Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/0f7d30-6f24-4b8c-b75c-61700dde7692/1/n5FENjC-1KQYJ6zlcHmpR6yHy74.mft
File:                     n5FENjC-1KQYJ6zlcHmpR6yHy74.mft (raw, json)
Hash identifier:          CtkV1Ri7disy4jssZHFbeWbOVOrjSDFigCyTUsDhbBU=
Subject key identifier:   3F:3E:B5:2C:0D:6B:C9:64:17:55:A5:12:19:E8:9B:43:71:BB:38:E0
Authority key identifier: 9F:91:44:36:30:BE:D4:A4:18:27:AC:E5:70:79:A9:47:AC:87:CB:BE
Certificate issuer:       /CN=9f91443630bed4a41827ace57079a947ac87cbbe
Certificate serial:       019748C36ED612E7DF0E3DB47251B51D661E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n5FENjC-1KQYJ6zlcHmpR6yHy74.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/0f7d30-6f24-4b8c-b75c-61700dde7692/1/n5FENjC-1KQYJ6zlcHmpR6yHy74.mft
Manifest number:          7C
Signing time:             Sat 07 Jun 2025 05:00:56 +0000
Manifest this update:     Sat 07 Jun 2025 05:00:56 +0000
Manifest next update:     Sun 08 Jun 2025 05:00:56 +0000
Files and hashes:         1: FTz3I1LwzTnAWMfdkHFOvWrYtnw.roa (hash: ON7nD9k8gZbbUe0iuDqX0lxMxjEVRpGMdIVVvIAhjDg=)
                          2: n5FENjC-1KQYJ6zlcHmpR6yHy74.crl (hash: fe0RAC+94NchLFGogvmgdzQNL2vXLNN+tpMw+KYFZ3Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/0f7d30-6f24-4b8c-b75c-61700dde7692/1/n5FENjC-1KQYJ6zlcHmpR6yHy74.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/0f7d30-6f24-4b8c-b75c-61700dde7692/1/n5FENjC-1KQYJ6zlcHmpR6yHy74.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n5FENjC-1KQYJ6zlcHmpR6yHy74.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:c3:6e:d6:12:e7:df:0e:3d:b4:72:51:b5:1d:66:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f91443630bed4a41827ace57079a947ac87cbbe
        Validity
            Not Before: Jun  7 05:00:56 2025 GMT
            Not After : Jun  8 05:00:56 2025 GMT
        Subject: CN=3f3eb52c0d6bc9641755a51219e89b4371bb38e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:65:f1:ea:ec:26:55:1b:a3:b1:be:87:b8:6f:
                    f7:fb:06:cf:52:6f:88:2b:8e:c6:92:0e:a3:d6:2f:
                    9e:b2:49:72:f3:73:92:76:34:9e:31:83:d2:02:6f:
                    b3:5b:22:a7:29:7c:d7:2b:9f:4b:80:15:e9:df:1a:
                    f9:2d:b4:2e:26:5f:fc:58:d2:63:4f:e0:a9:20:a6:
                    f0:c1:20:6f:36:19:44:44:38:bb:b7:ff:8d:8a:20:
                    d3:75:3e:1a:16:0d:c3:da:b7:e4:ee:50:d2:0c:16:
                    0a:28:4d:7c:f5:8f:c8:88:5f:a7:74:54:dc:b4:3a:
                    44:48:32:7b:8c:7c:6d:96:15:4d:94:a0:95:42:dd:
                    84:24:51:79:f9:2c:09:0c:71:fb:5c:9e:1d:62:73:
                    4a:f8:40:23:74:eb:5f:67:bb:c7:d1:cb:aa:f2:cd:
                    5a:1b:84:33:75:5d:39:9c:a1:9f:dc:39:ea:08:05:
                    4d:52:ab:50:71:2c:ad:05:b2:19:cb:1e:bd:b2:d8:
                    9d:27:0a:b7:e9:0b:6c:ad:9a:8f:01:bd:0d:ec:20:
                    14:e4:e6:6a:99:b2:d9:86:a2:c9:c4:15:c1:8b:ba:
                    06:f0:53:c4:f0:50:03:07:37:37:25:7f:19:5d:9c:
                    85:2c:34:35:4d:4b:22:44:46:11:f3:cf:b3:a0:15:
                    71:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:3E:B5:2C:0D:6B:C9:64:17:55:A5:12:19:E8:9B:43:71:BB:38:E0
            X509v3 Authority Key Identifier:
                keyid:9F:91:44:36:30:BE:D4:A4:18:27:AC:E5:70:79:A9:47:AC:87:CB:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n5FENjC-1KQYJ6zlcHmpR6yHy74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0f7d30-6f24-4b8c-b75c-61700dde7692/1/n5FENjC-1KQYJ6zlcHmpR6yHy74.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0f7d30-6f24-4b8c-b75c-61700dde7692/1/n5FENjC-1KQYJ6zlcHmpR6yHy74.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:4f:13:35:2c:c1:0a:88:13:a8:41:b6:7d:2a:da:0f:a2:3c:
         82:52:f3:d9:1e:87:03:47:a7:df:bd:da:97:28:03:8b:c5:66:
         51:aa:e8:40:59:56:26:71:eb:86:a5:a4:96:c0:15:72:3d:ef:
         71:ac:c9:c5:bc:7d:11:da:10:90:4f:54:ef:bc:d0:dc:b0:6f:
         55:31:28:3c:e5:2a:6f:eb:e1:38:e5:43:e5:31:ec:19:6c:1d:
         8c:13:20:2a:8d:21:8b:ff:b7:5c:ca:56:e5:0a:9c:73:f6:29:
         1a:a0:5b:5c:ce:68:61:5b:84:a0:66:5e:c8:6a:dd:89:83:0a:
         78:70:0e:6e:dc:59:51:af:58:bb:26:7e:8c:f9:af:db:c9:6f:
         69:81:f7:10:e4:71:a5:b5:af:87:2d:05:4f:c1:f6:2d:b3:95:
         3b:d0:80:3b:f7:aa:bc:63:b7:cf:50:2b:64:23:8a:33:f3:81:
         e4:a3:cc:17:e5:63:72:6a:ab:62:58:fd:97:82:96:bf:85:21:
         f8:e7:e4:e8:80:69:10:34:3e:43:55:f3:2d:ea:7f:ea:d3:ad:
         5f:11:76:ca:c8:74:93:3c:4f:c3:48:28:f0:df:e7:3f:37:c2:
         4f:05:57:0d:86:9c:d5:b8:f3:cc:8c:9b:88:d9:8b:01:fe:85:
         5a:b0:57:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIw27WEuffDj20clG1HWYeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmOTE0NDM2MzBiZWQ0YTQxODI3YWNlNTcwNzlhOTQ3YWM4
N2NiYmUwHhcNMjUwNjA3MDUwMDU2WhcNMjUwNjA4MDUwMDU2WjAzMTEwLwYDVQQD
EygzZjNlYjUyYzBkNmJjOTY0MTc1NWE1MTIxOWU4OWI0MzcxYmIzOGUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2Xx6uwmVRujsb6HuG/3+wbPUm+I
K47Gkg6j1i+eskly83OSdjSeMYPSAm+zWyKnKXzXK59LgBXp3xr5LbQuJl/8WNJj
T+CpIKbwwSBvNhlERDi7t/+NiiDTdT4aFg3D2rfk7lDSDBYKKE189Y/IiF+ndFTc
tDpESDJ7jHxtlhVNlKCVQt2EJFF5+SwJDHH7XJ4dYnNK+EAjdOtfZ7vH0cuq8s1a
G4QzdV05nKGf3DnqCAVNUqtQcSytBbIZyx69stidJwq36QtsrZqPAb0N7CAU5OZq
mbLZhqLJxBXBi7oG8FPE8FADBzc3JX8ZXZyFLDQ1TUsiREYR88+zoBVxqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD8+tSwNa8lkF1WlEhnom0NxuzjgMB8GA1UdIwQY
MBaAFJ+RRDYwvtSkGCes5XB5qUesh8u+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjVGRU5qQy0xS1FZSjZ6bGNIbXBSNnlIeTc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8wZjdkMzAtNmYyNC00YjhjLWI3NWMt
NjE3MDBkZGU3NjkyLzEvbjVGRU5qQy0xS1FZSjZ6bGNIbXBSNnlIeTc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS8wZjdkMzAtNmYyNC00YjhjLWI3NWMtNjE3MDBkZGU3Njky
LzEvbjVGRU5qQy0xS1FZSjZ6bGNIbXBSNnlIeTc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI08TNSzB
CogTqEG2fSraD6I8glLz2R6HA0en373alygDi8VmUaroQFlWJnHrhqWklsAVcj3v
cazJxbx9EdoQkE9U77zQ3LBvVTEoPOUqb+vhOOVD5THsGWwdjBMgKo0hi/+3XMpW
5Qqcc/YpGqBbXM5oYVuEoGZeyGrdiYMKeHAObtxZUa9YuyZ+jPmv28lvaYH3EORx
pbWvhy0FT8H2LbOVO9CAO/eqvGO3z1ArZCOKM/OB5KPMF+VjcmqrYlj9l4KWv4Uh
+Ofk6IBpEDQ+Q1XzLep/6tOtXxF2ysh0kzxPw0go8N/nPzfCTwVXDYac1bjzzIyb
iNmLAf6FWrBXVA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 14:47:50 2025 by rpki-client