Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/eac997-ce1e-459b-9436-ed7067f987d9/1/ng3k8mJ16l_C8jyLTX4G1ys7c8c.mft
File:                     ng3k8mJ16l_C8jyLTX4G1ys7c8c.mft (raw, json)
Hash identifier:          08dATK8Ewy7R4ty5XwrTmzj8OB4D/FPzDynuQgEFA8I=
Subject key identifier:   4D:DA:70:BC:30:AB:60:DD:A2:06:46:4E:38:57:71:1B:ED:43:1B:D0
Authority key identifier: 9E:0D:E4:F2:62:75:EA:5F:C2:F2:3C:8B:4D:7E:06:D7:2B:3B:73:C7
Certificate issuer:       /CN=9e0de4f26275ea5fc2f23c8b4d7e06d72b3b73c7
Certificate serial:       01974EFC18DA8B88B71E6A2C24136E0642E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ng3k8mJ16l_C8jyLTX4G1ys7c8c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/eac997-ce1e-459b-9436-ed7067f987d9/1/ng3k8mJ16l_C8jyLTX4G1ys7c8c.mft
Manifest number:          06D8
Signing time:             Sun 08 Jun 2025 10:00:33 +0000
Manifest this update:     Sun 08 Jun 2025 10:00:33 +0000
Manifest next update:     Mon 09 Jun 2025 10:00:33 +0000
Files and hashes:         1: ng3k8mJ16l_C8jyLTX4G1ys7c8c.crl (hash: VNYaoQhNUUFzkWa02wBnq14MSd2VjWb4XHFk5alR9gU=)
                          2: z5plCbvdkup7MxI7T8lBnb_bFXc.roa (hash: gJ70ebUSb97tS8RCU2JGa9RBjyi3gQiPSVEBaoEhFFM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/eac997-ce1e-459b-9436-ed7067f987d9/1/ng3k8mJ16l_C8jyLTX4G1ys7c8c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/eac997-ce1e-459b-9436-ed7067f987d9/1/ng3k8mJ16l_C8jyLTX4G1ys7c8c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ng3k8mJ16l_C8jyLTX4G1ys7c8c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 10:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4e:fc:18:da:8b:88:b7:1e:6a:2c:24:13:6e:06:42:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e0de4f26275ea5fc2f23c8b4d7e06d72b3b73c7
        Validity
            Not Before: Jun  8 10:00:33 2025 GMT
            Not After : Jun  9 10:00:33 2025 GMT
        Subject: CN=4dda70bc30ab60dda206464e3857711bed431bd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:24:65:f4:41:2e:11:a3:30:09:6e:42:64:b4:
                    60:d2:0c:cf:8a:75:47:3d:de:be:5a:53:12:88:7a:
                    0c:2f:0a:c5:2e:de:6e:09:b8:d8:55:dd:21:a1:13:
                    67:66:7d:50:c6:37:56:d8:b1:8f:cf:60:d9:c0:ea:
                    b6:cc:9e:5b:e1:e2:30:c9:d0:1a:2d:5a:17:ae:e5:
                    0f:ee:3e:1c:fe:ba:e3:74:c4:c7:11:68:18:fc:14:
                    dd:a6:ee:cb:13:a1:04:ea:32:e5:53:35:2b:50:1f:
                    94:94:99:44:ec:35:3d:16:6d:a2:17:cb:b7:1e:f4:
                    d2:8d:63:bd:95:50:8e:f4:b7:7b:f1:54:33:83:09:
                    af:97:12:18:28:d3:15:71:c1:38:5a:c8:59:ca:19:
                    18:27:a1:dd:ee:5a:b7:b5:bf:97:65:52:99:9a:aa:
                    d6:ff:e7:a4:19:2a:c8:53:9f:76:ca:6a:99:29:5d:
                    b5:3a:3a:cd:ef:d7:22:bc:99:e6:b9:d9:91:46:c7:
                    31:ee:0c:63:ab:48:cd:f5:3c:94:24:c7:f7:f2:b3:
                    c2:1c:5d:04:97:5a:f7:52:10:b7:5d:2f:36:a6:59:
                    5b:92:e5:2e:29:9e:90:46:1c:9f:15:02:52:be:a4:
                    0d:50:85:59:ad:3e:4a:58:74:38:4e:97:fa:a1:15:
                    03:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:DA:70:BC:30:AB:60:DD:A2:06:46:4E:38:57:71:1B:ED:43:1B:D0
            X509v3 Authority Key Identifier:
                keyid:9E:0D:E4:F2:62:75:EA:5F:C2:F2:3C:8B:4D:7E:06:D7:2B:3B:73:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ng3k8mJ16l_C8jyLTX4G1ys7c8c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/eac997-ce1e-459b-9436-ed7067f987d9/1/ng3k8mJ16l_C8jyLTX4G1ys7c8c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/eac997-ce1e-459b-9436-ed7067f987d9/1/ng3k8mJ16l_C8jyLTX4G1ys7c8c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:5f:4c:c2:30:a0:e5:e6:87:43:38:fe:8c:57:fc:5a:6f:04:
         19:81:78:67:34:20:f3:b9:72:c2:b6:98:71:74:1f:ba:7a:2c:
         7b:08:b4:1e:f7:0d:a5:6e:f4:c1:f7:68:8d:7d:12:a7:4c:9a:
         42:ec:25:58:a2:a9:bd:31:52:30:62:16:7c:69:01:7d:56:42:
         74:f0:a2:24:7e:82:9b:cb:a7:0c:f8:c3:3a:5a:a2:84:10:5d:
         4b:ed:d6:06:6d:b4:72:54:f7:3f:e6:ed:7c:76:9b:d2:05:70:
         3d:c3:14:0e:68:a2:11:bf:c4:60:2e:6a:d8:f5:b5:c9:71:cf:
         d8:b2:8a:98:aa:ff:a6:7c:3e:ed:6e:1f:1f:16:97:35:9a:c5:
         e5:40:87:5f:43:fa:93:cb:f2:7f:c7:86:36:67:ea:74:30:d7:
         71:2e:d0:2a:e6:61:76:40:9b:68:d0:0a:a0:dc:67:47:ff:d2:
         63:f1:35:30:76:6b:5f:2a:ff:ba:1c:37:99:f7:6f:7e:f2:7d:
         cf:e6:de:2b:91:82:4d:f1:07:31:2f:65:8e:e4:0e:3a:4d:20:
         d3:ab:c0:76:a0:dc:94:0d:38:c0:57:2e:2e:d4:e5:8b:d8:cb:
         26:0f:77:66:b9:33:3e:8f:3f:92:3a:a5:a4:c6:d3:9a:a9:ad:
         a4:45:2e:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:46:18 2025 by rpki-client