Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/e0059f-b910-4bb7-9341-7750972265aa/1/N_9VuVdDqRW3k9ct5xrJbOYZipc.mft
File:                     N_9VuVdDqRW3k9ct5xrJbOYZipc.mft (raw, json)
Hash identifier:          1b/ntprNcQuW06tV082Y8VOuIBpD8OqYvqDvseVsty0=
Subject key identifier:   E7:F4:04:BC:2C:26:C3:0C:87:1A:7C:6A:DC:8E:5D:78:81:38:8B:DE
Authority key identifier: 37:FF:55:B9:57:43:A9:15:B7:93:D7:2D:E7:1A:C9:6C:E6:19:8A:97
Certificate issuer:       /CN=37ff55b95743a915b793d72de71ac96ce6198a97
Certificate serial:       0196BB241FDD3844624D2F191CBE49030DF4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N_9VuVdDqRW3k9ct5xrJbOYZipc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/e0059f-b910-4bb7-9341-7750972265aa/1/N_9VuVdDqRW3k9ct5xrJbOYZipc.mft
Manifest number:          14C4
Signing time:             Sat 10 May 2025 17:00:28 +0000
Manifest this update:     Sat 10 May 2025 17:00:28 +0000
Manifest next update:     Sun 11 May 2025 17:00:28 +0000
Files and hashes:         1: N_9VuVdDqRW3k9ct5xrJbOYZipc.crl (hash: L7UBlPxFuwv6V63NZpGxyymm5hOM8Hn+EQ1Ye83ZX7k=)
                          2: UOgjlDZ-hlIE51uRVoyR7KP99NE.roa (hash: 1AY5DsB6GoL7krCLNb7v1DdRQDuAlUbr226PuiYccH4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/e0059f-b910-4bb7-9341-7750972265aa/1/N_9VuVdDqRW3k9ct5xrJbOYZipc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/e0059f-b910-4bb7-9341-7750972265aa/1/N_9VuVdDqRW3k9ct5xrJbOYZipc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N_9VuVdDqRW3k9ct5xrJbOYZipc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 17:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bb:24:1f:dd:38:44:62:4d:2f:19:1c:be:49:03:0d:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37ff55b95743a915b793d72de71ac96ce6198a97
        Validity
            Not Before: May 10 17:00:28 2025 GMT
            Not After : May 11 17:00:28 2025 GMT
        Subject: CN=e7f404bc2c26c30c871a7c6adc8e5d7881388bde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:c6:0d:eb:d4:7c:87:a2:80:11:c3:c3:45:91:
                    03:70:0e:f7:a8:53:c1:26:94:e1:4e:a1:70:4a:4e:
                    88:47:10:c7:d5:04:0f:d0:2a:79:1d:8c:20:09:0b:
                    41:35:79:39:bf:82:db:4d:be:03:6d:35:e8:72:b0:
                    02:49:7e:ba:6f:89:a9:4f:79:29:04:96:87:3b:e3:
                    82:32:07:bf:87:98:d8:95:8d:ab:31:25:ea:10:5e:
                    44:a1:9c:fc:c9:cc:95:f3:13:b6:dd:5f:77:41:7f:
                    07:32:00:24:b1:79:b2:a2:40:46:f4:9d:70:80:87:
                    18:58:0c:51:ab:64:93:e6:e0:a5:f9:6a:52:69:03:
                    a8:b7:c0:d0:28:c4:c2:04:cd:8c:a0:25:0c:81:b9:
                    d7:a7:7a:74:49:cc:36:08:44:0b:03:67:e3:0a:9e:
                    c3:ba:d4:a9:cb:92:cb:67:85:89:dc:7e:16:ce:94:
                    3d:5c:47:06:77:5a:7d:f7:4a:8b:d9:cc:99:d6:48:
                    7c:2b:80:23:89:56:72:e7:e9:0e:8c:94:5b:3a:a8:
                    28:ba:8d:2c:73:36:1e:71:69:5e:ce:b9:50:90:4a:
                    b0:2a:e7:73:ca:88:98:fb:66:e6:7d:9a:24:88:b0:
                    54:64:0f:b9:84:11:ff:08:02:20:f0:b8:7b:fc:c7:
                    f5:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:F4:04:BC:2C:26:C3:0C:87:1A:7C:6A:DC:8E:5D:78:81:38:8B:DE
            X509v3 Authority Key Identifier:
                keyid:37:FF:55:B9:57:43:A9:15:B7:93:D7:2D:E7:1A:C9:6C:E6:19:8A:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N_9VuVdDqRW3k9ct5xrJbOYZipc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/e0059f-b910-4bb7-9341-7750972265aa/1/N_9VuVdDqRW3k9ct5xrJbOYZipc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/e0059f-b910-4bb7-9341-7750972265aa/1/N_9VuVdDqRW3k9ct5xrJbOYZipc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:ba:62:93:e2:01:46:7c:9c:9f:1d:aa:6f:51:41:1c:1d:b3:
         c6:5e:59:2e:33:dc:58:00:fd:7a:bf:0d:b9:2c:d9:32:3d:e8:
         ff:ec:60:16:0f:64:e7:d8:cc:0e:b8:c9:14:52:3f:cf:2b:54:
         8d:33:cb:90:a0:24:1f:14:b5:f3:6a:fa:d2:ef:1f:8f:8a:1f:
         07:94:5b:8d:1e:df:4f:bb:e4:3d:f3:63:61:0b:14:cc:3f:0d:
         90:53:d7:5c:e2:eb:d4:9b:e0:6f:8a:c5:32:28:79:00:6f:3a:
         1e:b1:81:ab:08:e3:9b:e1:0f:86:61:f9:2a:2f:c7:a2:f1:ea:
         c5:80:95:15:d2:70:00:ef:23:32:a7:db:99:86:8b:f2:b8:53:
         2e:5f:29:4f:75:e2:c3:0d:5a:ea:8d:82:25:34:c9:24:cd:45:
         00:9a:64:98:12:f8:06:68:29:5e:6f:cc:72:bf:2f:99:4d:de:
         3c:8b:35:08:69:88:d1:e3:d2:16:e6:8a:54:e9:b7:41:1a:70:
         4e:d1:cf:6a:e8:a7:a3:e5:e4:85:32:03:95:2a:75:96:3f:65:
         20:be:eb:f6:2c:7a:fa:5c:ec:1e:f1:7c:79:54:64:68:db:10:
         1c:f5:01:9a:2f:b4:33:4e:6b:24:7e:dd:dc:ee:13:63:de:0a:
         80:8d:ff:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa7JB/dOERiTS8ZHL5JAw30MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3ZmY1NWI5NTc0M2E5MTViNzkzZDcyZGU3MWFjOTZjZTYx
OThhOTcwHhcNMjUwNTEwMTcwMDI4WhcNMjUwNTExMTcwMDI4WjAzMTEwLwYDVQQD
EyhlN2Y0MDRiYzJjMjZjMzBjODcxYTdjNmFkYzhlNWQ3ODgxMzg4YmRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMYN69R8h6KAEcPDRZEDcA73qFPB
JpThTqFwSk6IRxDH1QQP0Cp5HYwgCQtBNXk5v4LbTb4DbTXocrACSX66b4mpT3kp
BJaHO+OCMge/h5jYlY2rMSXqEF5EoZz8ycyV8xO23V93QX8HMgAksXmyokBG9J1w
gIcYWAxRq2ST5uCl+WpSaQOot8DQKMTCBM2MoCUMgbnXp3p0Scw2CEQLA2fjCp7D
utSpy5LLZ4WJ3H4WzpQ9XEcGd1p990qL2cyZ1kh8K4AjiVZy5+kOjJRbOqgouo0s
czYecWlezrlQkEqwKudzyoiY+2bmfZokiLBUZA+5hBH/CAIg8Lh7/Mf1ewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOf0BLwsJsMMhxp8atyOXXiBOIveMB8GA1UdIwQY
MBaAFDf/VblXQ6kVt5PXLecayWzmGYqXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTl85VnVWZERxUlczazljdDV4ckpiT1laaXBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9lMDA1OWYtYjkxMC00YmI3LTkzNDEt
Nzc1MDk3MjI2NWFhLzEvTl85VnVWZERxUlczazljdDV4ckpiT1laaXBjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi9lMDA1OWYtYjkxMC00YmI3LTkzNDEtNzc1MDk3MjI2NWFh
LzEvTl85VnVWZERxUlczazljdDV4ckpiT1laaXBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu7pik+IB
Rnycnx2qb1FBHB2zxl5ZLjPcWAD9er8NuSzZMj3o/+xgFg9k59jMDrjJFFI/zytU
jTPLkKAkHxS182r60u8fj4ofB5RbjR7fT7vkPfNjYQsUzD8NkFPXXOLr1Jvgb4rF
Mih5AG86HrGBqwjjm+EPhmH5Ki/HovHqxYCVFdJwAO8jMqfbmYaL8rhTLl8pT3Xi
ww1a6o2CJTTJJM1FAJpkmBL4BmgpXm/Mcr8vmU3ePIs1CGmI0ePSFuaKVOm3QRpw
TtHPauino+XkhTIDlSp1lj9lIL7r9ix6+lzsHvF8eVRkaNsQHPUBmi+0M05rJH7d
3O4TY94KgI3/Dg==
-----END CERTIFICATE-----
Generated at Sun May 11 01:58:04 2025 by rpki-client