Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/82af7c-8606-4f9b-a052-4f3bea9fb95c/1/NJYux3ZGK3bmOugVW7J7nYx-f94.mft
File:                     NJYux3ZGK3bmOugVW7J7nYx-f94.mft (raw, json)
Hash identifier:          /zBY0vzX7BToY8C2GaBfi+tJrkKlfpWVP6yeoZzx8HI=
Subject key identifier:   20:DD:CD:F8:7E:FE:50:24:ED:B3:5B:12:8E:DF:59:4E:42:96:47:89
Authority key identifier: 34:96:2E:C7:76:46:2B:76:E6:3A:E8:15:5B:B2:7B:9D:8C:7E:7F:DE
Certificate issuer:       /CN=34962ec776462b76e63ae8155bb27b9d8c7e7fde
Certificate serial:       019746D4C4DC330C292AA8ACDF5593FE3097
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NJYux3ZGK3bmOugVW7J7nYx-f94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/82af7c-8606-4f9b-a052-4f3bea9fb95c/1/NJYux3ZGK3bmOugVW7J7nYx-f94.mft
Manifest number:          0EEA
Signing time:             Fri 06 Jun 2025 20:00:38 +0000
Manifest this update:     Fri 06 Jun 2025 20:00:38 +0000
Manifest next update:     Sat 07 Jun 2025 20:00:38 +0000
Files and hashes:         1: NJYux3ZGK3bmOugVW7J7nYx-f94.crl (hash: SFz72AXeMHYie9qGR8BEbufHspTPV2XUjsrBkLllb+Q=)
                          2: raSmxoHnzmzGBzTkG0MLkl3VZgs.roa (hash: lXV0TrwdE+JtNBRnmGgOqwwu3Hr9XSo7ebZyvtagFuc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/82af7c-8606-4f9b-a052-4f3bea9fb95c/1/NJYux3ZGK3bmOugVW7J7nYx-f94.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/82af7c-8606-4f9b-a052-4f3bea9fb95c/1/NJYux3ZGK3bmOugVW7J7nYx-f94.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NJYux3ZGK3bmOugVW7J7nYx-f94.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:d4:c4:dc:33:0c:29:2a:a8:ac:df:55:93:fe:30:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34962ec776462b76e63ae8155bb27b9d8c7e7fde
        Validity
            Not Before: Jun  6 20:00:38 2025 GMT
            Not After : Jun  7 20:00:38 2025 GMT
        Subject: CN=20ddcdf87efe5024edb35b128edf594e42964789
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:73:67:2c:19:c2:61:21:b5:ae:cc:36:c4:26:
                    f9:b1:d2:2c:2f:93:86:45:af:c4:ea:32:02:f6:f4:
                    5e:d7:fb:86:8f:68:d1:c3:33:50:e6:fc:51:e2:04:
                    eb:0e:e7:3a:f0:ee:95:2d:0e:a6:4a:4a:52:f5:ea:
                    ad:87:f9:a4:ec:5e:96:8d:99:57:c4:12:21:97:ab:
                    9c:1b:16:a6:21:f4:92:90:a2:60:a9:eb:83:4f:4c:
                    24:49:18:01:14:c7:24:61:d6:e4:55:c6:e9:c5:88:
                    21:ec:f1:19:d1:d6:51:ba:85:25:17:3a:43:a3:f0:
                    6e:c5:66:69:5e:7d:54:fb:be:4f:2d:37:1b:82:95:
                    aa:4f:29:7c:2a:39:33:f6:c7:e9:5a:63:67:c0:5f:
                    e3:68:c2:93:34:13:24:b3:72:22:ff:18:50:bb:79:
                    a9:79:9f:d7:42:b0:1d:2b:26:86:e1:b6:e5:ee:4a:
                    54:38:4a:d7:f2:ba:58:f3:c3:20:99:53:5a:e2:d9:
                    91:ad:d0:02:67:e3:c3:25:63:e2:86:9f:1a:8c:5a:
                    06:a5:2a:6e:2d:15:e3:e5:61:24:42:c6:cc:d3:b0:
                    3f:f6:b4:e4:35:91:33:a9:a4:af:18:5c:26:af:e0:
                    e1:65:f9:a2:c4:c5:b3:63:51:a3:85:1b:47:cd:c3:
                    ea:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:DD:CD:F8:7E:FE:50:24:ED:B3:5B:12:8E:DF:59:4E:42:96:47:89
            X509v3 Authority Key Identifier:
                keyid:34:96:2E:C7:76:46:2B:76:E6:3A:E8:15:5B:B2:7B:9D:8C:7E:7F:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJYux3ZGK3bmOugVW7J7nYx-f94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/82af7c-8606-4f9b-a052-4f3bea9fb95c/1/NJYux3ZGK3bmOugVW7J7nYx-f94.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/82af7c-8606-4f9b-a052-4f3bea9fb95c/1/NJYux3ZGK3bmOugVW7J7nYx-f94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:59:52:0f:d6:62:43:ec:e0:a3:ed:02:ad:b3:b7:21:e4:2c:
         16:ef:61:4a:b5:9e:41:63:27:d7:12:14:c8:2c:b5:da:5a:7a:
         51:e7:11:bb:02:9e:08:62:72:49:4d:b1:50:b3:e8:55:7f:2c:
         6e:e7:90:c1:09:2c:49:7f:c4:31:cd:85:fc:8a:2e:27:97:6d:
         b5:2d:04:23:0c:05:70:8e:26:59:f1:58:a7:e8:eb:40:b2:ce:
         91:c7:38:59:7f:30:47:f0:26:3c:7c:56:4e:40:c6:ac:6d:2e:
         2c:36:a2:6e:01:80:46:4f:60:67:d1:1c:9d:4d:ae:2f:58:6b:
         6e:f4:69:6a:6a:06:03:05:92:d4:9a:cf:ff:03:17:67:f2:74:
         f6:cb:11:1d:e4:76:cc:fe:b7:3b:69:62:20:6d:c5:92:42:bd:
         4e:be:69:47:6a:8b:ce:4d:4d:63:40:3e:e9:d0:6d:26:7c:65:
         30:18:96:ec:eb:bb:20:7b:b1:63:d3:08:ea:5b:0d:e7:04:ae:
         8a:32:eb:2d:d3:bf:06:4e:9f:23:fc:10:c5:ce:2c:06:6c:13:
         32:e7:82:d2:20:ea:80:24:87:ba:52:e3:ae:47:6e:40:0a:dd:
         42:79:c9:88:f6:08:a8:1b:9f:db:59:74:28:aa:c0:9c:19:df:
         18:da:e7:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:14:45 2025 by rpki-client