Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/NhrfV8jct7_TTprs2D42NC7Do8k.mft
File:                     NhrfV8jct7_TTprs2D42NC7Do8k.mft (raw, json)
Hash identifier:          isTaePaA70ytyCvJGPM+zJOKYwgZJXtaLk61UJGw01Y=
Subject key identifier:   29:9E:1E:1D:5E:C5:1E:B2:35:AA:D7:44:1D:5E:FF:0F:A5:2B:30:09
Authority key identifier: 36:1A:DF:57:C8:DC:B7:BF:D3:4E:9A:EC:D8:3E:36:34:2E:C3:A3:C9
Certificate issuer:       /CN=361adf57c8dcb7bfd34e9aecd83e36342ec3a3c9
Certificate serial:       01969F76327378AF78634A286202A7DFA238
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NhrfV8jct7_TTprs2D42NC7Do8k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/NhrfV8jct7_TTprs2D42NC7Do8k.mft
Manifest number:          12E1
Signing time:             Mon 05 May 2025 08:00:45 +0000
Manifest this update:     Mon 05 May 2025 08:00:45 +0000
Manifest next update:     Tue 06 May 2025 08:00:45 +0000
Files and hashes:         1: 8GuN-54fOOWK-SbVRHbvHD1t258.roa (hash: +JAgmZYVHbTg/tn7L+SSKAVcpZBlqMe4rbmvvs3DmTY=)
                          2: KFmrVFMv5VvGN18H4jdGIeWGvn8.roa (hash: /z+1/Ei//uOKicmtTi2XHrdGdq2SuXHHljqI7g0rhfE=)
                          3: NhrfV8jct7_TTprs2D42NC7Do8k.crl (hash: byyWh7OyCcRFCmHoPwcXHWPnVYghpFtpcBUBmsS4dHY=)
                          4: gaApv-P3VWnlKNagOLOw5elCXUg.roa (hash: uJOMrg9lvM87wMjmTs9ZCZY0pZU1l+jJJKNSBI4+HgI=)
                          5: mldZ02SgByZkxb9-hN-tKmR0o0s.roa (hash: DrkW1wHvYpTjqDlBZkGq/sAaUPB7borOxMsYKMVFock=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/NhrfV8jct7_TTprs2D42NC7Do8k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/NhrfV8jct7_TTprs2D42NC7Do8k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NhrfV8jct7_TTprs2D42NC7Do8k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 08:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9f:76:32:73:78:af:78:63:4a:28:62:02:a7:df:a2:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=361adf57c8dcb7bfd34e9aecd83e36342ec3a3c9
        Validity
            Not Before: May  5 08:00:45 2025 GMT
            Not After : May  6 08:00:45 2025 GMT
        Subject: CN=299e1e1d5ec51eb235aad7441d5eff0fa52b3009
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:6d:84:c6:a3:cf:40:2c:46:a2:2f:0a:f1:28:
                    7d:23:d7:bc:7c:59:0b:4e:24:66:09:d6:f2:8c:e3:
                    34:96:7c:9b:74:d9:f2:67:dd:d1:a5:72:c3:0b:16:
                    6b:56:b1:4d:87:c6:bf:cd:4b:35:44:fe:bb:38:58:
                    c1:86:ee:6a:01:a6:d9:e3:6d:17:8f:6f:d3:1e:f6:
                    1e:6d:8d:27:bd:3a:45:23:53:35:ea:ad:7e:92:8e:
                    7f:94:1c:d6:c0:85:46:f4:1d:b9:7c:63:a6:41:aa:
                    55:d3:91:3a:8e:b0:ef:39:9a:64:a5:ae:85:bc:e2:
                    c8:07:80:7b:43:70:45:19:92:10:c1:dd:c9:77:96:
                    b2:34:34:b6:4d:9b:3a:e0:5e:38:2e:dd:e9:65:90:
                    af:ff:8f:6b:a1:37:be:d0:bc:88:46:75:56:20:26:
                    5b:2c:62:c5:e0:0d:ea:de:9f:51:f6:cb:03:4c:bf:
                    0e:a3:cb:9f:05:e2:9d:a6:96:bc:e2:58:e1:37:bc:
                    da:ce:4c:f2:0f:32:d2:f3:71:a0:fe:60:be:a0:01:
                    43:2f:83:8d:63:87:67:8b:92:0b:48:71:b3:b6:63:
                    10:5d:1d:01:38:fb:7e:d2:3e:dd:2d:f8:6b:f6:03:
                    76:de:77:dc:eb:e7:0c:d9:40:3c:67:05:38:7d:d6:
                    fe:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:9E:1E:1D:5E:C5:1E:B2:35:AA:D7:44:1D:5E:FF:0F:A5:2B:30:09
            X509v3 Authority Key Identifier:
                keyid:36:1A:DF:57:C8:DC:B7:BF:D3:4E:9A:EC:D8:3E:36:34:2E:C3:A3:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhrfV8jct7_TTprs2D42NC7Do8k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/NhrfV8jct7_TTprs2D42NC7Do8k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/NhrfV8jct7_TTprs2D42NC7Do8k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:91:d6:a2:9f:7b:cf:2a:77:98:c4:4c:c4:3c:ed:85:8c:6a:
         a0:c0:bc:72:25:6e:f0:cd:44:f6:79:32:88:5e:68:a5:40:74:
         4b:27:ff:c0:76:09:2e:01:ae:57:ba:d4:87:47:e3:90:0f:64:
         7c:03:e3:13:93:ce:c4:2d:a7:d5:b4:89:4b:35:97:7b:4b:42:
         f4:2c:0f:f7:7a:2d:fa:b4:48:2e:cd:0b:be:d7:e5:9b:6b:bb:
         cc:3f:44:46:8d:6c:96:78:61:41:80:19:35:7c:08:d3:8f:03:
         1c:2b:13:6a:ac:ce:65:43:82:ea:92:5b:c8:16:cd:05:2b:c5:
         d0:45:7b:93:1b:4d:c8:74:56:f9:dc:20:f1:a6:81:c6:99:42:
         18:0f:40:9c:f1:d9:c8:29:ae:a6:de:40:ba:0a:f5:55:05:10:
         f3:01:78:59:19:02:d3:d8:d5:4b:5d:aa:13:6d:9e:a7:a9:75:
         6c:09:db:b6:f7:23:f2:ea:51:96:db:43:73:54:e7:b7:a7:ee:
         e3:47:df:24:3f:bf:aa:e5:80:39:75:87:bc:57:73:13:4f:12:
         14:2e:7b:29:76:f3:93:91:7e:57:c1:d5:c8:a1:a0:c9:e8:c7:
         ee:51:c4:e1:c9:de:1d:bd:1b:73:9c:8c:6c:1b:79:81:b0:6f:
         10:61:9b:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 16:31:59 2025 by rpki-client