Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/7ed12b-53bd-4df6-aa6e-a2cc96899702/1/N03Pz2e4K3ynYi_McJIJ7M43Vw4.mft
File:                     N03Pz2e4K3ynYi_McJIJ7M43Vw4.mft (raw, json)
Hash identifier:          JhJb9MdrwdM7E6fx2aZhI698n8ECgPj48OCUR0GXktQ=
Subject key identifier:   FD:87:A8:E4:D8:B7:DC:EA:02:85:10:FD:CF:76:33:12:D9:D4:E7:97
Authority key identifier: 37:4D:CF:CF:67:B8:2B:7C:A7:62:2F:CC:70:92:09:EC:CE:37:57:0E
Certificate issuer:       /CN=374dcfcf67b82b7ca7622fcc709209ecce37570e
Certificate serial:       0196BD49C1DC2C461BB10264BD196105D10A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N03Pz2e4K3ynYi_McJIJ7M43Vw4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/7ed12b-53bd-4df6-aa6e-a2cc96899702/1/N03Pz2e4K3ynYi_McJIJ7M43Vw4.mft
Manifest number:          141E
Signing time:             Sun 11 May 2025 03:00:49 +0000
Manifest this update:     Sun 11 May 2025 03:00:49 +0000
Manifest next update:     Mon 12 May 2025 03:00:49 +0000
Files and hashes:         1: 6bzbASHngssrN7btwpb15ed6SJ0.roa (hash: +yr1O91CJsmaXdI79v+P+t8OO+AotZIupB4bcr+PAhc=)
                          2: N03Pz2e4K3ynYi_McJIJ7M43Vw4.crl (hash: UzzNq3MDIr5Yx47GJf1adOQpzLLdtjZpd5EiULsvG6k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/7ed12b-53bd-4df6-aa6e-a2cc96899702/1/N03Pz2e4K3ynYi_McJIJ7M43Vw4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/7ed12b-53bd-4df6-aa6e-a2cc96899702/1/N03Pz2e4K3ynYi_McJIJ7M43Vw4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N03Pz2e4K3ynYi_McJIJ7M43Vw4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bd:49:c1:dc:2c:46:1b:b1:02:64:bd:19:61:05:d1:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=374dcfcf67b82b7ca7622fcc709209ecce37570e
        Validity
            Not Before: May 11 03:00:49 2025 GMT
            Not After : May 12 03:00:49 2025 GMT
        Subject: CN=fd87a8e4d8b7dcea028510fdcf763312d9d4e797
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:9c:b5:0b:a0:8c:38:48:42:c8:15:7b:38:97:
                    ba:2c:7f:8a:d5:46:62:e8:03:07:d8:cf:b6:c7:d5:
                    48:83:b1:b6:7f:6b:db:56:e3:97:ce:e8:a6:ef:de:
                    91:d1:5e:0f:f7:b2:58:40:14:61:27:0b:cb:ff:2e:
                    85:e4:a5:6b:2e:b9:88:eb:51:44:aa:ad:4a:c2:d3:
                    41:7e:8b:cd:f3:cb:b7:a4:06:28:a0:67:d1:48:21:
                    51:4d:87:5f:27:af:67:26:93:d4:26:70:61:21:68:
                    1a:92:49:21:7f:cc:bd:ef:2b:65:e9:c5:39:e8:87:
                    10:eb:b1:c4:19:12:0c:61:84:f2:ea:61:e8:08:8d:
                    6d:53:d7:10:d2:4f:cc:de:a5:6e:4b:8e:4b:de:48:
                    b1:00:d7:8c:27:c4:da:9a:94:f7:b2:23:11:b8:2e:
                    ac:f4:74:a8:48:dd:04:5f:fd:cd:c3:3f:e8:22:1e:
                    91:bd:41:5d:f8:fe:ae:7c:a9:b4:d0:19:f4:a3:78:
                    19:6d:cc:a3:84:76:27:06:18:58:3a:9f:3f:2e:5c:
                    61:13:83:01:f8:58:d8:7d:7d:eb:b1:99:b1:fd:be:
                    2c:63:6c:91:7b:0f:b7:84:24:7e:80:d4:f7:74:16:
                    8e:2d:e7:ed:a1:27:0b:88:a1:00:92:7c:d6:3d:54:
                    f8:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:87:A8:E4:D8:B7:DC:EA:02:85:10:FD:CF:76:33:12:D9:D4:E7:97
            X509v3 Authority Key Identifier:
                keyid:37:4D:CF:CF:67:B8:2B:7C:A7:62:2F:CC:70:92:09:EC:CE:37:57:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N03Pz2e4K3ynYi_McJIJ7M43Vw4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/7ed12b-53bd-4df6-aa6e-a2cc96899702/1/N03Pz2e4K3ynYi_McJIJ7M43Vw4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/7ed12b-53bd-4df6-aa6e-a2cc96899702/1/N03Pz2e4K3ynYi_McJIJ7M43Vw4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:95:e3:81:e5:0d:30:69:f6:b7:95:49:71:42:95:94:dd:3a:
         48:bf:cb:f4:9c:25:74:b6:74:3b:92:a8:a1:2f:b9:de:8b:f5:
         74:25:77:fd:bc:d9:c1:8c:80:5e:87:ab:24:b8:27:66:47:58:
         e2:f3:f4:b8:68:67:38:19:01:3a:a6:cd:92:0d:0b:1a:ff:e3:
         37:04:b8:9b:66:28:d3:02:b1:7f:71:ba:9f:0a:99:aa:ce:cf:
         a7:84:ee:9d:71:db:da:38:48:2f:05:6a:38:0f:8a:2e:3b:8c:
         8a:e1:84:66:06:8a:cd:27:15:94:d6:e4:c3:4a:a0:91:5c:d6:
         10:09:d2:30:a4:90:8e:e7:81:e6:f9:bf:16:6b:ff:fd:4e:2e:
         dd:1a:48:98:d6:9f:54:4d:4a:19:b2:84:bd:c0:35:51:3f:70:
         c9:fc:6d:10:d6:ff:3d:f1:ce:19:35:27:0d:e5:19:f2:ae:51:
         be:cf:fe:ad:07:2c:00:bb:d5:64:0d:60:e9:e0:77:38:7b:dd:
         7d:7c:0c:ae:71:27:31:ac:df:7e:da:62:f6:e5:98:0e:32:9f:
         d0:e1:22:25:a7:64:48:61:41:56:8c:b1:2b:b1:9e:fc:66:27:
         3f:9c:5a:8c:28:e3:5c:63:63:1c:89:0e:2a:da:89:3f:d4:3f:
         8e:96:11:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 08:39:36 2025 by rpki-client