Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft
File:                     nLJc5VDk2b2gW9XUXItro3Qwu7o.mft (raw, json)
Hash identifier:          9Va7eR2I4a1JuyMJSC0CGyW2piau9UNe00/qMQz3LVs=
Subject key identifier:   AF:00:D2:8D:80:E5:B3:DC:49:61:BC:0F:F4:91:AC:CE:BD:BF:71:48
Authority key identifier: 9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA
Certificate issuer:       /CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba
Certificate serial:       0197B8FCC61F008AC2494B45847EAD7BD0C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft
Manifest number:          0F83
Signing time:             Sun 29 Jun 2025 00:01:02 +0000
Manifest this update:     Sun 29 Jun 2025 00:01:02 +0000
Manifest next update:     Mon 30 Jun 2025 00:01:02 +0000
Files and hashes:         1: 5twkGWnpZ3caWcoF0F7nZ3MnxRQ.roa (hash: Hj9ctK8yUmftQlZpCOc5gcL4pBH+76rKw29EPYTV1fY=)
                          2: 6t_-rwl5vkceJUl9xfuErIgk5XQ.roa (hash: UgA7/ParQEm4RUB+nS1eICM0VcT/VJB2T/2XjYuyjiU=)
                          3: CcOTWwBfhnDK4i-Cl6vgTQ1Ne6Q.roa (hash: 0gfOeo67IeexaN6S4XXz6/wYaUsrA1sXsSwqEGJjGB8=)
                          4: Kkr4WQTbiLrBJjIFNHmfQjqdMFs.roa (hash: AX2E33mALAyiSH2uL+jaoucILuyqIMUcyM5PTXw0LYA=)
                          5: XDROFBDLzXZk58Wa7Gj_bxIFP24.roa (hash: oEZB4Wy5f3UZqEPOPaZ8r51Wy4lzW93yWdCW8EWeAw0=)
                          6: fsRjNoJDy9POHF18ZkBOzQiMl94.roa (hash: pTBEz/UhwNCD7057vDv5QDiSVRnDRK75JX++XfB+B70=)
                          7: l0gHM8GvVK6QwtZ12bJdUWZyAgA.roa (hash: EQ1dP2YRTk2eZV0a40sNzCpIDgU0CGJQGOvWRKK6OaU=)
                          8: lIqtXZgZb6FK3xchEu_KzpPH9HY.roa (hash: EF/nDh6v7FHlrVK+Jno0NvRyT9dpjTxvni+KKTpPgho=)
                          9: nLJc5VDk2b2gW9XUXItro3Qwu7o.crl (hash: jMPqek0aJP6Ig3oGSnUmmCxxWT58946zmWNASMrZLQQ=)
                          10: uHCer9bSYtAYzAW97IkYAtxT0oY.roa (hash: pEZrL5HUVwpESwP8P9Avj4b8s7dLWZdI+MAnQfTy42g=)
                          11: zLYfKKvwZksRC-Mec9uQxezCf-I.roa (hash: 7jSn1GJtzfCE3yqBQcJd/SMTsqwM51FfYe/cCLi5Z4A=)
                          12: zS2PBrD2vmlXLTrGFHERr-Tg3sM.roa (hash: ZKfnpYOgYarKcHUc2HZAGzDoCt3IGKzpVqNwP6NLT/8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 19:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:fc:c6:1f:00:8a:c2:49:4b:45:84:7e:ad:7b:d0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba
        Validity
            Not Before: Jun 29 00:01:02 2025 GMT
            Not After : Jun 30 00:01:02 2025 GMT
        Subject: CN=af00d28d80e5b3dc4961bc0ff491accebdbf7148
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:0f:08:e2:96:3d:d6:af:3a:04:0b:53:13:9a:
                    02:6b:66:14:5f:b6:0b:93:9b:18:44:d7:8c:d3:2e:
                    04:11:54:e6:86:f0:cc:f5:7f:b2:b8:9e:60:a3:a7:
                    d9:24:c3:35:46:b2:5d:c5:f2:ba:4c:3e:7b:35:f9:
                    4c:d8:54:61:d9:20:e6:1e:d4:a1:e5:ff:52:1e:42:
                    e7:87:3a:a4:e9:f0:23:ae:29:cd:61:57:32:14:31:
                    00:7c:d5:43:1b:af:e5:a5:fb:3a:f4:99:29:0c:12:
                    aa:60:05:b1:e2:c6:1b:5a:35:48:f6:db:29:4b:4e:
                    bb:04:7d:29:77:c2:a2:9b:b6:fb:f7:15:4c:82:f4:
                    70:02:e8:be:1c:0c:e0:d8:b0:04:6f:c8:37:be:94:
                    1f:cc:82:95:a0:65:87:e1:b7:d3:46:c6:1f:3e:01:
                    3c:fc:bc:28:4b:64:64:63:b2:e2:15:8f:49:14:c8:
                    e4:83:76:68:be:7a:11:bf:cc:1f:0c:11:68:b3:61:
                    00:3c:97:13:8d:d2:d7:b8:b0:c7:de:13:44:d5:c1:
                    e9:9c:a5:71:79:58:51:62:69:cb:79:c7:40:93:a2:
                    11:00:a2:cd:92:e5:39:0a:ed:04:f0:eb:d7:42:29:
                    a1:a0:c5:70:de:29:2d:f7:65:44:35:1b:d9:d1:34:
                    f7:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:00:D2:8D:80:E5:B3:DC:49:61:BC:0F:F4:91:AC:CE:BD:BF:71:48
            X509v3 Authority Key Identifier:
                keyid:9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:00:e1:2f:96:36:36:1f:c5:ad:b6:2e:67:99:af:5b:43:50:
         ee:04:d1:21:21:51:b4:e9:cf:02:89:2e:af:6b:1d:03:f3:fc:
         f7:17:eb:97:c1:e9:97:69:c4:a2:c9:d1:f8:8d:3e:f8:b9:66:
         29:5b:f9:83:fc:06:f4:e0:a0:82:8a:a1:e3:16:7d:dc:65:30:
         b6:da:98:b5:38:f9:70:ef:74:d0:11:c3:f3:28:6b:34:36:f7:
         9e:7f:50:b1:b8:b9:13:cd:e5:7a:75:7f:11:77:72:4b:3c:48:
         8b:02:9e:04:ac:06:40:41:2a:d6:d4:35:da:88:a5:64:d0:10:
         2d:d9:3a:13:91:a6:a0:75:ea:51:6f:be:53:fd:66:4e:6a:e6:
         30:48:72:ad:ea:92:c6:3a:00:20:ee:10:a9:a0:52:f5:eb:be:
         0f:0c:8e:45:48:09:cc:76:c0:3a:0c:e8:ce:d2:f6:0b:52:71:
         80:9b:59:50:e4:92:1c:1c:42:74:c4:6a:5f:a0:5d:59:46:07:
         4d:09:9a:30:d3:7c:c7:c5:78:74:7c:23:00:d3:29:13:02:7b:
         6b:6f:eb:7f:5b:66:c5:01:73:78:bc:0d:c2:40:76:6a:64:6d:
         f4:73:c4:da:06:f3:71:00:49:37:6a:1e:99:5c:34:d3:0c:87:
         96:99:6f:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:47:37 2025 by rpki-client