Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/75b43d-e742-48ea-945a-aa832db7b50a/1/nvtWQV815j-nQDpQH97druzqR1o.mft
File:                     nvtWQV815j-nQDpQH97druzqR1o.mft (raw, json)
Hash identifier:          Xd5xSh1KB5gSXdJMCYmPo6PsEoILn0dghAGBHaWSZi4=
Subject key identifier:   F0:4F:8B:3A:8C:A3:40:CE:65:95:37:15:0A:5B:8C:D7:46:E1:82:8D
Authority key identifier: 9E:FB:56:41:5F:35:E6:3F:A7:40:3A:50:1F:DE:DD:AE:EC:EA:47:5A
Certificate issuer:       /CN=9efb56415f35e63fa7403a501fdeddaeecea475a
Certificate serial:       01962D18A89354DD16D2D3424C5A7ADF76B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nvtWQV815j-nQDpQH97druzqR1o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/75b43d-e742-48ea-945a-aa832db7b50a/1/nvtWQV815j-nQDpQH97druzqR1o.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 03:01:52 +0000
Manifest this update:     Sun 13 Apr 2025 03:01:52 +0000
Manifest next update:     Mon 14 Apr 2025 03:01:52 +0000
Files and hashes:         1: SEfajqd6Fo8tBAWadiViUIYfxIc.roa (hash: buws3E1khkxa0hWtFXM/6/Y2Vl2k7b7xq83eMENRDLs=)
                          2: nvtWQV815j-nQDpQH97druzqR1o.crl (hash: SgFiBwcnuyN98DE3KZPCy8MllbYlZburCCNsBV2WKNg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/75b43d-e742-48ea-945a-aa832db7b50a/1/nvtWQV815j-nQDpQH97druzqR1o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/75b43d-e742-48ea-945a-aa832db7b50a/1/nvtWQV815j-nQDpQH97druzqR1o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nvtWQV815j-nQDpQH97druzqR1o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 13 Apr 2025 23:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:18:a8:93:54:dd:16:d2:d3:42:4c:5a:7a:df:76:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9efb56415f35e63fa7403a501fdeddaeecea475a
        Validity
            Not Before: Apr 13 03:01:52 2025 GMT
            Not After : Apr 14 03:01:52 2025 GMT
        Subject: CN=f04f8b3a8ca340ce659537150a5b8cd746e1828d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:19:82:33:fc:63:99:f9:16:63:69:25:66:33:
                    55:0b:37:58:71:50:79:50:b1:d0:d1:54:8e:63:a4:
                    d1:c2:b7:9c:d7:be:25:2c:98:5b:72:a0:21:31:da:
                    c0:23:8f:b3:2d:40:da:c1:a9:5a:e8:18:da:d4:05:
                    e9:32:45:a5:2b:e2:37:24:11:3c:cc:97:56:d3:07:
                    f6:4c:7c:13:f3:d3:86:ba:55:87:52:da:c6:4b:ea:
                    4e:b8:2c:33:78:8a:9d:4f:52:3b:5b:98:ad:ff:bc:
                    0e:84:bb:98:1e:33:c3:a2:7e:fc:7a:b9:bf:11:0c:
                    6a:23:41:db:f0:55:f6:07:36:26:c9:13:f0:0a:26:
                    3e:e5:37:c9:bc:44:67:d3:ab:bc:38:8e:f7:08:48:
                    6b:23:7f:ee:88:04:cf:f5:f2:4a:64:36:4b:5d:36:
                    cb:62:a8:b7:8a:37:0f:5d:e6:25:24:6e:46:58:75:
                    9a:9b:e3:4d:fb:c5:62:c5:fa:38:46:15:cc:72:7a:
                    5f:cf:0f:43:96:5d:44:86:65:b9:1e:05:ea:f1:16:
                    e6:88:9d:5c:18:b1:42:e3:5a:cf:ff:9d:cb:19:19:
                    69:e2:23:27:12:ab:ce:20:9f:e0:37:55:b8:e3:51:
                    0c:e0:8a:9c:d5:5f:d8:c4:fa:b4:3d:6a:b0:20:9c:
                    72:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:4F:8B:3A:8C:A3:40:CE:65:95:37:15:0A:5B:8C:D7:46:E1:82:8D
            X509v3 Authority Key Identifier:
                keyid:9E:FB:56:41:5F:35:E6:3F:A7:40:3A:50:1F:DE:DD:AE:EC:EA:47:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nvtWQV815j-nQDpQH97druzqR1o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/75b43d-e742-48ea-945a-aa832db7b50a/1/nvtWQV815j-nQDpQH97druzqR1o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/75b43d-e742-48ea-945a-aa832db7b50a/1/nvtWQV815j-nQDpQH97druzqR1o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:27:92:cb:5e:9d:45:33:7e:f3:fb:75:dc:b7:50:59:3b:0b:
         a7:6c:4a:57:75:26:1a:7e:8f:6d:1e:c7:d4:e6:b6:48:fc:f9:
         9f:e7:3f:5b:a9:82:6d:60:68:00:5c:ff:67:84:c3:7b:5f:1a:
         03:0d:6a:2b:b2:64:e8:37:a9:8d:cc:87:a2:2f:93:68:ae:c7:
         b0:41:32:e9:7f:7d:f0:51:f2:84:4d:d4:90:2c:4b:30:25:4f:
         7c:6b:db:1d:7c:95:2c:d4:52:e9:8b:5f:27:57:9d:14:da:69:
         d6:45:5e:fb:f1:89:52:70:a3:34:54:c2:1e:1b:0b:fd:d7:8b:
         44:2c:12:a9:9c:ce:25:9c:28:b4:cc:ae:26:4f:0b:e6:60:1d:
         6f:40:2e:0d:86:68:03:1f:fe:69:85:04:c4:48:ea:2b:f4:95:
         2e:ce:f4:ea:fa:25:4e:70:66:c0:c6:60:09:f6:ab:22:11:de:
         88:bf:d7:c4:b9:2c:a8:4c:08:61:44:11:35:20:70:fc:59:31:
         fc:4a:af:29:e8:1a:d2:de:ef:34:1f:2b:da:f2:a5:34:93:c9:
         2a:6b:4c:92:56:22:57:2f:44:5c:03:52:32:22:0f:a9:d0:1b:
         62:8c:45:65:c9:4f:39:3e:16:ee:08:44:b0:cb:fb:95:1b:ac:
         2c:9e:a9:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 06:37:58 2025 by rpki-client