Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/8ea34c-af87-4721-9e69-2af3b76c18c9/1/ntj8_zGTrFO7SwfEjT3SnvWI640.mft
File:                     ntj8_zGTrFO7SwfEjT3SnvWI640.mft (raw, json)
Hash identifier:          50qndPr7tHIVpMTJ8EF+IPRdONbfoyqOXuBQsaWYlxg=
Subject key identifier:   4C:FC:D7:23:3D:04:06:18:CC:0C:E2:1D:93:D6:2A:DE:C7:F9:9D:03
Authority key identifier: 9E:D8:FC:FF:31:93:AC:53:BB:4B:07:C4:8D:3D:D2:9E:F5:88:EB:8D
Certificate issuer:       /CN=9ed8fcff3193ac53bb4b07c48d3dd29ef588eb8d
Certificate serial:       0197B6A09A0B88FA0B7EEE3CC5A77CF7B8D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ntj8_zGTrFO7SwfEjT3SnvWI640.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/8ea34c-af87-4721-9e69-2af3b76c18c9/1/ntj8_zGTrFO7SwfEjT3SnvWI640.mft
Manifest number:          15B5
Signing time:             Sat 28 Jun 2025 13:01:07 +0000
Manifest this update:     Sat 28 Jun 2025 13:01:07 +0000
Manifest next update:     Sun 29 Jun 2025 13:01:07 +0000
Files and hashes:         1: _4jzVkw7OmZ9lJwsv_vbnXpkkpE.roa (hash: 2z2Ynum4MWOgBN264LV/zt9+ZOq8rZ9Pv93EhuMN5M8=)
                          2: ntj8_zGTrFO7SwfEjT3SnvWI640.crl (hash: RQnV39VGuHGRWoUt8bsqTAtCQ5EETGAiO8mZfugs+5M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/8ea34c-af87-4721-9e69-2af3b76c18c9/1/ntj8_zGTrFO7SwfEjT3SnvWI640.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/8ea34c-af87-4721-9e69-2af3b76c18c9/1/ntj8_zGTrFO7SwfEjT3SnvWI640.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ntj8_zGTrFO7SwfEjT3SnvWI640.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a0:9a:0b:88:fa:0b:7e:ee:3c:c5:a7:7c:f7:b8:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ed8fcff3193ac53bb4b07c48d3dd29ef588eb8d
        Validity
            Not Before: Jun 28 13:01:07 2025 GMT
            Not After : Jun 29 13:01:07 2025 GMT
        Subject: CN=4cfcd7233d040618cc0ce21d93d62adec7f99d03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:9f:0e:5a:cf:51:d3:4d:ee:1d:b4:5b:cd:ca:
                    03:f1:45:6f:38:ac:9c:a7:2f:14:8b:a3:52:1c:5c:
                    05:22:4c:45:06:b7:20:ac:5d:08:ae:54:8a:71:1b:
                    53:a3:db:9a:dd:0e:ac:96:1f:42:35:b2:88:4d:be:
                    b4:36:32:12:79:be:bc:54:7c:ec:30:81:c2:fe:59:
                    37:e1:c0:4e:c1:4d:72:51:73:03:c9:0e:64:22:aa:
                    73:52:17:06:27:8f:21:af:ff:75:6e:47:0a:d1:23:
                    3b:ce:48:70:d6:9b:69:60:99:6c:83:3b:71:c1:7c:
                    39:cc:4e:b6:dc:cf:d4:bd:90:e5:4c:b3:79:0a:63:
                    45:89:a5:d1:c8:15:85:03:a7:7c:1c:c6:bb:87:d8:
                    d1:10:20:c2:72:4f:7a:39:ed:1b:65:19:ba:17:7c:
                    80:08:b8:0a:58:15:55:86:b4:83:ed:15:c5:57:84:
                    90:65:e3:e0:11:7b:21:5a:0d:f3:82:49:82:41:ec:
                    53:64:84:73:d8:e2:55:fc:05:75:ed:81:70:2c:aa:
                    5e:4a:ee:1e:86:97:fc:ed:e0:2a:80:16:36:27:d7:
                    29:4f:35:4a:07:a0:0f:62:90:eb:37:2a:f6:05:f6:
                    f8:95:08:7e:90:19:f7:e9:79:8a:13:1a:cf:f7:b5:
                    e0:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:FC:D7:23:3D:04:06:18:CC:0C:E2:1D:93:D6:2A:DE:C7:F9:9D:03
            X509v3 Authority Key Identifier:
                keyid:9E:D8:FC:FF:31:93:AC:53:BB:4B:07:C4:8D:3D:D2:9E:F5:88:EB:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ntj8_zGTrFO7SwfEjT3SnvWI640.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/8ea34c-af87-4721-9e69-2af3b76c18c9/1/ntj8_zGTrFO7SwfEjT3SnvWI640.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/8ea34c-af87-4721-9e69-2af3b76c18c9/1/ntj8_zGTrFO7SwfEjT3SnvWI640.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:93:33:d0:44:de:c8:2d:8b:e6:21:29:22:0c:c3:82:8e:a6:
         83:e0:32:9e:94:63:cd:a9:cc:0f:6b:1e:9c:21:a2:db:5c:b4:
         6c:fc:f1:2d:2d:52:db:92:69:71:81:99:2a:0f:85:ff:76:8b:
         60:ce:d1:b3:05:4e:3b:bc:d6:af:a2:0a:3e:6c:dd:2d:e4:b8:
         67:4d:c0:8c:1a:c4:db:c7:9d:96:86:15:f8:9c:74:d1:02:93:
         7b:57:e5:3a:45:f2:b5:78:98:56:d5:85:b8:38:7d:a9:9c:5e:
         3b:73:23:8b:40:68:70:02:e3:01:0d:31:56:c5:ef:2b:b9:e2:
         11:a5:e8:33:d5:1d:43:d2:45:ab:65:90:47:b4:51:b1:13:51:
         5a:ca:a0:25:cc:d8:d0:55:af:a1:30:fe:c5:aa:16:b4:54:ef:
         cc:e7:ce:1c:6a:15:56:da:c9:0a:ad:4f:b6:cc:00:6d:e0:e2:
         06:51:ef:69:a5:d7:2b:70:9c:02:5d:74:fb:b6:0a:77:f6:59:
         75:1a:49:3e:8f:9a:63:9c:e2:51:cc:14:a1:31:6d:71:04:8a:
         fe:bb:ac:9e:28:a0:ba:d0:80:b0:7a:8c:70:b3:1d:ce:51:5f:
         99:2e:fd:56:e9:2a:99:14:21:39:61:eb:19:d3:3b:fd:cd:03:
         fc:18:f1:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:23:27 2025 by rpki-client