Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/ef9498-44f4-4ffd-844f-5c830fe4bad0/1/N8pQAigo2QG_QrJ5j3hEEEsFQE0.mft
File:                     N8pQAigo2QG_QrJ5j3hEEEsFQE0.mft (raw, json)
Hash identifier:          PGU4BnNg5pn6Y3Fd8BOGl4MN7DNO2w5nWJyaMn+lsao=
Subject key identifier:   1F:E7:39:4C:AE:06:29:27:B2:A5:0F:04:BA:FE:E0:A6:03:E6:B3:45
Authority key identifier: 37:CA:50:02:28:28:D9:01:BF:42:B2:79:8F:78:44:10:4B:05:40:4D
Certificate issuer:       /CN=37ca50022828d901bf42b2798f7844104b05404d
Certificate serial:       01975C49D2BDC46B5C00C75B34C0053D9BFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N8pQAigo2QG_QrJ5j3hEEEsFQE0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/ef9498-44f4-4ffd-844f-5c830fe4bad0/1/N8pQAigo2QG_QrJ5j3hEEEsFQE0.mft
Manifest number:          099B
Signing time:             Wed 11 Jun 2025 00:00:31 +0000
Manifest this update:     Wed 11 Jun 2025 00:00:31 +0000
Manifest next update:     Thu 12 Jun 2025 00:00:31 +0000
Files and hashes:         1: N8pQAigo2QG_QrJ5j3hEEEsFQE0.crl (hash: paoL1SOeKCxQPzX4OPTsTom2qRFaSuYUMmdBidSns1c=)
                          2: o5v0Cm5PNAVArL3iEJHw_CFIknA.roa (hash: Sf1IrFfhAHUJ08yJsTL6eR491AGzhJcL2ToeOR5gShQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/ef9498-44f4-4ffd-844f-5c830fe4bad0/1/N8pQAigo2QG_QrJ5j3hEEEsFQE0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/ef9498-44f4-4ffd-844f-5c830fe4bad0/1/N8pQAigo2QG_QrJ5j3hEEEsFQE0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N8pQAigo2QG_QrJ5j3hEEEsFQE0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 20:45:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5c:49:d2:bd:c4:6b:5c:00:c7:5b:34:c0:05:3d:9b:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37ca50022828d901bf42b2798f7844104b05404d
        Validity
            Not Before: Jun 11 00:00:31 2025 GMT
            Not After : Jun 12 00:00:31 2025 GMT
        Subject: CN=1fe7394cae062927b2a50f04bafee0a603e6b345
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:1e:23:2c:61:ae:d6:14:b0:3f:bc:2d:ce:85:
                    b8:a1:0c:03:af:0d:5b:3b:63:5e:df:c4:c2:66:09:
                    21:65:5b:5e:d0:70:05:25:70:ad:52:18:e8:f6:bb:
                    1e:84:45:95:22:0b:4d:2c:68:aa:3b:f0:39:4a:c8:
                    59:ca:d0:19:a7:38:f9:46:96:bf:0d:ae:6d:ff:52:
                    a8:ff:92:99:5c:fa:1e:bd:4a:7e:d5:77:d0:02:02:
                    b9:b5:7b:11:54:cb:59:02:96:42:da:cf:24:ad:ae:
                    00:b1:bf:b6:e1:b0:a1:0d:03:90:39:4d:45:c0:af:
                    57:4d:72:7f:03:97:7f:ff:b8:33:ad:c7:f8:8d:c4:
                    44:67:30:17:82:4a:b0:7c:20:66:88:5b:31:c6:7a:
                    5d:73:03:c6:11:20:ac:6e:6b:55:04:1a:9a:1a:97:
                    68:dd:01:26:8f:b2:0f:f4:3b:82:3e:4a:17:82:ee:
                    2d:49:05:34:68:eb:96:b0:0d:d9:1e:53:d6:38:20:
                    0c:89:62:7c:b5:c6:59:97:df:27:ac:85:5e:f9:13:
                    0f:c8:0f:c8:1d:20:a0:d0:14:ad:3c:a7:a4:c0:72:
                    48:14:ac:da:a4:5a:d6:29:37:57:e3:c1:44:12:08:
                    d4:ac:ce:bb:4b:bc:45:e3:ab:bc:b2:01:49:0c:e0:
                    6e:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:E7:39:4C:AE:06:29:27:B2:A5:0F:04:BA:FE:E0:A6:03:E6:B3:45
            X509v3 Authority Key Identifier:
                keyid:37:CA:50:02:28:28:D9:01:BF:42:B2:79:8F:78:44:10:4B:05:40:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N8pQAigo2QG_QrJ5j3hEEEsFQE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ef9498-44f4-4ffd-844f-5c830fe4bad0/1/N8pQAigo2QG_QrJ5j3hEEEsFQE0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ef9498-44f4-4ffd-844f-5c830fe4bad0/1/N8pQAigo2QG_QrJ5j3hEEEsFQE0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:e0:c4:8f:b1:a6:09:ec:67:16:cc:1a:fd:49:dd:0f:4e:10:
         3d:20:0b:a4:58:fd:ac:35:0b:6a:72:58:9c:0a:c2:f5:99:f6:
         ca:41:a8:03:62:bd:b8:54:c7:a6:b8:1b:77:f8:eb:6b:76:6f:
         68:ca:b5:62:02:62:ec:4a:bf:52:d0:e1:d9:e7:8d:cf:c7:30:
         c8:84:65:f4:8b:38:20:f6:91:3a:34:7d:36:11:17:2d:79:9d:
         84:fa:26:50:4b:0a:10:ec:c0:ca:98:e2:7e:76:2e:0d:f4:df:
         74:c1:3b:d4:f1:4a:89:95:c7:0e:1d:8e:aa:23:03:58:43:8c:
         41:c4:9f:9f:4e:be:52:dc:09:3b:e5:6b:06:fa:45:40:26:db:
         2e:32:f1:16:0f:b1:84:04:7c:ab:ff:cd:14:53:89:be:a9:a6:
         fe:40:1e:3d:e5:55:07:ab:59:40:af:e1:fa:e1:3a:a1:20:45:
         99:b0:6e:4e:56:a8:37:2a:19:f5:82:44:e7:b9:3b:38:e1:bc:
         94:19:9f:06:ea:82:3f:b4:ad:87:2f:d4:39:c3:ed:a0:04:ba:
         b2:d1:cf:3c:d1:9d:88:d0:21:3a:7a:58:88:6e:8c:f8:a4:ef:
         c5:ae:47:0e:83:db:3c:45:08:89:2f:ed:54:e5:2f:41:db:98:
         ee:33:e3:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 06:52:35 2025 by rpki-client