Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/njUz1mLD8Na7HmkvP6tte6OCTCg.mft
File:                     njUz1mLD8Na7HmkvP6tte6OCTCg.mft (raw, json)
Hash identifier:          gc7JTW2reXUE17wT3ywagqPMk31eCReAc/CDBsS7OOI=
Subject key identifier:   71:6C:29:96:CE:25:50:5D:28:22:7A:27:EB:D2:2F:D9:3F:97:26:AA
Authority key identifier: 9E:35:33:D6:62:C3:F0:D6:BB:1E:69:2F:3F:AB:6D:7B:A3:82:4C:28
Certificate issuer:       /CN=9e3533d662c3f0d6bb1e692f3fab6d7ba3824c28
Certificate serial:       0197B6D780D67DC76736CF608C2E700ED7DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/njUz1mLD8Na7HmkvP6tte6OCTCg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/njUz1mLD8Na7HmkvP6tte6OCTCg.mft
Manifest number:          1572
Signing time:             Sat 28 Jun 2025 14:01:05 +0000
Manifest this update:     Sat 28 Jun 2025 14:01:05 +0000
Manifest next update:     Sun 29 Jun 2025 14:01:05 +0000
Files and hashes:         1: 1tI7Gq6wrPLRpjeUzC_GrOYPqZ0.roa (hash: xlDzBukhszCg1ynm8q0OHDdDRpBK+e0yk8+3eMgwkrM=)
                          2: RBsyWLfZJ_zLx9s-cNB-ptFfujg.roa (hash: IyFw4v8rAxvkA10wGK9XNcDIKqaq/q2xa7mB4hR4CMY=)
                          3: Zi1iA2N22K6D1EqWuXGSwJbaToE.roa (hash: zSMKFbT/uwlzQj5z6cjWhjz6p9cPAfNZU2ZZ9FmRbIU=)
                          4: jgu3roXa-ppD5Voc7wD-A3FJYsA.roa (hash: IK8p6mGX+CwHf/aA4cC2k9uGzhRGeTYhI8MfPoXscu0=)
                          5: njUz1mLD8Na7HmkvP6tte6OCTCg.crl (hash: wzFhLi4Rcm16fyTot6PxtJh7ruohOaiIgrO7WfK3WNU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/njUz1mLD8Na7HmkvP6tte6OCTCg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/njUz1mLD8Na7HmkvP6tte6OCTCg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/njUz1mLD8Na7HmkvP6tte6OCTCg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 14:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:d7:80:d6:7d:c7:67:36:cf:60:8c:2e:70:0e:d7:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e3533d662c3f0d6bb1e692f3fab6d7ba3824c28
        Validity
            Not Before: Jun 28 14:01:05 2025 GMT
            Not After : Jun 29 14:01:05 2025 GMT
        Subject: CN=716c2996ce25505d28227a27ebd22fd93f9726aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c2:3b:df:63:91:e6:e2:9f:a2:b4:78:ae:2e:
                    31:a6:82:98:8d:52:27:83:83:bb:09:71:f3:62:60:
                    5b:10:fa:b2:1b:42:4e:12:42:f4:18:51:af:c0:c3:
                    36:f5:96:77:4e:bb:c6:2a:fe:bb:1c:29:ab:36:4a:
                    42:93:d4:f8:c4:f6:8b:9a:86:a8:fc:7c:ce:98:d0:
                    bf:6c:72:55:18:c0:f9:de:6f:3e:b9:9f:9f:69:1a:
                    1f:04:b3:e0:84:66:bf:c6:1e:a4:0c:d2:8b:99:64:
                    ad:d5:59:74:0a:29:4b:6f:91:d2:5a:69:d4:eb:9f:
                    0b:cf:3a:d2:76:43:d5:3a:cf:04:a8:3c:fc:fb:a0:
                    48:35:ab:37:61:9e:e7:78:c2:4e:4e:6b:b3:a6:64:
                    c0:60:53:1f:a6:48:e7:45:99:48:da:08:f2:78:6f:
                    22:81:f7:80:89:35:0d:af:32:2a:e0:71:94:74:d3:
                    95:e3:1e:66:b3:26:56:87:66:3c:6f:56:97:bd:8d:
                    eb:ec:00:2d:6b:d7:24:63:1f:ba:95:87:f6:df:b1:
                    61:fe:52:45:ab:33:01:d0:c4:e6:17:b7:c3:4f:2a:
                    13:92:ef:77:50:f0:79:ea:e1:29:41:b0:7c:3b:5b:
                    38:35:14:bb:6b:28:19:62:85:45:2d:81:f2:72:5b:
                    34:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:6C:29:96:CE:25:50:5D:28:22:7A:27:EB:D2:2F:D9:3F:97:26:AA
            X509v3 Authority Key Identifier:
                keyid:9E:35:33:D6:62:C3:F0:D6:BB:1E:69:2F:3F:AB:6D:7B:A3:82:4C:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njUz1mLD8Na7HmkvP6tte6OCTCg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/njUz1mLD8Na7HmkvP6tte6OCTCg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/njUz1mLD8Na7HmkvP6tte6OCTCg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:0e:1a:d5:7d:7c:e2:f4:22:cf:6b:f6:cb:06:89:56:ab:28:
         01:86:30:7c:6a:1d:27:62:2c:8b:92:72:c8:fa:e4:b6:e3:c1:
         bf:be:de:3a:b2:7e:83:5e:05:7e:ba:26:45:28:c7:ac:23:da:
         4c:b1:a5:8a:1b:16:62:95:71:4f:86:af:23:84:86:b5:f8:57:
         8c:59:de:9a:dc:50:fa:43:ea:c0:a7:86:e3:be:76:cd:b0:21:
         5d:1b:1b:f1:40:fa:98:1f:e8:e9:fa:4d:76:d4:28:d3:9a:be:
         49:19:d7:0e:3b:13:9b:ff:07:fb:e3:f6:19:39:d1:b6:77:1e:
         db:5b:56:10:9d:4c:d1:37:65:9b:8a:8f:2c:d2:81:57:2b:22:
         e7:cd:58:bd:4f:c8:d1:b0:22:04:f5:9e:97:b9:83:14:9d:b3:
         a4:bd:a6:51:bd:46:eb:0d:96:c5:e6:ee:6e:85:48:d7:62:27:
         39:a6:ab:14:c9:b4:71:10:92:1c:9d:5c:9e:14:d0:1f:49:cb:
         91:e5:9e:bf:38:73:06:69:f4:f1:ff:2b:30:0a:a8:e3:4e:c8:
         b3:3f:3e:ac:fe:24:69:f4:30:d0:f1:97:22:3e:2d:1f:e6:86:
         e4:ea:18:f3:40:d8:14:19:90:6a:6d:27:b6:24:6e:a4:4b:4b:
         44:40:bf:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:11:10 2025 by rpki-client