Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft
File:                     N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft (raw, json)
Hash identifier:          dv07LmCG8HMakgSYILiS5vMmeft/YoMsDaBLjWXdF4A=
Subject key identifier:   D3:C4:5C:AD:B1:4D:93:CD:3A:19:3D:1E:CC:89:BC:D2:B0:D9:1F:DB
Authority key identifier: 37:4E:27:29:B1:73:69:89:0A:15:12:F6:43:CD:08:E4:BA:2F:F4:14
Certificate issuer:       /CN=374e2729b17369890a1512f643cd08e4ba2ff414
Certificate serial:       0196944D938E94E25C749997A8D5E773A558
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft
Manifest number:          0D8D
Signing time:             Sat 03 May 2025 04:00:34 +0000
Manifest this update:     Sat 03 May 2025 04:00:34 +0000
Manifest next update:     Sun 04 May 2025 04:00:34 +0000
Files and hashes:         1: 3520iAwmR0BvV2MPg7TBl3ALKj4.roa (hash: w6lShDZfgepO7x4Np/TeK1Ek0txjQUSZQ5viOdvUQa4=)
                          2: C_WFK57ORMYmTPM8C6MEKdkZzcw.roa (hash: UGi0NlFvaky9A83aLUwpBw47ySnkhX86em/MvBBhL6E=)
                          3: N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl (hash: s56tpq8marxo5Y7Y7+hth4vB2SeuDN7fwX18eJ4Z45g=)
                          4: TBUQGbvGy8WpxYe11EDrGLGBcx8.roa (hash: 3whARzgV373Hq7bJRQXnA+BqWKOJ6PlgdDArlf/RCOg=)
                          5: mtEhXVsq4tQu2Q9mIDoxxW8IYZw.roa (hash: AojxXVHH/gbQ3MPiJY/87qknZA5A4RNwVQYYZL9bDe8=)
                          6: wg9s7DQX6eW3dDdaARTAPpRTzqc.roa (hash: BT19Mg+zBya+5K3DArKvF9emtWlSQhaPjSW20vhvIVk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 May 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:94:4d:93:8e:94:e2:5c:74:99:97:a8:d5:e7:73:a5:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=374e2729b17369890a1512f643cd08e4ba2ff414
        Validity
            Not Before: May  3 04:00:34 2025 GMT
            Not After : May  4 04:00:34 2025 GMT
        Subject: CN=d3c45cadb14d93cd3a193d1ecc89bcd2b0d91fdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:83:61:5a:37:9e:72:1e:fc:25:10:e9:2d:84:
                    c8:0a:fd:b6:83:61:47:bc:f2:c6:56:ca:27:b9:29:
                    cb:8c:30:93:3a:1f:e8:83:71:e4:12:ee:a7:23:93:
                    78:29:4a:0c:2e:82:c2:72:90:ca:54:9a:a2:01:4f:
                    32:5c:65:1e:2d:ba:6c:e5:59:88:7a:94:0e:8c:54:
                    96:71:21:81:17:06:da:b5:ec:31:a3:c9:c7:91:72:
                    b9:9d:99:a4:d1:f5:c3:26:5d:98:0b:b3:4c:b0:8a:
                    2b:ec:22:15:93:30:70:63:b8:19:d3:59:52:45:34:
                    fe:b7:f3:4a:b5:05:c3:e9:e3:33:48:81:a4:0e:4f:
                    93:6c:ad:4e:88:d9:4a:38:b7:17:aa:68:49:e0:df:
                    34:1d:c3:e9:e9:bc:2c:85:f1:e7:98:85:9d:31:2b:
                    4f:2f:d6:37:c9:e8:b0:82:72:04:82:96:fe:08:1e:
                    f7:8b:90:36:05:d7:cf:6e:58:8c:68:38:eb:65:88:
                    14:ba:dd:41:73:bd:f9:d1:e4:51:b8:08:75:5f:b3:
                    d3:fd:da:08:7f:01:7a:35:77:25:d0:ef:51:ca:11:
                    af:01:30:34:65:6d:8d:e3:28:36:43:cf:dc:d5:08:
                    d0:5f:3d:6b:34:15:08:e5:a6:94:0a:fe:e3:99:32:
                    d7:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:C4:5C:AD:B1:4D:93:CD:3A:19:3D:1E:CC:89:BC:D2:B0:D9:1F:DB
            X509v3 Authority Key Identifier:
                keyid:37:4E:27:29:B1:73:69:89:0A:15:12:F6:43:CD:08:E4:BA:2F:F4:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:4e:89:b4:80:b7:59:2c:fc:ec:8a:e6:0b:28:a3:dc:42:e3:
         56:fb:ba:17:90:f3:9c:61:a8:c9:fa:45:69:ff:cf:9d:c1:25:
         3d:7d:84:93:46:ac:33:28:1f:ce:19:30:a2:58:a9:79:9c:fb:
         76:81:da:98:5f:82:30:4f:50:c0:80:88:4f:74:98:05:61:53:
         8c:2a:cd:c7:28:4c:43:e1:0f:66:43:1b:ec:99:a5:fc:b3:a5:
         77:9b:41:74:e5:9f:ee:6d:ef:23:ff:77:ea:df:9a:4b:c4:b5:
         a3:20:c9:bc:31:0e:1d:72:89:53:b3:7d:c6:15:13:9e:97:1f:
         19:6e:17:45:8c:ef:95:0e:17:7c:a1:8b:13:ef:b0:20:24:e7:
         ed:3f:be:2f:65:a6:30:8d:44:9a:a4:89:81:08:26:d5:ff:c3:
         5f:3f:90:21:68:c7:2b:20:70:fe:22:7a:6b:f1:6a:ef:c4:78:
         5c:66:1e:c6:83:dc:ba:ad:69:17:96:f4:7d:6c:67:d1:54:d6:
         7f:59:99:92:5e:83:0d:f0:ef:58:65:e5:20:30:b1:c5:78:9f:
         d7:d1:f8:18:9e:fe:b6:0b:12:b4:50:a7:fd:61:68:72:cb:c0:
         97:df:1b:fc:08:60:1d:7e:f5:79:a7:13:8e:52:42:cb:9d:d9:
         63:ac:3f:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 14:13:30 2025 by rpki-client