Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/16661c-e77b-41c3-80e4-14ee32fc5d06/1/nwM4t9tUQAKUEDl1Fckw60UtdbA.mft
File:                     nwM4t9tUQAKUEDl1Fckw60UtdbA.mft (raw, json)
Hash identifier:          cXi878cA3BIvTYLhTIov32kL+kgWlDRaa0Kpk1sM0SE=
Subject key identifier:   57:56:40:95:17:64:52:EA:1A:06:3A:C7:6B:D9:C2:23:23:B2:8F:2F
Authority key identifier: 9F:03:38:B7:DB:54:40:02:94:10:39:75:15:C9:30:EB:45:2D:75:B0
Certificate issuer:       /CN=9f0338b7db5440029410397515c930eb452d75b0
Certificate serial:       019652A4ACA2AD0556B900476049805A999C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nwM4t9tUQAKUEDl1Fckw60UtdbA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/16661c-e77b-41c3-80e4-14ee32fc5d06/1/nwM4t9tUQAKUEDl1Fckw60UtdbA.mft
Manifest number:          14FB
Signing time:             Sun 20 Apr 2025 10:00:45 +0000
Manifest this update:     Sun 20 Apr 2025 10:00:45 +0000
Manifest next update:     Mon 21 Apr 2025 10:00:45 +0000
Files and hashes:         1: HhSxQEAct_Hilmn4S8Eq6DvrLvI.roa (hash: crLyXY2X5OyUyjzwP0FotFChrfWXLKr+2gME4D4k2t8=)
                          2: nwM4t9tUQAKUEDl1Fckw60UtdbA.crl (hash: 69MsmJRbYNROoCOHFdJFwhSW2lUYRFF/dG3dYOMb6bo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/16661c-e77b-41c3-80e4-14ee32fc5d06/1/nwM4t9tUQAKUEDl1Fckw60UtdbA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/16661c-e77b-41c3-80e4-14ee32fc5d06/1/nwM4t9tUQAKUEDl1Fckw60UtdbA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nwM4t9tUQAKUEDl1Fckw60UtdbA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 10:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:52:a4:ac:a2:ad:05:56:b9:00:47:60:49:80:5a:99:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f0338b7db5440029410397515c930eb452d75b0
        Validity
            Not Before: Apr 20 10:00:45 2025 GMT
            Not After : Apr 21 10:00:45 2025 GMT
        Subject: CN=57564095176452ea1a063ac76bd9c22323b28f2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f1:81:06:b9:4d:20:2c:73:85:0e:28:2e:c3:
                    0f:f2:f1:7a:51:db:03:a1:b4:f9:b4:9c:65:5a:f3:
                    f1:b4:ce:fe:cc:56:8c:df:e2:e2:f5:de:6a:8e:ff:
                    d7:2e:b2:59:b1:6f:33:d6:7e:30:70:08:8b:0b:15:
                    ce:f1:af:d2:31:9c:a6:9c:ce:3c:04:4f:1c:c5:77:
                    e1:a6:7a:0b:27:e6:cf:28:c3:80:4a:f5:30:8d:3d:
                    79:88:77:8f:90:2f:6b:f0:79:51:5e:b7:a4:b7:f1:
                    28:53:e2:39:dc:20:18:12:e8:bd:b9:60:ed:9a:bb:
                    ac:4e:4b:84:22:c2:38:38:6f:e0:84:21:e1:e5:1e:
                    b3:33:50:dc:c7:de:22:78:96:c5:e6:8d:ff:8f:a1:
                    c1:f6:d4:c5:f3:5d:51:4c:b1:27:4e:92:30:ab:8f:
                    e0:a7:9e:ff:c2:c5:e5:df:30:52:23:63:da:0c:e0:
                    28:52:92:e6:27:c5:ff:01:35:9a:2f:0a:44:1f:86:
                    5e:bb:e9:15:e4:7f:46:29:d3:56:99:e9:88:e2:e0:
                    60:97:63:14:3c:b6:61:2d:58:b2:63:54:43:e5:43:
                    d5:e6:c5:f9:93:55:77:e4:2f:66:dd:f2:41:77:2f:
                    35:30:3f:20:19:53:0f:56:12:6e:d9:da:28:c4:4d:
                    df:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:56:40:95:17:64:52:EA:1A:06:3A:C7:6B:D9:C2:23:23:B2:8F:2F
            X509v3 Authority Key Identifier:
                keyid:9F:03:38:B7:DB:54:40:02:94:10:39:75:15:C9:30:EB:45:2D:75:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwM4t9tUQAKUEDl1Fckw60UtdbA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/16661c-e77b-41c3-80e4-14ee32fc5d06/1/nwM4t9tUQAKUEDl1Fckw60UtdbA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/16661c-e77b-41c3-80e4-14ee32fc5d06/1/nwM4t9tUQAKUEDl1Fckw60UtdbA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:4b:ba:59:b1:69:9c:72:17:ea:8a:2a:a3:3b:9b:a2:2f:ed:
         26:ab:4c:a6:cd:01:76:9b:cc:63:93:ca:ce:35:75:91:74:20:
         33:71:78:e9:2a:e3:2e:24:76:de:4d:d0:1b:e1:b8:43:a3:a6:
         67:dc:35:0b:9e:0b:c8:7b:36:3e:b0:14:0e:fd:00:f7:b0:ad:
         21:33:09:e9:47:be:4e:71:8b:b6:a6:74:88:84:58:97:ca:95:
         db:e2:7a:56:f0:d9:d7:6c:a9:da:41:6d:c7:c6:ae:e9:dd:52:
         5b:6a:a4:95:19:f4:60:36:44:9e:bd:69:5d:0d:bb:cd:b8:94:
         33:32:93:a2:5d:cd:4c:e0:6a:75:e6:25:c3:f7:e0:ed:e2:c5:
         b9:7d:6a:b0:8c:48:42:27:af:87:15:ee:a0:ff:0e:fe:4e:2a:
         94:6d:ab:27:23:4e:b3:2c:4e:9b:01:e1:69:11:81:7e:06:b0:
         c6:c7:13:91:a7:b2:de:9d:2d:c1:e5:cc:56:2b:4f:d4:d2:c7:
         f3:94:d8:a4:a7:42:3b:7e:26:74:f1:4f:91:4d:e2:fc:02:aa:
         84:10:b4:cf:07:2c:bc:35:17:8c:24:0d:24:64:4d:10:23:30:
         88:d9:1e:25:60:04:ea:cb:e9:d4:f5:8d:ef:7c:ec:c3:bb:a4:
         83:1b:a4:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:57:34 2025 by rpki-client