Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/nOlHV6w_cLQPNpMH02XryWV7q2k.mft
File:                     nOlHV6w_cLQPNpMH02XryWV7q2k.mft (raw, json)
Hash identifier:          nKmJCMdhw8P6VmCIdAxJ3ovuBR9xDdHbYl9gAvxxBYo=
Subject key identifier:   0E:9D:66:EF:08:76:8F:EE:15:DD:A2:81:BD:07:9B:B4:53:B7:E2:20
Authority key identifier: 9C:E9:47:57:AC:3F:70:B4:0F:36:93:07:D3:65:EB:C9:65:7B:AB:69
Certificate issuer:       /CN=9ce94757ac3f70b40f369307d365ebc9657bab69
Certificate serial:       0198D84FD320ECB01AE8F764B592BA5A14E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nOlHV6w_cLQPNpMH02XryWV7q2k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/nOlHV6w_cLQPNpMH02XryWV7q2k.mft
Manifest number:          164B
Signing time:             Sat 23 Aug 2025 19:02:46 +0000
Manifest this update:     Sat 23 Aug 2025 19:02:46 +0000
Manifest next update:     Sun 24 Aug 2025 19:02:46 +0000
Files and hashes:         1: 4oft3Loz6Mj-iGBZld8Zml9nZKk.roa (hash: wH8MDJNmWcLwEAp7rv/L6Y94FGx4klTMMdgO3DL2B5U=)
                          2: 7Rx3mayEBwk8ldskeFY-2K2rZ-s.roa (hash: wklqA5tkn0CZJbDeoo6PYXZybB1iV079BOW7c/8yfmg=)
                          3: nOlHV6w_cLQPNpMH02XryWV7q2k.crl (hash: GB5UpVI/K5i06RjAOkr8NU3Wez5phTPf7J4asJCMxow=)
                          4: ufDo1kTLEOZD1_qKQ7HiFNKPunM.roa (hash: ez87p1Up7V/1mOstPVoSc34fcjVVGs1wyCiou6O9r2k=)
                          5: x0sLhzFdsabJsjGmaTnhB2s9wws.roa (hash: ZbmagYZOZjVgRuVWz3KGPUrXIWBjrnqcYZ6kZuTx6+k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/nOlHV6w_cLQPNpMH02XryWV7q2k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/nOlHV6w_cLQPNpMH02XryWV7q2k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nOlHV6w_cLQPNpMH02XryWV7q2k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d8:4f:d3:20:ec:b0:1a:e8:f7:64:b5:92:ba:5a:14:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ce94757ac3f70b40f369307d365ebc9657bab69
        Validity
            Not Before: Aug 23 19:02:46 2025 GMT
            Not After : Aug 24 19:02:46 2025 GMT
        Subject: CN=0e9d66ef08768fee15dda281bd079bb453b7e220
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:30:2e:d1:f0:f7:65:e1:72:ba:3e:6d:8e:50:
                    9c:27:a8:1a:08:0f:bb:2a:26:63:28:16:1c:cb:93:
                    05:a8:97:5f:71:da:a0:3b:55:33:c9:54:73:69:23:
                    40:22:76:05:81:20:df:b5:43:f1:46:2e:4d:d8:58:
                    70:c4:f4:cf:3b:46:92:15:83:20:c2:75:22:38:f3:
                    6f:63:cd:b7:98:16:43:47:c7:31:6b:eb:60:17:14:
                    13:fd:90:7f:7c:1c:b0:ca:02:2e:aa:ac:5d:7a:cd:
                    74:9d:0b:aa:e2:cd:53:92:4d:28:a6:dd:fa:c7:61:
                    57:7d:49:0f:59:14:f9:12:10:d7:f6:07:0a:ff:6d:
                    f2:d3:70:c7:6a:62:95:36:15:02:2a:7a:b4:7a:9e:
                    1e:10:d7:89:7f:cd:cd:6f:b2:39:b5:17:b5:8c:2e:
                    d4:1d:23:97:b7:ee:f4:d2:ed:b2:6a:f5:af:0c:d0:
                    4f:e2:14:b7:c0:a4:5e:83:3e:48:ac:50:97:9f:2d:
                    01:b0:7c:53:7c:2d:80:e6:8f:30:95:16:b8:96:a5:
                    98:c9:90:22:01:3a:c6:05:50:0f:a1:e2:0c:cc:50:
                    99:ee:1d:65:5c:40:20:f1:05:a6:75:12:7c:82:52:
                    0a:f7:cd:37:22:c8:0f:49:b5:d3:c2:3f:b5:02:71:
                    f1:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:9D:66:EF:08:76:8F:EE:15:DD:A2:81:BD:07:9B:B4:53:B7:E2:20
            X509v3 Authority Key Identifier:
                keyid:9C:E9:47:57:AC:3F:70:B4:0F:36:93:07:D3:65:EB:C9:65:7B:AB:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nOlHV6w_cLQPNpMH02XryWV7q2k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/nOlHV6w_cLQPNpMH02XryWV7q2k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/nOlHV6w_cLQPNpMH02XryWV7q2k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:b5:53:51:9e:c4:ad:dc:4b:80:9f:8e:8c:e0:71:b8:f4:49:
         9b:16:06:fa:e8:6d:fd:e6:0e:92:bb:a2:87:65:9b:7c:a5:89:
         07:aa:16:e3:a0:86:14:ae:ea:8a:a2:ed:e6:7e:f7:48:84:2f:
         92:b2:88:77:5e:32:5f:55:61:0d:88:fb:a5:13:9d:d9:45:7d:
         db:29:8d:4b:dc:30:92:63:7c:29:14:c0:f8:c0:83:0c:a8:47:
         00:83:29:77:7e:2f:16:33:b0:7b:eb:75:03:45:4e:e1:7f:77:
         b2:8b:78:5c:40:4e:47:4f:ee:52:47:37:a1:a0:4c:c4:b6:28:
         52:7f:d0:a9:6e:a1:ce:f9:3f:ca:4a:68:97:09:81:e6:13:b1:
         e2:0b:c7:ca:43:59:f6:82:f8:17:6a:ca:32:8e:46:ef:9a:3a:
         82:3d:91:2a:e7:ec:12:2b:0f:7e:b9:d6:bf:be:52:25:6f:36:
         d2:67:e2:89:24:bc:15:a7:31:dc:52:09:30:af:bd:67:9b:a8:
         cd:d7:2b:ee:8c:0c:2a:c4:93:f0:e6:4e:b0:90:ec:0a:49:6d:
         60:14:11:77:65:66:0f:ce:6e:a6:b7:a1:06:ef:a2:71:f9:9a:
         8f:c3:7f:44:20:a7:4a:86:50:d4:33:5c:c7:b0:d1:de:d0:46:
         8a:2a:e3:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:46:44 2025 by rpki-client