Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/72ee02-13d9-4396-9f7e-4ca842bacda5/1/nMYO2IFBiiF-jdPB-lI-JWXK65s.mft
File:                     nMYO2IFBiiF-jdPB-lI-JWXK65s.mft (raw, json)
Hash identifier:          CivCj0/XYZYAqtOOPEdS/UDEb1vbYTumJSr5tS3x3DE=
Subject key identifier:   6E:DF:23:73:8A:E1:1D:CB:06:01:FF:B4:8B:89:D9:D0:C2:B7:6B:0B
Authority key identifier: 9C:C6:0E:D8:81:41:8A:21:7E:8D:D3:C1:FA:52:3E:25:65:CA:EB:9B
Certificate issuer:       /CN=9cc60ed881418a217e8dd3c1fa523e2565caeb9b
Certificate serial:       0197500E885A2FD8B2BCFAF65D0D59DC7C85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nMYO2IFBiiF-jdPB-lI-JWXK65s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/72ee02-13d9-4396-9f7e-4ca842bacda5/1/nMYO2IFBiiF-jdPB-lI-JWXK65s.mft
Manifest number:          157F
Signing time:             Sun 08 Jun 2025 15:00:19 +0000
Manifest this update:     Sun 08 Jun 2025 15:00:19 +0000
Manifest next update:     Mon 09 Jun 2025 15:00:19 +0000
Files and hashes:         1: EP3bkF_F-0JN_ikpcovpxVorS-8.roa (hash: hqxhbHTgDziJ5finpaZT0guvZfxkt53C1CG9ZliF94Y=)
                          2: nMYO2IFBiiF-jdPB-lI-JWXK65s.crl (hash: /eB45akEClfpeKjCq2NmNMtTAbMMGp6u+e6zlM77dOc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/72ee02-13d9-4396-9f7e-4ca842bacda5/1/nMYO2IFBiiF-jdPB-lI-JWXK65s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/72ee02-13d9-4396-9f7e-4ca842bacda5/1/nMYO2IFBiiF-jdPB-lI-JWXK65s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nMYO2IFBiiF-jdPB-lI-JWXK65s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 11:44:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:50:0e:88:5a:2f:d8:b2:bc:fa:f6:5d:0d:59:dc:7c:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cc60ed881418a217e8dd3c1fa523e2565caeb9b
        Validity
            Not Before: Jun  8 15:00:19 2025 GMT
            Not After : Jun  9 15:00:19 2025 GMT
        Subject: CN=6edf23738ae11dcb0601ffb48b89d9d0c2b76b0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:cb:ae:23:0f:5c:26:b5:4d:d2:53:73:61:88:
                    83:e9:c2:b6:60:d4:ac:76:07:58:71:ce:ea:ff:91:
                    38:b5:b5:2d:78:2c:e4:6c:4f:e7:58:e2:a9:93:3f:
                    4d:a2:2f:08:16:f1:3f:b1:55:40:8d:a3:58:62:f0:
                    2f:e0:6c:d1:32:44:94:45:c0:fe:0b:f8:97:a3:c1:
                    15:51:03:ad:2e:3c:94:a5:f0:86:8e:c3:3a:fc:ae:
                    ec:81:27:6e:e3:eb:72:b5:05:73:f0:1d:75:9a:94:
                    4e:10:6f:88:ae:a4:dc:f9:90:23:0c:3f:51:e2:90:
                    30:26:8a:3f:a9:b4:79:91:1c:d4:9c:81:31:5a:5f:
                    5c:b5:f7:6e:77:d8:2f:2d:3c:7b:bf:90:db:d3:ea:
                    8a:93:11:45:45:7b:7d:4e:cf:1a:eb:d3:97:b7:2b:
                    5c:12:0a:65:4b:86:6a:78:91:19:8d:de:da:e2:e1:
                    49:5f:44:3c:b9:05:e0:bb:18:2b:af:ef:b6:9f:10:
                    16:54:52:23:fa:e9:37:41:ea:56:8a:8b:56:f4:3a:
                    1f:9b:24:cb:6a:f6:2a:54:55:c7:b3:cd:72:90:86:
                    73:8c:aa:25:54:16:bf:3d:10:fb:50:c1:b3:22:77:
                    ed:be:8d:06:71:68:54:00:7b:e6:db:e5:44:5d:7f:
                    8f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:DF:23:73:8A:E1:1D:CB:06:01:FF:B4:8B:89:D9:D0:C2:B7:6B:0B
            X509v3 Authority Key Identifier:
                keyid:9C:C6:0E:D8:81:41:8A:21:7E:8D:D3:C1:FA:52:3E:25:65:CA:EB:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nMYO2IFBiiF-jdPB-lI-JWXK65s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/72ee02-13d9-4396-9f7e-4ca842bacda5/1/nMYO2IFBiiF-jdPB-lI-JWXK65s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/72ee02-13d9-4396-9f7e-4ca842bacda5/1/nMYO2IFBiiF-jdPB-lI-JWXK65s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:d0:25:5d:63:e1:1e:7b:b1:d9:5a:fc:83:e8:07:f4:58:18:
         6a:b1:eb:41:db:d0:f3:55:d4:76:4c:1d:19:1a:aa:f5:8e:88:
         8f:cb:61:63:60:78:00:2b:2f:6d:cf:0c:df:5d:b1:42:e2:a9:
         6b:4a:92:5e:9f:45:17:8a:cd:2f:eb:3c:59:f0:38:c2:9c:30:
         fb:0d:09:e9:1b:26:f5:8b:9f:11:b2:d9:ab:e2:4f:40:ee:4a:
         c0:7a:55:f2:7d:94:bc:47:6c:0d:fd:fa:45:eb:68:a8:fb:fa:
         13:dc:76:38:58:84:a1:54:92:a7:a2:3e:44:b4:2b:6b:0e:13:
         1e:d3:d7:37:ac:c5:3d:bf:f0:ad:c6:88:a4:cd:b9:fd:12:d6:
         ba:e1:33:33:85:f8:e6:eb:98:da:39:dc:26:3f:30:16:28:10:
         9c:d2:79:aa:f0:28:65:0a:9d:d2:97:ab:9a:ca:bf:de:4e:62:
         ec:6d:45:e1:70:30:72:9d:b2:2b:1f:ce:59:b9:4f:71:af:59:
         70:12:38:47:95:71:3b:07:0e:61:a5:64:cc:03:2b:16:18:55:
         ae:85:28:4b:74:a4:8e:b6:06:fb:32:c7:81:1b:2d:cd:c5:61:
         ef:f5:b3:38:85:1f:e0:9b:ed:bc:98:07:88:89:e2:5f:25:f3:
         66:16:52:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:20:06 2025 by rpki-client