Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/643919-d409-40e9-b0c2-75b8ae604e56/1/N410mOfZ4qG6FJEyNBap2V8OnZo.mft
File:                     N410mOfZ4qG6FJEyNBap2V8OnZo.mft (raw, json)
Hash identifier:          ejlhICIua0B+A/CWgiiE09OtnRjv9cIV4GzzI1uvrIw=
Subject key identifier:   B0:7D:DE:16:A2:31:31:A5:B4:92:AE:98:16:17:BD:40:76:9E:CC:EF
Authority key identifier: 37:8D:74:98:E7:D9:E2:A1:BA:14:91:32:34:16:A9:D9:5F:0E:9D:9A
Certificate issuer:       /CN=378d7498e7d9e2a1ba1491323416a9d95f0e9d9a
Certificate serial:       0197BA0F315BF99F7BECF7425BA253D6F889
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N410mOfZ4qG6FJEyNBap2V8OnZo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/643919-d409-40e9-b0c2-75b8ae604e56/1/N410mOfZ4qG6FJEyNBap2V8OnZo.mft
Manifest number:          04A2
Signing time:             Sun 29 Jun 2025 05:00:47 +0000
Manifest this update:     Sun 29 Jun 2025 05:00:47 +0000
Manifest next update:     Mon 30 Jun 2025 05:00:47 +0000
Files and hashes:         1: 4cnX-gGW3nsPAb8Fl0CswEVWDXs.roa (hash: 5jTEYtlwChciosPin8VgYR9ZyCkKoJIGpsFdXvwfX9E=)
                          2: N410mOfZ4qG6FJEyNBap2V8OnZo.crl (hash: 8hwXpIJj4I6LA2X0fxihOR7uF4dUvUGEtsi3jMVALZY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/643919-d409-40e9-b0c2-75b8ae604e56/1/N410mOfZ4qG6FJEyNBap2V8OnZo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/643919-d409-40e9-b0c2-75b8ae604e56/1/N410mOfZ4qG6FJEyNBap2V8OnZo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N410mOfZ4qG6FJEyNBap2V8OnZo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Jun 2025 00:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:ba:0f:31:5b:f9:9f:7b:ec:f7:42:5b:a2:53:d6:f8:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=378d7498e7d9e2a1ba1491323416a9d95f0e9d9a
        Validity
            Not Before: Jun 29 05:00:47 2025 GMT
            Not After : Jun 30 05:00:47 2025 GMT
        Subject: CN=b07dde16a23131a5b492ae981617bd40769eccef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:f9:aa:6b:2d:16:c5:69:e2:e1:34:fa:50:9e:
                    c8:ea:d2:ec:df:5d:7e:0b:2f:d8:f8:c4:e9:e3:be:
                    dc:31:e9:fe:ca:3d:e9:48:10:bc:96:ef:13:54:fc:
                    22:7e:69:6a:fb:ae:9d:c8:a9:1d:9d:68:b6:1f:ed:
                    29:d4:40:2e:ba:bb:14:6b:6d:fb:b7:ca:63:eb:db:
                    61:00:9e:25:20:ae:2b:d4:2f:43:ac:86:b8:13:73:
                    90:b9:be:ea:da:89:07:d7:2b:3f:3f:60:de:53:2f:
                    46:dd:30:cd:4d:43:67:5f:bc:ba:3f:a0:4d:83:ae:
                    5a:93:89:96:73:72:04:b9:f4:39:cb:9e:54:d7:96:
                    43:86:f9:17:de:bb:1e:da:1a:a4:22:cf:b3:56:53:
                    d5:76:ff:45:11:49:9e:da:04:8a:5c:bc:ac:0d:d0:
                    a2:b5:e0:87:9c:f8:f8:34:c1:fa:02:68:ab:5a:4c:
                    9a:61:11:67:66:c8:90:dc:19:63:de:be:34:45:d9:
                    3b:41:a3:ef:7c:61:14:a9:5f:34:e4:35:83:64:bb:
                    ab:90:57:8f:6d:75:f5:15:be:8f:06:52:4d:76:88:
                    e2:ac:19:38:17:db:cd:b4:f9:84:50:de:3d:90:ce:
                    bd:65:0a:4b:8b:cd:89:8b:23:93:84:fc:6f:37:69:
                    a5:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:7D:DE:16:A2:31:31:A5:B4:92:AE:98:16:17:BD:40:76:9E:CC:EF
            X509v3 Authority Key Identifier:
                keyid:37:8D:74:98:E7:D9:E2:A1:BA:14:91:32:34:16:A9:D9:5F:0E:9D:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N410mOfZ4qG6FJEyNBap2V8OnZo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/643919-d409-40e9-b0c2-75b8ae604e56/1/N410mOfZ4qG6FJEyNBap2V8OnZo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/643919-d409-40e9-b0c2-75b8ae604e56/1/N410mOfZ4qG6FJEyNBap2V8OnZo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:d5:44:72:11:ae:32:2e:79:73:51:25:07:3c:2e:5b:4b:8a:
         4e:b5:b1:16:d4:bb:3e:38:ba:72:41:fa:a8:58:49:5f:77:b1:
         24:5d:58:88:57:e7:8f:b1:4e:6c:86:51:b8:cc:5a:55:0c:a6:
         8c:48:ec:b8:e5:e5:fc:28:c6:15:4f:ed:44:88:f7:12:76:be:
         03:b8:fa:bf:d0:02:1f:71:35:0d:45:73:54:ea:ea:c8:f2:43:
         88:65:b3:62:72:df:5f:95:67:03:1e:9f:9b:de:c1:35:57:93:
         bb:d3:3e:1c:99:6d:b1:6c:86:53:9b:f3:c7:63:5b:b7:6d:70:
         04:95:1c:db:22:47:f7:14:67:d6:01:72:59:8b:d4:7a:11:ba:
         4d:e7:89:69:3d:98:5f:44:9f:f8:c7:05:33:0d:b9:0b:7c:d7:
         f8:96:97:71:a4:af:72:6b:2f:cd:d7:22:72:8f:99:67:db:1d:
         36:b6:d6:4d:1a:94:53:4c:ff:5f:47:89:55:79:86:70:53:66:
         c8:2c:e7:65:a6:1d:de:c5:bf:36:d8:47:4f:31:2d:bd:b4:01:
         22:b9:d0:dc:c5:0e:47:ec:42:e9:81:56:da:d3:4c:8a:4c:a5:
         f4:d8:ab:52:01:23:e1:39:d1:12:73:73:42:f4:99:f7:c8:f7:
         5d:60:38:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:21:20 2025 by rpki-client