Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/93f6df-c3f5-4013-a7fc-bd5c3bc11cfa/1/NjEKlZSJ0axbh5avYm4Hw_HBcfM.mft
File:                     NjEKlZSJ0axbh5avYm4Hw_HBcfM.mft (raw, json)
Hash identifier:          NCsGsHrO12T5iHbjJZYJMw/1wTX6x3LeFHvNHuK8OKU=
Subject key identifier:   95:A0:15:48:5D:06:0C:A7:08:09:AC:36:16:B3:AB:7B:5A:9D:FF:59
Authority key identifier: 36:31:0A:95:94:89:D1:AC:5B:87:96:AF:62:6E:07:C3:F1:C1:71:F3
Certificate issuer:       /CN=36310a959489d1ac5b8796af626e07c3f1c171f3
Certificate serial:       0198530CEB87448D1388D4B26897719C87A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NjEKlZSJ0axbh5avYm4Hw_HBcfM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/93f6df-c3f5-4013-a7fc-bd5c3bc11cfa/1/NjEKlZSJ0axbh5avYm4Hw_HBcfM.mft
Manifest number:          1596
Signing time:             Mon 28 Jul 2025 22:00:12 +0000
Manifest this update:     Mon 28 Jul 2025 22:00:12 +0000
Manifest next update:     Tue 29 Jul 2025 22:00:12 +0000
Files and hashes:         1: NjEKlZSJ0axbh5avYm4Hw_HBcfM.crl (hash: y8ZOlLsecPN4abxYP4Jo/SIj9GPmW46cV41g9ogmuN4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/93f6df-c3f5-4013-a7fc-bd5c3bc11cfa/1/NjEKlZSJ0axbh5avYm4Hw_HBcfM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/93f6df-c3f5-4013-a7fc-bd5c3bc11cfa/1/NjEKlZSJ0axbh5avYm4Hw_HBcfM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NjEKlZSJ0axbh5avYm4Hw_HBcfM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Jul 2025 22:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:53:0c:eb:87:44:8d:13:88:d4:b2:68:97:71:9c:87:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36310a959489d1ac5b8796af626e07c3f1c171f3
        Validity
            Not Before: Jul 28 22:00:12 2025 GMT
            Not After : Jul 29 22:00:12 2025 GMT
        Subject: CN=95a015485d060ca70809ac3616b3ab7b5a9dff59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:aa:6a:0e:be:ce:1d:ef:ab:3a:e7:7d:8e:a7:
                    8b:b0:cc:10:19:cc:19:0a:6f:25:d7:75:14:1d:86:
                    45:ca:0c:db:27:cf:9b:99:08:6f:29:24:90:a3:3b:
                    cd:72:ba:a7:ff:53:8f:e0:23:11:35:a6:00:38:3e:
                    52:89:96:b8:29:78:ce:58:67:cd:b2:b1:b3:b3:93:
                    08:29:35:f5:5d:f9:87:a9:68:d1:74:e8:1f:05:21:
                    47:c8:5c:3c:a3:ce:70:45:67:25:ed:bd:2e:f4:6b:
                    a3:01:2d:27:cd:67:39:f4:7a:d2:9f:a6:56:dc:52:
                    f4:16:52:bf:e9:f6:94:8b:b1:a8:22:6f:5b:f3:7f:
                    75:c8:77:86:87:2e:3d:09:82:70:4c:cd:14:de:37:
                    5b:7e:f6:6a:e1:02:a7:ce:36:99:fe:bb:8f:ee:e1:
                    71:0e:5a:fe:b1:2a:16:28:6a:73:ea:52:cd:e0:13:
                    bd:2d:53:e1:ea:a5:30:0f:e5:24:18:99:ca:bf:0c:
                    91:b0:da:66:c8:55:1b:f8:fc:7e:85:f8:6e:91:c3:
                    fe:99:1d:4c:69:16:71:89:75:dc:76:c1:8c:a3:84:
                    da:ea:eb:b9:1e:2d:96:16:44:b4:eb:62:cf:1b:d2:
                    e2:17:77:39:cf:6f:9f:bf:11:b7:77:8b:d5:48:5c:
                    b0:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:A0:15:48:5D:06:0C:A7:08:09:AC:36:16:B3:AB:7B:5A:9D:FF:59
            X509v3 Authority Key Identifier:
                keyid:36:31:0A:95:94:89:D1:AC:5B:87:96:AF:62:6E:07:C3:F1:C1:71:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NjEKlZSJ0axbh5avYm4Hw_HBcfM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/93f6df-c3f5-4013-a7fc-bd5c3bc11cfa/1/NjEKlZSJ0axbh5avYm4Hw_HBcfM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/93f6df-c3f5-4013-a7fc-bd5c3bc11cfa/1/NjEKlZSJ0axbh5avYm4Hw_HBcfM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:d1:8f:71:30:06:62:2d:fd:88:58:9f:1b:f5:92:b3:f2:45:
         38:c8:7b:cf:94:36:cd:89:9f:1a:bf:5d:9d:75:7b:04:69:fd:
         6b:69:77:b4:b3:54:0a:ce:59:35:09:20:3d:25:92:04:85:38:
         08:dd:58:9a:fe:b6:41:53:b5:d3:a6:02:1c:4a:e5:6f:69:45:
         68:c4:70:5b:33:01:73:dd:50:db:59:1d:1c:b5:99:e7:84:45:
         a7:08:ea:0c:a4:75:75:26:8e:90:d9:27:6d:c0:6c:e8:97:b3:
         70:ba:68:c4:b3:5b:ba:2e:01:2d:96:7f:42:25:72:68:8e:ee:
         c0:f7:16:99:66:72:d7:a3:f1:42:0c:14:8a:43:f6:fc:4a:4e:
         a1:0f:64:17:bd:26:f4:f8:ce:94:36:ec:2f:2f:de:d6:b4:a8:
         dd:66:78:98:74:70:3b:91:5f:80:0a:5e:a2:a8:6a:c0:39:b4:
         71:5d:e1:69:ca:54:42:1e:4e:13:cc:51:51:60:b7:22:14:50:
         f0:92:b2:d3:19:5f:cf:49:12:9b:2a:16:4a:9d:b3:df:0c:f0:
         ea:3f:7c:c4:e1:c7:35:dd:dd:94:06:a2:7f:67:c8:62:e4:11:
         76:5a:bc:c9:b1:7f:1a:b2:5c:66:be:8e:25:34:52:e0:bc:4d:
         39:62:09:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 03:39:21 2025 by rpki-client