Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/0de0b4-c99a-4360-a44a-19a1999d9d7e/1/NjSXIAQAsPGq56h_yjbwd-DtYs4.mft
File:                     NjSXIAQAsPGq56h_yjbwd-DtYs4.mft (raw, json)
Hash identifier:          QOqI9fyFaBy3OahqWRcMaTEGovLgiBOaEqtoBn/E3tc=
Subject key identifier:   9F:7A:81:FB:E2:2B:2E:E7:C9:E1:81:85:88:DB:9A:57:1F:B2:6E:18
Authority key identifier: 36:34:97:20:04:00:B0:F1:AA:E7:A8:7F:CA:36:F0:77:E0:ED:62:CE
Certificate issuer:       /CN=363497200400b0f1aae7a87fca36f077e0ed62ce
Certificate serial:       0196959752B9F5CF48ED5D292B00F6944163
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NjSXIAQAsPGq56h_yjbwd-DtYs4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/0de0b4-c99a-4360-a44a-19a1999d9d7e/1/NjSXIAQAsPGq56h_yjbwd-DtYs4.mft
Manifest number:          0E94
Signing time:             Sat 03 May 2025 10:00:44 +0000
Manifest this update:     Sat 03 May 2025 10:00:44 +0000
Manifest next update:     Sun 04 May 2025 10:00:44 +0000
Files and hashes:         1: LXHGZAjXqV3BVckN7vOFelHq2Tc.roa (hash: M+8avj4WOOMDQtO8QC9UxKExN0zGnS4KkBKl/qQeGUg=)
                          2: NjSXIAQAsPGq56h_yjbwd-DtYs4.crl (hash: 5UleacZCE4d5NNt21SwD4+2NxF3jmalTdPP4a6jy4yw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/0de0b4-c99a-4360-a44a-19a1999d9d7e/1/NjSXIAQAsPGq56h_yjbwd-DtYs4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/0de0b4-c99a-4360-a44a-19a1999d9d7e/1/NjSXIAQAsPGq56h_yjbwd-DtYs4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NjSXIAQAsPGq56h_yjbwd-DtYs4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 May 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:95:97:52:b9:f5:cf:48:ed:5d:29:2b:00:f6:94:41:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=363497200400b0f1aae7a87fca36f077e0ed62ce
        Validity
            Not Before: May  3 10:00:44 2025 GMT
            Not After : May  4 10:00:44 2025 GMT
        Subject: CN=9f7a81fbe22b2ee7c9e1818588db9a571fb26e18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e3:61:bd:6f:d7:ff:5d:40:10:53:19:61:0a:
                    64:56:0c:e6:60:35:52:ee:26:80:9f:1d:70:57:f7:
                    25:36:f0:56:df:e4:14:29:b5:ae:9f:d6:a7:4f:d8:
                    b1:f0:72:49:47:10:a3:9f:86:c0:d1:7a:31:cd:2e:
                    c6:2e:55:89:bc:82:2d:c8:9c:5d:26:19:ef:89:93:
                    b3:92:0a:d6:54:3e:88:ba:15:e1:57:f2:b5:5e:20:
                    d5:c2:b1:06:ba:c9:20:4f:66:7f:5d:e7:ec:4f:92:
                    a2:03:eb:24:41:9b:8a:95:84:97:24:0f:80:f0:8d:
                    37:5e:f2:90:b0:53:9c:64:df:2a:3b:d1:a6:fb:c7:
                    1b:7d:7a:79:b5:5b:e6:38:3b:25:42:84:b4:99:3c:
                    a3:eb:c4:e7:e0:44:16:00:07:f5:f2:58:26:15:27:
                    75:e1:d1:21:29:58:a7:52:39:21:27:3b:3f:71:9d:
                    2a:b2:16:2e:cc:3d:ae:3e:a5:7e:d5:f0:7c:22:1e:
                    e8:24:1e:ce:2e:8e:df:70:01:97:e4:02:e4:1b:91:
                    e2:6a:9d:1d:fe:8a:c1:52:bf:d8:88:37:18:fb:1f:
                    c9:22:38:83:78:83:76:36:70:84:39:a0:38:47:c1:
                    ae:0b:44:7f:7e:ab:f7:bb:ab:08:77:3a:9c:21:f1:
                    ac:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:7A:81:FB:E2:2B:2E:E7:C9:E1:81:85:88:DB:9A:57:1F:B2:6E:18
            X509v3 Authority Key Identifier:
                keyid:36:34:97:20:04:00:B0:F1:AA:E7:A8:7F:CA:36:F0:77:E0:ED:62:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NjSXIAQAsPGq56h_yjbwd-DtYs4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/0de0b4-c99a-4360-a44a-19a1999d9d7e/1/NjSXIAQAsPGq56h_yjbwd-DtYs4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/0de0b4-c99a-4360-a44a-19a1999d9d7e/1/NjSXIAQAsPGq56h_yjbwd-DtYs4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:c2:2e:82:dc:0b:ea:a1:08:80:b6:09:dc:24:ec:3d:eb:99:
         e0:37:2d:82:93:9d:f7:8a:48:4e:2d:0a:0e:3d:bc:c3:03:9a:
         fa:cb:05:34:5c:11:dc:d4:8c:00:30:02:48:60:b6:57:6e:13:
         2e:90:fc:71:f9:37:02:74:c6:4f:e6:a0:6d:5f:e3:1f:f5:b6:
         59:0e:27:97:2d:57:4d:f7:58:47:49:e3:a5:23:c3:8d:b5:ee:
         17:0a:f1:d5:11:f0:4e:11:92:a7:b6:16:0a:c9:0d:4e:88:c2:
         79:f3:6c:21:1d:8a:ac:21:1c:b4:27:ae:6b:b3:fa:1a:77:fb:
         15:1d:c6:e8:81:5a:ac:08:07:50:7c:fc:72:e9:3a:46:a5:dc:
         11:31:ee:62:5b:50:d6:4b:74:66:a2:8c:78:fa:e1:60:09:e1:
         cb:52:cf:e7:85:b4:a0:9d:31:29:b2:65:1a:9e:42:cc:7a:da:
         f2:02:3b:12:25:9f:50:79:66:96:9e:b1:10:7a:a1:05:f2:c5:
         0d:6b:4c:72:be:bb:b7:71:b6:83:8b:02:5e:e8:2c:b5:e5:dd:
         36:b4:26:4f:c2:56:48:58:a8:f1:59:44:c6:7e:1e:ca:29:9c:
         0f:d7:3a:84:35:59:82:a6:4f:b7:b7:82:9c:40:30:0a:88:46:
         de:04:af:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 12:38:33 2025 by rpki-client