Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.mft
File:                     n7QdJS8SCssUDQ_IQzQVIRS2yCY.mft (raw, json)
Hash identifier:          HZzkM4kRx+2JIMJTxbwEbn+8oHUVWRI+3Op8D88LoAw=
Subject key identifier:   A0:E8:AE:99:9A:D9:92:E9:DB:91:01:8B:DD:93:DF:5E:C2:E7:30:68
Authority key identifier: 9F:B4:1D:25:2F:12:0A:CB:14:0D:0F:C8:43:34:15:21:14:B6:C8:26
Certificate issuer:       /CN=9fb41d252f120acb140d0fc84334152114b6c826
Certificate serial:       019776AEC1C203D0AC5CE82D4F8CDDA4443A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n7QdJS8SCssUDQ_IQzQVIRS2yCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.mft
Manifest number:          BC
Signing time:             Mon 16 Jun 2025 03:00:53 +0000
Manifest this update:     Mon 16 Jun 2025 03:00:53 +0000
Manifest next update:     Tue 17 Jun 2025 03:00:53 +0000
Files and hashes:         1: n7QdJS8SCssUDQ_IQzQVIRS2yCY.crl (hash: Spqnv3gxyVABtQweh6f2ON07/p4zMR8CTT3QR9siLkk=)
                          2: shgH4_EQdby9FFBN3Y5GUQj4Toc.roa (hash: +F1kGaAyVQdETpR4Si2c2G3OanhyfIaqHi8fbDMWM9U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n7QdJS8SCssUDQ_IQzQVIRS2yCY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 03:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:76:ae:c1:c2:03:d0:ac:5c:e8:2d:4f:8c:dd:a4:44:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fb41d252f120acb140d0fc84334152114b6c826
        Validity
            Not Before: Jun 16 03:00:53 2025 GMT
            Not After : Jun 17 03:00:53 2025 GMT
        Subject: CN=a0e8ae999ad992e9db91018bdd93df5ec2e73068
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:63:42:98:f8:c3:04:a2:1b:56:0a:f2:72:fd:
                    f5:85:fa:b6:df:02:6d:47:ab:07:56:c9:27:7d:c9:
                    20:4c:81:8c:a5:94:6a:a4:f3:c8:19:ae:7a:21:7a:
                    10:0a:3c:b4:7e:03:05:f3:57:fc:4b:b1:28:a0:e3:
                    a0:e4:58:99:ce:21:97:19:d2:8f:41:18:27:93:1a:
                    b1:75:d9:00:56:b3:d0:0f:f0:4a:33:77:05:38:14:
                    a7:9c:e9:40:f2:a2:06:b4:4d:b3:53:91:a3:a9:e1:
                    6f:9b:92:f7:97:3e:5a:7a:ad:7a:c3:fc:b9:b8:60:
                    14:02:0b:2f:74:6f:ff:1d:06:7a:ce:06:33:a2:96:
                    1d:c7:9c:5b:8c:16:57:46:2b:9b:d2:63:3f:2b:63:
                    bb:f4:d8:3a:ca:84:ec:15:26:11:61:f2:e3:65:7f:
                    1e:71:2f:2f:4a:c8:9b:98:1c:5f:7d:97:ad:98:1a:
                    e7:65:89:23:d2:02:30:1b:c5:55:3d:ed:dc:1a:07:
                    b5:6c:af:67:22:ba:1a:b7:bc:ba:36:fe:50:9a:c4:
                    11:3e:58:2f:d5:25:f7:13:60:2e:8a:b0:fb:e3:7a:
                    04:ec:05:d9:3a:e4:05:2d:73:f4:6a:fb:02:a8:88:
                    1c:3a:d3:01:c8:85:e3:4a:c5:52:d4:7a:63:22:76:
                    25:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:E8:AE:99:9A:D9:92:E9:DB:91:01:8B:DD:93:DF:5E:C2:E7:30:68
            X509v3 Authority Key Identifier:
                keyid:9F:B4:1D:25:2F:12:0A:CB:14:0D:0F:C8:43:34:15:21:14:B6:C8:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n7QdJS8SCssUDQ_IQzQVIRS2yCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:28:f9:8e:e3:a8:34:3d:c4:fd:6a:54:0e:c9:c7:64:ff:03:
         5d:28:64:b7:dc:d6:a4:5a:82:27:4e:97:3c:81:af:85:50:34:
         ae:3c:97:4c:1e:92:f9:23:bd:a8:c7:49:fb:98:3c:b6:4d:b7:
         5b:c4:b6:e3:e4:34:e1:a6:27:ca:8b:b2:37:c4:31:bb:e3:6b:
         6a:88:91:43:be:41:27:99:92:59:ee:51:ca:7d:74:83:2a:0d:
         c5:ce:c5:0b:3a:3a:db:a1:6c:ab:5a:07:a8:37:cf:0c:36:cd:
         57:4c:6a:82:92:17:81:1b:92:7b:04:70:dc:8c:02:a1:ae:17:
         a0:33:1f:75:5a:07:e2:82:27:74:3c:cc:36:5c:cb:5f:d4:5a:
         02:9e:55:d0:46:1e:53:b0:d8:09:bf:b1:c1:52:ac:47:d2:4f:
         13:49:0b:12:9b:d7:45:fa:8b:cd:47:2f:8a:06:f3:5c:99:72:
         e8:a6:13:c8:5d:b5:fb:dd:a1:22:6b:2d:24:6e:d2:ee:9c:45:
         50:0d:7d:bc:ef:19:a7:f4:57:84:a1:58:b5:e0:39:1c:51:59:
         2a:ac:45:4a:d1:2a:1a:a9:66:a4:ac:25:15:26:31:15:e0:51:
         89:46:75:2e:90:c8:65:ac:7d:b1:2f:74:dd:de:3a:b9:a0:15:
         1f:8b:e5:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 13:34:29 2025 by rpki-client