Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.mft
File:                     nkgcCYpkkmUpHUAvXwL8Q92g_Iw.mft (raw, json)
Hash identifier:          5rVeL51nFwgwU91JSpfAOR2Y2dk/CUZwn4UtZOH8/Mc=
Subject key identifier:   C0:79:79:1E:D4:8E:45:B2:3C:2A:C4:04:17:47:14:13:B7:C0:B5:9E
Authority key identifier: 9E:48:1C:09:8A:64:92:65:29:1D:40:2F:5F:02:FC:43:DD:A0:FC:8C
Certificate issuer:       /CN=9e481c098a649265291d402f5f02fc43dda0fc8c
Certificate serial:       0197C681413A91571BE54BF2B1F779F08328
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.mft
Manifest number:          08B6
Signing time:             Tue 01 Jul 2025 15:00:48 +0000
Manifest this update:     Tue 01 Jul 2025 15:00:48 +0000
Manifest next update:     Wed 02 Jul 2025 15:00:48 +0000
Files and hashes:         1: 1-Z1UOZXHudz9pMndWhDGiE0wZos.roa (hash: j553aDGXg+Mu/H/OVwEn4NDDiMjFpdhHQa+Xk6WS3jQ=)
                          2: nkgcCYpkkmUpHUAvXwL8Q92g_Iw.crl (hash: UaXiFuHFcsB1Fy9dsJjTcfIIfWoncDnmjNRUotARz7E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 02 Jul 2025 15:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c6:81:41:3a:91:57:1b:e5:4b:f2:b1:f7:79:f0:83:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e481c098a649265291d402f5f02fc43dda0fc8c
        Validity
            Not Before: Jul  1 15:00:48 2025 GMT
            Not After : Jul  2 15:00:48 2025 GMT
        Subject: CN=c079791ed48e45b23c2ac40417471413b7c0b59e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e7:9e:3a:77:c3:ac:eb:04:f8:50:71:9f:12:
                    9e:28:21:c8:90:62:3a:52:b6:d7:3c:2c:c4:af:54:
                    aa:ec:37:9b:d6:1d:7e:4a:dc:c6:57:f0:cc:ee:1a:
                    aa:97:b5:b4:cb:ca:16:4c:66:7e:89:65:e7:e8:d2:
                    77:af:3a:39:1f:50:09:33:21:c3:88:65:9a:c1:d5:
                    16:ba:2c:b0:80:ab:51:10:4d:7d:9f:81:f7:87:16:
                    12:e3:58:ef:c6:b5:a8:ef:7d:70:5c:39:63:1c:c8:
                    e5:81:89:f3:3a:4c:bb:53:63:a4:73:fd:00:00:8e:
                    fe:6a:30:89:9a:6a:00:29:5b:2c:36:e5:0b:04:87:
                    1f:9f:98:21:32:a0:2f:86:c4:03:d3:22:f5:d8:4b:
                    5b:ab:86:22:89:b1:8e:90:d8:22:26:e9:f1:b4:31:
                    b1:87:78:91:8b:90:99:b6:a6:7f:82:d6:f9:d6:d4:
                    6f:75:1b:ac:36:c0:96:bd:91:33:59:fa:cf:8b:1e:
                    da:97:77:b4:d7:02:79:55:7e:0d:08:9b:5a:99:f1:
                    74:70:d4:3f:69:cc:f0:f5:b9:d8:b5:a5:d9:c3:08:
                    e5:50:97:8a:8f:bc:dd:55:97:5a:e5:f2:92:32:80:
                    8d:0a:e4:90:3f:01:4d:4a:e8:42:8f:93:43:e4:0e:
                    dd:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:79:79:1E:D4:8E:45:B2:3C:2A:C4:04:17:47:14:13:B7:C0:B5:9E
            X509v3 Authority Key Identifier:
                keyid:9E:48:1C:09:8A:64:92:65:29:1D:40:2F:5F:02:FC:43:DD:A0:FC:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:cd:d6:13:0e:5e:36:ab:7b:d3:48:5f:ed:6a:1b:d0:5e:88:
         9b:ca:1f:38:01:d5:54:e0:06:49:9a:54:9d:96:42:15:20:23:
         b2:24:eb:a0:9e:66:28:7a:b0:93:4f:67:10:ee:22:91:56:14:
         e0:5d:2a:b0:3c:d2:11:3d:2b:0c:72:27:ff:34:c9:0c:3e:ef:
         64:f8:70:e4:40:db:ad:5c:fb:b4:1b:e8:d6:47:58:14:da:c8:
         c6:0e:5a:9e:41:f6:e8:7b:b9:fc:24:ed:41:cb:9a:c1:71:0b:
         dc:a4:63:25:3c:fc:90:db:99:fa:b1:96:da:3d:be:9c:72:5f:
         47:6e:ab:b3:03:b2:9b:74:00:17:56:25:12:d4:f8:1f:bc:e4:
         80:d0:c5:af:c9:ca:4e:03:c7:d9:d4:2f:8d:a8:45:51:10:c7:
         f8:90:73:b3:44:b7:5c:0f:c2:f7:7b:2a:45:2b:08:4c:c5:00:
         ed:49:03:4c:10:74:2f:55:23:b3:a9:5f:6c:88:d5:96:51:a2:
         cb:0b:8a:1d:89:61:3a:65:bb:c8:26:ab:f5:d9:9a:52:15:6c:
         3b:12:5a:50:71:3c:36:b8:0f:dd:fc:a4:f3:e3:d6:f9:3b:f3:
         1d:a2:8f:eb:0d:08:1d:53:20:92:f6:a4:e7:92:a2:01:e5:61:
         6a:35:12:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 22:32:31 2025 by rpki-client