Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/47d21c-604b-47d8-a333-708b68c856cf/1/ngpS_uIoDW8jG7aiYibmU1Fw8f4.mft
File:                     ngpS_uIoDW8jG7aiYibmU1Fw8f4.mft (raw, json)
Hash identifier:          tybN1L9nWkAf5yomOGdeKz124SK/581n4UhT9VrTIGI=
Subject key identifier:   77:6B:9E:01:CB:E5:F5:5A:72:41:2D:DC:37:2C:C6:27:04:9D:E3:52
Authority key identifier: 9E:0A:52:FE:E2:28:0D:6F:23:1B:B6:A2:62:26:E6:53:51:70:F1:FE
Certificate issuer:       /CN=9e0a52fee2280d6f231bb6a26226e6535170f1fe
Certificate serial:       01967BA07EDBC2B8EFEE5837F298C6E9801C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ngpS_uIoDW8jG7aiYibmU1Fw8f4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/47d21c-604b-47d8-a333-708b68c856cf/1/ngpS_uIoDW8jG7aiYibmU1Fw8f4.mft
Manifest number:          1158
Signing time:             Mon 28 Apr 2025 09:00:37 +0000
Manifest this update:     Mon 28 Apr 2025 09:00:37 +0000
Manifest next update:     Tue 29 Apr 2025 09:00:37 +0000
Files and hashes:         1: 96ceGnLozFWN_QTriAA9ffT0NZo.roa (hash: xYD9mhJQTnDUO7IrqsbDyJlQ0+k0aFVeTHj0N17MtSI=)
                          2: ngpS_uIoDW8jG7aiYibmU1Fw8f4.crl (hash: 7lLR6YV6oivAc9I1A1lRg3SqYuYZoduFttPlV/yjC34=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/47d21c-604b-47d8-a333-708b68c856cf/1/ngpS_uIoDW8jG7aiYibmU1Fw8f4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/47d21c-604b-47d8-a333-708b68c856cf/1/ngpS_uIoDW8jG7aiYibmU1Fw8f4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ngpS_uIoDW8jG7aiYibmU1Fw8f4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Apr 2025 08:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:7b:a0:7e:db:c2:b8:ef:ee:58:37:f2:98:c6:e9:80:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e0a52fee2280d6f231bb6a26226e6535170f1fe
        Validity
            Not Before: Apr 28 09:00:37 2025 GMT
            Not After : Apr 29 09:00:37 2025 GMT
        Subject: CN=776b9e01cbe5f55a72412ddc372cc627049de352
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a1:3e:58:67:49:e0:99:76:75:a9:1b:bb:57:
                    f5:2e:d7:6e:43:84:3d:72:ae:74:c2:a9:2c:45:f2:
                    e7:8b:8a:72:20:c7:0f:55:26:fa:7e:00:e1:a1:69:
                    61:e6:97:2c:b0:13:d1:7c:c0:a9:bf:12:0f:c0:bf:
                    4d:66:80:d7:48:a4:6f:e8:83:2b:97:06:94:54:28:
                    e7:8b:e7:5f:ec:72:39:22:dd:be:f0:0d:e0:97:60:
                    5c:39:09:23:84:ed:41:e6:8b:aa:f1:81:ed:75:4c:
                    5f:64:39:80:a5:2f:7f:80:72:9c:61:db:0d:e6:10:
                    3c:bf:b5:76:87:7a:ff:1b:78:7e:f4:61:99:8c:7f:
                    e2:76:df:a2:e4:d8:36:7c:d4:d4:5f:14:32:0b:26:
                    77:b8:f2:fe:a0:34:ea:4d:ff:ed:51:87:8c:c2:f1:
                    bd:c6:df:fb:5d:1b:4d:ea:20:60:b9:08:ea:9b:5b:
                    d4:f7:c4:13:b3:2f:49:f5:85:66:49:7d:9d:93:c7:
                    36:96:6c:7c:ce:73:a4:d1:8c:86:3a:b3:26:f3:e9:
                    ac:54:95:ef:9e:d7:6e:fc:b4:21:15:b6:2b:cf:bd:
                    0e:d8:d0:4b:cf:b1:6f:5f:39:94:16:11:cb:69:f4:
                    94:5e:f6:09:63:91:e9:1d:4d:37:ea:c0:aa:ab:62:
                    7b:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:6B:9E:01:CB:E5:F5:5A:72:41:2D:DC:37:2C:C6:27:04:9D:E3:52
            X509v3 Authority Key Identifier:
                keyid:9E:0A:52:FE:E2:28:0D:6F:23:1B:B6:A2:62:26:E6:53:51:70:F1:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ngpS_uIoDW8jG7aiYibmU1Fw8f4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/47d21c-604b-47d8-a333-708b68c856cf/1/ngpS_uIoDW8jG7aiYibmU1Fw8f4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/47d21c-604b-47d8-a333-708b68c856cf/1/ngpS_uIoDW8jG7aiYibmU1Fw8f4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:42:4d:56:4c:63:cd:8c:08:ee:ec:c3:da:e1:9b:c8:22:c3:
         bd:46:e4:df:f1:63:2a:03:61:66:28:d6:6c:81:27:28:95:28:
         f2:ca:8e:11:69:a6:08:03:cc:3f:d7:7a:63:40:31:5a:46:4e:
         bf:01:ac:ab:02:2a:0f:5a:8f:0e:88:e7:29:9c:a9:24:24:0b:
         86:78:15:6e:9a:e6:4b:e8:6b:47:9e:21:dd:25:f4:0c:e9:58:
         05:11:04:9d:e5:9b:ad:06:fd:de:8c:72:30:9f:7f:0b:f2:c5:
         99:61:f4:ba:e5:13:23:7f:34:90:48:12:00:f9:23:fe:4d:1d:
         2b:83:80:fc:00:03:e8:0c:12:30:33:01:85:7f:d4:3d:ba:0e:
         40:33:07:17:36:0b:2e:57:0c:fe:7d:a2:6b:4f:66:de:01:ee:
         92:4b:f7:f1:98:41:9b:0f:17:c1:33:a2:43:dc:e4:01:8f:d8:
         12:dc:13:41:c5:2a:80:ff:0c:6f:38:e0:fb:35:17:33:7d:65:
         e2:2d:f3:c7:53:1b:da:af:06:ca:3d:78:b3:fe:88:e0:ea:0a:
         63:f2:90:e9:4a:ce:9d:f7:6b:f9:a9:67:67:14:a6:a5:71:ed:
         be:d1:6f:60:4b:d9:35:cf:5a:40:77:b7:09:ba:e7:58:a3:c3:
         6e:8d:bd:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:22:00 2025 by rpki-client