Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft
File:                     N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft (raw, json)
Hash identifier:          BrqLcA9g1oi2/Yi/VJd7hGSDnCPO38lpK29L23Ag42M=
Subject key identifier:   62:AC:B4:1F:C5:6B:91:DD:B5:7B:98:ED:75:CD:53:32:6E:42:91:67
Authority key identifier: 37:4E:27:29:B1:73:69:89:0A:15:12:F6:43:CD:08:E4:BA:2F:F4:14
Certificate issuer:       /CN=374e2729b17369890a1512f643cd08e4ba2ff414
Certificate serial:       0197575AE72C20D25B6771089594265AB8DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft
Manifest number:          0DF2
Signing time:             Tue 10 Jun 2025 01:01:04 +0000
Manifest this update:     Tue 10 Jun 2025 01:01:04 +0000
Manifest next update:     Wed 11 Jun 2025 01:01:04 +0000
Files and hashes:         1: 3520iAwmR0BvV2MPg7TBl3ALKj4.roa (hash: w6lShDZfgepO7x4Np/TeK1Ek0txjQUSZQ5viOdvUQa4=)
                          2: C_WFK57ORMYmTPM8C6MEKdkZzcw.roa (hash: UGi0NlFvaky9A83aLUwpBw47ySnkhX86em/MvBBhL6E=)
                          3: N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl (hash: cgjWsyVFSlxKmjD33TSMZWKaJunQDl7CcC1BMEt2kME=)
                          4: TBUQGbvGy8WpxYe11EDrGLGBcx8.roa (hash: 3whARzgV373Hq7bJRQXnA+BqWKOJ6PlgdDArlf/RCOg=)
                          5: mtEhXVsq4tQu2Q9mIDoxxW8IYZw.roa (hash: AojxXVHH/gbQ3MPiJY/87qknZA5A4RNwVQYYZL9bDe8=)
                          6: wg9s7DQX6eW3dDdaARTAPpRTzqc.roa (hash: BT19Mg+zBya+5K3DArKvF9emtWlSQhaPjSW20vhvIVk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:57:5a:e7:2c:20:d2:5b:67:71:08:95:94:26:5a:b8:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=374e2729b17369890a1512f643cd08e4ba2ff414
        Validity
            Not Before: Jun 10 01:01:04 2025 GMT
            Not After : Jun 11 01:01:04 2025 GMT
        Subject: CN=62acb41fc56b91ddb57b98ed75cd53326e429167
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:72:aa:4c:22:97:68:17:03:f2:33:87:26:38:
                    28:56:d9:e6:03:bb:50:29:8f:b6:49:7e:9a:24:f2:
                    00:f6:ab:f1:06:1e:cf:1a:c6:9f:cf:d1:d8:17:e9:
                    dd:2a:c2:84:eb:84:1a:31:a9:8c:ef:7b:36:e2:48:
                    ca:00:2f:ed:44:ae:14:ab:77:28:56:07:63:a5:81:
                    bb:9c:26:8a:56:ff:f0:ab:97:b5:f1:8a:d6:1b:af:
                    f2:55:21:5a:d6:5e:47:65:f6:d3:77:b8:59:00:0d:
                    4a:8d:e0:19:a8:d1:56:e6:2c:55:af:42:31:7d:d6:
                    54:b5:5e:e8:5e:f9:5d:3d:9f:da:81:fd:66:dd:3c:
                    27:0f:7d:b6:97:7d:8a:6d:5e:e9:f1:a0:1f:7f:c6:
                    f0:b5:23:36:cf:3b:8b:e6:9f:ea:3e:ea:23:3b:70:
                    05:08:df:fa:2b:1a:86:26:64:d0:47:63:4b:50:f6:
                    a2:c1:69:29:b4:39:a0:51:d7:25:f5:6a:c1:73:5b:
                    81:7b:f6:cf:62:53:e8:6c:22:b4:3d:b6:2f:24:82:
                    4b:8e:35:01:4e:0c:22:06:7d:b1:45:b1:92:fa:d5:
                    1c:0e:0d:80:d2:d5:4c:12:a0:be:18:cf:83:50:8c:
                    39:6e:90:c3:a1:65:da:2c:21:e5:e9:0a:a5:09:43:
                    21:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:AC:B4:1F:C5:6B:91:DD:B5:7B:98:ED:75:CD:53:32:6E:42:91:67
            X509v3 Authority Key Identifier:
                keyid:37:4E:27:29:B1:73:69:89:0A:15:12:F6:43:CD:08:E4:BA:2F:F4:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:de:a8:25:e1:47:60:a3:6f:d9:59:a2:80:bf:5d:23:2b:b4:
         bd:8f:51:6a:71:ac:6d:40:7d:6f:9d:48:17:72:04:e6:09:e6:
         23:44:74:6b:61:a3:2a:fa:3b:ce:80:bd:9f:f5:1f:ba:15:e5:
         b6:14:33:b8:b3:5d:73:dd:c3:b3:bf:00:e7:d6:9a:67:07:13:
         9d:56:10:81:46:31:5a:2e:22:06:b1:37:6b:d0:d8:3f:3e:97:
         7a:49:8c:56:86:f0:c0:a0:b1:ce:68:02:15:7f:2f:b9:7e:b7:
         ea:71:0b:d9:6c:97:6c:16:c4:6b:38:6c:b2:ca:08:cf:cd:ff:
         2f:28:c6:f8:db:09:c7:bb:3d:bc:ed:ec:ee:19:dc:37:3d:bf:
         56:ff:0b:91:81:c5:37:48:ec:1f:34:ce:e4:bc:9e:d3:07:d1:
         c6:d1:f2:11:a2:c1:93:c0:16:ed:b5:60:8e:65:03:5f:f8:10:
         dc:23:4e:f5:0f:d9:46:54:8e:12:aa:6a:40:04:65:85:f0:e9:
         d5:ee:58:fe:38:89:f3:3c:13:85:44:85:08:5c:51:4d:f8:30:
         90:5a:29:f2:86:9b:25:81:6f:fd:b4:ed:33:f4:ed:aa:73:93:
         fa:ca:49:15:4d:21:5c:51:c2:b5:e2:83:63:99:a1:3f:bb:ce:
         12:94:09:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 07:31:01 2025 by rpki-client