Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/e42800-c8c7-4599-b1fd-88a74d039f7f/1/n8bodwmunQRHlA8j11Tfi6gXWw0.mft
File:                     n8bodwmunQRHlA8j11Tfi6gXWw0.mft (raw, json)
Hash identifier:          9AFUGpC9dg2dj+8wzVdTaFvLxOEOeANZMU2iUHaEFuM=
Subject key identifier:   8D:F0:24:E8:C0:C9:61:5B:7C:FD:67:27:74:AD:18:7A:68:46:3E:43
Authority key identifier: 9F:C6:E8:77:09:AE:9D:04:47:94:0F:23:D7:54:DF:8B:A8:17:5B:0D
Certificate issuer:       /CN=9fc6e87709ae9d0447940f23d754df8ba8175b0d
Certificate serial:       01976BBCC3062F8C3D1E31323FFC037D52B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n8bodwmunQRHlA8j11Tfi6gXWw0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/e42800-c8c7-4599-b1fd-88a74d039f7f/1/n8bodwmunQRHlA8j11Tfi6gXWw0.mft
Manifest number:          1437
Signing time:             Sat 14 Jun 2025 00:00:21 +0000
Manifest this update:     Sat 14 Jun 2025 00:00:21 +0000
Manifest next update:     Sun 15 Jun 2025 00:00:21 +0000
Files and hashes:         1: n8bodwmunQRHlA8j11Tfi6gXWw0.crl (hash: ecMi4kX/s6DzNZgK8LWgTTjcrZzsbMRYWqnaJD+4kWc=)
                          2: z7xTQbxrh0uWjK7zpjPYq_zoSQo.roa (hash: gzKeSIds853lGCFoWu+NS/HRph4q2guB/dUt5Y5WdPY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/e42800-c8c7-4599-b1fd-88a74d039f7f/1/n8bodwmunQRHlA8j11Tfi6gXWw0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/e42800-c8c7-4599-b1fd-88a74d039f7f/1/n8bodwmunQRHlA8j11Tfi6gXWw0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n8bodwmunQRHlA8j11Tfi6gXWw0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 00:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6b:bc:c3:06:2f:8c:3d:1e:31:32:3f:fc:03:7d:52:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fc6e87709ae9d0447940f23d754df8ba8175b0d
        Validity
            Not Before: Jun 14 00:00:21 2025 GMT
            Not After : Jun 15 00:00:21 2025 GMT
        Subject: CN=8df024e8c0c9615b7cfd672774ad187a68463e43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:60:4f:f5:ab:1f:88:c9:4f:49:6b:51:44:04:
                    61:9e:49:5b:33:87:c3:4c:fd:05:75:49:95:62:ca:
                    f5:6f:a7:7f:0e:be:20:b6:a5:03:40:07:1b:0c:19:
                    6d:a0:6e:a9:73:78:4e:cb:b5:d6:b5:16:0f:92:2b:
                    aa:fb:38:cd:30:00:f9:d1:89:a5:1a:50:fb:e6:18:
                    3e:7a:38:9c:8e:26:e4:93:6c:ca:b9:b1:d5:a6:cf:
                    43:82:1c:95:f6:c2:fc:38:6e:81:4b:a5:4d:37:91:
                    2f:87:d1:00:9d:8a:8f:28:48:13:2e:00:20:bf:d3:
                    b0:c6:58:52:ee:25:27:09:3a:51:a4:a2:fa:48:df:
                    39:3b:1a:4a:cb:78:a2:7d:13:9d:28:5f:a6:52:cc:
                    7c:e2:e3:5e:14:03:69:68:ed:81:ed:9c:cb:60:df:
                    48:02:96:c9:db:63:02:90:08:53:c3:b6:ef:6e:ef:
                    38:33:91:7e:f0:e4:9e:87:7b:c5:f7:9f:41:d3:f0:
                    d7:0d:4c:02:1d:7f:b7:4d:23:9d:65:12:11:ed:30:
                    b8:d8:d0:0e:f3:11:09:d7:e9:55:18:d1:ca:e8:78:
                    fd:7d:86:58:99:29:a7:63:7e:a4:a9:fa:a6:c2:27:
                    78:5d:7d:5c:cd:de:31:4c:92:07:8c:be:7b:87:5a:
                    c3:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:F0:24:E8:C0:C9:61:5B:7C:FD:67:27:74:AD:18:7A:68:46:3E:43
            X509v3 Authority Key Identifier:
                keyid:9F:C6:E8:77:09:AE:9D:04:47:94:0F:23:D7:54:DF:8B:A8:17:5B:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n8bodwmunQRHlA8j11Tfi6gXWw0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/e42800-c8c7-4599-b1fd-88a74d039f7f/1/n8bodwmunQRHlA8j11Tfi6gXWw0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/e42800-c8c7-4599-b1fd-88a74d039f7f/1/n8bodwmunQRHlA8j11Tfi6gXWw0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:e5:37:12:ea:85:86:1e:9f:9c:01:23:8e:8d:1d:75:dd:ed:
         5e:c5:69:3f:c1:db:ae:bd:8b:fa:e0:23:7d:7b:03:86:14:d9:
         e4:b6:c8:1e:9b:f5:19:4a:e3:ff:88:8c:50:80:23:f7:7e:8e:
         32:bb:e7:8c:5a:27:fa:1b:89:80:56:8e:c2:e8:8a:4c:aa:f6:
         be:02:e5:c9:31:a8:af:c0:c1:85:0d:8b:df:75:52:cd:89:a1:
         4e:b6:c5:ff:97:e6:eb:ec:8b:7a:1b:ef:1c:c0:b6:4f:15:08:
         68:47:10:ca:e4:04:0d:59:c4:81:c6:23:c0:59:3e:32:30:1d:
         aa:57:d1:83:ff:17:26:3c:1b:8f:b7:47:a5:f6:0b:80:cf:37:
         23:df:a0:39:f4:8d:29:16:74:b3:be:01:28:95:7d:43:79:eb:
         c5:df:e1:c6:d8:cb:35:e4:01:9d:ee:c3:4c:78:f5:cf:4c:b5:
         7e:25:be:31:37:4a:fb:3a:12:f6:e4:32:15:34:5f:cc:6f:90:
         75:eb:35:8c:55:b7:1f:18:0d:44:f0:45:ce:93:fa:6b:aa:cf:
         87:db:f7:de:67:2c:c3:ed:d0:1a:dd:a0:03:f1:67:f1:b9:9d:
         ca:95:b1:bd:c9:ac:5b:c4:05:9e:30:6b:01:d5:3c:5f:b4:e2:
         f6:f8:ba:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:25:19 2025 by rpki-client