Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/b70f5c-e831-427a-ada4-3a73be90a506/1/NLlg9vGSVeo5Zm-DPr4nF2GZSxU.mft
File:                     NLlg9vGSVeo5Zm-DPr4nF2GZSxU.mft (raw, json)
Hash identifier:          Yy5CZc8UTvI0t7QA1ufL5mLuLnedGtNv8vSSKtn7HqE=
Subject key identifier:   C1:0C:5B:9A:9C:45:EF:17:80:44:BD:77:EA:2F:DE:1C:35:76:EE:DF
Authority key identifier: 34:B9:60:F6:F1:92:55:EA:39:66:6F:83:3E:BE:27:17:61:99:4B:15
Certificate issuer:       /CN=34b960f6f19255ea39666f833ebe271761994b15
Certificate serial:       0197D5F49BB7B9D8480D1FEAE95D529EB70B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NLlg9vGSVeo5Zm-DPr4nF2GZSxU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/b70f5c-e831-427a-ada4-3a73be90a506/1/NLlg9vGSVeo5Zm-DPr4nF2GZSxU.mft
Manifest number:          075E
Signing time:             Fri 04 Jul 2025 15:01:07 +0000
Manifest this update:     Fri 04 Jul 2025 15:01:07 +0000
Manifest next update:     Sat 05 Jul 2025 15:01:07 +0000
Files and hashes:         1: NLlg9vGSVeo5Zm-DPr4nF2GZSxU.crl (hash: WGIc+r+JNLLM5CY5FuRSxmHqTAdrejrOtxvnXCJeR4A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/b70f5c-e831-427a-ada4-3a73be90a506/1/NLlg9vGSVeo5Zm-DPr4nF2GZSxU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/b70f5c-e831-427a-ada4-3a73be90a506/1/NLlg9vGSVeo5Zm-DPr4nF2GZSxU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NLlg9vGSVeo5Zm-DPr4nF2GZSxU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Jul 2025 15:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:d5:f4:9b:b7:b9:d8:48:0d:1f:ea:e9:5d:52:9e:b7:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34b960f6f19255ea39666f833ebe271761994b15
        Validity
            Not Before: Jul  4 15:01:07 2025 GMT
            Not After : Jul  5 15:01:07 2025 GMT
        Subject: CN=c10c5b9a9c45ef178044bd77ea2fde1c3576eedf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:38:03:c8:c4:0a:2b:88:87:b7:1f:f4:2a:df:
                    6f:43:4e:31:7f:e4:96:cb:6d:6d:f5:a9:83:44:cf:
                    11:99:f2:00:35:6f:8f:f0:a0:73:24:2f:c8:a2:33:
                    90:dd:66:d1:59:54:b0:cb:27:41:18:14:94:ae:64:
                    4c:24:76:4b:76:97:40:c9:62:4f:2a:e4:f0:45:3b:
                    ac:76:e3:21:21:33:cc:f9:4f:46:a9:f5:f1:d6:5b:
                    5a:3d:f9:d1:b7:7b:ea:a4:2e:f1:b5:d4:bd:8a:46:
                    22:32:a8:17:47:6d:29:d4:2e:87:3b:de:e2:20:11:
                    4a:56:ca:09:cd:bf:63:c7:3c:c2:68:df:31:d1:95:
                    cb:fd:89:f6:49:ee:e2:29:8b:c8:9c:c8:9c:9c:cb:
                    fe:67:79:51:62:ae:a0:ac:0d:7e:b5:53:06:7a:f8:
                    53:1b:7c:15:4d:75:06:8b:69:ab:1f:86:4e:d2:be:
                    6e:8d:94:5c:08:c8:15:4d:ae:fa:14:72:40:a0:8d:
                    1a:d5:11:a7:2d:18:01:c5:9a:20:4a:25:a0:4a:5d:
                    79:09:4c:00:30:80:1b:a6:5a:5d:03:e6:f7:6d:57:
                    50:aa:e1:0e:a8:69:cf:be:cb:42:c0:ff:fb:61:d2:
                    93:6b:2a:e1:72:25:43:50:34:ac:76:6c:8a:48:99:
                    11:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:0C:5B:9A:9C:45:EF:17:80:44:BD:77:EA:2F:DE:1C:35:76:EE:DF
            X509v3 Authority Key Identifier:
                keyid:34:B9:60:F6:F1:92:55:EA:39:66:6F:83:3E:BE:27:17:61:99:4B:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NLlg9vGSVeo5Zm-DPr4nF2GZSxU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b70f5c-e831-427a-ada4-3a73be90a506/1/NLlg9vGSVeo5Zm-DPr4nF2GZSxU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b70f5c-e831-427a-ada4-3a73be90a506/1/NLlg9vGSVeo5Zm-DPr4nF2GZSxU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:c4:d7:28:21:e8:a6:3a:63:73:11:d6:d5:05:91:c3:c3:3f:
         c9:8d:88:b1:1f:7d:01:f7:10:fe:74:62:17:5c:15:9c:47:2b:
         64:6e:80:34:e0:46:91:d3:41:1f:7b:84:10:69:26:96:bb:1c:
         44:5c:f0:ce:08:c4:bd:d1:58:62:a1:2a:c2:c4:bd:eb:4f:b5:
         e8:c4:b0:ed:f8:cc:b1:43:2f:c6:59:75:18:52:d6:c3:40:48:
         35:60:27:60:9b:50:8d:0e:8f:57:07:b8:d0:f7:07:18:92:10:
         95:2d:0f:ad:15:db:c6:3d:ea:c2:a5:d8:3a:15:b8:24:6f:1e:
         54:a2:95:e4:63:8f:21:a8:f4:36:e4:b8:fd:9c:8e:7e:68:05:
         2a:7f:e0:42:8f:d0:33:b5:e0:f9:c3:f9:e1:dd:d8:aa:19:f4:
         36:d9:14:67:84:b0:2b:a0:6a:8a:7f:ea:48:66:d2:9a:20:41:
         1e:51:ec:8c:54:23:5e:52:66:51:d8:bc:5b:a8:18:d1:ec:a1:
         95:38:96:8e:c7:6e:26:5d:57:1f:dd:69:b9:f2:74:53:8c:ed:
         02:c9:e1:06:91:32:6b:54:5d:38:4d:1f:ca:f3:c8:7f:05:38:
         fa:dd:81:58:73:f1:96:d0:f4:03:ce:45:6b:59:ac:99:63:bc:
         c6:3e:e6:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 19:49:00 2025 by rpki-client