Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.mft
File:                     NiQhSOPmNqkDQ_PpUES439udHNk.mft (raw, json)
Hash identifier:          u2AW3Fj3HczhcHYk6lYT9gSw/lYfoF59lP3I1h4fkD8=
Subject key identifier:   76:84:7C:FD:9C:00:73:57:EC:75:4E:FF:90:38:22:3B:00:EE:D7:E8
Authority key identifier: 36:24:21:48:E3:E6:36:A9:03:43:F3:E9:50:44:B8:DF:DB:9D:1C:D9
Certificate issuer:       /CN=36242148e3e636a90343f3e95044b8dfdb9d1cd9
Certificate serial:       0197684DE6A3DE36D06F23FCDCA5656F8E7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NiQhSOPmNqkDQ_PpUES439udHNk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.mft
Manifest number:          E7
Signing time:             Fri 13 Jun 2025 08:00:25 +0000
Manifest this update:     Fri 13 Jun 2025 08:00:25 +0000
Manifest next update:     Sat 14 Jun 2025 08:00:25 +0000
Files and hashes:         1: NiQhSOPmNqkDQ_PpUES439udHNk.crl (hash: UivZhUgRpSgTaRKq0tao5Be0iOTFNQobduqbfQxioP4=)
                          2: zIR-Nz3H2D4s_KM8Bm98PoR8Mws.roa (hash: vxeo0iUuDX5Ze9Stf4uTh6KeWV+Vu5qvbWwTZuqVEFY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NiQhSOPmNqkDQ_PpUES439udHNk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 07:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:68:4d:e6:a3:de:36:d0:6f:23:fc:dc:a5:65:6f:8e:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36242148e3e636a90343f3e95044b8dfdb9d1cd9
        Validity
            Not Before: Jun 13 08:00:25 2025 GMT
            Not After : Jun 14 08:00:25 2025 GMT
        Subject: CN=76847cfd9c007357ec754eff9038223b00eed7e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:eb:3e:00:86:45:48:b1:79:19:1a:92:1a:3a:
                    af:bf:e0:e4:a3:1d:4a:06:e3:9e:44:83:c4:9f:59:
                    19:59:fb:26:50:18:11:fe:43:b7:32:53:1c:b2:41:
                    d8:32:03:bb:ca:19:ed:25:f5:26:b6:b3:63:bb:48:
                    5f:89:fb:9d:7d:00:d0:c1:7a:04:b2:cd:c3:1d:f8:
                    cf:58:80:94:0e:ca:70:b5:73:77:c3:c7:2f:8a:9f:
                    28:64:04:ac:b2:96:fa:05:a6:87:37:16:09:1d:e5:
                    7e:db:e6:74:bf:0c:4b:b4:73:77:a8:02:52:81:40:
                    5e:35:bd:95:9e:09:a4:c4:30:df:41:90:29:40:e9:
                    b4:62:72:94:33:a3:63:c1:fa:d8:09:2d:f5:0a:90:
                    28:29:0d:00:60:d0:73:ed:3a:10:ca:bb:ea:b5:9b:
                    80:c7:c8:a9:e6:79:43:bd:76:08:b1:20:df:45:34:
                    58:e1:00:49:4d:63:a6:b2:29:6d:6b:4f:3a:ea:aa:
                    df:77:47:4c:c6:ad:fc:98:3f:22:0d:d6:91:dc:6c:
                    db:24:c4:24:0a:54:10:40:f1:4d:fa:c4:71:1d:eb:
                    00:0f:68:63:3d:20:b0:e0:90:b0:72:53:43:66:10:
                    71:c1:d0:83:26:91:1f:50:54:e0:2e:16:3e:b4:1e:
                    62:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:84:7C:FD:9C:00:73:57:EC:75:4E:FF:90:38:22:3B:00:EE:D7:E8
            X509v3 Authority Key Identifier:
                keyid:36:24:21:48:E3:E6:36:A9:03:43:F3:E9:50:44:B8:DF:DB:9D:1C:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NiQhSOPmNqkDQ_PpUES439udHNk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3c3da0-d3f8-4aa2-8334-26d759365402/1/NiQhSOPmNqkDQ_PpUES439udHNk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:5f:34:d0:60:64:87:93:ae:42:ee:d9:1d:d1:34:db:a6:50:
         81:e1:38:8d:96:4b:fc:cf:06:90:60:94:c5:23:6f:b3:03:23:
         ad:ff:71:81:52:af:4e:1b:64:d9:e1:91:f2:1a:df:7e:81:60:
         c0:86:92:24:74:02:48:3a:7a:39:29:fc:49:4e:fe:ca:e3:94:
         f6:30:ab:b6:0b:58:93:39:5b:be:14:c1:9a:a0:14:05:45:f0:
         5f:41:f4:5c:07:7a:af:cc:8e:2a:91:36:01:41:b4:a1:f8:05:
         56:09:3b:ae:24:81:30:8b:b1:45:59:25:ce:b8:46:e8:a1:f8:
         fe:0f:29:c8:56:a5:4d:47:d4:f6:23:48:43:c2:74:c9:24:ea:
         a4:17:d0:b2:c8:99:4c:f5:da:ca:01:7b:b9:47:48:f6:ea:b1:
         ba:5f:6e:3c:44:b9:39:b8:e2:e6:3d:73:3a:81:0e:88:6f:3b:
         71:61:53:7e:67:e0:ec:67:59:db:ca:e9:b7:c8:14:9d:ff:aa:
         ab:60:ed:85:ac:db:fa:93:2a:79:c4:57:66:ea:0f:56:61:3a:
         5c:59:72:ae:30:4b:03:75:84:7c:7f:e4:52:3f:c5:43:ab:5b:
         47:58:3d:c6:b9:62:78:9f:e2:93:3f:58:d6:02:9e:a5:3e:67:
         76:e8:1b:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdoTeaj3jbQbyP83KVlb459MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2MjQyMTQ4ZTNlNjM2YTkwMzQzZjNlOTUwNDRiOGRmZGI5
ZDFjZDkwHhcNMjUwNjEzMDgwMDI1WhcNMjUwNjE0MDgwMDI1WjAzMTEwLwYDVQQD
Eyg3Njg0N2NmZDljMDA3MzU3ZWM3NTRlZmY5MDM4MjIzYjAwZWVkN2U4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5+s+AIZFSLF5GRqSGjqvv+Dkox1K
BuOeRIPEn1kZWfsmUBgR/kO3MlMcskHYMgO7yhntJfUmtrNju0hfifudfQDQwXoE
ss3DHfjPWICUDspwtXN3w8cvip8oZASsspb6BaaHNxYJHeV+2+Z0vwxLtHN3qAJS
gUBeNb2VngmkxDDfQZApQOm0YnKUM6NjwfrYCS31CpAoKQ0AYNBz7ToQyrvqtZuA
x8ip5nlDvXYIsSDfRTRY4QBJTWOmsilta0866qrfd0dMxq38mD8iDdaR3GzbJMQk
ClQQQPFN+sRxHesAD2hjPSCw4JCwclNDZhBxwdCDJpEfUFTgLhY+tB5iHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHaEfP2cAHNX7HVO/5A4IjsA7tfoMB8GA1UdIwQY
MBaAFDYkIUjj5japA0Pz6VBEuN/bnRzZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmlRaFNPUG1OcWtEUV9QcFVFUzQzOXVkSE5rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8zYzNkYTAtZDNmOC00YWEyLTgzMzQt
MjZkNzU5MzY1NDAyLzEvTmlRaFNPUG1OcWtEUV9QcFVFUzQzOXVkSE5rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC8zYzNkYTAtZDNmOC00YWEyLTgzMzQtMjZkNzU5MzY1NDAy
LzEvTmlRaFNPUG1OcWtEUV9QcFVFUzQzOXVkSE5rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAF800GBk
h5OuQu7ZHdE026ZQgeE4jZZL/M8GkGCUxSNvswMjrf9xgVKvThtk2eGR8hrffoFg
wIaSJHQCSDp6OSn8SU7+yuOU9jCrtgtYkzlbvhTBmqAUBUXwX0H0XAd6r8yOKpE2
AUG0ofgFVgk7riSBMIuxRVklzrhG6KH4/g8pyFalTUfU9iNIQ8J0ySTqpBfQssiZ
TPXaygF7uUdI9uqxul9uPES5Obji5j1zOoEOiG87cWFTfmfg7GdZ28rpt8gUnf+q
q2Dthazb+pMqecRXZuoPVmE6XFlyrjBLA3WEfH/kUj/FQ6tbR1g9xrlieJ/ikz9Y
1gKepT5ndugbxQ==
-----END CERTIFICATE-----
Generated at Fri Jun 13 09:33:58 2025 by rpki-client