Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/3fc4e0-eb5f-42d3-98e1-be00a65103ad/1/N0mXVDn-T_qTECYqy91fcjzuIiM.mft
File:                     N0mXVDn-T_qTECYqy91fcjzuIiM.mft (raw, json)
Hash identifier:          5RD6ftUFDS7faAYGPIGBtM9RNW7s8rtOYfwdfGYhRsU=
Subject key identifier:   74:CD:AE:FD:DA:E3:75:49:79:7B:03:DD:F0:50:AC:B0:FB:CD:0D:DF
Authority key identifier: 37:49:97:54:39:FE:4F:FA:93:10:26:2A:CB:DD:5F:72:3C:EE:22:23
Certificate issuer:       /CN=3749975439fe4ffa9310262acbdd5f723cee2223
Certificate serial:       0197B6D76F87F975E3C2360A3F0FB58D49E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N0mXVDn-T_qTECYqy91fcjzuIiM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/3fc4e0-eb5f-42d3-98e1-be00a65103ad/1/N0mXVDn-T_qTECYqy91fcjzuIiM.mft
Manifest number:          15AA
Signing time:             Sat 28 Jun 2025 14:01:01 +0000
Manifest this update:     Sat 28 Jun 2025 14:01:01 +0000
Manifest next update:     Sun 29 Jun 2025 14:01:01 +0000
Files and hashes:         1: N0mXVDn-T_qTECYqy91fcjzuIiM.crl (hash: rIWimTM9AM+cBv2cWmhCMNYKL5PRe0ESXg2HoMu5Ir4=)
                          2: kzwjfq1uCpgiTAUnk5qhqKOqoaU.roa (hash: MJDFWuspOJe8rc6Woxt8ScoRrsfkLnrA6WpK9920n7A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/3fc4e0-eb5f-42d3-98e1-be00a65103ad/1/N0mXVDn-T_qTECYqy91fcjzuIiM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/3fc4e0-eb5f-42d3-98e1-be00a65103ad/1/N0mXVDn-T_qTECYqy91fcjzuIiM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N0mXVDn-T_qTECYqy91fcjzuIiM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 14:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:d7:6f:87:f9:75:e3:c2:36:0a:3f:0f:b5:8d:49:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3749975439fe4ffa9310262acbdd5f723cee2223
        Validity
            Not Before: Jun 28 14:01:01 2025 GMT
            Not After : Jun 29 14:01:01 2025 GMT
        Subject: CN=74cdaefddae37549797b03ddf050acb0fbcd0ddf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:d7:df:c6:5f:b8:e0:a6:47:17:6c:ca:e8:96:
                    00:98:81:10:24:71:68:97:ee:cf:2b:aa:bb:fc:fa:
                    19:86:0c:f2:94:ca:80:e0:3d:d0:3b:c4:90:ae:36:
                    69:32:13:7a:4a:ff:1d:71:bc:a8:48:c8:3d:0c:64:
                    b8:f4:10:9c:89:a1:77:a1:fa:41:48:5d:c9:33:3e:
                    85:74:8d:be:a5:a2:e7:48:74:77:5a:4c:6f:58:b5:
                    2d:d3:84:ec:03:82:fe:e7:83:d0:25:7f:db:a0:5c:
                    5d:90:c3:53:13:9c:cb:21:0c:20:d3:20:dd:d1:da:
                    be:31:90:d1:fd:45:d7:2c:c8:5d:b6:b6:ad:35:1b:
                    10:27:fa:ad:54:c5:7d:e2:a9:2a:02:8f:1b:ee:3b:
                    16:f7:b8:24:d3:e5:c3:e1:8a:16:82:54:8a:f3:2f:
                    ed:22:ce:4f:ac:cb:0b:f0:52:aa:20:11:f6:4e:a7:
                    bd:5e:13:3b:05:92:b0:61:81:32:cf:e7:0d:86:0a:
                    82:2a:8b:88:32:24:32:f0:62:23:a1:74:90:25:de:
                    51:1c:55:6e:24:ea:8a:82:12:97:7f:dc:98:4a:b8:
                    7d:13:79:f7:d7:f4:09:9d:94:1f:4b:9c:b1:77:42:
                    f1:ff:f9:d0:a1:43:0b:7d:9a:74:04:b7:a0:9f:6b:
                    c3:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:CD:AE:FD:DA:E3:75:49:79:7B:03:DD:F0:50:AC:B0:FB:CD:0D:DF
            X509v3 Authority Key Identifier:
                keyid:37:49:97:54:39:FE:4F:FA:93:10:26:2A:CB:DD:5F:72:3C:EE:22:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0mXVDn-T_qTECYqy91fcjzuIiM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/3fc4e0-eb5f-42d3-98e1-be00a65103ad/1/N0mXVDn-T_qTECYqy91fcjzuIiM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/3fc4e0-eb5f-42d3-98e1-be00a65103ad/1/N0mXVDn-T_qTECYqy91fcjzuIiM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:a0:f9:ce:b7:ee:41:6e:92:bd:01:ff:33:0c:cd:89:47:43:
         f9:b6:88:17:75:d3:09:d4:a7:36:6c:24:4b:de:23:48:ef:35:
         2a:e1:b4:3f:31:ea:81:dc:7a:9f:cd:93:35:38:81:d1:25:3d:
         3b:50:41:d4:ac:13:91:cc:f2:76:e1:c0:52:ea:b4:98:4b:64:
         33:15:3b:a5:27:ac:6f:a7:69:03:75:b6:2e:6a:de:39:07:96:
         4f:f3:a0:89:20:6e:67:e3:bb:77:5e:d1:af:d3:5c:af:cd:af:
         d6:cc:7e:0b:ff:84:07:23:92:64:5e:eb:d6:82:4d:6e:7a:0d:
         ac:7f:6e:f8:ab:b3:f0:45:bb:ee:8a:a0:09:e3:a5:18:11:c0:
         61:05:23:8f:94:05:7c:8e:e3:3f:09:2c:3f:ac:e6:5e:96:f5:
         d2:71:6a:7b:89:cc:47:6f:a7:8a:50:d1:aa:08:23:23:2d:99:
         42:06:2c:91:30:dc:bc:62:f3:ae:5e:bc:25:3e:96:29:f3:2d:
         f9:92:cc:38:47:45:0e:34:bb:48:27:65:b7:56:6b:19:85:cf:
         02:82:96:81:59:67:15:02:02:81:bd:c2:55:31:c9:99:e2:f4:
         14:82:22:3e:e4:42:83:51:75:72:e2:41:31:85:67:5d:dd:ac:
         f1:57:49:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:46:32 2025 by rpki-client