Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/0df808-7473-47b1-817f-be770e1e6c13/1/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.mft
File:                     NI_Zd8y-e7ltPA8xdMmVG_hw_rA.mft (raw, json)
Hash identifier:          XDaXR1dJ1C8LYuhUzSTrCjajYfAyAZmyRIHKZXV/sUg=
Subject key identifier:   CA:22:57:B4:CE:65:2F:81:E0:92:B3:1E:6B:DF:65:6C:53:C5:F8:08
Authority key identifier: 34:8F:D9:77:CC:BE:7B:B9:6D:3C:0F:31:74:C9:95:1B:F8:70:FE:B0
Certificate issuer:       /CN=348fd977ccbe7bb96d3c0f3174c9951bf870feb0
Certificate serial:       01976D3E5D9E1AE648DD4A64DCDD6FCBCAA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/0df808-7473-47b1-817f-be770e1e6c13/1/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.mft
Manifest number:          158E
Signing time:             Sat 14 Jun 2025 07:01:33 +0000
Manifest this update:     Sat 14 Jun 2025 07:01:33 +0000
Manifest next update:     Sun 15 Jun 2025 07:01:33 +0000
Files and hashes:         1: NI_Zd8y-e7ltPA8xdMmVG_hw_rA.crl (hash: zPOGjGSSZ7Y0JK8Sou7k85hMK+bVQb97BbiFozfmqWs=)
                          2: ZxlhkpSeT22co3ElobaCavDtI1I.roa (hash: RsOVTQimQxoF2zeQAP5zv2htNZo2elUQhLdSPHG+MC0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/0df808-7473-47b1-817f-be770e1e6c13/1/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/0df808-7473-47b1-817f-be770e1e6c13/1/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:3e:5d:9e:1a:e6:48:dd:4a:64:dc:dd:6f:cb:ca:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=348fd977ccbe7bb96d3c0f3174c9951bf870feb0
        Validity
            Not Before: Jun 14 07:01:33 2025 GMT
            Not After : Jun 15 07:01:33 2025 GMT
        Subject: CN=ca2257b4ce652f81e092b31e6bdf656c53c5f808
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:36:82:18:6f:42:4a:71:40:e9:7e:fd:c1:26:
                    e0:49:4f:9a:30:17:1b:53:c9:ec:9c:db:d3:c9:49:
                    70:b4:0f:7d:25:17:4b:c5:ca:0d:60:93:7a:56:f4:
                    e2:ec:52:29:86:13:cf:7e:73:81:1f:f6:cb:87:69:
                    e1:b0:4c:1c:3a:e5:b4:69:70:59:bc:77:0f:60:a0:
                    ea:3b:ff:99:86:8c:67:af:c3:52:0c:ae:c8:dc:66:
                    9c:b2:82:41:7f:ee:c2:c3:9b:16:ad:70:d2:af:f2:
                    35:e2:66:e4:cb:c7:5d:4f:55:66:54:6c:0e:bf:39:
                    7e:96:39:05:94:28:29:80:1e:13:cd:23:7d:f0:0e:
                    5a:02:5f:91:31:6f:86:a2:e0:25:e6:8b:02:87:1d:
                    d2:58:fb:73:c5:1d:38:8b:c2:a5:26:d5:5a:ec:bc:
                    8c:da:16:68:1d:79:b5:a7:de:90:04:2a:b4:f8:ec:
                    ed:19:8f:b9:cd:79:d5:c9:de:1c:e0:9b:63:bf:b4:
                    eb:8c:3f:aa:21:37:f7:44:b3:e9:19:d4:ba:6a:f5:
                    bb:71:a0:8e:9a:41:1b:da:ba:cb:16:3a:55:87:fc:
                    9b:4d:4d:c2:4f:d1:23:de:c2:68:45:ca:a1:eb:77:
                    bd:a4:44:81:21:c3:19:14:ed:8d:5f:65:c6:52:a0:
                    9f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:22:57:B4:CE:65:2F:81:E0:92:B3:1E:6B:DF:65:6C:53:C5:F8:08
            X509v3 Authority Key Identifier:
                keyid:34:8F:D9:77:CC:BE:7B:B9:6D:3C:0F:31:74:C9:95:1B:F8:70:FE:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/0df808-7473-47b1-817f-be770e1e6c13/1/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/0df808-7473-47b1-817f-be770e1e6c13/1/NI_Zd8y-e7ltPA8xdMmVG_hw_rA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:7f:75:2c:0f:f9:a7:4b:b2:41:99:65:a5:b2:7e:c0:2a:de:
         da:20:b2:85:14:52:aa:7f:dd:0b:48:bf:9f:a1:82:c2:db:73:
         c2:be:27:70:fc:ac:76:59:92:8d:4b:b6:1c:b9:1b:fd:21:59:
         39:e7:52:54:db:53:e7:8f:02:55:88:85:84:f5:e4:f2:12:b1:
         6b:9c:e7:be:89:71:ac:f0:42:3b:01:a8:e2:f1:cf:6d:c0:32:
         5f:68:45:c3:8b:5b:91:5b:19:39:f4:32:8f:f7:fd:63:71:88:
         f6:5c:09:83:6b:87:89:e6:3d:be:24:d4:0c:06:c7:eb:08:ff:
         12:90:8b:64:8a:34:de:52:cb:7f:20:96:09:c3:84:d3:81:e9:
         74:e7:e9:e9:9c:ca:d7:26:0d:0a:14:5f:d1:e4:49:1c:22:7c:
         e7:d0:c0:ab:bf:5c:38:bc:a2:d2:60:49:52:f3:4d:67:96:53:
         16:c9:c7:26:fb:f7:09:d5:f9:3b:8d:e4:25:bd:87:89:2a:07:
         78:e0:31:85:72:e1:ee:39:02:1f:dc:53:15:ab:5d:ce:1b:09:
         1b:dd:3b:b8:56:ab:95:c4:45:58:c3:ad:2a:64:ee:d3:61:40:
         43:ed:68:4b:f8:12:80:c6:06:ba:4d:8f:3f:e3:37:6f:29:5a:
         e4:d4:d7:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:10:09 2025 by rpki-client