Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/86f93b-cd9d-4e82-bef0-9dcf6b3c0797/1/N3G9bi3aX6MFfEvCg_r3E6kVpdk.mft
File:                     N3G9bi3aX6MFfEvCg_r3E6kVpdk.mft (raw, json)
Hash identifier:          LAP7R840Hej1Le79LiZiaslG9ynWm9hm4821RzsoeIM=
Subject key identifier:   02:C4:B9:ED:58:24:11:A4:9F:9B:77:2C:2F:6F:97:91:41:C7:38:B8
Authority key identifier: 37:71:BD:6E:2D:DA:5F:A3:05:7C:4B:C2:83:FA:F7:13:A9:15:A5:D9
Certificate issuer:       /CN=3771bd6e2dda5fa3057c4bc283faf713a915a5d9
Certificate serial:       019873E320ED2F502E42F4EEA902D039FF4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N3G9bi3aX6MFfEvCg_r3E6kVpdk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/86f93b-cd9d-4e82-bef0-9dcf6b3c0797/1/N3G9bi3aX6MFfEvCg_r3E6kVpdk.mft
Manifest number:          0B21
Signing time:             Mon 04 Aug 2025 07:02:01 +0000
Manifest this update:     Mon 04 Aug 2025 07:02:01 +0000
Manifest next update:     Tue 05 Aug 2025 07:02:01 +0000
Files and hashes:         1: N3G9bi3aX6MFfEvCg_r3E6kVpdk.crl (hash: dz5e8je08KrIFKrFYoEKmcPTgNbAx6KwJatgzlS5V3c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/86f93b-cd9d-4e82-bef0-9dcf6b3c0797/1/N3G9bi3aX6MFfEvCg_r3E6kVpdk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/86f93b-cd9d-4e82-bef0-9dcf6b3c0797/1/N3G9bi3aX6MFfEvCg_r3E6kVpdk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N3G9bi3aX6MFfEvCg_r3E6kVpdk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e3:20:ed:2f:50:2e:42:f4:ee:a9:02:d0:39:ff:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3771bd6e2dda5fa3057c4bc283faf713a915a5d9
        Validity
            Not Before: Aug  4 07:02:01 2025 GMT
            Not After : Aug  5 07:02:01 2025 GMT
        Subject: CN=02c4b9ed582411a49f9b772c2f6f979141c738b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:81:5e:3b:07:e6:0f:a3:f1:8c:a6:6a:5a:a4:
                    a6:8e:f0:74:74:a2:2a:8c:a2:87:28:fd:f6:6d:4e:
                    a2:50:23:9c:84:fd:92:d9:22:ee:fc:c9:28:7d:e4:
                    fe:d6:22:9f:f0:30:b6:10:28:ed:1a:f8:27:b8:b9:
                    68:f2:06:e0:f3:80:d1:6e:37:96:cf:83:36:cc:ba:
                    e2:8b:fa:fe:52:02:87:54:79:be:57:5a:69:70:83:
                    59:b8:b9:a6:b9:4f:6b:42:75:08:af:9d:5b:ad:12:
                    c7:1b:b7:c0:6e:f9:35:c7:05:5c:1a:f5:ca:35:1d:
                    35:5d:98:51:19:a5:c1:62:34:24:18:f1:37:5b:25:
                    6f:6d:06:5f:87:7f:38:e3:b3:9f:4b:54:8d:b7:88:
                    6e:e3:5f:27:82:ce:41:d6:d3:dd:36:cc:f6:c0:b1:
                    ec:fb:c2:71:d8:1b:65:b9:ec:67:cf:68:be:d6:e9:
                    fd:3c:86:51:7d:ec:55:fd:51:ec:ed:b3:38:37:f1:
                    6a:45:54:e8:7e:81:a5:ac:4e:d7:76:79:92:df:8c:
                    cc:19:ea:24:ca:55:c7:36:4b:45:93:54:c2:9d:ad:
                    ea:b9:b3:79:36:d5:ee:f1:0b:75:4f:c0:8d:1b:07:
                    21:9c:b7:5b:60:36:1e:a9:91:6d:53:2a:39:2e:80:
                    70:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:C4:B9:ED:58:24:11:A4:9F:9B:77:2C:2F:6F:97:91:41:C7:38:B8
            X509v3 Authority Key Identifier:
                keyid:37:71:BD:6E:2D:DA:5F:A3:05:7C:4B:C2:83:FA:F7:13:A9:15:A5:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N3G9bi3aX6MFfEvCg_r3E6kVpdk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/86f93b-cd9d-4e82-bef0-9dcf6b3c0797/1/N3G9bi3aX6MFfEvCg_r3E6kVpdk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/86f93b-cd9d-4e82-bef0-9dcf6b3c0797/1/N3G9bi3aX6MFfEvCg_r3E6kVpdk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:ff:df:ff:0d:ef:89:53:5d:27:20:02:43:43:8e:c1:6c:1f:
         d0:f2:00:11:e5:5c:69:4d:8b:67:2f:f6:84:4a:5f:7d:bc:3a:
         79:74:de:4b:35:e4:51:f1:25:ea:77:47:c8:79:b8:12:b4:68:
         43:bc:df:43:18:28:4f:8b:07:9f:16:6a:72:49:d8:d2:b8:06:
         5e:1e:10:79:39:35:4b:20:b4:63:b2:c9:6c:90:df:51:27:74:
         bc:50:27:49:8c:60:9d:c4:44:1f:56:ec:e5:35:94:32:74:86:
         7b:7f:33:b9:2e:4e:0a:2c:28:b6:95:7e:fa:ce:67:94:17:11:
         2b:23:14:0f:5b:ea:cf:16:76:97:fa:9b:68:ec:a5:ee:d7:d3:
         24:fb:ec:bd:1d:79:6f:8e:a1:51:56:42:1d:69:5a:8e:31:df:
         e1:22:c0:d6:8c:a6:cd:ab:f5:48:61:13:2f:46:68:51:01:82:
         60:3e:0a:38:29:9c:34:c1:0f:f8:75:1a:43:e9:cb:b8:01:58:
         17:b9:68:60:eb:57:46:dc:29:fc:44:21:49:a6:1f:0f:f3:e4:
         5e:3f:d3:f5:09:32:12:12:06:10:1e:6a:87:3c:85:89:26:81:
         b1:d5:7e:a8:ab:49:bc:c2:3f:b2:1e:0d:e5:19:7f:b7:a2:d6:
         e7:4e:f4:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:04:42 2025 by rpki-client