Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/fac86b-ff06-4888-838d-c44974add230/1/NHoE4awkx5d2NHg55RNMmqo4v1c.mft
File:                     NHoE4awkx5d2NHg55RNMmqo4v1c.mft (raw, json)
Hash identifier:          VzWCIIqJ06Yr538T9tdyWJ1+Uq9hR/vnvzFDq5RwJjM=
Subject key identifier:   E5:9B:A5:18:E3:8E:9F:9B:EB:43:6A:D3:69:60:07:F6:98:94:2D:F9
Authority key identifier: 34:7A:04:E1:AC:24:C7:97:76:34:78:39:E5:13:4C:9A:AA:38:BF:57
Certificate issuer:       /CN=347a04e1ac24c79776347839e5134c9aaa38bf57
Certificate serial:       019849D35AE5575CF3C3242B0A2A26169531
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NHoE4awkx5d2NHg55RNMmqo4v1c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/fac86b-ff06-4888-838d-c44974add230/1/NHoE4awkx5d2NHg55RNMmqo4v1c.mft
Manifest number:          1146
Signing time:             Sun 27 Jul 2025 03:00:44 +0000
Manifest this update:     Sun 27 Jul 2025 03:00:44 +0000
Manifest next update:     Mon 28 Jul 2025 03:00:44 +0000
Files and hashes:         1: NHoE4awkx5d2NHg55RNMmqo4v1c.crl (hash: U8ifzET8EWfLy+63EBpza8V5dXP4nFT8k65quPr4cMA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/fac86b-ff06-4888-838d-c44974add230/1/NHoE4awkx5d2NHg55RNMmqo4v1c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/fac86b-ff06-4888-838d-c44974add230/1/NHoE4awkx5d2NHg55RNMmqo4v1c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NHoE4awkx5d2NHg55RNMmqo4v1c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:d3:5a:e5:57:5c:f3:c3:24:2b:0a:2a:26:16:95:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=347a04e1ac24c79776347839e5134c9aaa38bf57
        Validity
            Not Before: Jul 27 03:00:44 2025 GMT
            Not After : Jul 28 03:00:44 2025 GMT
        Subject: CN=e59ba518e38e9f9beb436ad3696007f698942df9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:2e:49:6e:c9:eb:57:fd:51:ba:15:d4:e0:98:
                    35:fd:83:fd:3a:65:ea:bd:0a:20:74:6c:76:55:22:
                    ca:65:2b:20:5b:77:c1:38:26:72:25:11:5c:aa:b8:
                    bb:cc:21:20:24:a6:42:5a:43:87:26:eb:43:29:7e:
                    49:dd:06:0a:64:d0:00:93:0e:e8:3f:34:e2:15:78:
                    a3:b6:44:8e:b5:ca:ee:e8:6f:f8:3f:0a:8a:8e:2a:
                    8f:09:c9:f0:aa:4f:65:5b:21:79:44:54:07:cf:0f:
                    3a:22:80:3b:05:3e:e5:e3:be:91:00:d6:e2:7a:c9:
                    8f:73:48:80:7b:c5:2d:9e:d6:3f:2b:76:60:fe:71:
                    c2:c2:7b:ec:48:1d:69:48:7f:f1:ad:44:b6:f0:c2:
                    7c:d7:de:2f:2a:24:f9:31:27:e2:00:37:f8:fa:bd:
                    e9:d9:02:30:3f:d3:98:6e:67:e6:b3:02:95:f3:21:
                    b1:a3:a4:23:7e:bb:5c:f9:be:3b:01:53:30:1b:62:
                    81:8b:6b:1f:fd:b8:22:e9:d2:37:c8:d9:14:82:64:
                    bd:31:be:cb:5f:64:8d:f6:fb:d2:39:09:8c:46:cb:
                    df:0e:24:77:6d:20:a0:5c:14:f8:ba:86:01:9d:b9:
                    8e:43:ca:8b:7a:89:47:98:f4:37:f3:45:2f:91:04:
                    4f:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:9B:A5:18:E3:8E:9F:9B:EB:43:6A:D3:69:60:07:F6:98:94:2D:F9
            X509v3 Authority Key Identifier:
                keyid:34:7A:04:E1:AC:24:C7:97:76:34:78:39:E5:13:4C:9A:AA:38:BF:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHoE4awkx5d2NHg55RNMmqo4v1c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/fac86b-ff06-4888-838d-c44974add230/1/NHoE4awkx5d2NHg55RNMmqo4v1c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/fac86b-ff06-4888-838d-c44974add230/1/NHoE4awkx5d2NHg55RNMmqo4v1c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:1a:df:ac:ab:d2:50:7a:5a:69:a5:a0:e8:09:ed:a4:75:90:
         f8:48:81:69:c0:55:84:de:94:41:8d:5c:cd:57:28:b8:c4:62:
         c0:52:1a:3c:2b:91:31:4c:d3:cb:4f:f2:7a:07:47:07:aa:bc:
         64:a5:0d:66:79:96:ad:b0:c2:10:e6:80:f1:bf:e7:ca:e4:3a:
         97:af:62:2d:6b:38:5d:9c:d4:a2:dc:ed:3d:f8:39:54:f7:81:
         9c:51:f7:3f:1a:10:d9:0c:b8:00:00:19:31:a3:cf:ef:ae:04:
         aa:4e:1a:c8:28:e8:cc:f1:ed:fc:89:60:a7:59:4f:52:90:6f:
         e9:fc:be:d1:1f:4f:a8:e6:5e:9a:66:39:f8:27:32:f3:a3:29:
         87:61:e3:af:5b:ae:ec:ea:8d:b1:9a:57:fc:6e:c6:80:ac:50:
         a4:9e:78:9c:37:59:38:c4:c7:35:e1:52:98:a6:42:b1:f4:ac:
         9b:cb:86:de:07:9c:70:31:81:37:3e:96:38:07:14:ce:b7:a0:
         da:3f:0e:11:28:ec:f8:85:06:c1:62:2e:3d:2f:a9:b8:b9:13:
         f7:14:97:fb:11:3c:1c:a0:6f:76:0e:d9:55:e1:21:6c:0e:82:
         11:36:66:20:53:6e:2b:63:64:e6:02:cd:38:cb:3b:82:15:46:
         8a:74:b8:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:04:00 2025 by rpki-client