Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.mft
File:                     N_sATjl93wTn0F82Q6A28hg2_xA.mft (raw, json)
Hash identifier:          7VRvVHOJrqjttjTnZbjqzU1ncPjoTMyai7vr6TVd6mw=
Subject key identifier:   F8:E8:64:7B:C9:A6:AF:E3:74:60:E1:EA:65:2C:7B:86:55:89:38:82
Authority key identifier: 37:FB:00:4E:39:7D:DF:04:E7:D0:5F:36:43:A0:36:F2:18:36:FF:10
Certificate issuer:       /CN=37fb004e397ddf04e7d05f3643a036f21836ff10
Certificate serial:       01976C2B3D0FE0E262707ACE119F58F1BA69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N_sATjl93wTn0F82Q6A28hg2_xA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.mft
Manifest number:          1594
Signing time:             Sat 14 Jun 2025 02:01:02 +0000
Manifest this update:     Sat 14 Jun 2025 02:01:02 +0000
Manifest next update:     Sun 15 Jun 2025 02:01:02 +0000
Files and hashes:         1: 3-Pz_ACqotf_1pTiM38rfDDW65c.roa (hash: +6mxaP3CNTwVlIYMhWG+20r4HZR/llgs3lm8STPmGs0=)
                          2: 9kX4GrtqMRWRvdlXwe-ZIc9Ou2o.roa (hash: 6kYLXGHct4tBz4Kt7RTp0Yq24Dr5ZTh8EftVQx18Anw=)
                          3: N_sATjl93wTn0F82Q6A28hg2_xA.crl (hash: vEPrIQIOFY+MqzgZSv/r7LoAC+faj9lVX8UngETm+ew=)
                          4: PuYFjQeAMPYTJknY4a9xdl9WjmI.roa (hash: E2/hGT1MU9NO8befK4BGLovPtwxuEyai1B8Xt8zA7+A=)
                          5: QRbrmHMbnacFIghz2vQJ1iEwIPo.roa (hash: gpC7d4/OhCyOZcpUbHREfEufrTPs9FXkeTxWhp4MXlw=)
                          6: avUi3YjwZnz0yzUPnJu4Y8PDkW0.roa (hash: mWS6jEEzpU5C/mf65CgMVs1ygfIg+nXboKeBb7STrRk=)
                          7: nTWU5WV73x998fb6pecneWzKHj0.roa (hash: m9Al1FOb5Ruq1WL/BIhpl9I/8AOLD6hHB+5Qi5PqY4A=)
                          8: pnddHirjNCKxYSqPtn_sWaDmNxU.roa (hash: HVJptrd3yeSfrIUH7AUm9UPFYH8L+twTA4AttYwqX2E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N_sATjl93wTn0F82Q6A28hg2_xA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:2b:3d:0f:e0:e2:62:70:7a:ce:11:9f:58:f1:ba:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37fb004e397ddf04e7d05f3643a036f21836ff10
        Validity
            Not Before: Jun 14 02:01:02 2025 GMT
            Not After : Jun 15 02:01:02 2025 GMT
        Subject: CN=f8e8647bc9a6afe37460e1ea652c7b8655893882
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d6:31:cf:3c:64:67:5f:49:e9:ab:39:b5:ac:
                    ce:94:be:95:26:6f:55:3d:55:8d:c3:2f:00:1b:c6:
                    a4:5d:ae:62:b6:1a:c1:84:64:e1:5d:4f:7d:0a:b4:
                    38:23:9c:37:89:9a:f0:f0:be:99:e6:de:8f:f6:70:
                    a0:f0:84:aa:2e:fb:02:4d:f2:3c:44:4f:f7:14:f5:
                    47:8a:31:ca:d9:80:41:3b:63:b2:a8:b1:86:0d:bf:
                    57:5e:9a:d1:16:ea:33:02:fa:bd:50:c6:cb:e8:f2:
                    67:95:ff:c5:fd:a0:36:8a:b9:7f:e8:bc:71:bd:32:
                    b5:b5:09:91:10:9c:15:26:10:98:29:cd:2e:af:72:
                    e9:f3:a2:ce:5a:cd:06:d0:70:4d:a3:fc:74:ef:53:
                    8e:90:be:ae:22:01:4e:37:70:cc:ba:fa:a1:b6:bd:
                    19:56:f1:f8:60:05:ac:25:0c:25:b2:c6:14:e3:d8:
                    87:94:00:1d:1c:fb:bb:94:9e:ec:bd:42:58:e8:93:
                    2d:2f:4e:19:a8:e1:21:41:a0:31:57:ee:2f:44:d3:
                    9d:84:d8:23:3e:85:df:48:1d:b1:af:b7:e3:7f:40:
                    f5:d6:2e:e5:9f:f7:be:53:0f:80:a2:ef:86:ad:cd:
                    b7:b8:d5:0d:50:89:11:0c:86:ed:b2:d4:b8:fc:92:
                    bd:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:E8:64:7B:C9:A6:AF:E3:74:60:E1:EA:65:2C:7B:86:55:89:38:82
            X509v3 Authority Key Identifier:
                keyid:37:FB:00:4E:39:7D:DF:04:E7:D0:5F:36:43:A0:36:F2:18:36:FF:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N_sATjl93wTn0F82Q6A28hg2_xA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:16:7c:aa:e0:ca:c1:6a:e3:68:40:73:86:03:00:a6:94:4e:
         39:45:ee:69:3c:76:03:77:73:e0:69:cf:bc:a9:0b:22:3f:ca:
         fa:80:b8:1f:10:54:3e:9e:b6:77:50:93:a9:91:b8:65:cf:85:
         71:d3:5e:27:69:ae:e6:ba:69:a5:4e:3d:32:c0:a6:e6:b9:9f:
         7c:30:00:dd:3d:2f:0c:a7:73:9e:e7:5f:7b:2f:1e:11:11:a0:
         c4:27:61:8e:67:e3:2d:3e:73:af:0b:c7:e5:c7:59:22:0f:96:
         91:9e:d6:aa:2b:47:d3:40:5c:c9:8d:19:5e:32:ee:cf:b0:e6:
         96:71:22:e6:75:6f:32:5f:eb:ab:7d:26:8d:43:7e:05:ec:6a:
         c7:86:98:1e:e2:09:ed:2d:36:f4:f5:24:8a:04:2d:33:72:e7:
         ac:c0:19:8c:77:04:97:5d:c7:99:f1:f5:22:5f:a0:34:75:9b:
         25:65:27:d7:dd:db:cf:12:06:c7:44:1c:26:ee:03:3b:a0:66:
         b0:a7:4c:6d:83:e3:40:79:fb:75:8b:21:cf:00:17:3d:ea:9f:
         47:7a:80:f1:fd:4c:ae:e2:45:8c:40:f1:03:fc:28:e0:09:8d:
         a3:29:81:d6:6f:16:ae:6f:47:28:dd:58:37:c0:69:c1:bf:39:
         06:ca:b7:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:57:37 2025 by rpki-client