0a9/1/NjVI7UYolmJIIEwv5pBl8Ne1J6M.mft
File:                     NjVI7UYolmJIIEwv5pBl8Ne1J6M.mft (raw, json)
Hash identifier:          HX7c7Dqz++7OOnv69lIY7BOqhqYzT+zM9eDuLnEjPCw=
Subject key identifier:   B3:C7:A1:72:3E:2F:FD:72:F7:F1:7E:C3:2F:AF:CA:98:2C:A0:B5:A9
Authority key identifier: 36:35:48:ED:46:28:96:62:48:20:4C:2F:E6:90:65:F0:D7:B5:27:A3
Certificate issuer:       /CN=363548ed4628966248204c2fe69065f0d7b527a3
Certificate serial:       0196BA11351936B1C0AAE622C1F62AE8A493
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NjVI7UYolmJIIEwv5pBl8Ne1J6M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/55dc83-2707-4917-b63f-95c4e94ad0a9/1/NjVI7UYolmJIIEwv5pBl8Ne1J6M.mft
Manifest number:          1532
Signing time:             Sat 10 May 2025 12:00:11 +0000
Manifest this update:     Sat 10 May 2025 12:00:11 +0000
Manifest next update:     Sun 11 May 2025 12:00:11 +0000
Files and hashes:         1: NjVI7UYolmJIIEwv5pBl8Ne1J6M.crl (hash: p3dwDjHMFa4FxNbM5z2Il2Bjo83K+dVEro+Y1DYyR38=)
                          2: ZTPqCUD63V4eQMXnLn6AnTQCitU.roa (hash: ywlhEvz+62iFTUdrK6be6oxB9Yvs+N63Zrh3s7mdFzs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/55dc83-2707-4917-b63f-95c4e94ad0a9/1/NjVI7UYolmJIIEwv5pBl8Ne1J6M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/55dc83-2707-4917-b63f-95c4e94ad0a9/1/NjVI7UYolmJIIEwv5pBl8Ne1J6M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NjVI7UYolmJIIEwv5pBl8Ne1J6M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 12:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ba:11:35:19:36:b1:c0:aa:e6:22:c1:f6:2a:e8:a4:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=363548ed4628966248204c2fe69065f0d7b527a3
        Validity
            Not Before: May 10 12:00:11 2025 GMT
            Not After : May 11 12:00:11 2025 GMT
        Subject: CN=b3c7a1723e2ffd72f7f17ec32fafca982ca0b5a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:11:85:12:1c:05:9c:ec:10:a8:02:33:0b:98:
                    26:0d:db:4b:dd:22:6f:1a:b2:f8:dc:a4:35:5f:7e:
                    3b:1b:09:8e:11:50:ed:a7:0b:12:5c:8a:b8:21:c3:
                    44:3e:bd:82:a6:73:bb:d7:98:c6:67:c2:de:4e:61:
                    1d:47:e7:74:29:49:14:69:83:3d:d3:21:d4:6e:29:
                    c4:51:20:b3:b5:e1:a0:0d:4f:08:07:3f:30:cc:1f:
                    d1:b2:a4:74:34:4b:6a:34:f8:13:70:b5:87:6b:c3:
                    fc:51:8a:63:f9:9e:b6:69:ee:10:9f:b5:b9:b1:42:
                    07:07:8a:10:9c:77:c7:e2:c7:42:c0:89:2d:24:c6:
                    07:3d:45:a5:fc:e5:54:c9:94:76:16:75:34:70:c5:
                    da:6a:c2:ec:dc:45:59:27:1d:5d:0a:d8:12:58:39:
                    a0:e7:06:76:4e:c1:fd:f3:91:b8:38:91:e0:67:01:
                    d1:ba:15:20:81:7b:a9:dd:cb:60:f2:bf:d4:3f:14:
                    77:f9:8a:35:0c:b3:29:ef:80:85:47:76:b8:ce:90:
                    b8:92:c3:b4:be:26:1c:2a:74:e3:a7:3e:8e:85:a4:
                    a7:23:d9:d7:02:c1:e6:44:8e:fa:ee:d0:7c:09:f5:
                    f7:ed:08:db:7a:45:67:f2:e7:94:71:af:9e:a5:36:
                    3f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:C7:A1:72:3E:2F:FD:72:F7:F1:7E:C3:2F:AF:CA:98:2C:A0:B5:A9
            X509v3 Authority Key Identifier:
                keyid:36:35:48:ED:46:28:96:62:48:20:4C:2F:E6:90:65:F0:D7:B5:27:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NjVI7UYolmJIIEwv5pBl8Ne1J6M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/55dc83-2707-4917-b63f-95c4e94ad0a9/1/NjVI7UYolmJIIEwv5pBl8Ne1J6M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/55dc83-2707-4917-b63f-95c4e94ad0a9/1/NjVI7UYolmJIIEwv5pBl8Ne1J6M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:53:37:39:80:3e:ed:3a:7c:99:51:47:5f:36:a7:4e:51:39:
         03:5e:61:1f:eb:0f:d4:d5:ba:89:52:d8:1b:32:b3:54:83:3e:
         8f:b5:61:21:b2:4e:ea:6e:9e:91:78:18:a7:c8:e4:c0:76:9c:
         ab:bf:bd:b6:6d:4d:19:cf:f3:16:3b:d1:7d:2d:34:9e:35:a2:
         d9:07:9d:63:8b:c8:81:9d:5f:92:dc:f0:ee:35:61:1c:d3:01:
         ee:ce:fd:a1:06:87:16:bc:f3:a1:35:a3:22:62:69:ce:52:d5:
         ac:a9:93:42:38:ed:bd:d3:b4:e9:0b:2b:9e:6e:8a:24:75:9f:
         75:a1:76:dd:a8:ad:83:b9:56:16:a1:c0:aa:5d:c9:ad:96:1b:
         26:04:e8:e5:07:c5:0d:67:40:86:49:de:d9:99:59:c3:3c:67:
         c1:10:07:7a:a3:04:2d:da:ec:7d:55:3b:13:eb:a7:8f:d2:0d:
         17:83:c0:32:06:9f:b0:71:49:1c:e1:04:3c:7e:e7:c6:ec:a5:
         25:c2:2b:ed:54:3d:74:62:0a:eb:30:66:df:99:22:c2:7b:6d:
         8c:88:d3:89:f4:93:24:ee:df:e9:7c:8c:1e:96:9d:b9:fe:69:
         80:ba:14:bd:81:ac:d0:d3:86:0c:fb:5d:79:54:4d:2d:03:cc:
         24:cc:24:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 20:52:00 2025 by rpki-client