Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/83aa47-c7fb-4e05-9fac-e4ca6b73ac76/1/N0CDrw__F2igfGVfH-OGAJxSLM8.mft
File:                     N0CDrw__F2igfGVfH-OGAJxSLM8.mft (raw, json)
Hash identifier:          /QBp6WxqgjoBORZ+iYrHjAHm155+PspzRWRp8kFDVLo=
Subject key identifier:   5B:A3:81:D9:5F:BB:73:7B:8E:51:BD:B6:42:84:D1:F5:B6:90:E0:38
Authority key identifier: 37:40:83:AF:0F:FF:17:68:A0:7C:65:5F:1F:E3:86:00:9C:52:2C:CF
Certificate issuer:       /CN=374083af0fff1768a07c655f1fe386009c522ccf
Certificate serial:       0198D515ADF3BB59E8C5CCC90D3C6F1BA88B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N0CDrw__F2igfGVfH-OGAJxSLM8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/83aa47-c7fb-4e05-9fac-e4ca6b73ac76/1/N0CDrw__F2igfGVfH-OGAJxSLM8.mft
Manifest number:          122D
Signing time:             Sat 23 Aug 2025 04:00:24 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:24 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:24 +0000
Files and hashes:         1: N0CDrw__F2igfGVfH-OGAJxSLM8.crl (hash: Qo3p0ZVoaZVryhBuopn8BtwkoWSwRpQK+mNdu5OBoM0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/83aa47-c7fb-4e05-9fac-e4ca6b73ac76/1/N0CDrw__F2igfGVfH-OGAJxSLM8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/83aa47-c7fb-4e05-9fac-e4ca6b73ac76/1/N0CDrw__F2igfGVfH-OGAJxSLM8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N0CDrw__F2igfGVfH-OGAJxSLM8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:15:ad:f3:bb:59:e8:c5:cc:c9:0d:3c:6f:1b:a8:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=374083af0fff1768a07c655f1fe386009c522ccf
        Validity
            Not Before: Aug 23 04:00:24 2025 GMT
            Not After : Aug 24 04:00:24 2025 GMT
        Subject: CN=5ba381d95fbb737b8e51bdb64284d1f5b690e038
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:ab:68:0b:6d:5d:8c:1d:04:dc:17:6c:c3:f5:
                    eb:a6:80:43:1d:d2:05:9d:34:59:4c:f9:1b:60:e0:
                    83:c9:d3:7e:64:c0:ea:52:66:2c:6d:27:27:46:0d:
                    43:16:94:f3:e0:3a:44:aa:48:f5:2e:68:b2:3e:54:
                    1e:6c:b9:9a:f5:fd:23:d5:d9:9a:5f:c6:03:0e:39:
                    f9:33:6f:af:60:29:38:33:28:7c:80:7d:3e:88:fd:
                    fd:3d:b0:9b:a4:40:ba:59:af:19:2d:08:60:2d:84:
                    4f:65:5a:95:7b:a6:e8:72:d3:a0:e7:c2:d2:35:c8:
                    02:8f:ae:8c:36:0c:59:d8:46:7d:92:fb:ec:56:8b:
                    f0:e2:d0:8e:42:46:de:5e:7d:30:ed:7e:43:05:f7:
                    c5:7c:e8:3f:27:db:46:8d:8d:76:8d:90:f2:2f:93:
                    de:b4:94:a8:de:ae:3f:a0:b5:b2:59:ea:02:3f:e4:
                    50:d1:cd:b7:04:17:09:9c:aa:d0:c7:41:54:e4:97:
                    db:4b:f5:97:12:c4:36:f5:9d:b0:f8:88:ce:e0:53:
                    6d:09:15:d3:b5:f1:c1:ea:b8:13:6c:10:85:24:c8:
                    42:ee:d4:94:ca:18:2d:0f:3d:1c:0e:c1:bb:61:44:
                    99:06:a8:55:aa:2f:62:16:fd:cf:90:07:88:2d:9d:
                    2f:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:A3:81:D9:5F:BB:73:7B:8E:51:BD:B6:42:84:D1:F5:B6:90:E0:38
            X509v3 Authority Key Identifier:
                keyid:37:40:83:AF:0F:FF:17:68:A0:7C:65:5F:1F:E3:86:00:9C:52:2C:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0CDrw__F2igfGVfH-OGAJxSLM8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/83aa47-c7fb-4e05-9fac-e4ca6b73ac76/1/N0CDrw__F2igfGVfH-OGAJxSLM8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/83aa47-c7fb-4e05-9fac-e4ca6b73ac76/1/N0CDrw__F2igfGVfH-OGAJxSLM8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:58:ef:8f:27:02:b0:85:71:38:04:7b:ba:66:59:5f:e7:fc:
         5b:d1:c5:e5:4e:a2:38:c1:6a:b7:47:7e:f6:4b:74:97:18:68:
         68:60:b2:cd:79:64:7d:62:b6:3d:d3:52:07:05:36:9c:ce:bb:
         a4:24:d9:ac:ec:19:b7:8c:d0:06:be:24:39:13:99:ad:b2:f0:
         9c:3e:67:2b:4e:08:96:f0:45:42:4b:76:6e:d6:b4:71:61:06:
         e5:06:d6:6b:c0:84:87:bb:da:74:e8:48:42:ab:f8:81:a0:b4:
         bf:e6:f8:cf:5d:e8:94:d3:4d:c2:4f:d5:e8:d5:f1:2b:18:9f:
         0c:03:c6:59:14:2f:92:10:d6:c1:cb:a2:64:a5:0c:87:9f:26:
         8e:4f:4a:b2:f5:e3:fd:75:aa:68:1f:ad:58:5e:0e:32:d7:9a:
         56:4e:97:4d:ad:d1:20:4f:00:9b:68:c8:37:36:d3:2c:b1:d2:
         d6:13:dc:dc:68:73:17:37:e6:fd:28:28:10:c6:68:02:c9:43:
         0c:15:e3:20:5b:4a:19:5c:1e:7d:33:4c:3a:0c:d1:37:c8:f3:
         61:2f:bd:d3:a6:80:fd:f6:1f:84:e6:53:1e:61:b5:5d:d4:31:
         67:d7:fb:66:4e:1c:c6:c6:fe:70:2b:6f:83:ac:f8:82:5c:4d:
         79:ca:bc:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:36:20 2025 by rpki-client