Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/632463-c2dc-4cb8-bc4f-2df99d8123b7/1/6VzBeM31rZJ5k55XaK6Ig_-_Nes.mft
File:                     6VzBeM31rZJ5k55XaK6Ig_-_Nes.mft (raw, json)
Hash identifier:          XKDX2MDgLABms/cwtUadVKHKEXgTbbZh8lhjfVyGX24=
Subject key identifier:   59:F4:67:20:F7:85:3A:5E:7B:EE:D2:CD:59:4D:0E:69:1B:44:50:C8
Authority key identifier: E9:5C:C1:78:CD:F5:AD:92:79:93:9E:57:68:AE:88:83:FF:BF:35:EB
Certificate issuer:       /CN=e95cc178cdf5ad9279939e5768ae8883ffbf35eb
Certificate serial:       01976A05B76B8786B8D7A87A143BA110CE74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6VzBeM31rZJ5k55XaK6Ig_-_Nes.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/632463-c2dc-4cb8-bc4f-2df99d8123b7/1/6VzBeM31rZJ5k55XaK6Ig_-_Nes.mft
Manifest number:          0436
Signing time:             Fri 13 Jun 2025 16:00:48 +0000
Manifest this update:     Fri 13 Jun 2025 16:00:48 +0000
Manifest next update:     Sat 14 Jun 2025 16:00:48 +0000
Files and hashes:         1: 6VzBeM31rZJ5k55XaK6Ig_-_Nes.crl (hash: DUG/1QgsJwtX0RrCVtlfp3BKYtjb1NNi12CYmfo96C0=)
                          2: b7x6ZKsbLCwY_tMdnPo9QIIdiU8.roa (hash: ZFZsgVw2f50KESlxtMB2pklQZAw0SjfBRhWTVivxDpk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/632463-c2dc-4cb8-bc4f-2df99d8123b7/1/6VzBeM31rZJ5k55XaK6Ig_-_Nes.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/632463-c2dc-4cb8-bc4f-2df99d8123b7/1/6VzBeM31rZJ5k55XaK6Ig_-_Nes.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6VzBeM31rZJ5k55XaK6Ig_-_Nes.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6a:05:b7:6b:87:86:b8:d7:a8:7a:14:3b:a1:10:ce:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e95cc178cdf5ad9279939e5768ae8883ffbf35eb
        Validity
            Not Before: Jun 13 16:00:48 2025 GMT
            Not After : Jun 14 16:00:48 2025 GMT
        Subject: CN=59f46720f7853a5e7beed2cd594d0e691b4450c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ef:ed:74:6e:34:86:ed:9c:29:50:70:7f:cb:
                    ec:b3:02:58:b1:de:95:d7:85:f9:49:5c:3c:1f:3d:
                    f4:39:f1:c5:76:2b:72:10:3d:2c:fa:76:d5:2c:4f:
                    b8:59:65:4b:19:19:3d:cb:1c:aa:f2:e2:c7:cc:93:
                    90:7d:34:bd:ff:08:00:3b:cf:ae:9f:2b:c8:13:48:
                    ec:2a:cf:f3:aa:15:3c:a2:eb:04:ea:8d:ea:8b:54:
                    c1:ff:55:38:65:4d:c6:4a:da:5f:20:4e:b4:53:22:
                    fb:60:3f:f3:b3:4a:bf:5c:7e:09:b8:ba:12:62:3a:
                    94:9f:ab:28:f0:5a:b4:71:2b:37:72:fd:9e:da:31:
                    1f:f6:ff:df:41:f4:ee:5b:7d:80:1d:ba:69:de:32:
                    3b:c9:96:b2:01:27:b6:99:d1:2e:71:dd:66:fd:c4:
                    7a:ef:89:2f:59:ad:70:3b:4d:5a:68:95:3c:81:43:
                    6b:e8:19:ce:19:aa:be:56:95:ed:ce:37:67:9f:78:
                    41:81:e3:d3:8c:14:2b:da:1b:c9:6f:5d:a4:d6:f1:
                    e7:38:7c:13:2f:f2:39:f0:78:34:96:06:80:e2:bd:
                    e9:37:fe:69:9b:7a:88:48:2e:57:d5:95:ca:17:9a:
                    53:73:50:45:da:58:35:22:b0:5a:cd:d6:6d:c2:99:
                    a9:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:F4:67:20:F7:85:3A:5E:7B:EE:D2:CD:59:4D:0E:69:1B:44:50:C8
            X509v3 Authority Key Identifier:
                keyid:E9:5C:C1:78:CD:F5:AD:92:79:93:9E:57:68:AE:88:83:FF:BF:35:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6VzBeM31rZJ5k55XaK6Ig_-_Nes.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/632463-c2dc-4cb8-bc4f-2df99d8123b7/1/6VzBeM31rZJ5k55XaK6Ig_-_Nes.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/632463-c2dc-4cb8-bc4f-2df99d8123b7/1/6VzBeM31rZJ5k55XaK6Ig_-_Nes.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:c1:ac:9e:f6:73:67:ce:4d:50:c7:51:ce:6d:9f:d3:82:78:
         cc:16:16:18:a1:6a:d2:7d:65:c1:90:38:b1:6b:f9:ef:2d:d8:
         15:bb:47:45:72:7b:63:44:f0:9b:99:d9:73:ff:09:11:a1:bc:
         25:28:b6:8b:35:1d:8f:6c:77:e0:7e:bc:36:a0:0a:95:bc:fd:
         a0:ce:af:ef:00:1c:bf:08:c6:cc:9d:dc:a6:b0:04:0e:a6:4b:
         e8:88:1a:ff:a8:08:96:ff:36:77:1e:c7:7d:1d:20:15:63:77:
         3f:c0:86:4e:ee:c2:69:6c:38:aa:eb:6c:26:0a:a8:5c:e9:37:
         ae:bd:14:23:7a:ae:55:c5:0f:21:ee:20:e1:ba:4d:0c:74:e2:
         99:fe:51:09:0c:5c:c9:de:5c:c1:2a:71:ff:e6:d4:b2:bc:1f:
         59:5c:83:d5:95:84:b1:65:5d:68:29:88:e1:67:18:ab:cc:b5:
         e4:19:d4:25:6f:7b:5c:97:1a:45:73:dc:95:87:99:8f:a5:28:
         d0:14:c5:76:af:54:b9:a2:18:08:da:17:0d:7d:bb:85:2b:fc:
         bb:99:54:98:43:20:52:93:07:d0:3f:c5:c4:e6:f1:f1:45:69:
         b4:00:07:d0:9d:4e:a7:a6:ca:7a:8b:f1:7d:aa:67:bd:63:44:
         14:e9:b6:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:39:21 2025 by rpki-client