Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/82af7c-8606-4f9b-a052-4f3bea9fb95c/1/NJYux3ZGK3bmOugVW7J7nYx-f94.mft
File:                     NJYux3ZGK3bmOugVW7J7nYx-f94.mft (raw, json)
Hash identifier:          Ihx665j44H9R4ukEwMol5PLTzfIJFyqqXbWWOGMYD4c=
Subject key identifier:   B8:CD:5A:39:E2:AF:75:B3:3C:87:8A:7E:B3:90:D2:15:E4:19:F9:BA
Authority key identifier: 34:96:2E:C7:76:46:2B:76:E6:3A:E8:15:5B:B2:7B:9D:8C:7E:7F:DE
Certificate issuer:       /CN=34962ec776462b76e63ae8155bb27b9d8c7e7fde
Certificate serial:       0196C75F3A31DC437EBCE1F97FE226A3947B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NJYux3ZGK3bmOugVW7J7nYx-f94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/82af7c-8606-4f9b-a052-4f3bea9fb95c/1/NJYux3ZGK3bmOugVW7J7nYx-f94.mft
Manifest number:          0EA8
Signing time:             Tue 13 May 2025 02:00:28 +0000
Manifest this update:     Tue 13 May 2025 02:00:28 +0000
Manifest next update:     Wed 14 May 2025 02:00:28 +0000
Files and hashes:         1: NJYux3ZGK3bmOugVW7J7nYx-f94.crl (hash: 0vnrhoTSJRjNJcai6t2bMRxyGV2FxPVP5ezanIpPqyk=)
                          2: raSmxoHnzmzGBzTkG0MLkl3VZgs.roa (hash: lXV0TrwdE+JtNBRnmGgOqwwu3Hr9XSo7ebZyvtagFuc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/82af7c-8606-4f9b-a052-4f3bea9fb95c/1/NJYux3ZGK3bmOugVW7J7nYx-f94.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/82af7c-8606-4f9b-a052-4f3bea9fb95c/1/NJYux3ZGK3bmOugVW7J7nYx-f94.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NJYux3ZGK3bmOugVW7J7nYx-f94.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c7:5f:3a:31:dc:43:7e:bc:e1:f9:7f:e2:26:a3:94:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34962ec776462b76e63ae8155bb27b9d8c7e7fde
        Validity
            Not Before: May 13 02:00:28 2025 GMT
            Not After : May 14 02:00:28 2025 GMT
        Subject: CN=b8cd5a39e2af75b33c878a7eb390d215e419f9ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:2b:58:8e:f5:e6:eb:4a:f8:23:16:5b:f3:55:
                    f7:a4:0f:a9:e0:2d:fa:2a:c7:b3:8d:08:04:7a:be:
                    de:63:32:9a:fc:94:00:77:78:6a:c5:57:56:44:95:
                    c0:80:dd:56:fb:3b:fd:53:0f:11:b7:39:cd:b2:79:
                    a0:bf:20:86:85:28:14:3d:fd:af:80:c2:4f:60:74:
                    b5:7a:02:75:a6:be:da:55:20:5b:01:86:8a:57:69:
                    9d:ab:63:4c:38:00:41:a0:59:e1:da:f1:15:71:e7:
                    ff:f4:60:0b:d7:81:0e:0f:b1:4d:c4:68:68:3f:ca:
                    de:3b:e9:68:c0:7e:d2:36:3c:de:ba:b0:da:ab:2f:
                    b2:95:a0:b7:33:19:5c:c8:6c:68:07:95:17:66:00:
                    55:7b:b5:6d:e5:49:d5:08:5b:6c:9f:4b:00:e0:9c:
                    7c:fd:bc:96:71:bb:08:2c:ff:05:eb:82:4a:c0:50:
                    15:06:40:f2:ae:96:b4:a5:3e:38:21:68:b3:58:c0:
                    7a:b0:70:ea:47:aa:4c:64:06:7f:a7:a9:cf:28:85:
                    f7:67:54:de:e0:fd:13:a6:f2:91:df:9c:b4:41:54:
                    0e:df:20:ce:87:5a:2e:83:ba:65:ce:f1:7a:d1:6f:
                    a5:22:48:42:21:48:4e:62:8b:8b:cf:fa:93:78:5e:
                    df:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:CD:5A:39:E2:AF:75:B3:3C:87:8A:7E:B3:90:D2:15:E4:19:F9:BA
            X509v3 Authority Key Identifier:
                keyid:34:96:2E:C7:76:46:2B:76:E6:3A:E8:15:5B:B2:7B:9D:8C:7E:7F:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJYux3ZGK3bmOugVW7J7nYx-f94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/82af7c-8606-4f9b-a052-4f3bea9fb95c/1/NJYux3ZGK3bmOugVW7J7nYx-f94.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/82af7c-8606-4f9b-a052-4f3bea9fb95c/1/NJYux3ZGK3bmOugVW7J7nYx-f94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:82:31:fe:76:15:7c:52:e0:81:03:38:38:f0:ae:eb:a6:74:
         48:be:5f:62:2d:14:06:07:5d:f4:ef:89:12:1f:a3:31:27:9b:
         ec:83:fe:e1:82:f1:22:dd:59:dd:d5:89:d9:1a:1c:b3:a3:80:
         81:f6:86:b8:c4:b5:92:0f:5b:4c:08:71:32:44:66:3d:6b:f6:
         a2:d4:89:88:cd:41:f6:8c:b9:87:38:a3:d3:2b:89:28:b1:28:
         e1:3d:8c:ff:f5:30:33:e5:36:ad:b4:30:1b:bb:91:8f:f4:9f:
         7d:76:19:fc:06:73:6b:94:55:7a:fd:bc:86:09:93:bb:86:0b:
         2d:0a:fa:c8:1a:2e:03:9a:32:f6:02:23:3a:5d:9c:51:38:53:
         e0:7c:47:92:d5:89:f0:5d:a3:45:48:f0:52:e3:12:82:58:88:
         45:4d:a2:53:75:fa:54:f4:41:db:a4:be:47:84:45:39:88:b0:
         07:b7:c7:a0:bc:90:41:f0:fb:ab:af:fc:cc:f5:7c:22:db:69:
         b6:e4:54:be:5a:40:28:93:ec:36:fc:bd:4a:ae:65:27:22:d0:
         e2:65:e0:ab:80:3b:41:45:16:b4:8a:98:03:c0:5d:f4:b9:c8:
         ba:52:d8:a9:df:b0:24:ab:68:ac:ee:b4:c7:42:d1:cb:69:57:
         ca:28:e6:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbHXzox3EN+vOH5f+Imo5R7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0OTYyZWM3NzY0NjJiNzZlNjNhZTgxNTViYjI3YjlkOGM3
ZTdmZGUwHhcNMjUwNTEzMDIwMDI4WhcNMjUwNTE0MDIwMDI4WjAzMTEwLwYDVQQD
EyhiOGNkNWEzOWUyYWY3NWIzM2M4NzhhN2ViMzkwZDIxNWU0MTlmOWJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0StYjvXm60r4IxZb81X3pA+p4C36
KsezjQgEer7eYzKa/JQAd3hqxVdWRJXAgN1W+zv9Uw8RtznNsnmgvyCGhSgUPf2v
gMJPYHS1egJ1pr7aVSBbAYaKV2mdq2NMOABBoFnh2vEVcef/9GAL14EOD7FNxGho
P8reO+lowH7SNjzeurDaqy+ylaC3MxlcyGxoB5UXZgBVe7Vt5UnVCFtsn0sA4Jx8
/byWcbsILP8F64JKwFAVBkDyrpa0pT44IWizWMB6sHDqR6pMZAZ/p6nPKIX3Z1Te
4P0TpvKR35y0QVQO3yDOh1oug7plzvF60W+lIkhCIUhOYouLz/qTeF7fLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLjNWjnir3WzPIeKfrOQ0hXkGfm6MB8GA1UdIwQY
MBaAFDSWLsd2Rit25jroFVuye52Mfn/eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkpZdXgzWkdLM2JtT3VnVlc3SjduWXgtZjk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC84MmFmN2MtODYwNi00ZjliLWEwNTIt
NGYzYmVhOWZiOTVjLzEvTkpZdXgzWkdLM2JtT3VnVlc3SjduWXgtZjk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC84MmFmN2MtODYwNi00ZjliLWEwNTItNGYzYmVhOWZiOTVj
LzEvTkpZdXgzWkdLM2JtT3VnVlc3SjduWXgtZjk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANYIx/nYV
fFLggQM4OPCu66Z0SL5fYi0UBgdd9O+JEh+jMSeb7IP+4YLxIt1Z3dWJ2Rocs6OA
gfaGuMS1kg9bTAhxMkRmPWv2otSJiM1B9oy5hzij0yuJKLEo4T2M//UwM+U2rbQw
G7uRj/SffXYZ/AZza5RVev28hgmTu4YLLQr6yBouA5oy9gIjOl2cUThT4HxHktWJ
8F2jRUjwUuMSgliIRU2iU3X6VPRB26S+R4RFOYiwB7fHoLyQQfD7q6/8zPV8Ittp
tuRUvlpAKJPsNvy9Sq5lJyLQ4mXgq4A7QUUWtIqYA8Bd9LnIulLYqd+wJKtorO60
x0LRy2lXyijmqQ==
-----END CERTIFICATE-----
Generated at Tue May 13 06:21:34 2025 by rpki-client