Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/069008-2e4f-4323-b6a2-e8d6c2f071df/1/n6eFncOdRzYULPHiKcisS-YjuQM.mft
File:                     n6eFncOdRzYULPHiKcisS-YjuQM.mft (raw, json)
Hash identifier:          GHhQXVzO17bptCyS+yF+Dgbw28Y1674Q8BJUHvGPGfc=
Subject key identifier:   31:54:4A:64:7B:B2:B5:3F:4C:68:16:43:6C:8C:C0:7F:49:C9:B9:8C
Authority key identifier: 9F:A7:85:9D:C3:9D:47:36:14:2C:F1:E2:29:C8:AC:4B:E6:23:B9:03
Certificate issuer:       /CN=9fa7859dc39d4736142cf1e229c8ac4be623b903
Certificate serial:       019773096F7131F44E4C736D5B0B717187A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n6eFncOdRzYULPHiKcisS-YjuQM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/069008-2e4f-4323-b6a2-e8d6c2f071df/1/n6eFncOdRzYULPHiKcisS-YjuQM.mft
Manifest number:          122E
Signing time:             Sun 15 Jun 2025 10:01:27 +0000
Manifest this update:     Sun 15 Jun 2025 10:01:27 +0000
Manifest next update:     Mon 16 Jun 2025 10:01:27 +0000
Files and hashes:         1: n6eFncOdRzYULPHiKcisS-YjuQM.crl (hash: a9Rg7pAUjlrDzp6ZF9tHpwiwDC0xtquKeilDbvk1asY=)
                          2: ntwiuM95uFBi26vUIqSDj4sApAM.roa (hash: O4PdrlvcDhug5zKVlwkRZGJ/JkjzqqLTd2w+uWOsXH4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/069008-2e4f-4323-b6a2-e8d6c2f071df/1/n6eFncOdRzYULPHiKcisS-YjuQM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/069008-2e4f-4323-b6a2-e8d6c2f071df/1/n6eFncOdRzYULPHiKcisS-YjuQM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n6eFncOdRzYULPHiKcisS-YjuQM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 10:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:73:09:6f:71:31:f4:4e:4c:73:6d:5b:0b:71:71:87:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fa7859dc39d4736142cf1e229c8ac4be623b903
        Validity
            Not Before: Jun 15 10:01:27 2025 GMT
            Not After : Jun 16 10:01:27 2025 GMT
        Subject: CN=31544a647bb2b53f4c6816436c8cc07f49c9b98c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:eb:fc:f6:dd:58:5e:d3:f5:b3:96:8e:6c:11:
                    47:59:f7:3e:21:bf:6f:84:2b:91:d4:65:35:06:88:
                    17:1d:4a:ba:70:3e:09:1b:ad:ee:de:7e:1a:64:7d:
                    16:ea:ae:7f:2e:7d:ba:8f:0a:ce:44:74:f7:f6:53:
                    dd:0f:36:ec:f5:14:99:56:88:b5:ce:11:79:0b:10:
                    da:7c:c8:a5:81:97:79:68:a7:99:60:f6:13:79:b4:
                    60:be:40:90:2b:e9:b1:5e:ae:de:86:79:24:af:60:
                    f5:6f:7e:5f:1e:5b:67:cc:1d:0d:ca:c9:c1:15:dc:
                    9b:02:89:15:91:60:73:41:bc:e3:2a:6a:45:f1:56:
                    02:63:47:9e:1b:52:aa:25:98:ee:cf:90:07:8c:37:
                    ed:ea:1d:00:f8:56:0a:f5:f5:e6:19:09:c1:2b:fa:
                    92:27:d4:3d:33:bc:d5:1e:62:87:11:dc:06:a4:24:
                    e8:cd:e2:90:93:9d:e1:9c:42:b9:9e:51:b9:6b:6c:
                    a7:07:8f:ec:93:be:fe:0c:49:ac:a7:32:ad:f2:70:
                    01:9a:bd:9d:89:a6:a9:8f:50:b2:f0:50:49:75:dd:
                    2a:51:0f:7a:03:c1:2e:88:af:c1:d7:e6:2a:fa:d8:
                    61:95:c9:42:04:37:40:18:33:88:99:28:6c:3c:5c:
                    33:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:54:4A:64:7B:B2:B5:3F:4C:68:16:43:6C:8C:C0:7F:49:C9:B9:8C
            X509v3 Authority Key Identifier:
                keyid:9F:A7:85:9D:C3:9D:47:36:14:2C:F1:E2:29:C8:AC:4B:E6:23:B9:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n6eFncOdRzYULPHiKcisS-YjuQM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/069008-2e4f-4323-b6a2-e8d6c2f071df/1/n6eFncOdRzYULPHiKcisS-YjuQM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/069008-2e4f-4323-b6a2-e8d6c2f071df/1/n6eFncOdRzYULPHiKcisS-YjuQM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:66:4e:0b:82:18:52:45:17:07:55:dd:70:b8:31:eb:79:6d:
         c3:d9:bd:59:29:12:ef:93:7b:74:e1:04:c2:e9:c5:1a:69:c0:
         16:bb:74:89:41:c3:a5:3b:04:90:a7:59:ad:2d:26:2a:4f:7b:
         03:60:1e:4b:70:f1:2b:62:8c:10:97:48:eb:86:e6:d1:88:e0:
         ef:9c:1e:b8:7a:97:dc:62:44:46:b8:c3:7f:fc:a2:3a:13:5a:
         57:06:b6:e6:49:62:07:cb:0a:ff:55:71:bf:54:74:8a:3c:3f:
         01:3d:ac:c5:53:0f:b5:64:b1:e3:3a:86:dc:71:52:10:4c:4c:
         55:c5:2a:38:1c:f2:c8:da:e2:7f:29:73:67:1a:b8:d7:bb:a6:
         16:ca:29:65:e7:5b:d2:ef:29:33:a8:7e:41:3b:a7:74:df:fa:
         22:a9:13:60:4e:e1:ab:22:f9:10:23:b8:03:4f:c2:fc:b3:d2:
         b7:ff:ab:d1:ad:41:7d:19:a0:3e:04:54:90:b2:06:7e:fa:ff:
         b4:82:73:17:60:87:45:b4:17:8a:23:99:d1:1b:e7:32:3d:00:
         19:7e:bd:4c:e0:dd:90:98:02:40:a6:0f:7f:e6:a2:5e:2a:08:
         f1:43:0e:a5:39:be:ec:c7:87:96:92:91:6a:5e:64:38:07:a4:
         8c:bf:dc:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 19:51:43 2025 by rpki-client