Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.mft
File:                     CNedINdqndsHW5T58ABSqyGCdrc.mft (raw, json)
Hash identifier:          +Oq2aHj1dzW1NcXZnW7CwMr8lrK9mawLpKa/Uun5wbY=
Subject key identifier:   0E:BA:59:8E:B0:CB:3E:CB:BC:9C:E2:3F:5E:E3:9D:52:62:E0:60:34
Authority key identifier: 08:D7:9D:20:D7:6A:9D:DB:07:5B:94:F9:F0:00:52:AB:21:82:76:B7
Certificate issuer:       /CN=08d79d20d76a9ddb075b94f9f00052ab218276b7
Certificate serial:       0197B70F349F8819ADEB92C0E747216A13AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CNedINdqndsHW5T58ABSqyGCdrc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.mft
Manifest number:          0F80
Signing time:             Sat 28 Jun 2025 15:01:56 +0000
Manifest this update:     Sat 28 Jun 2025 15:01:56 +0000
Manifest next update:     Sun 29 Jun 2025 15:01:56 +0000
Files and hashes:         1: CNedINdqndsHW5T58ABSqyGCdrc.crl (hash: 9E2kb7KhjXdDXn9UV6lZR2ONTwj9OPuxeJaYKxOOnaA=)
                          2: NxR6rjQYDvK-6beKZqhb21Ma0h0.roa (hash: eDS+0w8Ojc9YalXnJemejPGahb1kTWYCKBq2prUt9qg=)
                          3: _BQI9-Z6Ir5h5KACcOfrToSjkeU.roa (hash: +8QwmWebGpDaCA9AoYcnSa24keLkeW7OwUobTrC8xMY=)
                          4: ytooMvIrVe1UKIoWb2AsvqDHusU.roa (hash: FNi924Rn+Q0YpiKfx0DUW4i6K1Um3nkEm9RbN6FN7Eg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CNedINdqndsHW5T58ABSqyGCdrc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0f:34:9f:88:19:ad:eb:92:c0:e7:47:21:6a:13:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08d79d20d76a9ddb075b94f9f00052ab218276b7
        Validity
            Not Before: Jun 28 15:01:56 2025 GMT
            Not After : Jun 29 15:01:56 2025 GMT
        Subject: CN=0eba598eb0cb3ecbbc9ce23f5ee39d5262e06034
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:35:c6:d5:50:e7:3d:86:5e:23:71:e0:63:b7:
                    f6:80:3f:aa:19:51:8a:92:f7:d8:3c:96:19:1a:1f:
                    51:71:57:25:ad:3f:87:1d:2f:82:d8:fe:c6:b5:d7:
                    6b:ca:52:35:51:96:8e:1c:2e:56:a7:f3:0d:6c:e7:
                    08:33:81:91:08:0e:5c:05:93:33:cc:50:a9:64:64:
                    f7:a3:cb:0e:fe:56:86:e4:8d:1f:18:cf:1b:8b:03:
                    fb:70:43:b5:f2:3b:44:f7:63:d2:cd:23:7f:f9:4d:
                    1f:c6:37:6c:21:8c:ce:ea:89:b8:5c:4b:34:53:01:
                    95:8d:fe:ef:78:3f:8c:ab:ff:b8:1e:01:c5:94:ab:
                    7b:cf:2d:28:82:14:61:92:4b:38:67:43:72:47:9d:
                    66:89:ed:d5:dd:2a:aa:cc:09:e5:57:10:8b:fb:14:
                    2a:08:3e:d7:ac:4b:ba:6e:59:2f:b7:81:be:6a:52:
                    f3:dd:69:87:27:ad:bc:3d:ee:d9:6d:67:d1:e9:df:
                    91:4a:38:32:0a:95:34:ac:da:f4:f8:5d:7b:b8:60:
                    e0:bc:d3:48:f9:94:fd:88:74:c2:94:6a:b0:47:ba:
                    1a:14:12:37:fd:e5:41:65:53:36:04:fb:1c:86:7d:
                    a8:e3:25:49:33:89:c2:03:e2:e6:10:03:3c:3c:77:
                    0b:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:BA:59:8E:B0:CB:3E:CB:BC:9C:E2:3F:5E:E3:9D:52:62:E0:60:34
            X509v3 Authority Key Identifier:
                keyid:08:D7:9D:20:D7:6A:9D:DB:07:5B:94:F9:F0:00:52:AB:21:82:76:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNedINdqndsHW5T58ABSqyGCdrc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:42:ca:1d:bb:de:47:a1:b6:cb:19:aa:0a:69:d2:8e:3f:c7:
         01:ef:a6:8d:2b:51:dc:bb:a8:ae:45:96:6f:15:8a:f3:59:ea:
         6d:f0:c3:6e:3f:b2:fc:b9:7b:b6:63:74:66:6c:c2:ee:0a:d1:
         f2:06:17:d7:56:36:d0:39:19:62:70:53:40:d8:a3:d2:58:1d:
         18:3e:12:1b:91:63:d4:fb:49:63:da:de:31:aa:e7:4a:f3:2e:
         ad:32:a1:ed:c6:d5:4d:ea:81:da:ad:33:90:a4:21:2c:a8:7b:
         ad:3c:9a:9e:77:06:ac:14:3f:a0:bb:79:d1:2d:97:08:b8:62:
         df:39:af:42:50:5d:65:b0:49:fb:14:d7:ff:d2:2f:7b:e7:56:
         37:b8:6a:85:e0:19:1f:fb:eb:ce:f8:77:b9:67:19:5b:db:db:
         d1:56:36:42:a3:43:af:7f:df:a3:50:e6:3f:17:8d:a8:54:19:
         bb:22:09:03:fa:8b:79:7d:0f:73:6e:f9:0e:0d:5d:64:3a:0f:
         b3:a5:6c:d0:15:f3:35:bd:f9:f5:d4:8d:aa:c5:dc:b2:04:25:
         56:21:bc:52:44:2a:02:24:55:53:ba:3e:03:5c:18:53:bf:92:
         7f:da:d9:eb:bb:1c:f6:9b:45:ac:0b:5b:da:d6:f8:56:1c:66:
         6a:d1:f0:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3DzSfiBmt65LA50chahOrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ZDc5ZDIwZDc2YTlkZGIwNzViOTRmOWYwMDA1MmFiMjE4
Mjc2YjcwHhcNMjUwNjI4MTUwMTU2WhcNMjUwNjI5MTUwMTU2WjAzMTEwLwYDVQQD
EygwZWJhNTk4ZWIwY2IzZWNiYmM5Y2UyM2Y1ZWUzOWQ1MjYyZTA2MDM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTXG1VDnPYZeI3HgY7f2gD+qGVGK
kvfYPJYZGh9RcVclrT+HHS+C2P7GtddrylI1UZaOHC5Wp/MNbOcIM4GRCA5cBZMz
zFCpZGT3o8sO/laG5I0fGM8biwP7cEO18jtE92PSzSN/+U0fxjdsIYzO6om4XEs0
UwGVjf7veD+Mq/+4HgHFlKt7zy0oghRhkks4Z0NyR51mie3V3SqqzAnlVxCL+xQq
CD7XrEu6blkvt4G+alLz3WmHJ628Pe7ZbWfR6d+RSjgyCpU0rNr0+F17uGDgvNNI
+ZT9iHTClGqwR7oaFBI3/eVBZVM2BPschn2o4yVJM4nCA+LmEAM8PHcLpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA66WY6wyz7LvJziP17jnVJi4GA0MB8GA1UdIwQY
MBaAFAjXnSDXap3bB1uU+fAAUqshgna3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ05lZElOZHFuZHNIVzVUNThBQlNxeUdDZHJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8zNzEwOWQtMTMzNy00YjJkLWJjMWIt
NDhkYzg4YjU2MDIwLzEvQ05lZElOZHFuZHNIVzVUNThBQlNxeUdDZHJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS8zNzEwOWQtMTMzNy00YjJkLWJjMWItNDhkYzg4YjU2MDIw
LzEvQ05lZElOZHFuZHNIVzVUNThBQlNxeUdDZHJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATELKHbve
R6G2yxmqCmnSjj/HAe+mjStR3LuorkWWbxWK81nqbfDDbj+y/Ll7tmN0ZmzC7grR
8gYX11Y20DkZYnBTQNij0lgdGD4SG5Fj1PtJY9reMarnSvMurTKh7cbVTeqB2q0z
kKQhLKh7rTyanncGrBQ/oLt50S2XCLhi3zmvQlBdZbBJ+xTX/9Ive+dWN7hqheAZ
H/vrzvh3uWcZW9vb0VY2QqNDr3/fo1DmPxeNqFQZuyIJA/qLeX0Pc275Dg1dZDoP
s6Vs0BXzNb359dSNqsXcsgQlViG8UkQqAiRVU7o+A1wYU7+Sf9rZ67sc9ptFrAtb
2tb4VhxmatHwdg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:46:23 2025 by rpki-client