Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/7ed12b-53bd-4df6-aa6e-a2cc96899702/1/N03Pz2e4K3ynYi_McJIJ7M43Vw4.mft
File:                     N03Pz2e4K3ynYi_McJIJ7M43Vw4.mft (raw, json)
Hash identifier:          p0e8NMeliH6VVgHSyaqbCir/ETDu61dRF0rlcNwaSQM=
Subject key identifier:   B2:2A:E0:0B:1C:B6:3C:42:A3:E9:86:54:CE:9F:DD:0F:79:11:2C:0C
Authority key identifier: 37:4D:CF:CF:67:B8:2B:7C:A7:62:2F:CC:70:92:09:EC:CE:37:57:0E
Certificate issuer:       /CN=374dcfcf67b82b7ca7622fcc709209ecce37570e
Certificate serial:       019774C035D1735AC0140EA04B69692CBE07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N03Pz2e4K3ynYi_McJIJ7M43Vw4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/7ed12b-53bd-4df6-aa6e-a2cc96899702/1/N03Pz2e4K3ynYi_McJIJ7M43Vw4.mft
Manifest number:          147D
Signing time:             Sun 15 Jun 2025 18:00:43 +0000
Manifest this update:     Sun 15 Jun 2025 18:00:43 +0000
Manifest next update:     Mon 16 Jun 2025 18:00:43 +0000
Files and hashes:         1: 6bzbASHngssrN7btwpb15ed6SJ0.roa (hash: +yr1O91CJsmaXdI79v+P+t8OO+AotZIupB4bcr+PAhc=)
                          2: N03Pz2e4K3ynYi_McJIJ7M43Vw4.crl (hash: cXkxAvU1XWJPJzfybMjfjbBfjv/WP2qtZW1upacnR0E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/7ed12b-53bd-4df6-aa6e-a2cc96899702/1/N03Pz2e4K3ynYi_McJIJ7M43Vw4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/7ed12b-53bd-4df6-aa6e-a2cc96899702/1/N03Pz2e4K3ynYi_McJIJ7M43Vw4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N03Pz2e4K3ynYi_McJIJ7M43Vw4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 18:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:74:c0:35:d1:73:5a:c0:14:0e:a0:4b:69:69:2c:be:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=374dcfcf67b82b7ca7622fcc709209ecce37570e
        Validity
            Not Before: Jun 15 18:00:43 2025 GMT
            Not After : Jun 16 18:00:43 2025 GMT
        Subject: CN=b22ae00b1cb63c42a3e98654ce9fdd0f79112c0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:91:f2:08:75:de:ba:3c:e1:e6:fd:1e:92:4c:
                    e6:5e:ba:48:84:cd:8e:82:a4:2a:ab:1f:53:91:0c:
                    ba:ac:74:0b:c1:9e:36:75:3e:ae:d1:eb:55:9d:0d:
                    73:a1:13:53:55:23:54:5a:6e:6f:f5:b2:00:e0:c1:
                    d3:c0:a5:45:6c:31:87:2b:fe:d3:76:b6:6f:ec:52:
                    e3:ca:c8:a8:9a:19:21:e1:ca:8a:0a:63:93:92:6d:
                    d0:bb:44:ee:77:ec:bd:6b:d0:f9:24:11:0d:9a:b2:
                    73:a4:19:d6:6a:61:fc:89:e1:75:62:e2:8c:50:af:
                    48:e6:fa:a4:50:30:ae:96:cd:18:d2:ad:b9:a6:81:
                    b7:6c:f6:e2:06:99:30:37:fe:55:8b:98:23:bd:2a:
                    85:2c:d1:98:7c:4f:a5:13:cf:3c:be:f8:ea:79:9f:
                    3e:01:ca:b4:79:7f:3a:a3:4c:14:0e:8a:95:aa:a4:
                    b3:65:ae:08:7f:94:51:31:14:df:42:7b:a1:6e:f4:
                    34:8f:02:42:97:9f:96:89:de:22:b8:99:24:ef:d9:
                    fa:74:24:be:f3:00:1c:78:17:d2:34:47:a8:1c:c2:
                    bd:29:74:6c:42:85:77:2e:b3:21:f5:a3:3e:60:f4:
                    9a:8f:ad:5d:30:16:05:d9:e4:e8:1e:57:d4:96:6f:
                    9e:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:2A:E0:0B:1C:B6:3C:42:A3:E9:86:54:CE:9F:DD:0F:79:11:2C:0C
            X509v3 Authority Key Identifier:
                keyid:37:4D:CF:CF:67:B8:2B:7C:A7:62:2F:CC:70:92:09:EC:CE:37:57:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N03Pz2e4K3ynYi_McJIJ7M43Vw4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/7ed12b-53bd-4df6-aa6e-a2cc96899702/1/N03Pz2e4K3ynYi_McJIJ7M43Vw4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/7ed12b-53bd-4df6-aa6e-a2cc96899702/1/N03Pz2e4K3ynYi_McJIJ7M43Vw4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:ec:66:c8:0d:ad:ff:32:ad:15:69:23:bd:12:de:17:eb:b0:
         fa:95:c8:ac:ab:51:b2:3c:ba:75:11:d6:5a:b3:17:35:48:3d:
         cf:ae:56:83:9a:e2:e0:21:ab:47:6d:d4:21:f6:ed:c8:67:f2:
         e9:73:b5:dc:20:f5:66:5f:92:f6:5d:f1:96:36:0e:1a:77:e2:
         92:c7:a3:98:f5:7e:47:57:3d:e3:d7:ea:7b:82:6f:b0:2f:b0:
         21:23:f0:7a:4d:94:ce:88:87:76:f6:5d:d7:87:65:3d:5d:f9:
         91:85:f1:5c:4b:c0:3b:67:ad:6e:56:9d:4f:f3:44:f0:22:b8:
         48:5d:c9:c2:96:d9:75:21:94:a2:83:77:dd:8a:ee:8b:1d:f0:
         2a:72:d0:39:9b:f5:a2:05:e0:42:c2:bb:51:45:16:0d:b5:7a:
         c4:41:0b:62:3a:96:80:c9:53:5e:ca:73:01:82:e6:fd:51:0e:
         0f:8f:35:d2:69:93:00:75:66:7a:3e:27:a5:0e:c0:61:5a:64:
         84:73:a5:d4:4a:15:a3:72:3a:9b:92:66:0a:ca:93:de:18:52:
         ad:4a:21:bd:1e:f5:70:37:cc:0a:2a:16:7c:53:46:ca:42:d9:
         18:41:0b:23:93:b2:ac:f7:2e:dc:9c:90:66:15:98:64:ef:23:
         c9:5b:c1:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:03:38 2025 by rpki-client