Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/24c5a3-2a31-4b85-840e-26806ec35c20/1/N0zC_9dpwY5ebw38mg6nT7P4wQg.mft
File:                     N0zC_9dpwY5ebw38mg6nT7P4wQg.mft (raw, json)
Hash identifier:          HIneVXz9L4G0XAaNlAHhRVyX9MU+TwCk2VRiCEdBUE4=
Subject key identifier:   B5:2C:D4:6D:48:0E:CD:05:0F:C3:30:01:9E:08:51:37:3E:36:87:6B
Authority key identifier: 37:4C:C2:FF:D7:69:C1:8E:5E:6F:0D:FC:9A:0E:A7:4F:B3:F8:C1:08
Certificate issuer:       /CN=374cc2ffd769c18e5e6f0dfc9a0ea74fb3f8c108
Certificate serial:       019873E30EB5438FE60ECE1BD8AC83882B5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N0zC_9dpwY5ebw38mg6nT7P4wQg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/24c5a3-2a31-4b85-840e-26806ec35c20/1/N0zC_9dpwY5ebw38mg6nT7P4wQg.mft
Manifest number:          05D7
Signing time:             Mon 04 Aug 2025 07:01:56 +0000
Manifest this update:     Mon 04 Aug 2025 07:01:56 +0000
Manifest next update:     Tue 05 Aug 2025 07:01:56 +0000
Files and hashes:         1: N0zC_9dpwY5ebw38mg6nT7P4wQg.crl (hash: dYrhx+KHz3kxU2KBlK/w3092l0DsZnrNEp1SbtNz/CE=)
                          2: vhowbyAk5Rh70uoSE00L17bmBWw.roa (hash: BWCvKLZnXJi7kB8pBa3EtqBdHPmAZ8d1B0Q3jz/KOuk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/24c5a3-2a31-4b85-840e-26806ec35c20/1/N0zC_9dpwY5ebw38mg6nT7P4wQg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/24c5a3-2a31-4b85-840e-26806ec35c20/1/N0zC_9dpwY5ebw38mg6nT7P4wQg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N0zC_9dpwY5ebw38mg6nT7P4wQg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e3:0e:b5:43:8f:e6:0e:ce:1b:d8:ac:83:88:2b:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=374cc2ffd769c18e5e6f0dfc9a0ea74fb3f8c108
        Validity
            Not Before: Aug  4 07:01:56 2025 GMT
            Not After : Aug  5 07:01:56 2025 GMT
        Subject: CN=b52cd46d480ecd050fc330019e0851373e36876b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:94:99:9e:51:6f:54:1d:df:df:5a:65:ca:a8:
                    8f:7d:d4:01:3f:ce:42:11:97:68:7d:40:55:fc:e9:
                    bb:29:e6:f0:05:0e:23:7c:91:89:f7:e5:04:80:e7:
                    c3:ac:a3:8b:0b:7c:43:8c:86:b9:4f:fe:33:ef:21:
                    9f:d4:bb:19:46:13:1a:61:71:c7:2b:5a:29:d9:ad:
                    70:03:99:55:e6:70:fd:2d:91:1b:34:68:9d:e1:8f:
                    40:cb:d7:a1:16:a5:cd:85:22:0f:b8:83:4a:b5:4d:
                    10:6f:3b:3d:23:05:e1:0b:f7:fd:5b:96:5a:d0:43:
                    5c:d7:38:3c:d9:88:a5:93:22:c0:80:2f:ce:ce:33:
                    03:2f:43:1a:4f:68:7d:39:24:5f:02:ac:4f:c1:84:
                    6a:b2:8d:f0:34:71:e7:23:77:3c:cf:da:6e:fc:60:
                    e1:3b:35:1c:d3:a7:25:a9:79:e2:80:01:4c:00:20:
                    f0:6f:f3:bb:be:1f:c2:13:ea:ea:7e:40:1d:44:0f:
                    c0:c4:d5:b4:ca:c7:21:82:ee:88:3f:8e:40:48:8d:
                    30:5b:c8:dd:e8:ab:d6:bb:13:d0:7f:21:da:41:56:
                    6b:93:70:b0:84:6c:5d:20:ff:85:2e:6d:37:0f:2d:
                    4a:7d:b5:30:f0:8a:90:1b:73:e2:85:0b:3c:74:80:
                    40:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:2C:D4:6D:48:0E:CD:05:0F:C3:30:01:9E:08:51:37:3E:36:87:6B
            X509v3 Authority Key Identifier:
                keyid:37:4C:C2:FF:D7:69:C1:8E:5E:6F:0D:FC:9A:0E:A7:4F:B3:F8:C1:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0zC_9dpwY5ebw38mg6nT7P4wQg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/24c5a3-2a31-4b85-840e-26806ec35c20/1/N0zC_9dpwY5ebw38mg6nT7P4wQg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/24c5a3-2a31-4b85-840e-26806ec35c20/1/N0zC_9dpwY5ebw38mg6nT7P4wQg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:5d:de:45:24:b0:cf:c6:a2:90:9b:68:19:a5:ee:60:fd:21:
         58:b5:e3:f5:15:bd:db:7b:0a:27:2d:75:7d:5f:75:8d:43:6c:
         de:99:be:9d:1b:3f:a5:6c:e1:87:c1:73:df:dc:4f:a1:77:83:
         53:1b:92:6b:76:be:75:7a:a1:45:de:fb:70:f5:ba:97:42:8f:
         55:d3:7f:fa:09:d0:9e:ff:7c:09:a1:1e:01:5d:71:09:b4:f5:
         4c:df:b2:45:86:3f:9b:dc:7c:84:da:63:91:89:10:78:f2:31:
         b9:46:de:15:e9:f1:52:f8:a8:3a:37:ff:b7:02:cb:32:61:c9:
         43:f7:db:f8:cf:2a:91:9a:63:c9:84:8b:77:24:5f:4d:24:36:
         4c:03:f2:ab:e5:d6:2b:83:5d:5d:94:5e:d0:29:f2:48:33:f4:
         fd:46:7c:b3:5b:42:3f:fb:24:ca:5c:25:94:fb:b0:9d:ed:31:
         b7:5c:a4:0f:97:43:7f:00:0e:e1:bb:2f:26:9d:5b:91:8f:e2:
         4e:6c:dc:1c:8f:f3:cb:f0:6f:e2:57:50:96:08:be:44:61:33:
         72:97:60:63:db:c2:92:9f:fb:3b:ed:63:f3:b8:23:64:e9:c7:
         11:12:0b:4b:bb:f2:6b:74:77:c6:60:3e:26:be:8b:b7:d4:6d:
         8d:8d:6d:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:08:38 2025 by rpki-client