Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/9b1928-9929-4ee8-9f35-077b29730ce6/1/N5D3H6pDya9aDc9gP9Cyp4wiSpM.mft
File:                     N5D3H6pDya9aDc9gP9Cyp4wiSpM.mft (raw, json)
Hash identifier:          Wn8640b2wvCJpOwEOkcDO3yKcrLORfjS62xbDSeTegQ=
Subject key identifier:   21:30:4E:29:74:15:BA:B5:6C:AC:C8:C1:07:D4:92:C1:43:B7:6D:31
Authority key identifier: 37:90:F7:1F:AA:43:C9:AF:5A:0D:CF:60:3F:D0:B2:A7:8C:22:4A:93
Certificate issuer:       /CN=3790f71faa43c9af5a0dcf603fd0b2a78c224a93
Certificate serial:       01974F334ADB0991E96284D08817846FAB70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N5D3H6pDya9aDc9gP9Cyp4wiSpM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/9b1928-9929-4ee8-9f35-077b29730ce6/1/N5D3H6pDya9aDc9gP9Cyp4wiSpM.mft
Manifest number:          0B0A
Signing time:             Sun 08 Jun 2025 11:00:50 +0000
Manifest this update:     Sun 08 Jun 2025 11:00:50 +0000
Manifest next update:     Mon 09 Jun 2025 11:00:50 +0000
Files and hashes:         1: N5D3H6pDya9aDc9gP9Cyp4wiSpM.crl (hash: 27f7I9p01WRZYkEVWUQ5hBff7+fggf+YeOsKNzOI6wU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/9b1928-9929-4ee8-9f35-077b29730ce6/1/N5D3H6pDya9aDc9gP9Cyp4wiSpM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/9b1928-9929-4ee8-9f35-077b29730ce6/1/N5D3H6pDya9aDc9gP9Cyp4wiSpM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N5D3H6pDya9aDc9gP9Cyp4wiSpM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4f:33:4a:db:09:91:e9:62:84:d0:88:17:84:6f:ab:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3790f71faa43c9af5a0dcf603fd0b2a78c224a93
        Validity
            Not Before: Jun  8 11:00:50 2025 GMT
            Not After : Jun  9 11:00:50 2025 GMT
        Subject: CN=21304e297415bab56cacc8c107d492c143b76d31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:69:f8:52:7d:95:b5:20:7d:64:bf:d8:ff:7f:
                    41:35:f4:b2:6a:59:f9:5b:d0:74:28:b6:d2:69:e7:
                    0a:98:b2:3d:f3:d3:ae:e8:2c:da:36:7e:9f:e7:f8:
                    b5:11:69:74:1a:d2:b1:7f:8e:38:b7:be:b6:6b:b8:
                    7e:fc:a4:15:ed:ab:19:0b:7f:5c:54:ce:a9:e8:cb:
                    35:c4:0a:5b:b3:ca:c5:e7:13:1e:a4:5f:7f:c7:99:
                    d4:d6:59:33:c2:91:89:d8:23:93:b5:43:10:17:fc:
                    31:a7:61:69:88:fa:75:6b:58:90:25:57:bb:af:b5:
                    fd:ee:d2:7c:b7:70:f1:9e:4f:1a:28:04:b8:0f:01:
                    42:69:47:70:9f:ee:13:73:48:93:ad:d8:c4:81:36:
                    e2:66:48:ba:48:c8:aa:2e:b9:8a:26:86:a0:56:f6:
                    d0:0a:9b:a5:0f:37:a0:5a:66:fa:9b:5f:73:d5:9d:
                    2a:ae:2f:94:d4:11:d7:f9:f5:c6:8e:02:03:94:05:
                    e7:bc:9c:d9:a9:bc:d7:b3:cd:3e:95:a8:1e:cb:70:
                    bc:68:7e:72:1d:06:86:36:8f:fa:0c:e7:14:4b:0c:
                    63:04:c6:ad:8c:1c:35:89:f6:2e:39:16:bd:b5:0d:
                    07:73:40:f8:ee:04:65:e6:58:a3:3e:8c:dc:e8:1a:
                    0b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:30:4E:29:74:15:BA:B5:6C:AC:C8:C1:07:D4:92:C1:43:B7:6D:31
            X509v3 Authority Key Identifier:
                keyid:37:90:F7:1F:AA:43:C9:AF:5A:0D:CF:60:3F:D0:B2:A7:8C:22:4A:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N5D3H6pDya9aDc9gP9Cyp4wiSpM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9b1928-9929-4ee8-9f35-077b29730ce6/1/N5D3H6pDya9aDc9gP9Cyp4wiSpM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9b1928-9929-4ee8-9f35-077b29730ce6/1/N5D3H6pDya9aDc9gP9Cyp4wiSpM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:3d:8c:75:bb:3f:74:a8:4f:38:1d:21:ed:22:16:96:97:7c:
         86:76:43:bd:08:50:43:5e:50:8b:1b:48:a5:59:56:2e:be:08:
         2d:e8:5a:18:34:82:a8:1d:22:82:ba:90:a6:89:1d:01:bf:39:
         8a:b3:eb:28:b8:bc:d8:ae:1f:19:a6:87:d6:f3:22:7f:50:ba:
         cc:ae:18:da:26:1f:cf:db:42:6a:0e:cd:30:59:01:38:a8:5e:
         b0:d4:0d:48:ff:36:b6:15:ec:18:9d:89:84:1b:0c:ee:62:3a:
         38:f6:b7:35:ba:56:36:88:a9:71:36:17:0f:08:2c:bc:c5:75:
         94:bc:55:87:59:b1:01:e1:9d:d8:0e:bb:22:e8:7d:cd:af:b4:
         d1:ff:9e:d2:5c:96:bc:0e:3c:60:e1:5a:a6:95:a0:99:aa:37:
         5c:84:5a:c5:e6:1f:3b:e8:db:58:b1:6e:fc:72:9c:83:f2:78:
         ff:f6:b4:bd:5a:48:5c:c8:fc:7f:ba:67:f8:a1:14:aa:9e:62:
         a4:de:da:e1:4d:b0:d2:ee:cc:f6:a4:0e:72:73:b4:9e:d3:c2:
         8c:b5:c3:d2:80:83:2f:96:77:08:86:14:38:e2:b8:9e:10:23:
         6e:e7:2b:b2:cd:b1:b0:4b:5e:e5:b1:4f:6c:ca:57:f7:57:01:
         f5:df:01:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:35:09 2025 by rpki-client