Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft
File:                     N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft (raw, json)
Hash identifier:          g89oGSiQxcD2DKkX6gaomIc5kmU1aEPH2gdLMruy8ok=
Subject key identifier:   22:72:79:FA:59:03:E7:4D:9C:01:77:12:4C:33:19:B3:B3:F7:26:69
Authority key identifier: 37:4E:27:29:B1:73:69:89:0A:15:12:F6:43:CD:08:E4:BA:2F:F4:14
Certificate issuer:       /CN=374e2729b17369890a1512f643cd08e4ba2ff414
Certificate serial:       01977075DC85E70843FC0ABFD4FED41230C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft
Manifest number:          0DFF
Signing time:             Sat 14 Jun 2025 22:01:01 +0000
Manifest this update:     Sat 14 Jun 2025 22:01:01 +0000
Manifest next update:     Sun 15 Jun 2025 22:01:01 +0000
Files and hashes:         1: 3520iAwmR0BvV2MPg7TBl3ALKj4.roa (hash: w6lShDZfgepO7x4Np/TeK1Ek0txjQUSZQ5viOdvUQa4=)
                          2: C_WFK57ORMYmTPM8C6MEKdkZzcw.roa (hash: UGi0NlFvaky9A83aLUwpBw47ySnkhX86em/MvBBhL6E=)
                          3: N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl (hash: 4izmKzcaV6iKYL/LANeBhgtS+EsW81IUsCW0sNrz/YE=)
                          4: TBUQGbvGy8WpxYe11EDrGLGBcx8.roa (hash: 3whARzgV373Hq7bJRQXnA+BqWKOJ6PlgdDArlf/RCOg=)
                          5: mtEhXVsq4tQu2Q9mIDoxxW8IYZw.roa (hash: AojxXVHH/gbQ3MPiJY/87qknZA5A4RNwVQYYZL9bDe8=)
                          6: wg9s7DQX6eW3dDdaARTAPpRTzqc.roa (hash: BT19Mg+zBya+5K3DArKvF9emtWlSQhaPjSW20vhvIVk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 19:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:70:75:dc:85:e7:08:43:fc:0a:bf:d4:fe:d4:12:30:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=374e2729b17369890a1512f643cd08e4ba2ff414
        Validity
            Not Before: Jun 14 22:01:01 2025 GMT
            Not After : Jun 15 22:01:01 2025 GMT
        Subject: CN=227279fa5903e74d9c0177124c3319b3b3f72669
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:14:4a:f4:cd:3f:4e:e6:63:5e:fa:e3:91:12:
                    36:11:6d:f7:81:a9:18:41:a5:15:3a:af:a6:16:d4:
                    93:9d:7a:6a:e9:0d:6d:c3:1c:e2:c7:80:fa:62:be:
                    44:a2:36:fa:ea:1c:38:57:42:b5:14:55:6f:a8:dd:
                    6f:54:fd:90:ce:07:4a:5e:60:87:27:25:5d:ef:82:
                    bc:c8:cf:7c:ad:05:d1:b6:1a:98:92:9e:bc:2c:19:
                    59:80:93:72:01:69:df:74:79:ad:aa:98:c7:8b:46:
                    a5:d8:40:0b:72:ea:2c:7b:f5:66:77:26:39:ba:18:
                    cc:7f:15:cd:03:55:d2:40:7a:1b:52:9d:59:6d:e3:
                    d5:50:ab:c7:1d:dc:56:dc:af:17:a0:4c:2e:f8:5c:
                    c2:a3:85:0b:a3:fd:b9:de:f7:28:32:8a:7c:8d:88:
                    3c:09:c0:fb:74:14:bb:ec:64:3e:52:e0:52:a8:cd:
                    0e:58:54:c6:1a:38:54:87:21:d4:ef:54:9c:4a:cf:
                    d3:3f:b2:e9:f8:69:ad:12:b3:aa:10:16:4e:0c:7e:
                    03:86:f8:c4:ae:95:ad:7f:ac:5e:ab:97:93:fc:ff:
                    99:4b:70:4a:d2:3a:16:93:78:44:bf:32:46:0b:db:
                    6f:24:3e:57:d1:0d:45:46:1f:28:6b:99:40:b0:6c:
                    36:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:72:79:FA:59:03:E7:4D:9C:01:77:12:4C:33:19:B3:B3:F7:26:69
            X509v3 Authority Key Identifier:
                keyid:37:4E:27:29:B1:73:69:89:0A:15:12:F6:43:CD:08:E4:BA:2F:F4:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:69:04:25:84:00:f2:23:4c:16:aa:0c:c0:02:25:9b:11:d3:
         bc:ac:31:07:29:c0:87:54:7a:11:f3:6a:a1:84:53:14:d6:70:
         e5:0f:d1:d6:f0:72:e5:c6:f8:7a:41:5d:b8:4b:e3:ed:aa:05:
         74:52:f9:74:45:4d:45:1b:9a:72:e0:1d:7b:6b:e9:90:bc:5d:
         cf:ed:45:f1:b8:64:50:ac:4e:ba:c6:70:b8:40:d7:7a:e1:11:
         26:e2:e8:ed:d9:91:6b:92:ee:61:8c:b6:4d:40:03:de:c8:9a:
         3f:d4:e0:8c:ea:d4:c0:3f:a3:38:2d:6a:8c:81:43:52:62:cb:
         cf:1c:64:b9:b5:ea:f7:b3:d3:01:2f:a9:73:d6:86:aa:06:46:
         08:10:a8:ad:64:16:5d:10:1d:94:b6:db:bd:b7:b0:90:10:56:
         7d:f0:26:b7:b8:e2:e1:4c:24:24:6c:6e:0c:a9:84:6f:75:92:
         58:0b:84:bb:3a:c6:a8:65:f0:ec:dd:08:f8:0a:02:c6:d6:23:
         ea:8f:c5:26:e9:01:7d:af:d5:ad:f2:8a:db:6f:52:5d:62:c9:
         6f:cd:a1:25:f7:60:ab:7a:54:05:f9:b2:a1:a3:f2:07:bd:04:
         6a:40:72:4d:80:9a:be:24:77:29:01:e2:ce:49:ee:e3:5b:d2:
         72:57:7e:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdwddyF5whD/Aq/1P7UEjDEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3NGUyNzI5YjE3MzY5ODkwYTE1MTJmNjQzY2QwOGU0YmEy
ZmY0MTQwHhcNMjUwNjE0MjIwMTAxWhcNMjUwNjE1MjIwMTAxWjAzMTEwLwYDVQQD
EygyMjcyNzlmYTU5MDNlNzRkOWMwMTc3MTI0YzMzMTliM2IzZjcyNjY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxRK9M0/TuZjXvrjkRI2EW33gakY
QaUVOq+mFtSTnXpq6Q1twxzix4D6Yr5Eojb66hw4V0K1FFVvqN1vVP2QzgdKXmCH
JyVd74K8yM98rQXRthqYkp68LBlZgJNyAWnfdHmtqpjHi0al2EALcuose/VmdyY5
uhjMfxXNA1XSQHobUp1ZbePVUKvHHdxW3K8XoEwu+FzCo4ULo/253vcoMop8jYg8
CcD7dBS77GQ+UuBSqM0OWFTGGjhUhyHU71ScSs/TP7Lp+GmtErOqEBZODH4DhvjE
rpWtf6xeq5eT/P+ZS3BK0joWk3hEvzJGC9tvJD5X0Q1FRh8oa5lAsGw2XQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCJyefpZA+dNnAF3EkwzGbOz9yZpMB8GA1UdIwQY
MBaAFDdOJymxc2mJChUS9kPNCOS6L/QUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjA0bktiRnphWWtLRlJMMlE4MEk1TG92OUJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC85NTIyMzAtYzI2Mi00MWNjLWI5NTYt
Y2ZjNDZhNzZlYzc4LzEvTjA0bktiRnphWWtLRlJMMlE4MEk1TG92OUJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC85NTIyMzAtYzI2Mi00MWNjLWI5NTYtY2ZjNDZhNzZlYzc4
LzEvTjA0bktiRnphWWtLRlJMMlE4MEk1TG92OUJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANmkEJYQA
8iNMFqoMwAIlmxHTvKwxBynAh1R6EfNqoYRTFNZw5Q/R1vBy5cb4ekFduEvj7aoF
dFL5dEVNRRuacuAde2vpkLxdz+1F8bhkUKxOusZwuEDXeuERJuLo7dmRa5LuYYy2
TUAD3siaP9TgjOrUwD+jOC1qjIFDUmLLzxxkubXq97PTAS+pc9aGqgZGCBCorWQW
XRAdlLbbvbewkBBWffAmt7ji4UwkJGxuDKmEb3WSWAuEuzrGqGXw7N0I+AoCxtYj
6o/FJukBfa/VrfKK229SXWLJb82hJfdgq3pUBfmyoaPyB70EakByTYCaviR3KQHi
zknu41vScld+mg==
-----END CERTIFICATE-----
Generated at Sun Jun 15 00:24:27 2025 by rpki-client