Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/caf466-6e6c-4009-a55a-5fa9da03f570/1/n78C8E7EMIy1tgeL0GoXywDYM2k.mft
File:                     n78C8E7EMIy1tgeL0GoXywDYM2k.mft (raw, json)
Hash identifier:          nelWtx4C5uiUWn9oOg0jDakTDxiuL45uSRhhGGlgzzo=
Subject key identifier:   80:B4:89:4C:51:F8:23:A9:A5:0A:36:E5:A3:B7:70:B1:C8:8F:5C:94
Authority key identifier: 9F:BF:02:F0:4E:C4:30:8C:B5:B6:07:8B:D0:6A:17:CB:00:D8:33:69
Certificate issuer:       /CN=9fbf02f04ec4308cb5b6078bd06a17cb00d83369
Certificate serial:       019748C36E662D6008CD3C648C6D5652741D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n78C8E7EMIy1tgeL0GoXywDYM2k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/caf466-6e6c-4009-a55a-5fa9da03f570/1/n78C8E7EMIy1tgeL0GoXywDYM2k.mft
Manifest number:          0B
Signing time:             Sat 07 Jun 2025 05:00:56 +0000
Manifest this update:     Sat 07 Jun 2025 05:00:56 +0000
Manifest next update:     Sun 08 Jun 2025 05:00:56 +0000
Files and hashes:         1: lB6tM26XvybAjC_i9gyukbY90Gs.roa (hash: QCUB0nbnI7vfbQcfu12QO8f17dboTNQ2oQD6KvaVOOo=)
                          2: n78C8E7EMIy1tgeL0GoXywDYM2k.crl (hash: UvpKekpp1Lm/o0O5Paxwve2J567gXa8MBw0oeyJcz14=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/caf466-6e6c-4009-a55a-5fa9da03f570/1/n78C8E7EMIy1tgeL0GoXywDYM2k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/caf466-6e6c-4009-a55a-5fa9da03f570/1/n78C8E7EMIy1tgeL0GoXywDYM2k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n78C8E7EMIy1tgeL0GoXywDYM2k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:c3:6e:66:2d:60:08:cd:3c:64:8c:6d:56:52:74:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fbf02f04ec4308cb5b6078bd06a17cb00d83369
        Validity
            Not Before: Jun  7 05:00:56 2025 GMT
            Not After : Jun  8 05:00:56 2025 GMT
        Subject: CN=80b4894c51f823a9a50a36e5a3b770b1c88f5c94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:95:00:ad:b9:80:e8:e0:33:17:7d:a3:df:a3:
                    c5:aa:fc:37:76:2a:6d:a0:65:a7:53:9f:fa:00:69:
                    43:1a:4f:0f:f1:c9:05:4a:16:1e:85:4d:51:56:c3:
                    01:af:f5:17:ba:87:d6:a1:c5:1e:60:00:2d:20:e5:
                    60:f9:74:66:09:8a:2a:46:cc:91:1f:c9:c6:a4:c5:
                    95:55:ce:c7:05:26:e7:ae:be:c2:b0:45:41:5d:e2:
                    cf:6a:43:5a:3a:f7:8b:85:ee:fe:a4:85:3d:c6:b8:
                    f1:38:d9:93:d5:68:7a:ac:d4:ed:bb:e8:3f:b1:53:
                    65:7b:34:38:b9:73:d0:b6:8a:d1:ca:d6:25:8a:6e:
                    e0:12:ae:12:1a:34:c3:47:85:9b:c0:ed:db:e2:35:
                    94:3e:b9:0c:f7:76:f2:c1:24:8f:be:2e:6a:65:e4:
                    6b:b1:0d:74:1e:ed:f0:6d:d2:b0:ac:6a:77:c9:35:
                    5b:f1:54:c0:8e:d6:14:3e:41:98:cf:16:c6:38:d6:
                    01:c9:2c:4f:c2:0b:8d:a8:aa:b5:be:20:b5:22:5c:
                    5d:ef:47:7c:c8:35:25:46:a8:19:e5:10:a8:c4:67:
                    48:42:9c:15:38:2f:78:bb:15:d7:a5:2a:77:58:31:
                    b7:53:2f:0e:be:c0:f4:ff:a6:38:d6:b0:0d:ce:1a:
                    b5:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:B4:89:4C:51:F8:23:A9:A5:0A:36:E5:A3:B7:70:B1:C8:8F:5C:94
            X509v3 Authority Key Identifier:
                keyid:9F:BF:02:F0:4E:C4:30:8C:B5:B6:07:8B:D0:6A:17:CB:00:D8:33:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n78C8E7EMIy1tgeL0GoXywDYM2k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/caf466-6e6c-4009-a55a-5fa9da03f570/1/n78C8E7EMIy1tgeL0GoXywDYM2k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/caf466-6e6c-4009-a55a-5fa9da03f570/1/n78C8E7EMIy1tgeL0GoXywDYM2k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:fd:06:b7:78:ba:13:84:4b:72:6e:e3:23:ef:a3:3c:b4:33:
         46:fa:c8:55:ae:90:60:ae:73:3c:83:65:c4:76:f1:e6:c5:82:
         23:94:14:63:56:37:67:39:a6:94:58:61:9d:f4:3c:e7:5d:39:
         2c:c2:cd:39:29:f6:4a:45:98:ab:a0:e0:47:55:25:9c:97:2f:
         c2:e4:f7:7b:2d:77:62:02:aa:ae:47:84:9c:4d:b2:46:ec:93:
         b5:c1:51:c5:83:45:e0:76:17:c6:18:08:cc:75:33:00:29:02:
         10:c8:41:94:5c:96:aa:5a:08:60:ec:aa:70:8e:fd:36:f9:e7:
         e5:3d:da:3c:25:2a:87:a5:24:8c:61:d6:c8:b4:a9:af:62:1a:
         e3:4e:36:4a:a2:a3:42:14:20:f9:89:de:c7:66:96:72:73:1b:
         4d:79:ea:43:b4:e4:f8:21:24:99:6a:16:8e:81:83:a0:bf:b5:
         af:1c:32:8b:2b:63:72:71:a5:a0:3f:74:d4:bc:5d:b4:60:91:
         c8:8d:4d:87:bc:9c:32:85:cc:a7:fb:4c:10:54:ab:23:90:9a:
         66:19:e0:52:dd:a3:ad:2d:63:ba:6c:ff:0a:37:23:98:22:53:
         b4:f3:81:f2:a7:ac:0a:9d:48:00:26:d5:ff:bf:b2:1d:f7:85:
         54:ff:7a:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:49:42 2025 by rpki-client