Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/9678f9-9dfe-4b39-a80b-c54af960ef18/1/N6lZHUhfwNCQKom-hBijuxJ1BqU.mft
File:                     N6lZHUhfwNCQKom-hBijuxJ1BqU.mft (raw, json)
Hash identifier:          UgbBbgPwEZ8sKYxNvgZ4Ng6ez+ppQc29vxKVNpRckrQ=
Subject key identifier:   F0:C2:F1:A5:7B:0E:29:C4:CF:B3:15:11:E2:7C:43:74:9B:27:FC:AF
Authority key identifier: 37:A9:59:1D:48:5F:C0:D0:90:2A:89:BE:84:18:A3:BB:12:75:06:A5
Certificate issuer:       /CN=37a9591d485fc0d0902a89be8418a3bb127506a5
Certificate serial:       01976D7444BD1989968AC1385F83D7C6477E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N6lZHUhfwNCQKom-hBijuxJ1BqU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/9678f9-9dfe-4b39-a80b-c54af960ef18/1/N6lZHUhfwNCQKom-hBijuxJ1BqU.mft
Manifest number:          056A
Signing time:             Sat 14 Jun 2025 08:00:25 +0000
Manifest this update:     Sat 14 Jun 2025 08:00:25 +0000
Manifest next update:     Sun 15 Jun 2025 08:00:25 +0000
Files and hashes:         1: N6lZHUhfwNCQKom-hBijuxJ1BqU.crl (hash: 7rjL54NrPYlK1O3cXDaQZcnaNpHgAOJBwz/o479a2Rs=)
                          2: vUnbbu8skzS26iiXfWJzScSr25E.roa (hash: ImAxTHT0Xe4VXBRsFAB4OoUTkv7HmDfrBn2Cev7GldU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/9678f9-9dfe-4b39-a80b-c54af960ef18/1/N6lZHUhfwNCQKom-hBijuxJ1BqU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/9678f9-9dfe-4b39-a80b-c54af960ef18/1/N6lZHUhfwNCQKom-hBijuxJ1BqU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N6lZHUhfwNCQKom-hBijuxJ1BqU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:74:44:bd:19:89:96:8a:c1:38:5f:83:d7:c6:47:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37a9591d485fc0d0902a89be8418a3bb127506a5
        Validity
            Not Before: Jun 14 08:00:25 2025 GMT
            Not After : Jun 15 08:00:25 2025 GMT
        Subject: CN=f0c2f1a57b0e29c4cfb31511e27c43749b27fcaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:ae:30:cc:03:2c:ad:50:b1:71:6e:83:e3:2e:
                    64:09:3b:10:4e:22:b4:11:96:c0:06:30:ed:bb:4d:
                    b7:f1:ce:a9:b0:c8:c1:49:a6:10:a1:c8:bd:b4:ed:
                    44:78:34:5b:ff:67:7d:ff:7c:63:0a:f4:0f:b8:44:
                    3c:c6:5a:ea:88:66:23:46:08:d6:08:a7:56:10:0a:
                    e3:c5:20:37:a0:8b:3d:d1:2c:2d:58:6c:9f:db:41:
                    81:e1:0b:28:ab:f2:08:8f:da:c4:6b:14:2e:40:5c:
                    37:a2:2f:8a:9e:e4:94:65:71:6c:ac:ed:e3:92:41:
                    0b:bd:e4:fd:d4:6b:fd:98:67:69:bf:44:c6:41:67:
                    5a:42:5b:92:9f:22:de:6e:cd:28:79:26:05:d3:0e:
                    00:c0:40:d4:8c:be:01:ed:20:aa:32:82:ff:1a:95:
                    87:7e:5f:0c:e0:eb:ff:28:a0:d2:03:8b:42:8e:f6:
                    d7:95:2a:8b:63:77:bd:a7:be:9b:30:14:b2:57:c1:
                    71:49:e2:26:63:28:cd:01:8d:b1:3b:2e:09:e4:b8:
                    ec:34:40:e6:06:f4:96:6b:bc:d6:1d:f8:17:38:c9:
                    ab:2b:b5:47:8b:f6:c0:ef:d7:c5:46:80:a1:72:c8:
                    58:f7:da:51:d3:26:fe:12:dc:3a:03:7f:19:8d:39:
                    8b:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:C2:F1:A5:7B:0E:29:C4:CF:B3:15:11:E2:7C:43:74:9B:27:FC:AF
            X509v3 Authority Key Identifier:
                keyid:37:A9:59:1D:48:5F:C0:D0:90:2A:89:BE:84:18:A3:BB:12:75:06:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N6lZHUhfwNCQKom-hBijuxJ1BqU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/9678f9-9dfe-4b39-a80b-c54af960ef18/1/N6lZHUhfwNCQKom-hBijuxJ1BqU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/9678f9-9dfe-4b39-a80b-c54af960ef18/1/N6lZHUhfwNCQKom-hBijuxJ1BqU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:b9:24:8c:76:87:df:39:70:84:d7:46:ec:32:b3:4f:ba:62:
         eb:f6:1a:3b:8c:19:fd:e6:7b:1f:9e:1b:aa:dd:11:88:0a:b3:
         fc:c1:12:3c:ca:0c:60:69:cf:e1:25:0b:4b:8c:3b:a2:ea:0b:
         73:f2:0c:3a:78:b7:a3:38:2a:a3:ef:bc:88:cd:ba:ab:57:0d:
         c2:8c:b6:81:70:73:68:36:c7:ec:87:12:a2:04:a9:48:71:57:
         dc:d2:e1:d5:a6:cd:5a:86:5c:72:cf:22:98:77:cc:f6:3f:ed:
         70:17:b7:6e:d0:9c:36:e3:08:67:3b:aa:b7:d9:4c:98:f4:ad:
         7b:1a:c2:0c:2b:ca:47:2b:28:6a:68:38:59:75:b3:a8:18:5d:
         71:c3:70:78:20:6a:f3:0f:5e:a0:ca:9a:97:56:56:36:37:40:
         90:5e:1e:d0:a2:3d:0d:d3:c7:5b:fd:f6:27:c9:ae:e2:f5:75:
         0d:ee:29:f4:e6:75:e3:6e:da:d6:d1:94:91:f1:63:42:8a:c2:
         6e:5c:8b:30:0a:12:15:81:67:d5:95:db:67:bb:9b:cd:20:ad:
         a1:e6:c8:55:69:e1:3c:fa:23:0a:5c:e6:a8:27:5c:48:73:85:
         4f:05:4e:be:7c:68:45:d8:69:f0:8a:c0:3d:12:ad:bb:f6:85:
         c0:0d:ed:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtdES9GYmWisE4X4PXxkd+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3YTk1OTFkNDg1ZmMwZDA5MDJhODliZTg0MThhM2JiMTI3
NTA2YTUwHhcNMjUwNjE0MDgwMDI1WhcNMjUwNjE1MDgwMDI1WjAzMTEwLwYDVQQD
EyhmMGMyZjFhNTdiMGUyOWM0Y2ZiMzE1MTFlMjdjNDM3NDliMjdmY2FmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5q4wzAMsrVCxcW6D4y5kCTsQTiK0
EZbABjDtu0238c6psMjBSaYQoci9tO1EeDRb/2d9/3xjCvQPuEQ8xlrqiGYjRgjW
CKdWEArjxSA3oIs90SwtWGyf20GB4Qsoq/IIj9rEaxQuQFw3oi+KnuSUZXFsrO3j
kkELveT91Gv9mGdpv0TGQWdaQluSnyLebs0oeSYF0w4AwEDUjL4B7SCqMoL/GpWH
fl8M4Ov/KKDSA4tCjvbXlSqLY3e9p76bMBSyV8FxSeImYyjNAY2xOy4J5LjsNEDm
BvSWa7zWHfgXOMmrK7VHi/bA79fFRoChcshY99pR0yb+Etw6A38ZjTmLKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPDC8aV7DinEz7MVEeJ8Q3SbJ/yvMB8GA1UdIwQY
MBaAFDepWR1IX8DQkCqJvoQYo7sSdQalMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjZsWkhVaGZ3TkNRS29tLWhCaWp1eEoxQnFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC85Njc4ZjktOWRmZS00YjM5LWE4MGIt
YzU0YWY5NjBlZjE4LzEvTjZsWkhVaGZ3TkNRS29tLWhCaWp1eEoxQnFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC85Njc4ZjktOWRmZS00YjM5LWE4MGItYzU0YWY5NjBlZjE4
LzEvTjZsWkhVaGZ3TkNRS29tLWhCaWp1eEoxQnFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApLkkjHaH
3zlwhNdG7DKzT7pi6/YaO4wZ/eZ7H54bqt0RiAqz/MESPMoMYGnP4SULS4w7ouoL
c/IMOni3ozgqo++8iM26q1cNwoy2gXBzaDbH7IcSogSpSHFX3NLh1abNWoZccs8i
mHfM9j/tcBe3btCcNuMIZzuqt9lMmPStexrCDCvKRysoamg4WXWzqBhdccNweCBq
8w9eoMqal1ZWNjdAkF4e0KI9DdPHW/32J8mu4vV1De4p9OZ1427a1tGUkfFjQorC
blyLMAoSFYFn1ZXbZ7ubzSCtoebIVWnhPPojClzmqCdcSHOFTwVOvnxoRdhp8IrA
PRKtu/aFwA3tIg==
-----END CERTIFICATE-----
Generated at Sat Jun 14 11:33:02 2025 by rpki-client