Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.mft
File:                     NpL-31nGDTJU43qcjs3hHJuhKCo.mft (raw, json)
Hash identifier:          QA7e2fykMdNXvTx/t8OXjNjRdpiqso4HHf4/GKLMOmY=
Subject key identifier:   F9:6C:AB:33:52:36:49:FF:06:F6:BD:71:0D:47:81:C5:2B:1F:5A:6C
Authority key identifier: 36:92:FE:DF:59:C6:0D:32:54:E3:7A:9C:8E:CD:E1:1C:9B:A1:28:2A
Certificate issuer:       /CN=3692fedf59c60d3254e37a9c8ecde11c9ba1282a
Certificate serial:       01976DAB6CFB100E090D4AF96A6DD35F34F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.mft
Manifest number:          1639
Signing time:             Sat 14 Jun 2025 09:00:40 +0000
Manifest this update:     Sat 14 Jun 2025 09:00:40 +0000
Manifest next update:     Sun 15 Jun 2025 09:00:40 +0000
Files and hashes:         1: 1-GJhYiuUUrP8RhmBh0USv-VEBfA.roa (hash: yv0HSZPQLPjAOK0Qjg6MUOpe4+d1qLZAv2u1ddULbTs=)
                          2: 8zzToX2_MSbXjPU6GvHQQ_9Dvvk.roa (hash: wilJSEirQsqEx26ndpfgfkDVvj+zVkzSkCh5uXU9fHI=)
                          3: NpL-31nGDTJU43qcjs3hHJuhKCo.crl (hash: lQf6qKNEJsXLTAb3dXFDTWHU4hXie8IWtrUaRiMuNh4=)
                          4: bHL_tTznnHPbHP4F0hJKIReYm6M.roa (hash: R72+H7qsqTY9GklcA/NGuJeZ8wkSyMWhn933bwOHpJE=)
                          5: i16ilfmrEmGll-8P1By27TRNxjs.roa (hash: b9oY0GhLijC6RRV6+0ZoYX7cAxCSwlkMlJ1wrgHM1qc=)
                          6: q8AP7H93ZbNKPWz_Zh0y6fK8m7g.roa (hash: Jd2YHA+NTHYb6+qWLH1KGDGjnXW6xUSmZVAZe2REuGQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:ab:6c:fb:10:0e:09:0d:4a:f9:6a:6d:d3:5f:34:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3692fedf59c60d3254e37a9c8ecde11c9ba1282a
        Validity
            Not Before: Jun 14 09:00:40 2025 GMT
            Not After : Jun 15 09:00:40 2025 GMT
        Subject: CN=f96cab33523649ff06f6bd710d4781c52b1f5a6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ec:60:5d:57:3d:af:19:b1:be:48:2b:b8:71:
                    ff:cd:42:02:ba:5b:d3:8d:a4:9e:ed:31:95:1f:ad:
                    4b:1f:c4:6b:06:b9:a4:27:44:13:3b:3d:4e:d8:ce:
                    1a:4b:17:c5:b1:ff:38:70:9e:c6:b1:8b:a0:77:be:
                    7d:78:bc:05:0c:2f:8b:ed:d5:2b:a1:0a:70:42:96:
                    b9:ea:22:69:7f:42:67:8a:6e:7b:19:9e:93:1e:c5:
                    0f:cb:f0:1e:16:b6:43:b0:4b:c2:cf:44:f4:f3:85:
                    3d:d7:bc:92:81:6f:60:b3:2c:53:48:6f:c7:4b:e9:
                    6f:04:c6:85:fb:9e:f7:2c:46:e4:79:c2:35:95:db:
                    bc:b9:46:23:6e:a6:7c:2b:dc:a7:2d:c3:81:91:17:
                    ad:47:4a:62:e6:9e:e7:7b:3a:a6:0a:cd:95:14:3d:
                    3c:53:a2:c2:85:d1:5e:39:90:14:83:7d:17:7c:28:
                    81:9e:cc:8f:d4:ef:25:45:00:28:dd:12:b3:d8:2c:
                    f3:7b:05:56:ba:8a:44:e1:9a:a4:bb:14:4a:01:3e:
                    36:2c:06:77:bb:b9:b8:f6:4b:43:bf:72:11:11:73:
                    95:82:9a:2c:ff:73:a6:a6:a4:b7:0d:02:32:12:5c:
                    f4:53:f8:e1:3b:48:3d:9d:57:ee:de:3b:c2:5b:4b:
                    19:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:6C:AB:33:52:36:49:FF:06:F6:BD:71:0D:47:81:C5:2B:1F:5A:6C
            X509v3 Authority Key Identifier:
                keyid:36:92:FE:DF:59:C6:0D:32:54:E3:7A:9C:8E:CD:E1:1C:9B:A1:28:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:a8:91:00:44:cf:15:6c:d3:e1:f0:d1:4c:16:d7:b4:65:69:
         33:b3:0b:e2:29:1d:fb:ed:92:8b:2b:5d:f1:c7:41:e2:08:f2:
         80:45:60:6b:5e:95:56:1f:fb:df:0d:25:53:73:28:94:43:04:
         cc:1a:5f:49:f0:91:03:6e:4b:39:86:e3:91:11:c8:38:02:bd:
         de:34:1f:ab:36:f7:b9:1a:42:54:55:1f:1a:4c:f4:2b:80:d0:
         06:fa:92:f3:ea:5e:2b:6e:73:04:4e:ca:c7:ee:3c:31:88:f4:
         e0:e1:ee:08:52:35:a5:5b:9b:52:90:7a:65:ec:59:ec:f6:ce:
         61:bb:ac:30:17:1a:d5:76:4e:0e:f5:bc:df:80:5e:e5:e3:7a:
         16:91:94:d8:94:e0:5c:0e:43:8e:01:57:87:6b:0a:fe:79:a6:
         16:95:b0:56:fc:a9:ee:f2:81:e3:53:94:55:c5:e0:71:63:99:
         44:f8:6b:3b:da:96:1e:3a:3f:e8:de:8d:f8:12:7f:97:c4:92:
         37:a1:3f:19:0a:02:7b:a2:15:57:e1:3c:07:6c:df:6e:c0:7c:
         85:61:b1:33:cc:9e:b0:5e:7f:61:e5:c7:13:2d:e8:56:25:af:
         0c:8f:3b:9c:02:bc:1b:f7:1d:e4:6b:80:a3:89:1a:5c:27:9f:
         7b:ed:71:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtq2z7EA4JDUr5am3TXzT5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2OTJmZWRmNTljNjBkMzI1NGUzN2E5YzhlY2RlMTFjOWJh
MTI4MmEwHhcNMjUwNjE0MDkwMDQwWhcNMjUwNjE1MDkwMDQwWjAzMTEwLwYDVQQD
EyhmOTZjYWIzMzUyMzY0OWZmMDZmNmJkNzEwZDQ3ODFjNTJiMWY1YTZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOxgXVc9rxmxvkgruHH/zUICulvT
jaSe7TGVH61LH8RrBrmkJ0QTOz1O2M4aSxfFsf84cJ7GsYugd759eLwFDC+L7dUr
oQpwQpa56iJpf0Jnim57GZ6THsUPy/AeFrZDsEvCz0T084U917ySgW9gsyxTSG/H
S+lvBMaF+573LEbkecI1ldu8uUYjbqZ8K9ynLcOBkRetR0pi5p7nezqmCs2VFD08
U6LChdFeOZAUg30XfCiBnsyP1O8lRQAo3RKz2CzzewVWuopE4ZqkuxRKAT42LAZ3
u7m49ktDv3IREXOVgpos/3OmpqS3DQIyElz0U/jhO0g9nVfu3jvCW0sZBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPlsqzNSNkn/Bva9cQ1HgcUrH1psMB8GA1UdIwQY
MBaAFDaS/t9Zxg0yVON6nI7N4RyboSgqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnBMLTMxbkdEVEpVNDNxY2pzM2hISnVoS0NvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi81YzVhZDAtZDJkYS00MGRiLTk1ZDEt
ZTdiZTVlMzBhZDJkLzEvTnBMLTMxbkdEVEpVNDNxY2pzM2hISnVoS0NvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi81YzVhZDAtZDJkYS00MGRiLTk1ZDEtZTdiZTVlMzBhZDJk
LzEvTnBMLTMxbkdEVEpVNDNxY2pzM2hISnVoS0NvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA6iRAETP
FWzT4fDRTBbXtGVpM7ML4ikd++2Siytd8cdB4gjygEVga16VVh/73w0lU3MolEME
zBpfSfCRA25LOYbjkRHIOAK93jQfqzb3uRpCVFUfGkz0K4DQBvqS8+peK25zBE7K
x+48MYj04OHuCFI1pVubUpB6ZexZ7PbOYbusMBca1XZODvW834Be5eN6FpGU2JTg
XA5DjgFXh2sK/nmmFpWwVvyp7vKB41OUVcXgcWOZRPhrO9qWHjo/6N6N+BJ/l8SS
N6E/GQoCe6IVV+E8B2zfbsB8hWGxM8yesF5/YeXHEy3oViWvDI87nAK8G/cd5GuA
o4kaXCefe+1xMw==
-----END CERTIFICATE-----
Generated at Sat Jun 14 11:13:40 2025 by rpki-client