Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/162560-b4c5-4f0d-9c06-18bdf8847418/1/9nTwyNFsu1ELuh_jrEaF7uNW-Oc.mft
File:                     9nTwyNFsu1ELuh_jrEaF7uNW-Oc.mft (raw, json)
Hash identifier:          9QyqwJA+jY/RBeDDP1uOeLYahdVbAENLuSyhmj7T64A=
Subject key identifier:   51:01:04:5B:86:4B:3F:02:3B:EA:26:0B:7C:AF:1B:31:FF:26:11:8C
Authority key identifier: F6:74:F0:C8:D1:6C:BB:51:0B:BA:1F:E3:AC:46:85:EE:E3:56:F8:E7
Certificate issuer:       /CN=f674f0c8d16cbb510bba1fe3ac4685eee356f8e7
Certificate serial:       019765F1A2D1EC8CCA18864C54C2E962B240
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9nTwyNFsu1ELuh_jrEaF7uNW-Oc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/162560-b4c5-4f0d-9c06-18bdf8847418/1/9nTwyNFsu1ELuh_jrEaF7uNW-Oc.mft
Manifest number:          0476
Signing time:             Thu 12 Jun 2025 21:00:23 +0000
Manifest this update:     Thu 12 Jun 2025 21:00:23 +0000
Manifest next update:     Fri 13 Jun 2025 21:00:23 +0000
Files and hashes:         1: 9nTwyNFsu1ELuh_jrEaF7uNW-Oc.crl (hash: j4LpaWWtLVARuNmNAyYk7NUt8ifkhDs6N9v5DPm+tVE=)
                          2: tjboCeupGoWMhzNMAbe1acyZSfo.roa (hash: 4a1e4ZJ2rm6Y1i2yYMJDPx5U9pmumE35uvRPVX+uXuM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/162560-b4c5-4f0d-9c06-18bdf8847418/1/9nTwyNFsu1ELuh_jrEaF7uNW-Oc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/162560-b4c5-4f0d-9c06-18bdf8847418/1/9nTwyNFsu1ELuh_jrEaF7uNW-Oc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9nTwyNFsu1ELuh_jrEaF7uNW-Oc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 21:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:65:f1:a2:d1:ec:8c:ca:18:86:4c:54:c2:e9:62:b2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f674f0c8d16cbb510bba1fe3ac4685eee356f8e7
        Validity
            Not Before: Jun 12 21:00:23 2025 GMT
            Not After : Jun 13 21:00:23 2025 GMT
        Subject: CN=5101045b864b3f023bea260b7caf1b31ff26118c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:fa:6f:64:33:32:1d:64:30:51:e3:a8:88:89:
                    62:9d:91:45:a9:49:b2:46:be:e2:5d:f6:77:8a:f5:
                    dd:71:c5:9f:ea:17:46:6a:81:87:af:ce:76:51:05:
                    3c:79:a7:8e:60:b4:aa:8e:1e:cc:9d:9e:f7:9c:e6:
                    c5:85:17:66:5d:bb:6a:60:ef:56:f0:98:bb:ad:f1:
                    80:d1:33:ed:d3:3d:9d:44:eb:bb:39:f1:25:12:fa:
                    c4:14:20:db:14:cb:e9:12:22:5e:0c:a9:aa:63:54:
                    6d:bc:f4:c3:bc:84:ce:22:21:65:06:0e:22:aa:5f:
                    ef:ea:a8:3c:82:b0:bb:0d:9f:cf:62:9e:d5:4b:e1:
                    83:f7:1d:4a:be:a8:0a:35:45:0a:2a:7e:d9:76:65:
                    e0:fb:42:94:0a:bb:4f:ab:3a:5c:95:f0:04:d4:2f:
                    78:90:ee:46:c4:71:2a:91:a4:1b:d1:4b:f9:77:34:
                    a1:15:ef:50:82:62:ab:d2:e9:ce:2a:15:e4:0a:2e:
                    e4:38:3b:65:c7:75:c2:ad:be:d7:2b:9b:b6:bb:de:
                    d8:90:9d:c1:66:4d:f2:37:42:58:7d:dc:cf:cf:03:
                    1b:54:97:4f:b1:45:b8:98:e0:c3:24:98:fb:f6:37:
                    d8:bc:88:4c:8e:10:e8:09:a1:b1:a8:b7:a6:37:60:
                    c4:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:01:04:5B:86:4B:3F:02:3B:EA:26:0B:7C:AF:1B:31:FF:26:11:8C
            X509v3 Authority Key Identifier:
                keyid:F6:74:F0:C8:D1:6C:BB:51:0B:BA:1F:E3:AC:46:85:EE:E3:56:F8:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9nTwyNFsu1ELuh_jrEaF7uNW-Oc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/162560-b4c5-4f0d-9c06-18bdf8847418/1/9nTwyNFsu1ELuh_jrEaF7uNW-Oc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/162560-b4c5-4f0d-9c06-18bdf8847418/1/9nTwyNFsu1ELuh_jrEaF7uNW-Oc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:4b:c6:6e:6d:2a:22:fa:6d:b7:be:7b:a8:c0:d4:33:cb:67:
         77:3e:14:d4:e8:2a:a2:4d:b6:74:92:bc:98:0e:d6:0f:44:c8:
         5f:c6:ec:f8:e2:42:b3:a3:1e:7d:fb:b7:34:46:c8:d4:4e:1e:
         04:05:33:68:1e:93:e6:33:b1:3b:55:65:38:22:16:07:9a:1d:
         4d:90:be:69:38:e4:ba:30:d7:fa:0c:0c:59:e9:da:15:73:41:
         76:fa:cf:98:2c:35:af:9c:3f:05:c8:a5:43:cc:bf:8c:34:a8:
         83:80:28:b3:8e:c8:12:b7:13:4a:58:f9:e4:e1:47:74:e7:97:
         15:a7:6c:57:3d:bc:35:b1:1c:f5:2c:fa:ca:4b:ef:b0:ec:38:
         3a:e1:48:13:07:af:f4:3e:5e:42:a3:4a:55:11:46:cd:f2:3c:
         d9:3b:ed:f3:8c:35:e6:b6:50:ca:3b:51:50:99:8f:45:64:9a:
         f3:d5:9c:38:04:35:23:af:3d:6c:70:38:3e:53:ea:6b:ca:4c:
         02:5e:30:65:6b:d0:e6:a5:3e:f3:da:aa:4c:33:5b:d2:3e:47:
         f3:37:6f:75:34:e6:01:b9:f4:a0:1a:29:f2:f2:48:1c:9a:1b:
         3a:a0:f8:36:8c:4a:0e:bd:23:a3:dd:84:22:d5:32:40:61:ae:
         c0:08:da:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 07:07:13 2025 by rpki-client