Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
File:                     Nov7il7uSQgupijfJaSl1Q86qbM.mft (raw, json)
Hash identifier:          6kov4lAB8MliFyDF27iK1IHjR7VDEuyo0SFfLLdWXO4=
Subject key identifier:   D3:8C:4C:E0:E9:04:71:46:5F:F8:75:F0:9E:DE:24:FC:CB:12:77:AD
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Certificate issuer:       /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial:       019746672B349BB163E75E020F6F0F96C4F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
Manifest number:          125C
Signing time:             Fri 06 Jun 2025 18:00:55 +0000
Manifest this update:     Fri 06 Jun 2025 18:00:55 +0000
Manifest next update:     Sat 07 Jun 2025 18:00:55 +0000
Files and hashes:         1: 0hshT3NJf3ZcExZUQYc5nmNlGaY.roa (hash: JsM+BK5pxCs2yQ1uCb8EQL/4Y9VORNiVl/v1CM9RYLo=)
                          2: 1-N0MB6K4BGhCodjphO0sGfJH9lc.roa (hash: wNvOddmKqC3vtf7NfXiGQ3Hozg+ofKLNZIEe00zLk1M=)
                          3: 1-bbMCI3xod0gOUPFmgFsyOO30Bw.roa (hash: LKqJzBII7MGbUijDJ1j/lwoVixYqcdKqwxqkwNRG00c=)
                          4: 1-mVwC91y2gjxzZ49ECJKeMBNsxM.roa (hash: U559gzASGhlXQBS0hGV4xF3kH8STm7I07VZJO2H7/G4=)
                          5: 1-wabTO2fsXFXQTzOoF0K0I_DrZU.roa (hash: RTeqrHSUS0wIUgh9aXCRzEflNtC7IYLpRr5YT5/0umM=)
                          6: 59BM3cmIoy1MoFuz148y_WZgCKA.roa (hash: b8nLw7Sod/Ce2ZRbJw+OEbeY/YeQr8JvhOn6OiPAFJE=)
                          7: 6blgCUf86x3rCdfBH3ieROWsyRA.roa (hash: 86kM1G7rQ1SYShoyqdcl0qpLnm5lgNUyaKELq4WGkm8=)
                          8: 6kSNO4q11KUII70MaOJKkb7-8sg.roa (hash: po7fMOEHEv78blrhtlvLrqv8BATiXO+irHU+tW7u7Us=)
                          9: 6rwN2H9TdeOGb7q8HP8JJtg4qSc.roa (hash: FcA2BwhZ6jCjWY4Hf8YuwHRI8qkKyNdVMrQdqJ8aP+Q=)
                          10: ABJStH93Tb6FchJ9fsWarHUv7_o.roa (hash: 2aWwBiU7xdii1VsEutmj7weOOLZIls6NzS14i2lKxbg=)
                          11: CkXXQPJaaUDcGZXca877DoZAZBs.roa (hash: c5vNHGh+QpD+Iysn2/rTkiH0Y/dq9wFL5MpRaysUMKg=)
                          12: DVg1Efbw-1VF7OmnT2UlNXAKp6c.roa (hash: +oncWmQ5BpXDKZTWF4Tr8YOqt10mU/wA8TyqNvyksnI=)
                          13: F-W1PnZcCIg_t9g53Zhr8ZnRECY.roa (hash: vUOE0EzW5wlVnmrKCdNEm67M3EqZb+A0EvhCnOtIuZM=)
                          14: Gw8m4F71Ro8bNrJZTCfniFi9UXg.roa (hash: Kpelzl11O9E/pATLbGmCA+Qw1l2yU3K1pSi3l/TT1n8=)
                          15: IN3MTD4yGkkCDB1rJO86jTqGDXo.roa (hash: 7YOMcFzQDeiJ2ivIPHaXcmOgqcdPTr50fRvwkCG59Mg=)
                          16: Nov7il7uSQgupijfJaSl1Q86qbM.crl (hash: 21MsboHF6hKDUqrcCYakc0VvH352YpYnKCAbZVj2P9o=)
                          17: S7OFuNl-GH-DU5EJTYgFgwhDjj4.roa (hash: ymztFVGLR/DYVfAE234cC1kQgAmVsycMhDqhtka8bLQ=)
                          18: SKTIyHXtcBSWgsqArOetabgC6Iw.roa (hash: wlTzqtL7XXgCSVJcIXH5FrXlb2kC7qEyd0/a19pmV6M=)
                          19: SWriLr3nVJjiUOMV3ZQzft65uIQ.roa (hash: spVCEv9GHrawAsPw1EVJ3YvZeiUgfGRBjgYb4vGUxOc=)
                          20: SwhgnoZF_hBARmFUiuLLJ2EVqdA.roa (hash: 48VRNmDGNhRP2L8JLtMNzB4JM3bc2vPZU8jDlCGlZ6A=)
                          21: WE1HuAD0REkzOxrmA-dprdQjRlw.roa (hash: 8GqqIihnZKhMqZIhM0GLDakpjNdCPZs7s2nPQmrA4N8=)
                          22: ZnbzYHRBvUTbEjCixu-51iq0NfI.roa (hash: H6eoYf0qoCchu+RJjza0539v8DwbGRsxOIQiPaH7Gsc=)
                          23: gAy2L-yq3jv5ULydsY0WjO758DY.roa (hash: kDdF7XHhC12P2H5eVodHGu1h34gE1iEE5luu7KRRUlE=)
                          24: nV9zpTkg41cEF2aE_Xxas5qWLPE.roa (hash: TmF18BVISDIjbdiP8hL66Gsgu4TLs2FCPMkL0xuGpQk=)
                          25: ou4-Kh9DNSjfvl0SW2m8LklQ2t0.roa (hash: kGFdPKNsDJKbeK37pMl8shm8W/kYhkK5Y6eKhGhDWLA=)
                          26: q9T06HR6r97SU-awwQlQkmbgz5o.roa (hash: ETbjB9b9hcvuMEeWyF6+hF4G9dhj7syzfHpk/6yrsfU=)
                          27: w_7KSHXu7o9ktpz_Vrh_00tv7HI.roa (hash: gkGoVuf1pEqMxqdRmFn7c7MKr+cC0H9E1TpCk2Uue1E=)
                          28: xls96UEa5x8QQ0zNf0sviPf9i3k.roa (hash: m0eq2urB49dl+6zHn37E7MnUA3Q0Qt3aw5b2d8bC9Dc=)
                          29: yNNBP2CYZiCkNUVUsBEkdKlDfd8.roa (hash: vCmsgqUye/JQpQ9Ozf04BYmInQnymLIG2O0wE02K/Wg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 18:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:67:2b:34:9b:b1:63:e7:5e:02:0f:6f:0f:96:c4:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
        Validity
            Not Before: Jun  6 18:00:55 2025 GMT
            Not After : Jun  7 18:00:55 2025 GMT
        Subject: CN=d38c4ce0e90471465ff875f09ede24fccb1277ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c1:79:22:d5:0d:2b:2d:bf:56:43:84:7e:5b:
                    4b:41:2d:ed:e1:62:4b:26:a0:71:e3:4d:bb:82:67:
                    f9:ff:39:43:e4:60:19:ad:96:1a:83:94:b1:d1:e4:
                    1a:18:8e:76:30:1a:f3:6a:26:32:73:77:99:fa:ee:
                    df:b9:12:4c:46:36:75:95:1f:9a:b7:bb:9f:66:21:
                    4f:90:c2:56:e1:75:c7:b4:e7:66:ad:0d:b7:21:1c:
                    15:9b:bc:2e:b5:2d:ff:49:38:2f:3a:69:96:94:e5:
                    f5:d2:4c:1f:3d:37:0b:ec:40:46:44:f5:f5:10:04:
                    fa:fe:f7:15:73:7d:e2:f7:e3:5c:b5:eb:37:7b:1b:
                    2d:05:c6:aa:fc:64:0e:db:33:1c:3d:b7:0f:62:25:
                    01:bb:fb:9d:12:f0:32:00:c0:e7:c3:bd:63:6b:ee:
                    98:ea:d5:f9:f5:5b:67:6e:7d:97:7b:b7:e0:a8:5c:
                    38:2f:cf:9c:ae:09:56:da:43:42:23:f7:17:22:fd:
                    d9:80:81:33:64:79:af:57:cd:31:a8:02:80:ad:b4:
                    e6:3a:8f:a7:61:35:9b:44:ca:ed:be:87:55:b6:49:
                    dd:40:ba:60:3d:bb:41:8c:0e:fa:00:7f:2d:7f:01:
                    00:bb:10:08:bc:a8:61:eb:42:99:8f:b8:37:49:4a:
                    8f:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:8C:4C:E0:E9:04:71:46:5F:F8:75:F0:9E:DE:24:FC:CB:12:77:AD
            X509v3 Authority Key Identifier:
                keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:c3:7f:07:d9:81:8b:c8:db:8e:f4:57:9b:67:b4:3c:d9:5f:
         2b:2b:33:67:3e:ee:36:1e:80:27:d7:2b:c9:ec:17:4b:22:b9:
         73:f1:25:8d:38:7e:d5:0b:b0:ee:99:0b:c7:88:52:5b:f2:69:
         d1:cc:dc:b1:5a:38:c9:1e:aa:6f:90:6c:b3:de:69:ac:5a:be:
         39:4f:30:f1:d8:cb:fe:46:32:ba:10:9c:e9:08:8c:ec:80:10:
         b2:5e:15:8f:66:48:a6:f7:aa:1f:51:25:81:fd:e8:39:75:96:
         7a:24:e7:c3:6b:9d:ef:b6:f1:e4:bf:3c:c6:71:36:6b:09:1b:
         5e:47:fa:64:65:f0:34:02:0e:76:7d:6a:10:99:e2:14:79:6c:
         5b:be:62:6c:75:e9:ba:b8:10:7f:dc:46:2d:5c:df:10:64:43:
         5f:01:4f:89:fa:b8:69:e3:4f:ae:52:4a:fe:d5:9b:0a:81:75:
         e2:a3:38:8f:cb:01:6a:28:c8:fd:2e:4d:bc:66:05:92:e9:16:
         e3:57:3c:82:fa:3c:6e:e4:8c:33:23:e3:76:a2:b4:c5:de:65:
         63:aa:0c:58:e1:3d:7f:68:e7:23:e6:cb:11:5b:73:9c:e5:fe:
         73:5b:f3:11:f5:b5:73:40:1d:35:e7:79:fb:3d:d2:c3:b5:ab:
         07:f9:3e:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:03:55 2025 by rpki-client