Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/nZoMhLMHIPTUzkvboB3QVE0Cjs0.mft
File:                     nZoMhLMHIPTUzkvboB3QVE0Cjs0.mft (raw, json)
Hash identifier:          VaOzQmyPJwx6zWKq7mnQPuGHhv+q20JzyQZTGmQgHUg=
Subject key identifier:   D6:DD:4A:A3:63:B4:86:6C:3F:76:11:2B:8F:CF:D2:84:9F:AC:B8:BD
Authority key identifier: 9D:9A:0C:84:B3:07:20:F4:D4:CE:4B:DB:A0:1D:D0:54:4D:02:8E:CD
Certificate issuer:       /CN=9d9a0c84b30720f4d4ce4bdba01dd0544d028ecd
Certificate serial:       0197778A619C6635428F3723AC68D0496A69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nZoMhLMHIPTUzkvboB3QVE0Cjs0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/nZoMhLMHIPTUzkvboB3QVE0Cjs0.mft
Manifest number:          1594
Signing time:             Mon 16 Jun 2025 07:00:46 +0000
Manifest this update:     Mon 16 Jun 2025 07:00:46 +0000
Manifest next update:     Tue 17 Jun 2025 07:00:46 +0000
Files and hashes:         1: 8vJ7ABj3xVyEwXenD9W0ncMrU1A.roa (hash: 5gnWjjNTmQRrWBLMz2vS6KZph20DEPN6rQfmfIVo1TE=)
                          2: 95tOWT20XUkoFBLGQGdVcwDGE0s.roa (hash: Qa6N16B2kLdBJuSQoLOln9hPwf+0/JSY++MAPTIofBc=)
                          3: D2QorAtAGpZ4DSilBt-gZlYU1WU.roa (hash: vpJGRRZzUNjxMRhoSrLA2Ov0y70mAO/SHEjk1etazfE=)
                          4: nZoMhLMHIPTUzkvboB3QVE0Cjs0.crl (hash: 2UqBr6cWZNasnG1HIDTONneH0D9Rw+EPEklTxZTjZTE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/nZoMhLMHIPTUzkvboB3QVE0Cjs0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/nZoMhLMHIPTUzkvboB3QVE0Cjs0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nZoMhLMHIPTUzkvboB3QVE0Cjs0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:77:8a:61:9c:66:35:42:8f:37:23:ac:68:d0:49:6a:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d9a0c84b30720f4d4ce4bdba01dd0544d028ecd
        Validity
            Not Before: Jun 16 07:00:46 2025 GMT
            Not After : Jun 17 07:00:46 2025 GMT
        Subject: CN=d6dd4aa363b4866c3f76112b8fcfd2849facb8bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f6:08:a0:37:31:ca:e2:7e:e5:0c:3c:88:9f:
                    2c:9c:86:cb:0b:60:39:e2:e2:bb:64:8b:4a:96:0a:
                    9e:9b:16:b3:dc:19:b6:90:37:cc:e4:0c:38:4b:ea:
                    f0:d2:b7:d4:f4:9f:a9:aa:07:70:04:e3:49:46:4f:
                    35:e3:e8:67:76:d7:ef:de:8d:3a:a6:9d:fd:e0:b2:
                    8c:d8:80:70:a5:4a:f2:e8:5d:62:5a:f8:78:38:bf:
                    a6:6d:e5:d7:84:d3:a1:9f:9b:6b:df:8c:c4:f8:ec:
                    d3:c2:15:7c:44:a3:e2:3a:cf:c2:c3:1a:dd:6f:e8:
                    53:0a:00:22:1e:51:62:f4:22:bd:ac:d8:45:05:bd:
                    5f:a7:64:99:04:9a:ef:d2:b6:ad:18:7d:aa:f5:d5:
                    3e:a7:34:8c:4d:1f:de:44:4d:68:6f:ea:86:9b:24:
                    ca:01:85:68:8d:a3:3b:f8:39:dc:e8:5b:80:a0:70:
                    19:20:6e:be:13:78:ac:d0:b9:34:92:ed:da:a3:1a:
                    72:70:7a:44:59:19:9a:b7:ef:7a:e8:80:d0:cc:7f:
                    5c:4a:f2:ef:49:ab:2d:68:4c:cc:92:8f:f4:7e:55:
                    85:52:db:78:4c:e6:ff:6d:70:df:1d:c2:44:ca:52:
                    45:9b:ac:ce:5c:d1:70:81:a9:b9:0a:3c:bd:a2:a8:
                    1c:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:DD:4A:A3:63:B4:86:6C:3F:76:11:2B:8F:CF:D2:84:9F:AC:B8:BD
            X509v3 Authority Key Identifier:
                keyid:9D:9A:0C:84:B3:07:20:F4:D4:CE:4B:DB:A0:1D:D0:54:4D:02:8E:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nZoMhLMHIPTUzkvboB3QVE0Cjs0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/nZoMhLMHIPTUzkvboB3QVE0Cjs0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/nZoMhLMHIPTUzkvboB3QVE0Cjs0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:d4:8d:e4:3c:b9:64:e0:16:b6:a6:3d:73:df:46:a4:0d:91:
         5e:33:87:4d:7d:5c:7d:66:5a:a0:98:68:13:2e:0a:57:de:ff:
         25:4f:d6:63:53:01:cf:f5:4c:12:e6:55:e1:e2:a2:16:a8:ba:
         d5:d9:42:18:e5:75:44:99:82:68:73:5c:d0:c0:36:bb:36:ad:
         b7:61:3a:51:7f:e7:63:42:d3:0c:d5:89:d8:fe:f6:86:29:df:
         4a:cb:40:ee:73:13:8d:ee:bd:81:be:05:15:7c:1d:80:76:e7:
         74:33:4c:25:01:9a:3b:d2:2e:35:48:47:57:b0:63:98:04:53:
         fc:a5:75:85:04:5e:22:a7:1d:0a:41:f6:be:f6:35:75:37:58:
         d0:33:af:46:7e:a8:0f:fd:be:66:04:8a:62:76:73:dc:c0:fd:
         fb:c2:f7:b3:f8:41:e7:95:10:1d:76:de:92:9c:65:dc:52:e7:
         a8:1a:af:5f:55:e2:b3:89:74:ac:0e:5a:4b:02:51:5e:10:f0:
         83:25:d3:22:f2:f9:dc:f1:19:85:fe:dc:16:d0:87:f9:1e:da:
         8b:dd:f1:83:68:57:2a:4b:05:b3:d2:13:0c:ba:e6:5d:47:39:
         80:fa:08:24:29:ec:cd:27:43:81:2a:a1:99:11:2d:0c:80:75:
         a1:9f:2f:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:31:38 2025 by rpki-client