Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/bbb782-39f5-4d24-91d2-3e5ee4a8f388/1/na669vl-yTdN9sFJL1nV8Tqd0Ag.mft
File:                     na669vl-yTdN9sFJL1nV8Tqd0Ag.mft (raw, json)
Hash identifier:          VLOYZe2GvSmR0sFHems+C1H24eMr3FqdTeiiV+cawzI=
Subject key identifier:   90:D4:70:70:9A:78:B2:A6:D7:7A:8E:A3:28:8D:E9:8C:4F:86:A8:BF
Authority key identifier: 9D:AE:BA:F6:F9:7E:C9:37:4D:F6:C1:49:2F:59:D5:F1:3A:9D:D0:08
Certificate issuer:       /CN=9daebaf6f97ec9374df6c1492f59d5f13a9dd008
Certificate serial:       0196C7CD10822AB6A971784D4575CFF772EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/na669vl-yTdN9sFJL1nV8Tqd0Ag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/bbb782-39f5-4d24-91d2-3e5ee4a8f388/1/na669vl-yTdN9sFJL1nV8Tqd0Ag.mft
Manifest number:          04F3
Signing time:             Tue 13 May 2025 04:00:27 +0000
Manifest this update:     Tue 13 May 2025 04:00:27 +0000
Manifest next update:     Wed 14 May 2025 04:00:27 +0000
Files and hashes:         1: na669vl-yTdN9sFJL1nV8Tqd0Ag.crl (hash: Te7x+Izi6hzbUBhpQEXspR4uu4xmBSMHJs6D6469ELI=)
                          2: olL7czVWLNgm7W1_IvIVMdMAMJQ.roa (hash: E2ePc2MjZUE+sDvLqhAeZtvQFjQHcecfsCWi8c1v1uE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/bbb782-39f5-4d24-91d2-3e5ee4a8f388/1/na669vl-yTdN9sFJL1nV8Tqd0Ag.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/bbb782-39f5-4d24-91d2-3e5ee4a8f388/1/na669vl-yTdN9sFJL1nV8Tqd0Ag.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/na669vl-yTdN9sFJL1nV8Tqd0Ag.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 04:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c7:cd:10:82:2a:b6:a9:71:78:4d:45:75:cf:f7:72:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9daebaf6f97ec9374df6c1492f59d5f13a9dd008
        Validity
            Not Before: May 13 04:00:27 2025 GMT
            Not After : May 14 04:00:27 2025 GMT
        Subject: CN=90d470709a78b2a6d77a8ea3288de98c4f86a8bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:35:de:14:78:3e:e6:3b:82:89:7a:22:f6:9e:
                    09:cf:9b:cf:2d:9b:89:ee:54:93:34:41:8e:1d:26:
                    c8:96:36:34:62:13:20:c9:96:0f:a8:0c:36:ee:02:
                    99:10:f5:dd:b7:05:37:dc:c3:61:b4:3c:34:b9:5c:
                    98:8d:1d:6d:75:81:01:75:e9:f4:3a:59:ca:54:03:
                    05:76:20:3b:be:6f:c9:c1:74:19:7c:2b:a3:1e:88:
                    f1:02:7a:8f:41:c8:79:0f:bd:c6:fb:51:f6:94:57:
                    30:da:dc:eb:1e:45:71:01:d1:c2:40:30:b6:2b:2c:
                    05:b6:81:c8:a2:66:67:41:fb:a9:0b:e2:1d:fd:42:
                    b3:5c:08:47:89:d2:01:10:67:b9:26:89:19:20:21:
                    17:49:ad:f2:34:c6:84:b7:0b:ac:f8:6f:a2:bb:6f:
                    22:a7:fd:fd:02:2c:2b:7a:d6:d3:01:c3:7e:34:f6:
                    0a:bf:c6:e3:9a:ee:5e:ef:39:8e:22:bb:4d:28:8c:
                    96:42:f7:06:a8:8d:d8:10:65:22:52:50:93:8a:6c:
                    8f:62:4f:43:a8:75:9b:fd:a3:a3:6c:ca:37:ea:c2:
                    02:1a:91:ad:73:73:01:0e:fe:16:1f:2b:ca:45:1e:
                    ac:2e:85:3f:86:7d:3e:06:c5:fa:b9:29:ae:a3:ac:
                    5a:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:D4:70:70:9A:78:B2:A6:D7:7A:8E:A3:28:8D:E9:8C:4F:86:A8:BF
            X509v3 Authority Key Identifier:
                keyid:9D:AE:BA:F6:F9:7E:C9:37:4D:F6:C1:49:2F:59:D5:F1:3A:9D:D0:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/na669vl-yTdN9sFJL1nV8Tqd0Ag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/bbb782-39f5-4d24-91d2-3e5ee4a8f388/1/na669vl-yTdN9sFJL1nV8Tqd0Ag.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/bbb782-39f5-4d24-91d2-3e5ee4a8f388/1/na669vl-yTdN9sFJL1nV8Tqd0Ag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:2f:9d:74:3a:2a:1a:f7:a2:53:c6:7b:1e:24:72:8b:e8:0d:
         6e:24:8c:d2:0c:80:f8:e9:28:5f:ff:ff:60:95:26:d5:af:33:
         a7:ea:31:e0:82:02:a0:ca:5c:ab:08:0c:9f:82:da:eb:35:55:
         76:a4:da:c2:49:c3:18:11:13:84:89:fc:50:e3:7f:2c:73:7f:
         ce:c3:26:d5:31:62:ce:c5:a4:07:72:5e:d2:76:72:be:e9:12:
         5d:d9:37:51:f0:50:c0:fd:ab:aa:87:1f:f8:a1:14:f0:52:ef:
         c8:be:7c:89:0e:59:a9:f7:64:81:30:1e:4d:cc:06:5a:cf:a3:
         66:a5:37:a7:df:79:3d:d3:84:dd:21:3e:52:7c:fc:1f:93:07:
         c5:fd:7e:61:bb:6c:7c:fc:84:66:68:45:ac:63:77:87:b5:e3:
         5b:29:b3:f1:36:a4:f2:61:2f:84:d7:d0:75:4c:86:bb:28:cd:
         c4:02:cb:1c:a7:fe:71:44:84:e5:bc:d1:f3:96:bd:21:40:96:
         44:dc:12:1c:cf:6c:41:6c:74:f5:62:05:c2:90:f9:6d:4f:46:
         3a:e5:8a:f7:44:6c:7d:a1:8f:45:bb:ed:98:0c:13:1f:9b:1c:
         66:fa:e4:b7:0d:d2:a0:90:20:3f:e4:ed:ca:21:61:f2:b6:4a:
         f0:89:d4:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 13:35:52 2025 by rpki-client