Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/40079b-fcaa-46d9-8161-66a6c80d26a5/1/nyQGT5UzHPHzFdxQ3k2wX_lapBA.mft
File:                     nyQGT5UzHPHzFdxQ3k2wX_lapBA.mft (raw, json)
Hash identifier:          Y8dNQyTSfM3tRdaG0wJaW7H63GWXNq9ZvOlD9/sdmxU=
Subject key identifier:   68:74:30:8B:A3:F9:0E:FD:59:22:60:46:97:3C:E1:9A:1F:54:66:C9
Authority key identifier: 9F:24:06:4F:95:33:1C:F1:F3:15:DC:50:DE:4D:B0:5F:F9:5A:A4:10
Certificate issuer:       /CN=9f24064f95331cf1f315dc50de4db05ff95aa410
Certificate serial:       0197700757D802959B491C4020C82E9ECAEB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nyQGT5UzHPHzFdxQ3k2wX_lapBA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/40079b-fcaa-46d9-8161-66a6c80d26a5/1/nyQGT5UzHPHzFdxQ3k2wX_lapBA.mft
Manifest number:          0EB6
Signing time:             Sat 14 Jun 2025 20:00:18 +0000
Manifest this update:     Sat 14 Jun 2025 20:00:18 +0000
Manifest next update:     Sun 15 Jun 2025 20:00:18 +0000
Files and hashes:         1: nyQGT5UzHPHzFdxQ3k2wX_lapBA.crl (hash: j+SQnGDo3ah3OQ6+OL/rnOQNZJakISoSTbW6tQ6ehbU=)
                          2: xk36of5GcRMNZGUJt-_5r_QctTo.roa (hash: BbMVXEvQwTUOBV0n4W+iUw7Na6Uh7I6Smkrm6hqGQWQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/40079b-fcaa-46d9-8161-66a6c80d26a5/1/nyQGT5UzHPHzFdxQ3k2wX_lapBA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/40079b-fcaa-46d9-8161-66a6c80d26a5/1/nyQGT5UzHPHzFdxQ3k2wX_lapBA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nyQGT5UzHPHzFdxQ3k2wX_lapBA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 19:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:70:07:57:d8:02:95:9b:49:1c:40:20:c8:2e:9e:ca:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f24064f95331cf1f315dc50de4db05ff95aa410
        Validity
            Not Before: Jun 14 20:00:18 2025 GMT
            Not After : Jun 15 20:00:18 2025 GMT
        Subject: CN=6874308ba3f90efd59226046973ce19a1f5466c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:08:39:57:de:c5:b3:c4:b3:9a:42:8b:75:7c:
                    38:8f:9e:07:77:20:7a:d4:09:13:75:7b:79:5d:ce:
                    d2:df:c6:17:ed:ac:5f:e0:50:38:78:72:3f:5a:c5:
                    52:56:f4:da:ca:75:83:83:a6:58:a1:e6:4a:c3:5c:
                    ac:0a:e6:60:c4:db:5f:01:81:ac:89:aa:c3:a6:19:
                    f3:41:95:97:dc:50:6f:e9:f7:96:8d:eb:10:9e:90:
                    d6:11:b0:fd:b4:1d:75:39:57:e5:d3:09:2f:83:db:
                    1b:ff:a6:9f:35:31:61:fc:27:f0:e6:f7:ac:dd:96:
                    c4:4e:81:68:58:48:02:a7:8f:b3:a5:1d:0e:55:ad:
                    1f:f4:88:16:86:58:b4:87:fb:11:90:b6:10:dc:6e:
                    c4:08:5d:6a:7c:3d:f1:37:99:6c:20:19:fb:7d:52:
                    ee:ac:5b:7b:3f:e1:86:33:37:9a:8f:a5:fd:fd:4e:
                    36:23:d6:8e:1c:45:3d:bc:6e:d2:85:a0:e2:6d:06:
                    44:92:e6:aa:45:04:a6:a6:14:25:e1:54:90:8c:ed:
                    e3:74:b2:16:f8:d8:df:fe:e2:7b:cd:8d:0b:54:f1:
                    22:23:83:5a:0c:86:48:bc:22:fb:4e:f1:60:2b:ae:
                    92:3c:9f:f3:1e:12:ff:c7:fd:96:80:55:9e:97:e3:
                    14:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:74:30:8B:A3:F9:0E:FD:59:22:60:46:97:3C:E1:9A:1F:54:66:C9
            X509v3 Authority Key Identifier:
                keyid:9F:24:06:4F:95:33:1C:F1:F3:15:DC:50:DE:4D:B0:5F:F9:5A:A4:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyQGT5UzHPHzFdxQ3k2wX_lapBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/40079b-fcaa-46d9-8161-66a6c80d26a5/1/nyQGT5UzHPHzFdxQ3k2wX_lapBA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/40079b-fcaa-46d9-8161-66a6c80d26a5/1/nyQGT5UzHPHzFdxQ3k2wX_lapBA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:8a:8c:7f:9c:11:84:d3:bb:06:de:66:7d:9c:0a:fb:29:7e:
         9e:43:fd:3e:b8:2b:94:af:d5:a2:ef:38:d4:8b:07:6b:0b:a1:
         3b:d5:44:5c:2c:78:a0:92:cd:fc:c7:86:0a:a2:20:5f:8f:b2:
         6b:de:2b:b8:90:79:8d:36:de:03:45:aa:f7:ff:db:e8:b6:bc:
         40:1d:11:9e:c4:b6:0e:06:2d:6e:35:49:a0:8d:47:f2:ed:26:
         74:9b:09:99:2d:ca:e5:11:c1:75:aa:4e:a5:83:bc:20:af:1e:
         6f:ae:67:5c:87:5a:92:d8:92:b8:42:f2:9d:44:be:bd:79:03:
         65:db:57:36:28:cd:7f:22:fb:da:35:70:53:36:0a:51:0d:a8:
         f4:c0:83:60:b1:2f:9c:91:6a:b3:a1:8d:b8:03:0c:56:38:44:
         4c:dd:2b:28:6a:fe:c3:ee:45:af:36:75:2a:06:56:cd:f7:02:
         84:a8:3a:15:b2:e8:0a:26:af:ca:b8:59:19:96:e0:b0:49:94:
         b6:6f:3e:df:a5:26:9a:06:a0:8f:5a:c5:c6:3d:1e:fb:23:1b:
         b7:5a:e9:bc:89:60:b0:d7:bb:de:87:e7:ad:f3:c6:32:54:48:
         da:5e:2d:72:03:65:2c:6b:31:7a:47:11:3d:6b:9d:02:76:83:
         3d:8f:ce:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 00:35:05 2025 by rpki-client