Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/a9352e-9a3a-49aa-ad77-7be6eb6bce87/1/npWhGdnBpdbj8-Ifb6hj2HouSw0.mft
File:                     npWhGdnBpdbj8-Ifb6hj2HouSw0.mft (raw, json)
Hash identifier:          ioklgZmau0vZWmJeR0HoL9IfkvVbRXDSJeRV8p6zXbs=
Subject key identifier:   53:14:4A:44:2F:6A:BA:8F:9B:7E:54:64:6F:91:B2:3B:E1:12:F2:3A
Authority key identifier: 9E:95:A1:19:D9:C1:A5:D6:E3:F3:E2:1F:6F:A8:63:D8:7A:2E:4B:0D
Certificate issuer:       /CN=9e95a119d9c1a5d6e3f3e21f6fa863d87a2e4b0d
Certificate serial:       01977D1EF228EB3C214CF623C92E68C2FCBE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/npWhGdnBpdbj8-Ifb6hj2HouSw0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/a9352e-9a3a-49aa-ad77-7be6eb6bce87/1/npWhGdnBpdbj8-Ifb6hj2HouSw0.mft
Manifest number:          1198
Signing time:             Tue 17 Jun 2025 09:01:09 +0000
Manifest this update:     Tue 17 Jun 2025 09:01:09 +0000
Manifest next update:     Wed 18 Jun 2025 09:01:09 +0000
Files and hashes:         1: NZjfqu9x3wDiLJo6GWe02XnKyKc.roa (hash: qGIOcPlEtKKS51xxkiaAUzuK860Uixd+cejLEfWAaRA=)
                          2: npWhGdnBpdbj8-Ifb6hj2HouSw0.crl (hash: HWNS1XK3oHSDaMj49drIjSTkm+DHrm6OxA/3J/hCj+0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/a9352e-9a3a-49aa-ad77-7be6eb6bce87/1/npWhGdnBpdbj8-Ifb6hj2HouSw0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/a9352e-9a3a-49aa-ad77-7be6eb6bce87/1/npWhGdnBpdbj8-Ifb6hj2HouSw0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/npWhGdnBpdbj8-Ifb6hj2HouSw0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 18 Jun 2025 09:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:7d:1e:f2:28:eb:3c:21:4c:f6:23:c9:2e:68:c2:fc:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e95a119d9c1a5d6e3f3e21f6fa863d87a2e4b0d
        Validity
            Not Before: Jun 17 09:01:09 2025 GMT
            Not After : Jun 18 09:01:09 2025 GMT
        Subject: CN=53144a442f6aba8f9b7e54646f91b23be112f23a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b6:bb:bd:2e:8b:53:26:b4:8b:f2:d8:18:22:
                    34:35:af:b9:eb:1d:23:1d:89:b7:4b:71:eb:4a:76:
                    2e:c3:89:3e:08:7f:cd:1e:05:98:65:d2:d2:79:29:
                    5b:9b:05:72:76:a4:fd:1d:c8:99:5f:83:c9:6c:57:
                    b2:23:27:52:77:9c:fb:01:c7:4d:4f:f0:bb:0c:c0:
                    6b:63:0d:85:e0:ce:2c:4e:0a:9d:56:23:e0:3e:ab:
                    c5:dd:4a:09:bd:28:29:e4:c8:e9:d4:c4:25:46:fd:
                    09:e5:5c:94:cb:76:87:e6:09:d8:1f:bb:e8:8d:e2:
                    9c:3b:1c:ef:42:2c:fa:a0:32:b2:5c:71:33:f3:89:
                    5b:31:c9:23:53:bd:14:53:02:27:31:16:97:1a:45:
                    cf:2c:e5:04:56:ea:08:d5:38:32:e5:67:35:de:ee:
                    a3:4b:c8:b3:79:37:4f:7e:ef:89:49:b1:c6:f6:62:
                    a2:68:16:30:33:f7:aa:3a:d0:10:95:fb:38:e7:63:
                    9f:f4:2e:fc:bb:93:5e:cb:40:d9:44:b7:c2:bd:17:
                    20:b2:f0:79:62:8b:7b:95:b5:61:44:38:03:d6:5f:
                    f7:5f:d2:4e:9f:0e:24:be:fb:be:e8:d0:b1:de:5e:
                    83:07:de:ad:91:ca:b0:49:bb:2c:cc:03:71:f1:c7:
                    dd:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:14:4A:44:2F:6A:BA:8F:9B:7E:54:64:6F:91:B2:3B:E1:12:F2:3A
            X509v3 Authority Key Identifier:
                keyid:9E:95:A1:19:D9:C1:A5:D6:E3:F3:E2:1F:6F:A8:63:D8:7A:2E:4B:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWhGdnBpdbj8-Ifb6hj2HouSw0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/a9352e-9a3a-49aa-ad77-7be6eb6bce87/1/npWhGdnBpdbj8-Ifb6hj2HouSw0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/a9352e-9a3a-49aa-ad77-7be6eb6bce87/1/npWhGdnBpdbj8-Ifb6hj2HouSw0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:4b:fe:c4:70:d1:da:a8:1e:5d:1b:95:f3:dd:cc:07:c5:38:
         aa:4b:53:3f:49:e9:dd:f3:37:b8:63:40:8d:c8:b9:e3:06:43:
         f6:db:3e:f0:4c:7c:e6:36:3e:40:21:8e:70:47:1b:b6:1b:fc:
         20:03:1c:ab:e5:e4:ea:19:47:91:fd:f5:b3:30:6a:6f:cd:8f:
         23:3b:b9:e9:f8:e5:6a:65:2b:92:f7:2b:75:9b:33:85:8f:1e:
         a2:c8:85:2b:51:25:5e:dc:ef:1a:b2:8d:b8:7d:db:3f:1e:dd:
         6a:44:24:05:b6:7a:87:e8:7f:b2:19:96:b4:2c:fe:0d:7b:0f:
         46:d2:e7:94:6a:76:22:dc:13:b3:c5:50:ca:1e:91:a0:43:d0:
         3f:02:8f:ad:7d:04:09:5a:90:3c:3a:1d:41:f2:c9:70:ca:fc:
         6a:f1:fd:61:67:dd:8d:94:42:91:e4:5e:70:18:75:c5:95:e6:
         e9:37:c0:89:1e:6c:7d:32:05:2c:6b:98:04:39:4b:4d:a4:15:
         52:4a:c5:92:a1:3c:04:03:4c:da:93:cc:5d:f7:93:44:85:c2:
         1e:d7:39:b8:cd:34:89:ba:38:ae:4e:5e:53:fc:55:dc:f7:d4:
         c0:86:73:89:51:29:59:52:94:44:36:5f:15:aa:bb:27:b6:4d:
         2f:76:6d:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd9HvIo6zwhTPYjyS5owvy+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllOTVhMTE5ZDljMWE1ZDZlM2YzZTIxZjZmYTg2M2Q4N2Ey
ZTRiMGQwHhcNMjUwNjE3MDkwMTA5WhcNMjUwNjE4MDkwMTA5WjAzMTEwLwYDVQQD
Eyg1MzE0NGE0NDJmNmFiYThmOWI3ZTU0NjQ2ZjkxYjIzYmUxMTJmMjNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyra7vS6LUya0i/LYGCI0Na+56x0j
HYm3S3HrSnYuw4k+CH/NHgWYZdLSeSlbmwVydqT9HciZX4PJbFeyIydSd5z7AcdN
T/C7DMBrYw2F4M4sTgqdViPgPqvF3UoJvSgp5Mjp1MQlRv0J5VyUy3aH5gnYH7vo
jeKcOxzvQiz6oDKyXHEz84lbMckjU70UUwInMRaXGkXPLOUEVuoI1Tgy5Wc13u6j
S8izeTdPfu+JSbHG9mKiaBYwM/eqOtAQlfs452Of9C78u5Ney0DZRLfCvRcgsvB5
Yot7lbVhRDgD1l/3X9JOnw4kvvu+6NCx3l6DB96tkcqwSbsszANx8cfdgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFMUSkQvarqPm35UZG+RsjvhEvI6MB8GA1UdIwQY
MBaAFJ6VoRnZwaXW4/PiH2+oY9h6LksNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnBXaEdkbkJwZGJqOC1JZmI2aGoySG91U3cwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9hOTM1MmUtOWEzYS00OWFhLWFkNzct
N2JlNmViNmJjZTg3LzEvbnBXaEdkbkJwZGJqOC1JZmI2aGoySG91U3cwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC9hOTM1MmUtOWEzYS00OWFhLWFkNzctN2JlNmViNmJjZTg3
LzEvbnBXaEdkbkJwZGJqOC1JZmI2aGoySG91U3cwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFUv+xHDR
2qgeXRuV893MB8U4qktTP0np3fM3uGNAjci54wZD9ts+8Ex85jY+QCGOcEcbthv8
IAMcq+Xk6hlHkf31szBqb82PIzu56fjlamUrkvcrdZszhY8eosiFK1ElXtzvGrKN
uH3bPx7dakQkBbZ6h+h/shmWtCz+DXsPRtLnlGp2ItwTs8VQyh6RoEPQPwKPrX0E
CVqQPDodQfLJcMr8avH9YWfdjZRCkeRecBh1xZXm6TfAiR5sfTIFLGuYBDlLTaQV
UkrFkqE8BANM2pPMXfeTRIXCHtc5uM00ibo4rk5eU/xV3PfUwIZziVEpWVKURDZf
Faq7J7ZNL3ZtjA==
-----END CERTIFICATE-----
Generated at Tue Jun 17 20:23:28 2025 by rpki-client