Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/7ed12b-53bd-4df6-aa6e-a2cc96899702/1/N03Pz2e4K3ynYi_McJIJ7M43Vw4.mft
File:                     N03Pz2e4K3ynYi_McJIJ7M43Vw4.mft (raw, json)
Hash identifier:          AAVuY/FPzlfd4rwgMYoVlh6AIrmwi0DXk0gW/eASz8M=
Subject key identifier:   DA:72:47:40:61:0E:55:92:E7:1C:0A:97:34:7A:0E:DB:B2:30:F1:7D
Authority key identifier: 37:4D:CF:CF:67:B8:2B:7C:A7:62:2F:CC:70:92:09:EC:CE:37:57:0E
Certificate issuer:       /CN=374dcfcf67b82b7ca7622fcc709209ecce37570e
Certificate serial:       01958C29343F5389B2571D3F4D0B79025E14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N03Pz2e4K3ynYi_McJIJ7M43Vw4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/7ed12b-53bd-4df6-aa6e-a2cc96899702/1/N03Pz2e4K3ynYi_McJIJ7M43Vw4.mft
Manifest number:          1380
Signing time:             Wed 12 Mar 2025 21:01:05 +0000
Manifest this update:     Wed 12 Mar 2025 21:01:05 +0000
Manifest next update:     Thu 13 Mar 2025 21:01:05 +0000
Files and hashes:         1: 6bzbASHngssrN7btwpb15ed6SJ0.roa (hash: +yr1O91CJsmaXdI79v+P+t8OO+AotZIupB4bcr+PAhc=)
                          2: N03Pz2e4K3ynYi_McJIJ7M43Vw4.crl (hash: tKESi6Hg5z9VW4KsagV8kJQer1E0D+hkorN4FmICn1I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/7ed12b-53bd-4df6-aa6e-a2cc96899702/1/N03Pz2e4K3ynYi_McJIJ7M43Vw4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/7ed12b-53bd-4df6-aa6e-a2cc96899702/1/N03Pz2e4K3ynYi_McJIJ7M43Vw4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N03Pz2e4K3ynYi_McJIJ7M43Vw4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Mar 2025 19:14:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:8c:29:34:3f:53:89:b2:57:1d:3f:4d:0b:79:02:5e:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=374dcfcf67b82b7ca7622fcc709209ecce37570e
        Validity
            Not Before: Mar 12 21:01:05 2025 GMT
            Not After : Mar 13 21:01:05 2025 GMT
        Subject: CN=da724740610e5592e71c0a97347a0edbb230f17d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:83:24:96:c0:06:17:cc:c0:a7:3e:dd:6d:31:
                    f1:40:68:bb:da:4d:49:ad:39:db:0c:ae:19:51:fe:
                    40:63:a7:e9:69:8b:72:ce:26:d1:e1:45:6d:56:20:
                    5e:e2:69:ef:71:7b:fe:2e:7f:6a:48:51:63:9b:5d:
                    ae:06:87:db:4d:ce:48:a2:17:74:91:c6:13:0c:fb:
                    70:8e:d8:79:4a:de:35:3c:f4:a5:a3:1e:e0:b5:9e:
                    ba:04:00:2d:ab:ac:be:bc:33:2b:0d:8d:09:0a:37:
                    85:80:f7:53:b7:cd:8e:e3:0b:8e:8a:19:4d:1a:87:
                    a0:11:5b:cd:9f:f8:7c:d1:b3:29:1d:02:e9:bc:11:
                    74:be:70:96:0d:ea:85:be:31:65:a8:6d:56:16:a9:
                    a9:5d:7f:d1:d5:fd:84:e1:2a:4a:61:4f:87:21:93:
                    c8:40:b3:65:4a:bc:9c:dc:97:29:23:4e:97:0a:f3:
                    19:1f:c6:fe:35:c5:23:6b:36:bd:d5:11:83:69:11:
                    9e:26:0e:d3:5b:31:47:fd:03:e5:bd:af:20:4e:17:
                    1b:ed:c2:5f:38:6c:d4:3b:b8:c3:a8:68:0c:84:86:
                    61:a6:c4:a9:7d:56:10:3b:cd:b1:89:d6:d0:92:89:
                    ae:09:6e:3d:44:75:be:f1:c6:28:e8:d9:c7:7d:dd:
                    62:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:72:47:40:61:0E:55:92:E7:1C:0A:97:34:7A:0E:DB:B2:30:F1:7D
            X509v3 Authority Key Identifier:
                keyid:37:4D:CF:CF:67:B8:2B:7C:A7:62:2F:CC:70:92:09:EC:CE:37:57:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N03Pz2e4K3ynYi_McJIJ7M43Vw4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/7ed12b-53bd-4df6-aa6e-a2cc96899702/1/N03Pz2e4K3ynYi_McJIJ7M43Vw4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/7ed12b-53bd-4df6-aa6e-a2cc96899702/1/N03Pz2e4K3ynYi_McJIJ7M43Vw4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:05:c4:9f:70:44:63:06:e4:16:1f:3d:3d:06:bb:83:1c:e4:
         be:8d:cd:8e:e9:c3:dc:55:28:dd:83:2a:4e:68:6d:4d:a8:18:
         fa:f6:dd:eb:5e:57:0f:72:91:4a:5e:0e:f0:66:7c:1c:28:2f:
         0e:46:7c:2b:7e:d4:b7:8b:1a:1e:7f:7c:77:8f:89:8b:46:2f:
         8b:35:c9:ba:76:2a:16:82:a5:29:5c:79:18:62:7c:74:67:bc:
         a7:a8:ef:87:d4:7a:91:f6:70:7c:e2:04:0f:9c:c5:e2:a1:40:
         cb:a4:71:9c:5e:37:7f:35:e1:02:25:88:0c:c3:07:b4:bc:15:
         63:a3:72:fe:62:db:03:07:ef:42:ea:1e:8e:83:50:be:05:46:
         88:13:d5:08:71:59:c5:75:9b:d7:23:76:7c:92:42:09:d7:a4:
         ff:2b:9e:cb:1d:58:c8:3b:81:d8:72:28:f9:12:c9:53:9f:6d:
         06:cd:4a:3a:1a:f9:1c:fd:15:25:40:5b:24:d8:34:53:d6:40:
         07:73:c4:8a:9b:d4:ec:12:67:cc:e4:5c:a1:a3:d9:cb:1c:25:
         71:58:18:e0:b6:79:6c:aa:56:e1:62:b0:59:62:62:79:73:4b:
         5f:63:ff:ce:04:5f:72:c7:13:9c:e2:92:57:68:0f:63:ec:9a:
         7f:e0:c3:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:26:49 2025 by rpki-client