Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft
File:                     nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft (raw, json)
Hash identifier:          /h+3GZj6OINKPOjC9xIS/dJ6dij/ocjJd66PCw/5D4A=
Subject key identifier:   12:AF:7C:D0:A5:B2:3E:7F:2C:1E:02:CA:DF:8A:37:88:B5:17:ED:CC
Authority key identifier: 9D:5E:CC:E8:C8:7C:4F:0A:75:BA:21:E5:C8:4F:62:41:21:E0:8E:32
Certificate issuer:       /CN=9d5ecce8c87c4f0a75ba21e5c84f624121e08e32
Certificate serial:       0198D705F3DD35D5E1A55C167BBFB0F61BC5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft
Manifest number:          016F
Signing time:             Sat 23 Aug 2025 13:02:28 +0000
Manifest this update:     Sat 23 Aug 2025 13:02:28 +0000
Manifest next update:     Sun 24 Aug 2025 13:02:28 +0000
Files and hashes:         1: W1gtHYOxkSQKrOdwkNpP1ZoMoUY.roa (hash: 5S4JEcGJktduCewz9POQY0aRBOXQzpGOLodHYl3CjqI=)
                          2: nV7M6Mh8Twp1uiHlyE9iQSHgjjI.crl (hash: T0RsBcNGH03W7qMwY0d8RwOE1RlGHv2gMlolfU8a5LE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 13:02:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:05:f3:dd:35:d5:e1:a5:5c:16:7b:bf:b0:f6:1b:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d5ecce8c87c4f0a75ba21e5c84f624121e08e32
        Validity
            Not Before: Aug 23 13:02:28 2025 GMT
            Not After : Aug 24 13:02:28 2025 GMT
        Subject: CN=12af7cd0a5b23e7f2c1e02cadf8a3788b517edcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:5d:b8:32:ed:19:7e:0c:9f:53:a1:a4:e2:f9:
                    3b:52:1f:c6:52:4e:e1:14:c2:07:4c:62:b8:a7:28:
                    55:8f:c6:d6:5e:e2:71:7c:c4:1e:8f:5d:bd:91:9c:
                    2c:52:c5:e8:0a:8a:e3:67:dc:7e:51:dc:7a:cf:b2:
                    e8:fd:1f:97:69:70:7f:1f:78:00:ab:94:aa:87:b0:
                    76:19:48:cd:1e:84:cd:79:70:62:a7:e9:2a:42:73:
                    33:06:a2:23:8e:c1:dd:ed:9f:2e:af:14:97:27:13:
                    eb:eb:2c:79:73:ee:61:ed:1d:3e:ea:82:3d:20:2b:
                    78:16:3d:8c:e4:60:f6:c7:3f:74:1a:8d:cb:6e:41:
                    ea:35:5f:b9:ec:67:29:ef:a8:9c:46:a0:f3:9a:65:
                    fd:a8:b6:05:38:bc:61:1b:9c:97:d6:e9:ef:77:5f:
                    9b:44:2f:54:90:a6:13:b6:d9:44:7b:ef:7e:d4:f6:
                    c1:85:39:32:c5:e8:ef:ae:09:4d:3e:65:d1:63:d6:
                    2c:6e:1c:c0:5f:0c:aa:34:13:3a:e3:e6:ed:fe:2e:
                    36:58:e8:c7:65:18:0d:e5:99:d3:4b:b3:42:c6:45:
                    68:d5:7a:1b:95:b8:0c:cc:ea:c1:0e:c2:4f:3b:dd:
                    14:f7:28:ac:51:e6:70:cd:cb:e4:b2:6b:d2:e0:57:
                    21:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:AF:7C:D0:A5:B2:3E:7F:2C:1E:02:CA:DF:8A:37:88:B5:17:ED:CC
            X509v3 Authority Key Identifier:
                keyid:9D:5E:CC:E8:C8:7C:4F:0A:75:BA:21:E5:C8:4F:62:41:21:E0:8E:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:dd:fa:db:92:29:0b:6a:29:73:48:42:55:e0:17:7f:b6:26:
         49:9a:72:b6:33:28:a1:9e:6f:2c:a7:7b:ce:ad:b9:87:1a:5d:
         2f:d9:b4:ef:dd:50:b7:cb:68:25:19:32:67:40:be:5c:5f:da:
         86:af:84:99:eb:d6:8b:ed:80:fb:59:65:12:d6:8e:e4:1e:b2:
         40:14:99:ec:c7:6e:b9:5d:1f:96:bc:1d:48:b0:64:57:56:6c:
         f2:5c:80:f0:f5:7e:7c:a8:90:99:7c:e2:5c:23:c5:0c:33:28:
         8c:12:7e:eb:e9:d3:51:ee:11:ae:bc:dd:65:c8:3d:ab:40:39:
         d2:a3:73:1c:36:de:df:f8:f2:9a:f6:c5:3e:51:6b:34:d7:1b:
         23:d4:62:b8:47:9b:33:a1:e1:94:e7:5a:45:0f:a3:38:6c:3e:
         b1:da:a9:46:90:43:20:bb:0d:c3:b3:b5:74:70:99:55:30:e8:
         0a:bd:dc:5f:c6:9d:32:e5:a0:1a:12:50:f9:a1:c7:6b:11:90:
         58:8d:b1:56:9d:74:78:32:02:60:70:e2:3d:a3:95:a1:75:98:
         89:1b:e9:04:93:95:a5:69:9c:6b:4e:25:e7:a3:d2:2e:24:44:
         9e:e3:0b:da:a8:2c:8d:00:8d:bf:1c:b6:2e:eb:94:48:d3:80:
         9b:e9:33:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:33:37 2025 by rpki-client