Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/25fb54-d467-4e90-a41f-91c0d8e7549d/1/N6TS5C8jYsLm71K4Lxn35WN1fgw.mft
File:                     N6TS5C8jYsLm71K4Lxn35WN1fgw.mft (raw, json)
Hash identifier:          giLPFD6Cl3Ic2WLbLD/rpxShTc98OZj2+dW8ht2Lel0=
Subject key identifier:   56:1B:AA:8F:C1:BE:4D:2B:97:9D:C7:E2:84:55:6D:A9:45:0A:C9:21
Authority key identifier: 37:A4:D2:E4:2F:23:62:C2:E6:EF:52:B8:2F:19:F7:E5:63:75:7E:0C
Certificate issuer:       /CN=37a4d2e42f2362c2e6ef52b82f19f7e563757e0c
Certificate serial:       01984965E3D8E275CAC0F2E17BB958045953
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N6TS5C8jYsLm71K4Lxn35WN1fgw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/25fb54-d467-4e90-a41f-91c0d8e7549d/1/N6TS5C8jYsLm71K4Lxn35WN1fgw.mft
Manifest number:          032C
Signing time:             Sun 27 Jul 2025 01:01:10 +0000
Manifest this update:     Sun 27 Jul 2025 01:01:10 +0000
Manifest next update:     Mon 28 Jul 2025 01:01:10 +0000
Files and hashes:         1: 3PpgKNG0AmRV_aCWCsXZ_tB5eIg.roa (hash: eRzqoJ+wnFE50kPBIiEdOOr71bv/+CxmFvCCuPDTNi4=)
                          2: N6TS5C8jYsLm71K4Lxn35WN1fgw.crl (hash: AKk+FJ46coEnnlNhSwtz9P0a0kjb1YI0aadZVJpJByw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/25fb54-d467-4e90-a41f-91c0d8e7549d/1/N6TS5C8jYsLm71K4Lxn35WN1fgw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/25fb54-d467-4e90-a41f-91c0d8e7549d/1/N6TS5C8jYsLm71K4Lxn35WN1fgw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N6TS5C8jYsLm71K4Lxn35WN1fgw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:65:e3:d8:e2:75:ca:c0:f2:e1:7b:b9:58:04:59:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37a4d2e42f2362c2e6ef52b82f19f7e563757e0c
        Validity
            Not Before: Jul 27 01:01:10 2025 GMT
            Not After : Jul 28 01:01:10 2025 GMT
        Subject: CN=561baa8fc1be4d2b979dc7e284556da9450ac921
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:62:d8:a9:d1:3f:13:4b:a6:08:60:0e:b1:8a:
                    4a:2f:87:3a:0f:3b:f6:81:7f:01:03:08:7a:4c:47:
                    58:da:a7:eb:46:04:c7:29:61:4a:18:79:2a:86:77:
                    45:5e:80:cf:eb:8e:51:7e:00:bd:f4:40:cf:c1:d3:
                    4b:76:c1:64:b4:8c:a2:bf:f8:37:07:f1:3b:c7:a0:
                    14:ef:4f:65:ac:d8:8a:f9:89:4e:e2:b8:6d:88:f6:
                    0d:f1:3d:5a:17:77:0e:df:27:93:12:1f:86:ae:3b:
                    19:be:64:7d:51:84:15:22:a0:7c:47:2e:1b:51:a6:
                    d8:fd:07:98:20:7b:e8:f4:5c:e3:54:f4:81:0e:26:
                    12:63:5e:ee:f2:bb:c5:26:bc:4f:7a:25:a9:0a:3a:
                    46:08:c7:12:ec:10:3e:3b:2c:f2:18:40:77:c3:89:
                    23:ba:26:a6:9e:c8:ba:f6:71:92:ad:a7:57:25:f3:
                    d1:52:12:55:64:c6:19:cb:6a:18:b9:7c:71:d4:42:
                    59:91:fd:ab:a8:22:23:2a:22:d1:96:33:aa:fb:fc:
                    1c:38:a8:5e:80:b4:20:85:f5:6d:c2:12:4f:5b:49:
                    74:4c:ea:55:0c:0b:b5:44:73:de:9d:32:81:9a:71:
                    aa:ee:41:49:a5:02:97:00:a6:85:d2:0a:7a:5d:4d:
                    12:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:1B:AA:8F:C1:BE:4D:2B:97:9D:C7:E2:84:55:6D:A9:45:0A:C9:21
            X509v3 Authority Key Identifier:
                keyid:37:A4:D2:E4:2F:23:62:C2:E6:EF:52:B8:2F:19:F7:E5:63:75:7E:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N6TS5C8jYsLm71K4Lxn35WN1fgw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/25fb54-d467-4e90-a41f-91c0d8e7549d/1/N6TS5C8jYsLm71K4Lxn35WN1fgw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/25fb54-d467-4e90-a41f-91c0d8e7549d/1/N6TS5C8jYsLm71K4Lxn35WN1fgw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:34:45:d9:54:1b:4f:53:b2:65:a8:a0:39:e4:f5:e8:de:22:
         d3:20:b3:fa:68:bf:5f:61:1a:fd:3e:e7:a9:59:38:3a:d1:de:
         28:35:d2:57:c5:5e:0b:8b:b7:f5:93:91:a6:de:0b:7a:39:15:
         e3:9a:e5:d5:97:46:f2:db:a3:51:ff:ce:14:99:82:88:4a:cd:
         3b:a0:45:85:5c:29:6a:2b:dd:60:41:c2:6c:16:31:52:45:38:
         fa:ed:00:be:dd:a2:10:7e:3b:04:32:f3:67:aa:fa:3e:11:79:
         63:d8:49:fb:9b:ed:c5:f9:94:72:1a:1d:87:33:50:bc:b5:bd:
         43:1b:72:7f:a8:ba:c2:80:04:2e:35:4a:35:d1:5f:dd:e0:0c:
         00:ab:d8:d9:d8:51:55:e2:b9:6d:de:8d:48:5a:74:40:5d:cb:
         f3:a9:d3:4b:33:0a:5e:c6:54:e4:48:3c:4e:40:98:6e:3b:79:
         12:46:6c:43:87:ba:64:a8:87:a0:1b:92:52:5d:23:62:e4:2d:
         29:65:92:c7:4a:d6:ee:0c:75:c7:ae:23:46:ee:4d:c9:91:c1:
         fa:62:0f:9e:13:41:6f:e6:f7:f2:f8:1d:41:c6:ad:f4:23:dc:
         e4:f7:9d:42:08:17:20:df:dc:c5:10:c1:f7:9a:fe:89:29:10:
         99:b7:7e:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:26:19 2025 by rpki-client