Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft
File:                     N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft (raw, json)
Hash identifier:          eZiHlv3f5J13kvym7bxfgiL/Ne9t8iWUIEzUvNzMOv0=
Subject key identifier:   F9:03:E5:0B:08:B0:E9:A6:79:14:0D:93:F1:DE:E9:C0:A5:4F:3F:D9
Authority key identifier: 37:4E:27:29:B1:73:69:89:0A:15:12:F6:43:CD:08:E4:BA:2F:F4:14
Certificate issuer:       /CN=374e2729b17369890a1512f643cd08e4ba2ff414
Certificate serial:       01975949220C0D086F5B1CBD8910D482F1C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft
Manifest number:          0DF3
Signing time:             Tue 10 Jun 2025 10:00:54 +0000
Manifest this update:     Tue 10 Jun 2025 10:00:54 +0000
Manifest next update:     Wed 11 Jun 2025 10:00:54 +0000
Files and hashes:         1: 3520iAwmR0BvV2MPg7TBl3ALKj4.roa (hash: w6lShDZfgepO7x4Np/TeK1Ek0txjQUSZQ5viOdvUQa4=)
                          2: C_WFK57ORMYmTPM8C6MEKdkZzcw.roa (hash: UGi0NlFvaky9A83aLUwpBw47ySnkhX86em/MvBBhL6E=)
                          3: N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl (hash: yltf8+WlYsq3gMROV37XOLyYfdEjHF+laea79fH3YtI=)
                          4: TBUQGbvGy8WpxYe11EDrGLGBcx8.roa (hash: 3whARzgV373Hq7bJRQXnA+BqWKOJ6PlgdDArlf/RCOg=)
                          5: mtEhXVsq4tQu2Q9mIDoxxW8IYZw.roa (hash: AojxXVHH/gbQ3MPiJY/87qknZA5A4RNwVQYYZL9bDe8=)
                          6: wg9s7DQX6eW3dDdaARTAPpRTzqc.roa (hash: BT19Mg+zBya+5K3DArKvF9emtWlSQhaPjSW20vhvIVk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:59:49:22:0c:0d:08:6f:5b:1c:bd:89:10:d4:82:f1:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=374e2729b17369890a1512f643cd08e4ba2ff414
        Validity
            Not Before: Jun 10 10:00:54 2025 GMT
            Not After : Jun 11 10:00:54 2025 GMT
        Subject: CN=f903e50b08b0e9a679140d93f1dee9c0a54f3fd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:55:78:08:33:3a:c1:da:2e:ac:49:b0:ba:7e:
                    f5:9b:b6:ab:86:1d:18:cb:3f:23:d1:26:3a:c1:9b:
                    47:b3:29:57:27:0d:55:c7:57:57:85:ff:29:43:3b:
                    2d:ab:12:31:1e:af:60:a7:49:42:38:4b:35:d8:71:
                    e5:da:70:5f:d8:1d:27:68:5b:53:11:46:31:35:86:
                    4f:99:8d:f3:47:70:3d:82:41:35:56:a7:88:14:db:
                    de:7c:41:e5:c9:b8:26:3d:49:5f:1a:f9:67:5c:08:
                    d3:33:77:ad:6a:86:ce:d6:71:78:a8:db:49:f9:ae:
                    76:d4:42:d5:dd:0d:31:11:de:f6:9a:8d:3f:6e:76:
                    7b:13:58:c3:28:b8:ed:6c:20:d4:ca:f5:2d:b8:09:
                    79:75:41:73:3f:96:23:1c:f9:b9:e0:f2:d4:c4:e8:
                    be:ae:00:c7:5f:5f:c5:27:7b:78:ad:2d:6c:b6:24:
                    cd:27:8e:1a:87:28:dd:69:2b:24:a0:45:8f:16:41:
                    8b:07:3f:8c:25:24:44:ea:2e:75:71:05:2e:ec:22:
                    52:ba:ab:d2:b1:29:eb:32:8c:77:65:8e:9a:5d:04:
                    2d:f9:ff:07:4b:20:e4:d4:f5:c6:58:92:5f:10:e9:
                    7b:b8:ce:80:cc:46:c8:c5:a4:46:a4:43:e5:2d:63:
                    82:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:03:E5:0B:08:B0:E9:A6:79:14:0D:93:F1:DE:E9:C0:A5:4F:3F:D9
            X509v3 Authority Key Identifier:
                keyid:37:4E:27:29:B1:73:69:89:0A:15:12:F6:43:CD:08:E4:BA:2F:F4:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:5d:04:12:e0:a4:ac:01:f5:c5:84:0d:6e:40:15:08:ea:c4:
         36:fb:2a:b8:90:48:da:81:10:e4:00:c8:f7:4b:6e:e2:2c:75:
         47:0d:be:e4:f1:45:cc:b2:25:af:cf:61:57:0a:2b:e0:37:40:
         b1:2d:df:f4:3e:da:b6:23:b4:3c:24:a2:32:07:fd:52:e8:76:
         60:ea:a3:2c:de:89:b9:ac:af:76:d0:85:8a:bf:7c:86:8e:14:
         a7:b7:62:ab:da:ac:49:66:18:f5:c5:9b:e4:b2:6a:16:69:64:
         64:68:f7:7e:dd:cb:86:d1:a3:1f:64:b2:c8:b2:c4:03:51:0a:
         db:d7:ef:aa:e9:7b:51:42:1b:59:ed:0c:38:78:4a:48:77:b9:
         42:86:71:2c:0b:5a:32:0a:37:c3:41:c3:61:e5:c3:83:68:3b:
         99:11:e0:4a:9b:85:5e:d5:5a:6c:60:3c:06:ce:8b:c6:13:ec:
         d3:b7:cd:cb:48:90:d6:91:5f:45:92:e9:aa:ad:ae:97:6e:e0:
         48:04:bd:78:f2:f3:0f:4e:41:15:03:c7:b7:20:fa:d5:89:3e:
         b8:29:58:55:53:aa:96:dd:21:d2:38:df:16:22:88:b0:27:fd:
         87:e9:a6:92:13:85:69:f5:53:1a:0c:a0:1f:22:28:81:8f:5a:
         38:66:41:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 13:49:05 2025 by rpki-client