Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/a17b93-cc89-4d08-a5b2-636d6fc0048f/1/n4o8mp7fZEc1qU6wnwHKs5hV0ng.mft
File:                     n4o8mp7fZEc1qU6wnwHKs5hV0ng.mft (raw, json)
Hash identifier:          7xnhEXCUyAfggPqDN6Siuw4r3LKLyMELz9A6ofurB28=
Subject key identifier:   C8:97:FE:7E:8E:0D:65:67:93:9B:71:7C:6C:F5:F9:D5:39:41:30:69
Authority key identifier: 9F:8A:3C:9A:9E:DF:64:47:35:A9:4E:B0:9F:01:CA:B3:98:55:D2:78
Certificate issuer:       /CN=9f8a3c9a9edf644735a94eb09f01cab39855d278
Certificate serial:       0196501183661F9EF7664F8720663C2E713D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n4o8mp7fZEc1qU6wnwHKs5hV0ng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/a17b93-cc89-4d08-a5b2-636d6fc0048f/1/n4o8mp7fZEc1qU6wnwHKs5hV0ng.mft
Manifest number:          0968
Signing time:             Sat 19 Apr 2025 22:00:47 +0000
Manifest this update:     Sat 19 Apr 2025 22:00:47 +0000
Manifest next update:     Sun 20 Apr 2025 22:00:47 +0000
Files and hashes:         1: 9nrkqBfEEEVb2ilynt5HJRxEGWw.roa (hash: 9p3+VvNvFq4rrBtC/Z9UeyBNK7rF8lIsM8oxPtubKQs=)
                          2: n4o8mp7fZEc1qU6wnwHKs5hV0ng.crl (hash: /eoIH9KcYQoTU4QWfqvVNlC4/84eMHrCcZYJ9mgQlc4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/a17b93-cc89-4d08-a5b2-636d6fc0048f/1/n4o8mp7fZEc1qU6wnwHKs5hV0ng.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/a17b93-cc89-4d08-a5b2-636d6fc0048f/1/n4o8mp7fZEc1qU6wnwHKs5hV0ng.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n4o8mp7fZEc1qU6wnwHKs5hV0ng.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:50:11:83:66:1f:9e:f7:66:4f:87:20:66:3c:2e:71:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f8a3c9a9edf644735a94eb09f01cab39855d278
        Validity
            Not Before: Apr 19 22:00:47 2025 GMT
            Not After : Apr 20 22:00:47 2025 GMT
        Subject: CN=c897fe7e8e0d6567939b717c6cf5f9d539413069
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:63:22:f1:64:9c:be:dc:f4:a5:38:ef:25:fd:
                    f8:e8:2a:2b:bf:24:0d:c4:ee:55:8c:53:c3:c1:a4:
                    9d:98:0e:06:77:21:16:16:3e:e7:12:da:31:cc:b1:
                    d2:d2:45:2e:05:fb:a1:b1:20:a8:af:d6:13:14:43:
                    9b:1d:12:e5:91:4a:d4:0c:17:5e:91:bd:19:c6:b6:
                    96:29:2e:c5:b8:a4:d8:3d:fa:e1:a9:bf:c9:aa:2a:
                    7a:f2:6c:75:41:66:39:ca:0c:e3:fe:e4:20:6b:9b:
                    8e:31:1e:0a:e5:5d:10:03:e2:ae:26:67:c4:9a:7f:
                    ca:1c:09:ec:64:81:7a:a4:82:b6:e1:b6:10:65:df:
                    ec:12:34:84:3a:74:9b:23:73:72:3f:c3:a5:d5:3e:
                    a0:33:7f:ed:62:49:be:4b:db:e9:ec:dd:da:6f:70:
                    db:28:24:90:65:0a:2c:54:dd:b2:b9:7c:6c:33:a9:
                    d9:41:01:f3:b3:d3:eb:9f:94:4e:8e:e6:f5:3c:95:
                    c9:6c:9f:3b:f9:f1:56:80:af:0d:f1:07:8c:8a:82:
                    e8:54:90:0b:04:31:18:0e:c1:03:6f:43:c0:1b:f2:
                    0a:5c:4c:08:8f:1c:d5:b1:16:b6:cb:86:ab:c7:d8:
                    99:03:4e:e6:dd:8a:73:91:41:74:45:02:72:9e:23:
                    2b:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:97:FE:7E:8E:0D:65:67:93:9B:71:7C:6C:F5:F9:D5:39:41:30:69
            X509v3 Authority Key Identifier:
                keyid:9F:8A:3C:9A:9E:DF:64:47:35:A9:4E:B0:9F:01:CA:B3:98:55:D2:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n4o8mp7fZEc1qU6wnwHKs5hV0ng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a17b93-cc89-4d08-a5b2-636d6fc0048f/1/n4o8mp7fZEc1qU6wnwHKs5hV0ng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a17b93-cc89-4d08-a5b2-636d6fc0048f/1/n4o8mp7fZEc1qU6wnwHKs5hV0ng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:c5:ba:03:3c:2f:48:bd:2d:80:b8:df:c2:0f:24:04:82:bd:
         19:11:9f:1f:26:58:7e:01:37:a4:1a:32:8c:cf:63:c6:57:97:
         bd:52:cd:82:4d:dd:19:6c:51:ab:42:12:6e:bc:21:0e:bb:9a:
         21:6a:f1:35:64:22:40:e1:b4:89:04:f9:88:32:a8:0c:6e:d0:
         9f:c6:3f:ce:e9:2d:4c:c3:50:2f:ff:13:5c:8c:36:f6:b2:ba:
         02:3e:97:78:1c:ac:c6:c3:a1:dd:5a:95:0b:e4:ca:60:07:ba:
         80:56:5b:15:2a:a3:2d:ed:c0:e3:e9:a0:7a:29:e7:94:3d:6d:
         6e:9f:73:0f:b7:b8:87:28:cc:80:2e:9a:e7:bd:44:30:f8:66:
         48:4d:34:6b:57:80:5f:54:3d:86:70:84:ac:11:85:19:cf:4b:
         1c:60:3c:ac:8f:f3:a1:ac:e0:6f:b5:62:1d:09:67:5f:7d:f5:
         6e:22:ec:dd:9b:95:a6:8a:b9:2c:5a:6d:49:35:a2:32:9d:4b:
         4c:17:67:a4:e4:b5:b1:57:fc:7b:8d:bf:87:8c:8f:54:ea:03:
         d2:f2:31:95:91:cc:8b:fa:8b:c3:4d:b2:10:3c:9f:4e:1c:dc:
         2d:b6:4c:3a:3c:ca:1b:78:8f:af:6e:fa:b6:57:4a:ad:d2:8a:
         8f:84:dc:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:14:33 2025 by rpki-client