Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft
File:                     N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft (raw, json)
Hash identifier:          LhOBbVc7JVQdxxs/5yLuhOkmmOP4pMh4s6cFpGL24to=
Subject key identifier:   A5:D4:CD:12:5F:F3:8B:C1:4B:30:08:9C:A9:89:D1:1E:21:16:8A:2A
Authority key identifier: 37:4E:27:29:B1:73:69:89:0A:15:12:F6:43:CD:08:E4:BA:2F:F4:14
Certificate issuer:       /CN=374e2729b17369890a1512f643cd08e4ba2ff414
Certificate serial:       01975B37AF5E94BBA0C6912881A7FF61D3D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft
Manifest number:          0DF4
Signing time:             Tue 10 Jun 2025 19:01:05 +0000
Manifest this update:     Tue 10 Jun 2025 19:01:05 +0000
Manifest next update:     Wed 11 Jun 2025 19:01:05 +0000
Files and hashes:         1: 3520iAwmR0BvV2MPg7TBl3ALKj4.roa (hash: w6lShDZfgepO7x4Np/TeK1Ek0txjQUSZQ5viOdvUQa4=)
                          2: C_WFK57ORMYmTPM8C6MEKdkZzcw.roa (hash: UGi0NlFvaky9A83aLUwpBw47ySnkhX86em/MvBBhL6E=)
                          3: N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl (hash: z/kH/HshLgVf5vZhPC+oFb99aOOrmwLlifODE535dVQ=)
                          4: TBUQGbvGy8WpxYe11EDrGLGBcx8.roa (hash: 3whARzgV373Hq7bJRQXnA+BqWKOJ6PlgdDArlf/RCOg=)
                          5: mtEhXVsq4tQu2Q9mIDoxxW8IYZw.roa (hash: AojxXVHH/gbQ3MPiJY/87qknZA5A4RNwVQYYZL9bDe8=)
                          6: wg9s7DQX6eW3dDdaARTAPpRTzqc.roa (hash: BT19Mg+zBya+5K3DArKvF9emtWlSQhaPjSW20vhvIVk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 19:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5b:37:af:5e:94:bb:a0:c6:91:28:81:a7:ff:61:d3:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=374e2729b17369890a1512f643cd08e4ba2ff414
        Validity
            Not Before: Jun 10 19:01:05 2025 GMT
            Not After : Jun 11 19:01:05 2025 GMT
        Subject: CN=a5d4cd125ff38bc14b30089ca989d11e21168a2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:ac:68:33:80:c2:6e:8d:6e:5a:b9:6c:1a:c5:
                    c7:f4:8e:b3:21:03:20:e3:53:cc:a7:32:92:2a:4d:
                    c3:7c:b5:04:0f:61:e2:96:9c:29:84:32:d5:e5:4a:
                    15:82:55:22:96:6b:20:c9:ec:70:dd:d0:15:5e:b8:
                    b6:8c:21:9e:64:94:d0:76:6e:14:a1:0e:cd:33:8c:
                    23:c5:86:88:f3:28:a5:e0:52:9f:9f:e0:ef:02:97:
                    12:bc:1f:f9:04:ea:d0:7a:e8:8f:b8:68:b7:39:af:
                    41:08:2b:8d:d9:5f:7e:93:eb:c9:0f:44:b7:e2:5f:
                    06:70:b0:3e:c7:0d:de:0e:74:75:18:35:36:98:97:
                    a9:c6:8e:8b:3b:1c:77:39:5b:ab:fb:0f:92:bd:d7:
                    6f:23:e8:04:4b:d0:07:b4:7d:92:71:85:12:f9:3e:
                    20:89:77:15:7c:53:9d:61:bd:ab:1c:eb:a5:e3:a6:
                    58:b2:1d:bd:e0:d5:8a:0b:b4:1a:78:50:2d:3b:66:
                    fe:42:ef:1a:6b:38:57:6a:b4:52:53:1e:5a:1c:7a:
                    2e:9e:54:b1:c3:68:aa:38:7e:5a:7e:6e:8b:a7:c5:
                    b2:a5:33:d7:83:80:f4:cc:54:39:65:e4:f2:17:76:
                    c3:05:11:bf:71:d6:c0:c2:73:08:d5:f2:c0:71:2c:
                    f5:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:D4:CD:12:5F:F3:8B:C1:4B:30:08:9C:A9:89:D1:1E:21:16:8A:2A
            X509v3 Authority Key Identifier:
                keyid:37:4E:27:29:B1:73:69:89:0A:15:12:F6:43:CD:08:E4:BA:2F:F4:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:c4:2c:d4:ff:f1:98:4c:96:39:85:e3:ef:c1:7e:4c:6e:49:
         14:7c:2d:2d:6f:f8:22:c3:fe:b8:eb:50:cc:97:34:42:75:f6:
         59:9a:b8:c2:a0:8c:3c:34:98:28:ad:bf:27:69:50:60:8c:5c:
         e6:f5:2f:3d:9a:d8:e2:4e:84:0b:54:65:2c:64:4a:77:68:b9:
         38:22:cd:32:19:b1:cc:5f:69:98:93:4e:cb:d6:e5:c3:36:01:
         3e:b8:1d:1f:4c:07:d2:4c:6d:77:27:e8:19:f4:47:32:46:68:
         2c:44:54:64:f4:04:6a:45:a0:2f:97:4e:7f:1b:82:b1:90:af:
         0b:23:a3:37:dc:76:89:f1:8a:f5:21:a2:39:2a:46:0d:ea:9a:
         81:0a:9e:93:c7:3d:fb:dd:f0:3e:81:5d:e3:f5:53:73:3e:70:
         76:d1:4c:36:cd:03:ed:99:60:f7:36:e7:4f:02:41:f8:bf:12:
         40:8d:dc:07:94:0c:b7:9f:1e:6e:8e:bd:37:50:fc:d6:fd:51:
         dd:73:10:4e:2e:17:fd:24:56:10:e6:8b:79:8d:27:5a:33:4a:
         a8:77:3c:17:21:0e:cd:f8:44:07:b0:5d:b7:90:d1:ab:1e:10:
         1c:77:c3:5a:48:a9:af:93:72:3a:37:db:22:88:a9:af:10:8a:
         ff:0d:bc:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 03:24:41 2025 by rpki-client