Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/4ea4f7-d70e-42a2-afd7-3e3a188f49de/1/N5FWc7KL362ywgGaxo0EZP0htxo.mft
File:                     N5FWc7KL362ywgGaxo0EZP0htxo.mft (raw, json)
Hash identifier:          jwNDzfzdpbBuEOBEmJBxraVzgETdnCZiTMBTfZna54Y=
Subject key identifier:   55:CE:93:F0:89:F7:BA:14:94:7E:E3:EA:4E:CD:A0:C7:0C:75:80:86
Authority key identifier: 37:91:56:73:B2:8B:DF:AD:B2:C2:01:9A:C6:8D:04:64:FD:21:B7:1A
Certificate issuer:       /CN=37915673b28bdfadb2c2019ac68d0464fd21b71a
Certificate serial:       01974CD6D2FB97417C02666708449A6DA790
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N5FWc7KL362ywgGaxo0EZP0htxo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/4ea4f7-d70e-42a2-afd7-3e3a188f49de/1/N5FWc7KL362ywgGaxo0EZP0htxo.mft
Manifest number:          1512
Signing time:             Sun 08 Jun 2025 00:00:36 +0000
Manifest this update:     Sun 08 Jun 2025 00:00:36 +0000
Manifest next update:     Mon 09 Jun 2025 00:00:36 +0000
Files and hashes:         1: DH9htlq0hiwldp4q07DNTkVZOf8.roa (hash: J0KU22uieTNYBq4unRpzKgHyqTQbyJRKS4kqQcbzVVo=)
                          2: N5FWc7KL362ywgGaxo0EZP0htxo.crl (hash: bYIaHNmweZbTn3tUYzirUgUIlOoSrykBFwDWr677F0w=)
                          3: jeU3xqGrcmxdIS4lfaliQojmUd4.roa (hash: WoVvfzkH0PYO9V3NP53Pv15mZRXcsOzFbw+RGpI6V54=)
                          4: mbXBHvnDkr71szR1uqXUf3o_CNU.roa (hash: gBt+bTGYlOGXiT5DEgI8/fzoH444V5sSGRbb6v+iHAk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/4ea4f7-d70e-42a2-afd7-3e3a188f49de/1/N5FWc7KL362ywgGaxo0EZP0htxo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/4ea4f7-d70e-42a2-afd7-3e3a188f49de/1/N5FWc7KL362ywgGaxo0EZP0htxo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N5FWc7KL362ywgGaxo0EZP0htxo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4c:d6:d2:fb:97:41:7c:02:66:67:08:44:9a:6d:a7:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37915673b28bdfadb2c2019ac68d0464fd21b71a
        Validity
            Not Before: Jun  8 00:00:36 2025 GMT
            Not After : Jun  9 00:00:36 2025 GMT
        Subject: CN=55ce93f089f7ba14947ee3ea4ecda0c70c758086
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:3d:43:75:4a:e3:bd:c0:7c:45:be:0e:f0:16:
                    1e:6f:1b:c4:90:5b:84:ac:20:1e:8a:ce:cf:2b:dc:
                    80:d7:63:96:36:c8:c2:45:32:da:fd:f0:78:a4:c6:
                    e8:d2:55:a5:de:d7:69:40:ec:9c:a8:0f:97:cc:34:
                    26:a2:0a:e1:af:31:77:79:f6:ff:36:01:60:bd:74:
                    ca:d3:ec:3e:22:a9:82:fa:a7:e8:10:6d:85:b6:3d:
                    ad:ed:1c:82:28:86:f3:d9:37:f7:75:c4:ab:0c:e3:
                    b4:0c:02:2a:02:85:5c:d8:fc:fe:91:b2:33:f3:98:
                    c6:d9:52:26:8c:3c:d9:ef:c5:58:6e:79:52:0b:03:
                    14:75:0f:a4:aa:23:1a:20:19:5d:cf:31:da:e1:51:
                    22:9b:24:9a:a0:73:9a:f2:93:74:bf:a4:0e:c3:d2:
                    9b:9f:f1:d0:42:b6:e0:29:31:77:67:91:97:16:2d:
                    1a:57:54:7c:10:76:09:cc:37:74:e0:d8:2a:39:97:
                    fb:9c:68:60:fc:8c:b7:d2:95:7e:33:01:37:c6:cd:
                    0e:bc:b0:71:86:ef:40:e9:ff:b3:5d:79:67:df:47:
                    be:93:85:32:10:3e:48:5d:aa:7e:d6:0e:d1:20:8c:
                    54:a6:f8:d7:1a:4f:5d:5f:2f:bd:aa:7c:72:dd:04:
                    9e:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:CE:93:F0:89:F7:BA:14:94:7E:E3:EA:4E:CD:A0:C7:0C:75:80:86
            X509v3 Authority Key Identifier:
                keyid:37:91:56:73:B2:8B:DF:AD:B2:C2:01:9A:C6:8D:04:64:FD:21:B7:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N5FWc7KL362ywgGaxo0EZP0htxo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/4ea4f7-d70e-42a2-afd7-3e3a188f49de/1/N5FWc7KL362ywgGaxo0EZP0htxo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/4ea4f7-d70e-42a2-afd7-3e3a188f49de/1/N5FWc7KL362ywgGaxo0EZP0htxo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:d5:2a:89:10:db:8f:4f:e8:c7:fa:0c:43:96:8c:cb:75:c1:
         5e:35:33:3a:2c:2b:4b:da:e3:5d:68:5c:33:a1:01:c7:f1:94:
         2c:43:90:c9:35:0f:35:7b:ae:79:51:f8:e0:e4:3d:17:5f:85:
         fe:53:e9:09:17:c6:da:08:d0:e5:57:00:fd:6d:6e:10:e7:33:
         c3:46:c4:27:ae:9d:58:0a:86:9a:78:83:3b:45:b3:db:35:99:
         8c:37:52:ba:3d:33:76:26:13:c1:f3:42:5b:f2:95:d4:f4:7e:
         8d:56:82:88:41:b0:be:75:59:52:d6:35:92:08:0b:ff:d5:61:
         d8:be:8a:82:24:89:6d:59:7e:7c:a7:49:32:77:38:ac:42:d4:
         ae:98:96:9b:6b:f2:83:6d:8d:b7:ce:5c:6d:b2:84:c4:37:31:
         24:f7:29:d5:7b:d0:aa:cb:74:eb:0a:16:06:d2:2f:4d:dd:96:
         b4:fd:7a:60:63:53:da:c2:2b:93:68:c2:c7:27:0b:6e:72:e2:
         e3:cb:97:11:05:af:38:b1:c4:52:5c:1c:d4:9e:fa:c4:8a:69:
         12:87:1d:08:b9:1e:34:bb:ec:2c:11:a7:e6:ca:ec:f1:fc:a2:
         9c:5f:1b:b7:16:fc:5f:7b:04:50:c6:08:0e:64:ec:35:08:6c:
         a7:4a:00:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:08:10 2025 by rpki-client