Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.mft
File:                     NGA0Bs8OHX3EqHhKGIpiOOPBOr4.mft (raw, json)
Hash identifier:          KxSz7/Clma686CL+lsgvGdFWzIo4tI9zuoxZ9Yye37Q=
Subject key identifier:   FA:D2:A2:B3:6D:D6:8E:72:4B:CF:C8:CE:24:07:D5:A9:B1:60:3E:19
Authority key identifier: 34:60:34:06:CF:0E:1D:7D:C4:A8:78:4A:18:8A:62:38:E3:C1:3A:BE
Certificate issuer:       /CN=34603406cf0e1d7dc4a8784a188a6238e3c13abe
Certificate serial:       0197488C5584DE8859F3A3B3B193F50BE99D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.mft
Manifest number:          0275
Signing time:             Sat 07 Jun 2025 04:00:45 +0000
Manifest this update:     Sat 07 Jun 2025 04:00:45 +0000
Manifest next update:     Sun 08 Jun 2025 04:00:45 +0000
Files and hashes:         1: 2jDUXaVY2J9zU8vKhzB_PzOO_6U.roa (hash: uI6QS/R6IbgUMuCYc5sOFyWJ4AyLIYf/PSbRWwbYsP0=)
                          2: NGA0Bs8OHX3EqHhKGIpiOOPBOr4.crl (hash: 90kHHEEE3h7Ucal2YeL+exEfWG5ExvswBP3fqFSXVJU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 04:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:8c:55:84:de:88:59:f3:a3:b3:b1:93:f5:0b:e9:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34603406cf0e1d7dc4a8784a188a6238e3c13abe
        Validity
            Not Before: Jun  7 04:00:45 2025 GMT
            Not After : Jun  8 04:00:45 2025 GMT
        Subject: CN=fad2a2b36dd68e724bcfc8ce2407d5a9b1603e19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:fa:c3:48:57:b8:e3:34:7f:ca:a9:31:a9:75:
                    c8:6d:67:78:3c:d2:57:74:80:df:89:61:05:f9:90:
                    14:75:e5:a5:c7:05:2c:dd:27:ff:24:33:cb:f9:9f:
                    d5:20:6f:e5:53:9e:7e:ca:98:cc:15:75:25:c5:b7:
                    18:b6:a5:6f:52:4c:a9:34:0d:33:e2:ae:f1:62:44:
                    92:f3:52:1d:7a:fe:d2:67:ab:ce:c6:af:7d:99:84:
                    fc:89:78:4e:31:76:69:61:8d:5a:f6:0a:ae:2d:38:
                    b0:d8:72:41:a1:30:b1:52:10:0f:f4:ad:b3:08:07:
                    be:ab:ab:be:d4:77:91:e1:83:a8:d9:4d:06:c8:05:
                    9f:cc:ad:1a:88:f5:dc:6c:4f:1f:3b:e4:53:d7:41:
                    72:79:14:24:36:3d:56:71:ea:1f:40:26:b7:ad:84:
                    39:f3:c3:aa:48:2a:f7:cd:38:6c:06:ae:7e:0d:7e:
                    1d:7e:7c:ed:13:8f:49:3e:10:4f:03:60:bf:f7:38:
                    49:bf:3d:1e:5a:70:91:25:bd:a5:96:7d:3e:5d:f1:
                    ef:0b:f2:75:d2:33:5b:7c:db:8f:70:ff:b8:1d:77:
                    32:41:02:dd:75:3f:9a:66:a4:a6:9e:90:62:db:f1:
                    c9:97:a6:1a:03:ba:7b:0d:27:57:4f:fe:d2:cd:6d:
                    15:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:D2:A2:B3:6D:D6:8E:72:4B:CF:C8:CE:24:07:D5:A9:B1:60:3E:19
            X509v3 Authority Key Identifier:
                keyid:34:60:34:06:CF:0E:1D:7D:C4:A8:78:4A:18:8A:62:38:E3:C1:3A:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:f5:09:14:d9:6f:a4:49:a8:1f:99:f1:57:f2:89:44:59:4e:
         04:77:d0:3e:09:90:79:a6:f5:d3:51:ce:c1:f1:71:d7:dc:eb:
         af:46:5e:27:59:31:51:1f:b9:f0:ad:05:7c:09:75:03:bf:6b:
         62:f4:6c:61:b2:cc:a0:eb:4d:0f:6a:ba:27:e1:d8:34:86:2b:
         07:65:65:14:ee:2d:5c:75:62:d2:72:c9:4e:1a:b4:62:19:54:
         25:63:3b:e6:b2:f0:64:c1:75:a9:5b:e8:06:3e:2d:24:28:27:
         98:b2:9d:1a:71:9d:69:b7:7d:8a:6b:c9:24:fe:68:c7:49:66:
         b8:75:50:1b:60:39:11:1a:c1:56:73:b7:04:16:cf:58:10:d7:
         41:e5:df:aa:a0:3c:03:69:50:cf:cb:d1:50:12:f0:db:3e:4b:
         03:0c:b5:e9:67:77:2d:73:af:29:b8:c2:3b:d3:a5:21:75:8d:
         a0:35:c9:d3:ec:58:7a:24:02:cd:42:0c:8c:f0:44:03:f6:8d:
         f9:43:46:34:b2:da:5c:3b:83:73:8b:0e:5b:26:e4:f3:9c:6e:
         3c:8b:1b:ab:a0:55:2b:22:18:85:03:fa:00:e9:7a:24:40:6a:
         58:1a:29:e3:3a:76:bf:55:b4:96:d2:e4:79:71:ad:d6:b2:9b:
         0d:db:f7:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:01:03 2025 by rpki-client