Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/2b0928-5cb6-4d6b-a8ad-00e55a2499d0/1/n3g9_Cib-qPEuhsyTx27V_WGoB0.mft
File:                     n3g9_Cib-qPEuhsyTx27V_WGoB0.mft (raw, json)
Hash identifier:          LSNkOv27dV/DRzTw2frJUMMm6AkcQK5mMYZDo4ltai0=
Subject key identifier:   75:E4:6A:57:90:1A:00:05:AE:2A:4D:D4:36:6C:8B:84:9B:8D:33:4B
Authority key identifier: 9F:78:3D:FC:28:9B:FA:A3:C4:BA:1B:32:4F:1D:BB:57:F5:86:A0:1D
Certificate issuer:       /CN=9f783dfc289bfaa3c4ba1b324f1dbb57f586a01d
Certificate serial:       0197488C32402264EAA0DE5815D989ABB8BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n3g9_Cib-qPEuhsyTx27V_WGoB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/2b0928-5cb6-4d6b-a8ad-00e55a2499d0/1/n3g9_Cib-qPEuhsyTx27V_WGoB0.mft
Manifest number:          01D0
Signing time:             Sat 07 Jun 2025 04:00:36 +0000
Manifest this update:     Sat 07 Jun 2025 04:00:36 +0000
Manifest next update:     Sun 08 Jun 2025 04:00:36 +0000
Files and hashes:         1: AE5IQSZ07aDFdSNH0kV7_4HeAEw.roa (hash: urftXRrLYNfHknYhlBilfeq0wuuzqoCnp0BIMu9jSb4=)
                          2: n3g9_Cib-qPEuhsyTx27V_WGoB0.crl (hash: K4DZ33AN3DWqjiSNb1fo2QCwrfIKJxGh7DFWP0DtVuM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/2b0928-5cb6-4d6b-a8ad-00e55a2499d0/1/n3g9_Cib-qPEuhsyTx27V_WGoB0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/2b0928-5cb6-4d6b-a8ad-00e55a2499d0/1/n3g9_Cib-qPEuhsyTx27V_WGoB0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n3g9_Cib-qPEuhsyTx27V_WGoB0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 22:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:8c:32:40:22:64:ea:a0:de:58:15:d9:89:ab:b8:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f783dfc289bfaa3c4ba1b324f1dbb57f586a01d
        Validity
            Not Before: Jun  7 04:00:36 2025 GMT
            Not After : Jun  8 04:00:36 2025 GMT
        Subject: CN=75e46a57901a0005ae2a4dd4366c8b849b8d334b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c8:d3:5a:fb:f3:7e:f0:1c:c5:8e:11:81:80:
                    9d:c5:3e:02:cc:ea:ba:c3:73:81:eb:8b:67:ca:06:
                    27:85:70:41:99:80:7c:63:7d:6b:bf:9c:95:d3:9c:
                    38:01:47:4f:ce:fe:5c:68:47:cd:75:ee:fb:bb:13:
                    bd:7a:bf:17:c2:65:a4:65:e4:ce:8a:9a:3f:a3:57:
                    ab:2f:0f:f4:1c:ae:85:d3:9f:d8:02:6b:75:b1:e8:
                    2b:84:31:4b:a8:be:73:4c:1f:35:4c:14:27:32:52:
                    d0:d9:93:56:11:14:d5:43:0d:eb:6b:69:a5:bc:23:
                    ec:63:35:bb:d2:c7:19:9d:4a:a0:49:f5:ea:f5:b6:
                    5b:90:df:e1:e4:2f:0a:14:35:ab:75:92:cf:eb:32:
                    96:b4:ea:28:d3:4e:1e:14:54:84:7d:8f:77:1a:d6:
                    62:41:03:31:1c:98:43:69:24:45:66:4b:0c:ba:c3:
                    3d:25:18:5f:e8:ea:88:62:fc:56:00:ce:a0:c0:3b:
                    c4:2b:a6:8a:27:d8:ad:b3:7d:b4:55:d6:9b:c8:fc:
                    16:5e:d0:ac:81:af:bb:8c:cf:d4:9f:a8:6d:19:3e:
                    ef:7d:c4:fd:34:86:a4:4b:14:04:04:d6:67:9e:ce:
                    94:48:27:18:cc:89:19:ff:6d:cf:ff:0f:22:b0:f2:
                    14:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:E4:6A:57:90:1A:00:05:AE:2A:4D:D4:36:6C:8B:84:9B:8D:33:4B
            X509v3 Authority Key Identifier:
                keyid:9F:78:3D:FC:28:9B:FA:A3:C4:BA:1B:32:4F:1D:BB:57:F5:86:A0:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n3g9_Cib-qPEuhsyTx27V_WGoB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2b0928-5cb6-4d6b-a8ad-00e55a2499d0/1/n3g9_Cib-qPEuhsyTx27V_WGoB0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2b0928-5cb6-4d6b-a8ad-00e55a2499d0/1/n3g9_Cib-qPEuhsyTx27V_WGoB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:89:4e:64:17:c2:99:9f:2f:66:dc:cd:a3:f6:1d:fc:cd:ea:
         56:ad:a6:f5:69:c1:31:bb:87:2e:55:91:1d:d2:bd:80:be:1e:
         04:7c:5c:e6:ad:2d:b7:d0:03:3e:c5:03:40:17:ce:1b:52:f6:
         57:35:33:dd:b8:ee:86:2b:d1:7d:8f:ef:99:57:bf:f3:fe:ac:
         69:b6:00:a3:f5:61:12:9b:19:d6:cc:d1:fa:7d:c0:98:17:fb:
         46:9e:bf:63:4d:41:83:33:26:05:06:89:f5:68:be:5f:e7:45:
         d7:c3:f6:6a:a2:ae:00:11:4e:1d:d4:61:99:7b:61:5d:b3:5f:
         f3:8a:4a:5b:6f:54:89:d9:80:31:94:fc:ef:32:9b:01:d9:9a:
         47:6a:3e:13:bf:f7:65:03:2c:f0:32:27:99:99:4e:2a:da:73:
         fd:5f:0b:0e:fb:be:67:0f:13:d5:e9:a6:58:f5:76:ac:7e:6f:
         d2:2b:a6:dd:8c:81:92:d2:ad:a2:f5:98:f5:a5:4f:da:f7:90:
         13:73:b4:41:3b:12:f8:2c:a7:e9:44:e3:97:d1:92:2c:26:0e:
         8f:bd:f0:54:07:dc:dd:08:34:7e:11:56:04:80:0d:a9:f6:65:
         ac:9c:3d:ed:03:af:41:13:89:73:16:63:47:38:7e:2b:2f:d5:
         e8:3e:9e:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIjDJAImTqoN5YFdmJq7i7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmNzgzZGZjMjg5YmZhYTNjNGJhMWIzMjRmMWRiYjU3ZjU4
NmEwMWQwHhcNMjUwNjA3MDQwMDM2WhcNMjUwNjA4MDQwMDM2WjAzMTEwLwYDVQQD
Eyg3NWU0NmE1NzkwMWEwMDA1YWUyYTRkZDQzNjZjOGI4NDliOGQzMzRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzMjTWvvzfvAcxY4RgYCdxT4CzOq6
w3OB64tnygYnhXBBmYB8Y31rv5yV05w4AUdPzv5caEfNde77uxO9er8XwmWkZeTO
ipo/o1erLw/0HK6F05/YAmt1segrhDFLqL5zTB81TBQnMlLQ2ZNWERTVQw3ra2ml
vCPsYzW70scZnUqgSfXq9bZbkN/h5C8KFDWrdZLP6zKWtOoo004eFFSEfY93GtZi
QQMxHJhDaSRFZksMusM9JRhf6OqIYvxWAM6gwDvEK6aKJ9its320VdabyPwWXtCs
ga+7jM/Un6htGT7vfcT9NIakSxQEBNZnns6USCcYzIkZ/23P/w8isPIUdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHXkaleQGgAFripN1DZsi4SbjTNLMB8GA1UdIwQY
MBaAFJ94Pfwom/qjxLobMk8du1f1hqAdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjNnOV9DaWItcVBFdWhzeVR4MjdWX1dHb0IwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS8yYjA5MjgtNWNiNi00ZDZiLWE4YWQt
MDBlNTVhMjQ5OWQwLzEvbjNnOV9DaWItcVBFdWhzeVR4MjdWX1dHb0IwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS8yYjA5MjgtNWNiNi00ZDZiLWE4YWQtMDBlNTVhMjQ5OWQw
LzEvbjNnOV9DaWItcVBFdWhzeVR4MjdWX1dHb0IwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASolOZBfC
mZ8vZtzNo/Yd/M3qVq2m9WnBMbuHLlWRHdK9gL4eBHxc5q0tt9ADPsUDQBfOG1L2
VzUz3bjuhivRfY/vmVe/8/6sabYAo/VhEpsZ1szR+n3AmBf7Rp6/Y01BgzMmBQaJ
9Wi+X+dF18P2aqKuABFOHdRhmXthXbNf84pKW29UidmAMZT87zKbAdmaR2o+E7/3
ZQMs8DInmZlOKtpz/V8LDvu+Zw8T1emmWPV2rH5v0ium3YyBktKtovWY9aVP2veQ
E3O0QTsS+Cyn6UTjl9GSLCYOj73wVAfc3Qg0fhFWBIANqfZlrJw97QOvQROJcxZj
Rzh+Ky/V6D6eqQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 07:21:13 2025 by rpki-client