Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/83aa47-c7fb-4e05-9fac-e4ca6b73ac76/1/N0CDrw__F2igfGVfH-OGAJxSLM8.mft
File:                     N0CDrw__F2igfGVfH-OGAJxSLM8.mft (raw, json)
Hash identifier:          36ZFHm1r3uYCmLOX5qrO80dWxVK12t/BMEi2prceuoM=
Subject key identifier:   EA:72:69:52:F4:1F:C7:2D:0C:F4:1F:BC:06:00:CF:CF:96:5A:ED:1E
Authority key identifier: 37:40:83:AF:0F:FF:17:68:A0:7C:65:5F:1F:E3:86:00:9C:52:2C:CF
Certificate issuer:       /CN=374083af0fff1768a07c655f1fe386009c522ccf
Certificate serial:       01976FD1500453DD7EBCFDF176481FC9F358
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N0CDrw__F2igfGVfH-OGAJxSLM8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/83aa47-c7fb-4e05-9fac-e4ca6b73ac76/1/N0CDrw__F2igfGVfH-OGAJxSLM8.mft
Manifest number:          1174
Signing time:             Sat 14 Jun 2025 19:01:17 +0000
Manifest this update:     Sat 14 Jun 2025 19:01:17 +0000
Manifest next update:     Sun 15 Jun 2025 19:01:17 +0000
Files and hashes:         1: N0CDrw__F2igfGVfH-OGAJxSLM8.crl (hash: OY97UbY2lpSzF2B13X0DzHTUewXi/P+VUTdvymOqONw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/83aa47-c7fb-4e05-9fac-e4ca6b73ac76/1/N0CDrw__F2igfGVfH-OGAJxSLM8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/83aa47-c7fb-4e05-9fac-e4ca6b73ac76/1/N0CDrw__F2igfGVfH-OGAJxSLM8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N0CDrw__F2igfGVfH-OGAJxSLM8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 19:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:d1:50:04:53:dd:7e:bc:fd:f1:76:48:1f:c9:f3:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=374083af0fff1768a07c655f1fe386009c522ccf
        Validity
            Not Before: Jun 14 19:01:17 2025 GMT
            Not After : Jun 15 19:01:17 2025 GMT
        Subject: CN=ea726952f41fc72d0cf41fbc0600cfcf965aed1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:27:4a:cc:ad:33:f0:1b:f9:46:d0:6b:c2:be:
                    0d:c8:05:7d:40:bb:cc:7f:45:3e:fd:5c:44:fc:48:
                    39:d2:76:42:a0:71:cf:e3:c9:3a:57:ea:62:de:fa:
                    15:eb:0b:92:c6:a8:2d:b5:42:15:5e:80:67:a3:95:
                    b9:47:57:a4:77:af:aa:fc:1e:24:81:ac:de:c2:a6:
                    f4:b9:94:f2:50:77:d5:07:c4:11:0c:82:85:14:e8:
                    39:97:91:a8:b9:62:df:9b:23:ae:1f:15:7a:6c:20:
                    c1:27:4c:41:a6:e2:70:73:5b:d6:5b:b2:7e:46:6f:
                    22:73:10:c3:aa:5d:77:bf:4f:88:ad:99:fd:25:20:
                    6d:bc:c9:99:bf:20:0a:cd:fa:ad:0f:13:7d:34:2f:
                    55:b7:6c:86:f3:a6:68:7b:88:a7:e8:ef:1c:57:7d:
                    00:98:37:be:f4:b0:1a:e5:2b:ab:03:5f:ec:9d:a8:
                    39:49:a9:e1:01:cb:88:74:ac:bb:4a:0d:2e:e9:d4:
                    24:67:dd:9c:03:9b:e0:00:51:a3:9a:10:54:5d:f0:
                    d0:f9:9c:a0:a0:19:6b:72:5d:c5:2e:7c:39:7b:6b:
                    02:b3:63:75:1d:21:1e:e9:66:27:5e:a9:f1:32:18:
                    6d:97:02:8c:d9:ab:30:2f:fb:dd:62:ee:18:c1:e0:
                    09:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:72:69:52:F4:1F:C7:2D:0C:F4:1F:BC:06:00:CF:CF:96:5A:ED:1E
            X509v3 Authority Key Identifier:
                keyid:37:40:83:AF:0F:FF:17:68:A0:7C:65:5F:1F:E3:86:00:9C:52:2C:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0CDrw__F2igfGVfH-OGAJxSLM8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/83aa47-c7fb-4e05-9fac-e4ca6b73ac76/1/N0CDrw__F2igfGVfH-OGAJxSLM8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/83aa47-c7fb-4e05-9fac-e4ca6b73ac76/1/N0CDrw__F2igfGVfH-OGAJxSLM8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:a9:50:5b:1b:29:99:c7:57:1a:9a:e5:44:43:1f:1d:25:a3:
         a0:bf:ce:2f:53:17:22:28:ea:74:fd:80:72:0e:0b:b1:c7:9a:
         e4:ff:94:46:3c:be:70:c5:01:72:27:36:d8:24:00:00:8b:95:
         5b:69:08:7b:07:74:94:24:d0:1a:df:a4:e1:5b:be:1b:e3:5c:
         57:32:ac:4a:a9:6d:cf:96:77:0a:f5:d0:6e:a1:a5:a0:99:0d:
         ba:91:29:87:b8:2a:64:db:22:97:da:60:eb:23:59:e7:50:a9:
         1d:0f:ae:ad:97:4f:03:0c:b5:99:d1:ef:28:14:cf:68:fb:29:
         a0:67:4b:c3:c2:6d:df:d6:ae:ba:82:3f:a1:50:ac:c5:6f:ea:
         89:eb:28:50:a2:c6:d5:00:8d:ad:a7:9b:9b:66:88:03:24:5d:
         a8:1a:b5:ff:66:fd:26:48:03:5c:2a:63:ac:20:0b:85:1f:4e:
         54:cb:4d:f3:81:c6:21:03:84:02:68:d4:a9:9c:55:47:a1:4b:
         74:6e:07:5a:65:1b:4f:09:db:61:eb:28:89:4c:42:62:41:7e:
         47:9b:dc:44:49:70:48:fb:8d:58:db:80:b4:25:59:1e:61:8c:
         e5:fa:a6:9e:fe:a4:a8:24:5c:07:8e:ab:95:68:1a:90:f0:2f:
         55:2e:03:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:43:45 2025 by rpki-client