Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c961a4-c6a6-42ca-a18f-124658b36dfd/1/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.mft
File:                     NjvRspyJ7blE4ocQ0ZOHTJQyPqo.mft (raw, json)
Hash identifier:          fZi8dgVCWM52RKbs9702V7NTHk3F0bH+BZGXcRfYjtM=
Subject key identifier:   94:E2:B0:B6:E0:4F:0D:D5:43:F5:F4:81:49:B2:2E:78:78:9C:3D:6E
Authority key identifier: 36:3B:D1:B2:9C:89:ED:B9:44:E2:87:10:D1:93:87:4C:94:32:3E:AA
Certificate issuer:       /CN=363bd1b29c89edb944e28710d193874c94323eaa
Certificate serial:       019921B24BA1D9AA1D9BBF6579924E80ED1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/c961a4-c6a6-42ca-a18f-124658b36dfd/1/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.mft
Manifest number:          0354
Signing time:             Sun 07 Sep 2025 01:02:36 +0000
Manifest this update:     Sun 07 Sep 2025 01:02:36 +0000
Manifest next update:     Mon 08 Sep 2025 01:02:36 +0000
Files and hashes:         1: NjvRspyJ7blE4ocQ0ZOHTJQyPqo.crl (hash: +FwX6v6UZ44wqizqfb/U7T0VW+Uoi4hcchIkUfFaWno=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/c961a4-c6a6-42ca-a18f-124658b36dfd/1/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/c961a4-c6a6-42ca-a18f-124658b36dfd/1/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 01:02:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:21:b2:4b:a1:d9:aa:1d:9b:bf:65:79:92:4e:80:ed:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=363bd1b29c89edb944e28710d193874c94323eaa
        Validity
            Not Before: Sep  7 01:02:36 2025 GMT
            Not After : Sep  8 01:02:36 2025 GMT
        Subject: CN=94e2b0b6e04f0dd543f5f48149b22e78789c3d6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:61:2e:8b:d4:58:35:a9:08:ff:f6:5e:4e:49:
                    b4:d5:ab:14:a9:08:86:a4:fd:42:fe:a1:c1:61:a8:
                    97:06:c7:a5:5f:5d:bb:df:32:9f:25:9f:34:c7:40:
                    78:a7:62:45:07:bd:5f:e7:64:f9:51:92:c9:c1:c8:
                    2d:a7:4c:79:31:34:25:62:ac:fe:8a:7a:40:8e:cc:
                    9a:53:40:3a:88:f1:45:2d:a6:ea:db:ca:19:b5:4c:
                    72:63:07:82:e8:58:e8:aa:fb:35:d3:05:c0:ac:83:
                    a9:72:5f:97:78:f2:8d:4e:e2:17:bb:1a:03:23:91:
                    00:99:4e:7b:ae:a3:4c:e1:a4:f3:aa:42:3c:69:99:
                    21:70:a8:65:f4:27:69:06:6c:5c:2d:3f:61:22:e4:
                    0c:a0:5e:e4:6e:4f:af:cb:a4:05:3f:5b:d8:e7:ea:
                    20:b3:96:fd:0f:53:83:2e:b9:8b:d8:10:3e:01:56:
                    e0:f4:29:bc:e4:75:af:b0:ea:df:38:d2:52:a6:98:
                    ef:42:d8:cf:42:c3:5f:8b:9d:d0:3b:bb:ab:0d:af:
                    52:68:3b:d5:a9:5b:27:08:f4:f2:a7:75:8d:ff:85:
                    a3:dd:d9:f4:d8:6f:5f:3b:5c:ce:7f:10:fb:9f:12:
                    76:3b:b4:b1:b5:67:69:73:0b:9d:e3:ad:0e:77:03:
                    31:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:E2:B0:B6:E0:4F:0D:D5:43:F5:F4:81:49:B2:2E:78:78:9C:3D:6E
            X509v3 Authority Key Identifier:
                keyid:36:3B:D1:B2:9C:89:ED:B9:44:E2:87:10:D1:93:87:4C:94:32:3E:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c961a4-c6a6-42ca-a18f-124658b36dfd/1/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c961a4-c6a6-42ca-a18f-124658b36dfd/1/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:4a:22:4f:6e:f3:f0:04:ba:8a:6c:d7:1b:5e:a5:5f:35:16:
         fd:3c:39:dd:ec:84:f4:83:98:46:28:d4:84:71:53:5e:75:a0:
         05:cf:f2:82:d7:5a:b1:6e:d4:72:b9:a4:c7:00:3b:e2:1c:00:
         e9:0d:ed:8e:72:fa:e0:0b:eb:df:17:99:52:4e:99:12:fc:36:
         f7:9a:7d:2d:53:8d:e3:d8:53:50:ac:e7:d9:1a:01:c5:5d:3c:
         eb:ce:fd:3d:25:4b:ed:05:f6:3e:91:b1:18:74:6f:f1:84:7b:
         1c:60:b6:37:0e:e0:f5:bd:f0:a8:04:4d:18:54:d7:cd:e2:52:
         c5:32:aa:49:52:63:72:38:e7:40:8c:06:0c:d4:12:ca:3f:26:
         51:11:9a:5f:29:3f:41:e5:ad:17:d4:85:7a:9f:1c:9c:4c:fc:
         7e:2f:72:03:49:23:06:7e:4c:19:a0:ae:1d:f7:ad:59:66:80:
         16:01:a9:d4:22:df:51:69:d5:15:e1:da:f8:f5:d8:1d:7e:c6:
         56:5d:fd:aa:66:c7:42:76:a9:57:e2:58:a9:0f:da:90:03:18:
         9d:d6:5d:cf:da:39:a7:34:ab:e9:32:5c:e5:ff:e5:1e:ce:af:
         0f:4d:14:c5:f7:19:e1:69:5d:2f:48:49:0c:ca:ab:e0:f2:b1:
         42:49:66:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:15:13 2025 by rpki-client