Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft
File:                     NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft (raw, json)
Hash identifier:          Z2BGnVXOVu8gH/se281TntJBVgTJP0YytEKYkRz71N4=
Subject key identifier:   69:99:E8:BF:30:EA:66:A5:9B:5A:3A:90:50:24:F0:9B:9A:22:AC:75
Authority key identifier: 36:22:FC:2F:8A:D8:B0:08:35:7D:BE:6F:01:95:96:0C:9D:E6:1B:D5
Certificate issuer:       /CN=3622fc2f8ad8b008357dbe6f0195960c9de61bd5
Certificate serial:       0196BCA4F6E28B65123A42B069B2E644D80A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft
Manifest number:          09D8
Signing time:             Sun 11 May 2025 00:00:49 +0000
Manifest this update:     Sun 11 May 2025 00:00:49 +0000
Manifest next update:     Mon 12 May 2025 00:00:49 +0000
Files and hashes:         1: CatpJtFda_C5L7VOLYcMS7IQGMg.roa (hash: idVH/OL7AqXzhoz+Z8IbgG5ci5Pbk+MePCPcgx0hXD0=)
                          2: NiL8L4rYsAg1fb5vAZWWDJ3mG9U.crl (hash: 65UWuHlDlKEF3loC9YVxC/wRCr6Qixod1zo8vIOBREE=)
                          3: pAzvrIoWwcHpcNO5iNiHfwLiAJA.roa (hash: DLnt9qWRp3EI4stZNmwt/HobGa97g3RTR8iRLREX4YA=)
                          4: sdNhn-Zwnr-YG7tK9d0-6rM1f-U.roa (hash: rAWsDvzqXFPmTOX068GUpdMXRJhdTsuNmQhJKfNIeUo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 00:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bc:a4:f6:e2:8b:65:12:3a:42:b0:69:b2:e6:44:d8:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3622fc2f8ad8b008357dbe6f0195960c9de61bd5
        Validity
            Not Before: May 11 00:00:49 2025 GMT
            Not After : May 12 00:00:49 2025 GMT
        Subject: CN=6999e8bf30ea66a59b5a3a905024f09b9a22ac75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:bd:d6:a7:1f:39:00:2b:93:cd:4a:e5:2f:67:
                    d9:a5:8c:33:e5:52:09:87:f5:8c:4f:58:82:5e:51:
                    78:70:f6:fc:ae:79:04:ae:92:df:f6:ab:24:8f:52:
                    fb:5c:07:df:4c:46:cc:99:c9:d6:b3:d4:3f:ff:f3:
                    7e:21:7d:57:1a:17:e6:d3:df:08:57:d2:f2:33:46:
                    b6:53:00:2d:c2:b2:31:ab:0a:63:13:63:c3:a6:e8:
                    2d:d8:38:b9:0d:d4:80:b0:27:4f:83:c9:8e:c8:53:
                    ba:ee:26:5e:b0:44:5c:0c:e5:c8:dd:de:45:20:36:
                    c9:f6:ac:4d:f6:8c:e5:2e:70:93:8d:68:f4:8c:3b:
                    55:82:35:7e:d7:10:2d:d1:fb:84:74:74:2b:9d:df:
                    ce:9c:46:d3:60:f7:15:39:8a:8f:69:23:c4:32:7d:
                    86:83:15:c7:6d:35:8f:f8:d1:d4:90:df:7f:a2:bf:
                    96:f3:3c:e2:04:ee:ab:ea:e5:3a:9c:a9:31:19:df:
                    b1:0f:1b:93:ac:c3:7c:d1:2a:60:4c:75:f5:79:bc:
                    3e:3a:1f:9b:c1:de:2f:47:ee:71:e2:db:2c:ef:a6:
                    f6:99:bd:a3:3d:58:ae:25:ab:c9:ad:d2:9a:12:07:
                    01:3c:0c:26:db:38:2e:5b:72:4e:65:e5:39:85:ea:
                    08:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:99:E8:BF:30:EA:66:A5:9B:5A:3A:90:50:24:F0:9B:9A:22:AC:75
            X509v3 Authority Key Identifier:
                keyid:36:22:FC:2F:8A:D8:B0:08:35:7D:BE:6F:01:95:96:0C:9D:E6:1B:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:e7:d9:a3:13:63:da:85:96:a7:73:a5:e5:70:04:9f:06:54:
         52:07:e1:ba:46:5c:fb:70:73:19:43:ed:f8:ff:94:f7:78:06:
         69:94:c4:ae:44:b1:4e:64:71:53:8e:61:f3:a3:35:c8:bf:7b:
         a4:a8:68:5f:ae:87:6c:b3:f4:c5:f0:14:ce:02:71:8f:aa:46:
         5e:45:92:61:34:e8:37:99:5e:25:e2:00:af:7a:36:83:cd:5d:
         d5:af:1e:89:55:0a:8e:89:6b:e4:63:ce:87:63:a0:f9:9b:63:
         b2:a8:59:d2:e6:54:bc:98:10:47:9c:c1:82:ab:24:78:31:0c:
         f7:10:6a:e7:4a:b6:93:52:40:11:44:9d:e7:39:29:04:2e:a6:
         4d:93:a7:b4:2f:59:e4:ec:7d:09:8b:8a:50:64:26:b1:91:62:
         08:2e:04:0b:55:9a:83:99:cd:ae:69:4f:32:9a:a4:dd:68:9f:
         8e:d3:01:73:cd:19:6b:d7:59:84:36:ee:56:8d:43:44:0d:28:
         ba:69:8a:ff:da:5c:43:26:1f:a9:39:01:71:7c:2e:82:06:91:
         23:fa:a6:4b:0f:f1:48:3d:68:fe:a1:48:7a:73:cf:db:a1:d5:
         d2:19:63:a3:b4:7a:1d:9c:f5:df:e1:85:70:4e:3d:60:75:76:
         a0:7e:08:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 10:27:41 2025 by rpki-client