Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/762743-7164-433e-8bb6-a19507de75b4/1/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.mft
File:                     nWalz6Oc-pHjE0Q_YT5zzOc_IUA.mft (raw, json)
Hash identifier:          fColbm7wQSh0HX9oYAKi1uJJKqaUURdVyxA1wPNTeQ8=
Subject key identifier:   9F:C5:7D:70:2A:13:8D:C3:29:2C:66:C1:98:DB:B6:8C:2C:5E:BD:11
Authority key identifier: 9D:66:A5:CF:A3:9C:FA:91:E3:13:44:3F:61:3E:73:CC:E7:3F:21:40
Certificate issuer:       /CN=9d66a5cfa39cfa91e313443f613e73cce73f2140
Certificate serial:       01974DE9BE46F47B73B5F0ED07023D637A23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/762743-7164-433e-8bb6-a19507de75b4/1/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.mft
Manifest number:          0EAA
Signing time:             Sun 08 Jun 2025 05:00:53 +0000
Manifest this update:     Sun 08 Jun 2025 05:00:53 +0000
Manifest next update:     Mon 09 Jun 2025 05:00:53 +0000
Files and hashes:         1: S97lFgLq26JbbTYFy87788PSLWo.roa (hash: is6nhjEc4wx03A1n5kSCHVis+Wuf1J/yxv2gFot2aXA=)
                          2: nWalz6Oc-pHjE0Q_YT5zzOc_IUA.crl (hash: Jj2zKjaz/weVoNHAPAmQHPt0wXUHvmfNT6AupRKkEJE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/762743-7164-433e-8bb6-a19507de75b4/1/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/762743-7164-433e-8bb6-a19507de75b4/1/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4d:e9:be:46:f4:7b:73:b5:f0:ed:07:02:3d:63:7a:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d66a5cfa39cfa91e313443f613e73cce73f2140
        Validity
            Not Before: Jun  8 05:00:53 2025 GMT
            Not After : Jun  9 05:00:53 2025 GMT
        Subject: CN=9fc57d702a138dc3292c66c198dbb68c2c5ebd11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:55:e9:0b:5a:e3:4f:d3:8c:6d:c5:8a:d2:e5:
                    ca:16:aa:25:7c:c2:b9:c2:67:bf:75:87:42:79:01:
                    31:37:f5:87:95:61:08:bd:16:41:34:f1:a8:64:2e:
                    74:58:83:0f:2f:dc:c2:40:d7:82:5a:f0:c9:0d:96:
                    ca:30:9c:da:f6:55:96:b7:22:2f:2c:72:f8:ad:a1:
                    4d:24:1f:3a:52:63:b4:ba:ed:26:08:1c:51:2b:75:
                    d2:91:30:5a:e8:6c:88:a2:d7:7f:48:7e:55:b2:23:
                    fc:29:dd:cc:e9:04:d9:c6:55:e9:78:2b:e3:fb:24:
                    55:d5:07:2f:b6:b6:ce:50:4c:37:11:f3:9f:71:fe:
                    e9:c6:9e:6b:74:10:54:25:08:7e:86:8b:6f:a1:60:
                    9d:84:73:20:20:74:da:67:b3:6b:ca:9e:70:91:8e:
                    6f:4f:9e:1d:92:cf:6d:fe:35:e6:d3:c3:1e:4e:5b:
                    29:27:ba:9d:21:4f:83:38:6a:e4:88:dc:f5:33:a8:
                    30:aa:02:94:6c:8a:f5:cd:c3:34:1b:0b:60:52:df:
                    74:0d:8e:c0:5f:52:38:84:66:3a:8c:ab:3d:5b:9c:
                    7d:49:87:c9:61:9c:b2:7a:f1:e0:da:1b:13:99:63:
                    d1:0e:e0:60:fa:63:a7:9c:55:24:30:1b:20:d7:8b:
                    67:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:C5:7D:70:2A:13:8D:C3:29:2C:66:C1:98:DB:B6:8C:2C:5E:BD:11
            X509v3 Authority Key Identifier:
                keyid:9D:66:A5:CF:A3:9C:FA:91:E3:13:44:3F:61:3E:73:CC:E7:3F:21:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/762743-7164-433e-8bb6-a19507de75b4/1/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/762743-7164-433e-8bb6-a19507de75b4/1/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:a1:91:89:97:c9:14:fd:13:87:0e:e8:b8:20:09:ff:58:ca:
         0f:44:46:4a:5b:de:4b:bc:d5:09:9c:37:6c:6a:e4:31:53:8c:
         6e:ac:4d:08:a3:ae:73:8a:16:00:31:49:86:c5:1d:7f:db:0e:
         84:f4:d2:d8:67:d6:f1:9b:2c:eb:d4:e2:5c:79:39:97:2b:33:
         2d:ac:66:d6:21:e4:95:d6:fa:1c:fd:d8:2e:d9:77:cf:c9:1c:
         fd:ad:ad:af:68:53:1e:a7:0f:a7:50:58:12:38:8a:d5:eb:e0:
         d8:c3:e8:a7:16:51:d2:88:a9:bd:b0:0b:ac:2c:ae:1e:cb:b8:
         a3:c1:19:36:d7:5a:dc:14:b9:fb:0a:f2:d6:90:f2:bb:8b:25:
         4d:2d:f9:ab:f5:3a:71:82:b8:a3:df:84:6e:2f:bc:c8:5d:00:
         f5:69:ac:43:f4:11:32:38:6e:2c:ef:66:1f:0e:f5:18:d4:b4:
         ba:bd:d0:80:7b:b6:c3:bf:f0:97:b8:73:17:44:05:aa:b8:a3:
         88:6c:a3:d0:6f:e6:aa:fd:8b:a6:07:b4:c7:f7:fa:87:cd:a9:
         d5:64:77:08:45:f5:ed:bb:d8:ce:6d:ad:94:65:a5:b8:4b:ff:
         06:42:62:35:d4:77:ca:1a:48:48:4a:e3:f2:91:fd:84:fe:3d:
         11:eb:e2:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 08:01:25 2025 by rpki-client