Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/4fd739-1d0d-4753-a845-907796e705da/1/npzXqbifTgVovUoLbCwRzRfn8OE.mft
File:                     npzXqbifTgVovUoLbCwRzRfn8OE.mft (raw, json)
Hash identifier:          ahtLXEOUkMWnplGfqH67BrXYf/qhLp+dnaQx97M1808=
Subject key identifier:   7B:D1:E6:F6:9C:71:9C:51:2D:21:16:F4:D0:3E:14:17:13:DF:E9:BF
Authority key identifier: 9E:9C:D7:A9:B8:9F:4E:05:68:BD:4A:0B:6C:2C:11:CD:17:E7:F0:E1
Certificate issuer:       /CN=9e9cd7a9b89f4e0568bd4a0b6c2c11cd17e7f0e1
Certificate serial:       0197470B8C4E7AA37F6D5271F7F87D820A0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/npzXqbifTgVovUoLbCwRzRfn8OE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/4fd739-1d0d-4753-a845-907796e705da/1/npzXqbifTgVovUoLbCwRzRfn8OE.mft
Manifest number:          032D
Signing time:             Fri 06 Jun 2025 21:00:28 +0000
Manifest this update:     Fri 06 Jun 2025 21:00:28 +0000
Manifest next update:     Sat 07 Jun 2025 21:00:28 +0000
Files and hashes:         1: npzXqbifTgVovUoLbCwRzRfn8OE.crl (hash: hhRk/WV70JQABTJt2X3iel4Wos20LcPuDrYWTO116gU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/4fd739-1d0d-4753-a845-907796e705da/1/npzXqbifTgVovUoLbCwRzRfn8OE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/4fd739-1d0d-4753-a845-907796e705da/1/npzXqbifTgVovUoLbCwRzRfn8OE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/npzXqbifTgVovUoLbCwRzRfn8OE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:0b:8c:4e:7a:a3:7f:6d:52:71:f7:f8:7d:82:0a:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e9cd7a9b89f4e0568bd4a0b6c2c11cd17e7f0e1
        Validity
            Not Before: Jun  6 21:00:28 2025 GMT
            Not After : Jun  7 21:00:28 2025 GMT
        Subject: CN=7bd1e6f69c719c512d2116f4d03e141713dfe9bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:7c:3b:ee:7e:4f:68:00:1e:b6:51:a2:29:f9:
                    c5:90:74:f6:5a:9e:a2:8c:40:a9:f7:1a:d2:10:91:
                    e0:d4:35:cd:c5:f2:03:24:7a:7a:e5:fa:48:91:3c:
                    70:fa:ae:18:15:80:f1:1f:35:d1:96:8c:4a:b6:b4:
                    0a:99:54:6e:99:53:51:25:93:92:ad:aa:d3:11:ec:
                    96:8d:25:e4:03:6c:36:e8:94:b3:89:3d:60:8f:1c:
                    22:b2:91:8e:e2:9f:22:30:82:3d:91:9a:f3:24:9f:
                    b6:13:05:a1:65:1f:53:82:c8:db:48:30:c1:1b:5c:
                    bc:d8:73:e0:22:bc:4d:41:91:e3:8b:29:d5:8d:b7:
                    74:64:11:aa:ce:96:03:64:45:5e:f5:49:36:53:07:
                    e0:ae:bc:6a:5d:a1:83:9b:89:42:60:2e:23:b1:11:
                    95:65:cd:2a:ef:dd:56:6b:9b:0e:36:8b:9b:af:e3:
                    15:03:40:4c:c4:6f:8a:d2:4c:23:6a:23:98:b6:7d:
                    5f:c9:a4:b1:bf:5e:3e:2f:38:83:97:de:b4:3d:9e:
                    bc:02:20:4e:ce:e7:0e:6d:51:2b:6c:67:4b:5f:ca:
                    1d:3c:14:63:27:5b:f5:a7:18:f6:c5:00:14:7e:fa:
                    e1:1b:c3:81:b7:29:e8:39:e6:eb:4e:87:f7:41:9d:
                    a4:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:D1:E6:F6:9C:71:9C:51:2D:21:16:F4:D0:3E:14:17:13:DF:E9:BF
            X509v3 Authority Key Identifier:
                keyid:9E:9C:D7:A9:B8:9F:4E:05:68:BD:4A:0B:6C:2C:11:CD:17:E7:F0:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npzXqbifTgVovUoLbCwRzRfn8OE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/4fd739-1d0d-4753-a845-907796e705da/1/npzXqbifTgVovUoLbCwRzRfn8OE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/4fd739-1d0d-4753-a845-907796e705da/1/npzXqbifTgVovUoLbCwRzRfn8OE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:e4:0c:d7:44:bf:75:fb:79:7d:78:e2:79:bf:ce:c7:63:09:
         00:6f:87:44:13:6e:ec:97:98:2e:d7:57:61:e0:e6:3e:c6:74:
         ba:c1:f8:cd:02:7b:ab:f3:e5:4d:7d:46:8e:48:a5:d5:3b:b8:
         4b:cb:7e:a0:b0:b6:e9:84:c5:d1:67:5c:39:9d:bf:a9:66:9c:
         24:b9:fc:46:7f:d0:b7:0e:a7:b8:fc:28:48:74:c0:a6:22:31:
         1e:1f:6b:04:e7:9b:66:92:5b:27:63:d1:ae:91:5b:27:e0:83:
         1a:6b:48:c0:b5:d1:13:68:9f:f5:28:b1:a3:c7:fe:67:51:7e:
         42:28:f4:97:a9:27:e4:eb:f0:96:1f:b8:40:4a:f9:bd:55:4e:
         36:ee:28:c6:32:83:4e:1d:64:d1:ed:47:c7:ea:64:5c:cb:0b:
         d7:f2:b0:2d:62:0f:13:0f:49:af:94:b4:fb:01:2f:d2:d6:c0:
         ef:d9:32:f2:ef:b3:11:e2:50:97:0f:07:25:96:58:29:78:d4:
         0b:4f:29:26:94:56:b1:64:6f:e5:85:77:47:58:42:06:ef:03:
         37:57:4d:80:a1:d2:66:c8:b1:62:ed:fc:7d:a6:af:c5:69:7c:
         55:08:47:89:1e:b8:ad:68:01:2a:75:37:76:f1:dc:d6:11:3f:
         e3:60:06:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdHC4xOeqN/bVJx9/h9ggoLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllOWNkN2E5Yjg5ZjRlMDU2OGJkNGEwYjZjMmMxMWNkMTdl
N2YwZTEwHhcNMjUwNjA2MjEwMDI4WhcNMjUwNjA3MjEwMDI4WjAzMTEwLwYDVQQD
Eyg3YmQxZTZmNjljNzE5YzUxMmQyMTE2ZjRkMDNlMTQxNzEzZGZlOWJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3w77n5PaAAetlGiKfnFkHT2Wp6i
jECp9xrSEJHg1DXNxfIDJHp65fpIkTxw+q4YFYDxHzXRloxKtrQKmVRumVNRJZOS
rarTEeyWjSXkA2w26JSziT1gjxwispGO4p8iMII9kZrzJJ+2EwWhZR9TgsjbSDDB
G1y82HPgIrxNQZHjiynVjbd0ZBGqzpYDZEVe9Uk2UwfgrrxqXaGDm4lCYC4jsRGV
Zc0q791Wa5sONoubr+MVA0BMxG+K0kwjaiOYtn1fyaSxv14+LziDl960PZ68AiBO
zucObVErbGdLX8odPBRjJ1v1pxj2xQAUfvrhG8OBtynoOebrTof3QZ2kzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHvR5vaccZxRLSEW9NA+FBcT3+m/MB8GA1UdIwQY
MBaAFJ6c16m4n04FaL1KC2wsEc0X5/DhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnB6WHFiaWZUZ1ZvdlVvTGJDd1J6UmZuOE9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy80ZmQ3MzktMWQwZC00NzUzLWE4NDUt
OTA3Nzk2ZTcwNWRhLzEvbnB6WHFiaWZUZ1ZvdlVvTGJDd1J6UmZuOE9FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy80ZmQ3MzktMWQwZC00NzUzLWE4NDUtOTA3Nzk2ZTcwNWRh
LzEvbnB6WHFiaWZUZ1ZvdlVvTGJDd1J6UmZuOE9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS+QM10S/
dft5fXjieb/Ox2MJAG+HRBNu7JeYLtdXYeDmPsZ0usH4zQJ7q/PlTX1Gjkil1Tu4
S8t+oLC26YTF0WdcOZ2/qWacJLn8Rn/Qtw6nuPwoSHTApiIxHh9rBOebZpJbJ2PR
rpFbJ+CDGmtIwLXRE2if9Sixo8f+Z1F+Qij0l6kn5Ovwlh+4QEr5vVVONu4oxjKD
Th1k0e1Hx+pkXMsL1/KwLWIPEw9Jr5S0+wEv0tbA79ky8u+zEeJQlw8HJZZYKXjU
C08pJpRWsWRv5YV3R1hCBu8DN1dNgKHSZsixYu38faavxWl8VQhHiR64rWgBKnU3
dvHc1hE/42AGzg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 01:16:27 2025 by rpki-client