Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.mft
File:                     n2PP8kRuzsvr4BJGNpgLR-CyD6Y.mft (raw, json)
Hash identifier:          9d4PThNUqyAMkqpQX/CxUM0jrdS8STmAqGC0X/i1xNw=
Subject key identifier:   A3:64:F9:3A:7E:4A:F6:11:3B:D4:1A:5D:9E:38:70:32:C6:D4:E1:BB
Authority key identifier: 9F:63:CF:F2:44:6E:CE:CB:EB:E0:12:46:36:98:0B:47:E0:B2:0F:A6
Certificate issuer:       /CN=9f63cff2446ececbebe0124636980b47e0b20fa6
Certificate serial:       01964FDA6EFD8468E51F2CBC33BA30615C8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.mft
Manifest number:          0C6A
Signing time:             Sat 19 Apr 2025 21:00:37 +0000
Manifest this update:     Sat 19 Apr 2025 21:00:37 +0000
Manifest next update:     Sun 20 Apr 2025 21:00:37 +0000
Files and hashes:         1: 3PWYGF7PsxnPXxj5QLlwFzdRhbc.roa (hash: aJRxgQh7BxmkL4a1Mj0Fr2c3xjK5a/VBrY9HD8oJxXw=)
                          2: Zui9qtQV4KiP1G1w7-U9vy20ZFM.roa (hash: wpcPrt+AyPc1ASjLftJfcLWQI1C4woYgXnX5ExSKCJw=)
                          3: n2PP8kRuzsvr4BJGNpgLR-CyD6Y.crl (hash: 2gcMoytsKQBHv/Y3v7xDv37Q3KUB5OlUbwcdcX++7EY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 16:41:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4f:da:6e:fd:84:68:e5:1f:2c:bc:33:ba:30:61:5c:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f63cff2446ececbebe0124636980b47e0b20fa6
        Validity
            Not Before: Apr 19 21:00:37 2025 GMT
            Not After : Apr 20 21:00:37 2025 GMT
        Subject: CN=a364f93a7e4af6113bd41a5d9e387032c6d4e1bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b1:29:37:3e:6c:94:a1:7e:f1:59:1e:7b:36:
                    ea:3a:c5:1d:dd:3e:62:8e:97:35:2b:ab:cb:74:ad:
                    fe:eb:c0:5c:33:d2:75:f2:bc:a0:63:7f:9c:23:57:
                    b3:6d:c7:69:5f:06:70:84:a3:44:15:ad:79:8e:fc:
                    d5:c6:fe:38:4d:84:cd:17:de:cc:55:90:5d:e1:4f:
                    23:d5:5b:fb:1c:7b:a9:77:70:90:13:94:4d:2c:4d:
                    ab:bc:88:c1:8d:b1:97:d8:89:f7:47:25:b2:90:0c:
                    e9:63:72:18:cd:87:d8:c3:44:ba:c0:55:ab:be:a3:
                    c1:3d:f5:81:b7:53:6f:a7:27:9f:11:5a:08:c4:4f:
                    97:2d:b2:50:52:d1:b3:39:4b:81:5a:72:b8:7a:8d:
                    46:18:e6:e3:c4:14:62:1d:12:87:22:9c:3f:2e:32:
                    0b:9e:0a:14:ed:5c:29:c5:07:d2:92:72:89:fa:82:
                    48:bb:d1:12:1f:c9:89:87:ad:f2:0e:ac:52:cb:c7:
                    f0:8b:33:28:59:e7:90:0e:60:6f:64:6f:7b:45:cd:
                    a6:1a:34:89:5a:c1:69:85:30:e8:d6:a0:8f:00:ae:
                    4f:d3:f1:c4:eb:d6:83:f2:82:8c:aa:3a:cc:67:ae:
                    b7:c5:3e:53:57:d0:43:97:d0:01:9b:77:bf:47:b7:
                    2d:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:64:F9:3A:7E:4A:F6:11:3B:D4:1A:5D:9E:38:70:32:C6:D4:E1:BB
            X509v3 Authority Key Identifier:
                keyid:9F:63:CF:F2:44:6E:CE:CB:EB:E0:12:46:36:98:0B:47:E0:B2:0F:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:e5:1f:f7:22:97:c1:b0:5a:3a:96:c8:4c:13:03:4d:d2:10:
         14:ee:d5:39:7a:e7:72:36:d4:1c:63:f0:ff:20:87:a3:09:f4:
         6b:40:3b:71:66:59:a2:31:c5:00:fc:a7:cc:b1:79:8c:ed:f7:
         d3:3c:88:51:58:92:7b:25:b7:89:1f:c0:0c:c5:82:56:59:dd:
         d4:87:61:38:58:bc:ea:b1:da:12:6a:7f:5d:dd:2d:b2:44:ac:
         dc:b9:33:12:60:9c:8c:66:da:28:f1:da:b6:73:24:3d:90:80:
         94:3d:08:4f:cd:64:1e:34:72:50:34:39:fb:d0:70:d0:d1:5b:
         4d:c1:fb:68:4f:4c:18:65:13:a6:97:b9:c2:13:09:44:41:c5:
         7a:6c:a6:e0:8f:59:46:10:9b:0d:3b:b1:e5:a0:95:8e:8f:43:
         34:32:a4:c5:e1:9e:82:9d:85:c2:f0:9a:ed:a2:20:f2:a0:8c:
         8d:75:ba:f4:8c:f6:3d:3b:b1:a6:b5:a3:7e:24:7b:86:59:5a:
         61:12:84:fa:ba:4f:b2:12:c4:78:4f:d3:53:b7:d6:60:79:db:
         0a:54:0c:11:b5:3c:b6:9d:ed:0c:a9:33:d2:bc:61:5f:05:64:
         c5:b9:d1:42:aa:c9:c0:7d:50:2b:c6:d0:7d:a7:3f:4d:d4:a3:
         af:c7:6d:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:11:16 2025 by rpki-client