Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/nJGTyUKgcOtue3bTPBFwwauqq8A.mft
File:                     nJGTyUKgcOtue3bTPBFwwauqq8A.mft (raw, json)
Hash identifier:          uB+YZqJMJ1X7hyCw2WdoFrkBpbQBy2OK+uLxfSwDODs=
Subject key identifier:   43:6F:9E:E6:8F:06:E3:9D:7F:95:CE:4B:0B:B8:1D:E3:58:28:DD:4C
Authority key identifier: 9C:91:93:C9:42:A0:70:EB:6E:7B:76:D3:3C:11:70:C1:AB:AA:AB:C0
Certificate issuer:       /CN=9c9193c942a070eb6e7b76d33c1170c1abaaabc0
Certificate serial:       01974FD82DD5DA718CDF1A7E45BBDED43BAA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nJGTyUKgcOtue3bTPBFwwauqq8A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/nJGTyUKgcOtue3bTPBFwwauqq8A.mft
Manifest number:          85
Signing time:             Sun 08 Jun 2025 14:00:56 +0000
Manifest this update:     Sun 08 Jun 2025 14:00:56 +0000
Manifest next update:     Mon 09 Jun 2025 14:00:56 +0000
Files and hashes:         1: nJGTyUKgcOtue3bTPBFwwauqq8A.crl (hash: Xt1++X5H9EIgUbpTSOoXf/YSyPVMyLNEbUvn8k2kJyg=)
                          2: zsKGqfleCvDMwN0xjyFpS4xkenw.roa (hash: i/u/9VVtT03r4id3fmUnH+SfZ7Nvzq19dchi8Dl+uKg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/nJGTyUKgcOtue3bTPBFwwauqq8A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/nJGTyUKgcOtue3bTPBFwwauqq8A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nJGTyUKgcOtue3bTPBFwwauqq8A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4f:d8:2d:d5:da:71:8c:df:1a:7e:45:bb:de:d4:3b:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c9193c942a070eb6e7b76d33c1170c1abaaabc0
        Validity
            Not Before: Jun  8 14:00:56 2025 GMT
            Not After : Jun  9 14:00:56 2025 GMT
        Subject: CN=436f9ee68f06e39d7f95ce4b0bb81de35828dd4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:77:c8:96:58:e0:80:9d:5c:3d:4e:89:54:59:
                    11:d0:55:7f:67:61:36:92:6e:10:9d:de:0a:d3:5e:
                    10:34:30:8e:67:25:9c:c4:96:dd:87:cf:4b:35:c0:
                    99:a2:69:23:2f:76:a3:95:59:8e:00:d3:80:e1:c5:
                    f2:3d:81:30:42:7c:e6:67:e9:36:e2:f3:18:f7:bd:
                    fe:16:59:54:ab:ec:92:9d:1c:e7:eb:6b:92:54:55:
                    98:6c:26:45:9a:19:72:58:db:25:f8:14:a4:f8:65:
                    15:3a:f0:24:81:1b:cb:bd:8e:3a:a4:41:10:03:23:
                    16:a1:c9:69:3f:95:81:ae:db:6b:93:96:86:2a:28:
                    0a:a9:c1:48:1a:7e:38:c5:38:d1:c4:01:c0:e3:a2:
                    90:75:3e:38:5b:36:31:2c:84:81:19:50:ee:bc:81:
                    b4:65:32:a1:67:05:df:38:61:30:2d:2e:ba:7c:63:
                    23:31:4a:97:07:1d:4d:cc:d2:91:e8:13:85:40:c8:
                    a4:ea:12:55:eb:b5:c4:a3:d5:aa:aa:a6:a8:1a:29:
                    b9:34:60:47:10:da:9e:fb:e4:c3:1e:0f:d3:a1:9e:
                    bd:34:0e:21:22:c1:ab:1a:08:43:f1:f0:ac:4c:b8:
                    79:82:d4:cd:d1:e9:3d:b8:e3:03:80:52:f3:d3:df:
                    a7:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:6F:9E:E6:8F:06:E3:9D:7F:95:CE:4B:0B:B8:1D:E3:58:28:DD:4C
            X509v3 Authority Key Identifier:
                keyid:9C:91:93:C9:42:A0:70:EB:6E:7B:76:D3:3C:11:70:C1:AB:AA:AB:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nJGTyUKgcOtue3bTPBFwwauqq8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/nJGTyUKgcOtue3bTPBFwwauqq8A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/nJGTyUKgcOtue3bTPBFwwauqq8A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:c4:d5:89:73:c7:55:ff:cf:b8:24:4f:81:1c:03:96:f5:66:
         ab:0d:11:f6:46:95:1d:6e:9b:72:fc:a1:4a:b5:50:91:af:1a:
         1a:a8:e2:5e:8b:c4:39:3f:1a:4e:10:60:b1:d6:c5:19:d4:78:
         e9:5a:28:4a:e7:a2:d4:42:0d:0a:b3:e0:80:eb:71:a0:b7:ba:
         4a:0e:7b:45:68:f8:d3:64:3e:fa:c5:f1:ef:53:1d:33:d7:79:
         b0:55:4b:29:d8:94:3b:bb:b0:8a:ff:f0:42:9f:15:74:5c:ac:
         ef:6d:b1:05:c9:e8:80:be:58:d9:90:d1:8b:53:1a:94:18:ed:
         4f:a9:cc:c3:d9:37:5b:09:33:f7:73:ac:c9:2b:01:9c:d0:61:
         32:df:c7:fa:82:bb:4d:10:f0:22:79:17:56:10:59:3e:86:cd:
         81:69:da:06:89:a0:0b:1b:7a:f5:fe:18:57:c9:c5:6a:f3:dd:
         87:e0:81:26:ff:90:37:77:cc:ea:38:99:6e:70:10:a6:11:76:
         c4:b1:fa:c7:c0:cf:66:df:32:b0:6e:8f:bd:d7:a0:a0:66:17:
         fa:1d:0e:b9:e6:ff:0b:49:85:68:27:1b:f4:57:b7:de:c5:2d:
         95:07:44:05:18:84:ca:68:6a:ae:e6:b9:9a:77:bf:1d:e3:47:
         fd:05:57:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 22:37:55 2025 by rpki-client