Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/e29852-7e5c-452a-9e73-0c10dc507173/1/Nv1unnrLN1gyW7PkJFkY8yT_7aE.mft
File:                     Nv1unnrLN1gyW7PkJFkY8yT_7aE.mft (raw, json)
Hash identifier:          4jI6+wdUCk53efkSfsWHNJzN3pIBIjNyC/bDjwz4Kv8=
Subject key identifier:   AB:95:D3:3E:B2:0D:E8:7B:27:0C:3A:7E:9C:10:EB:F7:F4:63:98:68
Authority key identifier: 36:FD:6E:9E:7A:CB:37:58:32:5B:B3:E4:24:59:18:F3:24:FF:ED:A1
Certificate issuer:       /CN=36fd6e9e7acb3758325bb3e4245918f324ffeda1
Certificate serial:       0198D705EFDD516C4DC14B783142D1451E90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nv1unnrLN1gyW7PkJFkY8yT_7aE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/e29852-7e5c-452a-9e73-0c10dc507173/1/Nv1unnrLN1gyW7PkJFkY8yT_7aE.mft
Manifest number:          05F3
Signing time:             Sat 23 Aug 2025 13:02:27 +0000
Manifest this update:     Sat 23 Aug 2025 13:02:27 +0000
Manifest next update:     Sun 24 Aug 2025 13:02:27 +0000
Files and hashes:         1: GPRnxVZYbgXJj70_iEKvlXgPN24.roa (hash: 4zWTgka5oRO1IFS4EYqUZybX548raJeNOyBzsRKEzd0=)
                          2: Nv1unnrLN1gyW7PkJFkY8yT_7aE.crl (hash: IFbjwxnzEN/g67HpceQbCnOo5qAm3JXSLxVTD+F+9Yw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/e29852-7e5c-452a-9e73-0c10dc507173/1/Nv1unnrLN1gyW7PkJFkY8yT_7aE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/e29852-7e5c-452a-9e73-0c10dc507173/1/Nv1unnrLN1gyW7PkJFkY8yT_7aE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Nv1unnrLN1gyW7PkJFkY8yT_7aE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 13:02:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:05:ef:dd:51:6c:4d:c1:4b:78:31:42:d1:45:1e:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36fd6e9e7acb3758325bb3e4245918f324ffeda1
        Validity
            Not Before: Aug 23 13:02:27 2025 GMT
            Not After : Aug 24 13:02:27 2025 GMT
        Subject: CN=ab95d33eb20de87b270c3a7e9c10ebf7f4639868
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:27:32:ce:5c:fb:d8:9b:d5:5e:8a:0c:b4:72:
                    d3:0b:c9:5f:ab:e2:72:d2:30:ab:ed:ff:9f:7d:2a:
                    20:35:94:c8:d2:6d:b8:7c:ce:81:d3:3d:62:9a:cf:
                    fd:44:e8:2c:98:6f:3f:2d:12:3d:31:ec:dd:15:e1:
                    b6:ca:bd:c9:f0:f3:19:44:b5:55:4f:60:f8:30:03:
                    fa:b5:61:13:ec:ae:0d:7f:49:94:d8:1f:46:3c:42:
                    a6:0b:87:cf:1e:b1:68:96:64:9c:ff:6d:34:5f:3e:
                    fc:49:c9:03:62:f2:37:3c:66:46:36:d4:c4:fe:70:
                    cd:74:63:69:36:4e:e4:c1:20:ac:f1:4c:36:ef:24:
                    b2:18:d0:fd:75:de:e5:2d:3f:fd:7f:1e:21:59:36:
                    af:26:78:c4:25:02:54:3a:e1:c4:60:60:8a:50:24:
                    21:ba:78:f8:b7:2c:8b:92:3d:6d:ff:5d:fc:a8:92:
                    23:35:88:9d:45:2e:5a:ad:6c:b1:10:74:fa:02:a0:
                    cc:71:bc:62:09:83:ac:7d:1c:09:c4:e8:f1:ba:28:
                    3c:a8:80:48:a2:b8:ae:37:d8:74:97:d6:2f:dc:cd:
                    a1:a3:5a:ca:6d:91:e7:8a:f0:2a:32:da:7a:75:d8:
                    f4:39:3d:b2:83:34:87:4c:57:47:61:3c:8b:16:a7:
                    da:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:95:D3:3E:B2:0D:E8:7B:27:0C:3A:7E:9C:10:EB:F7:F4:63:98:68
            X509v3 Authority Key Identifier:
                keyid:36:FD:6E:9E:7A:CB:37:58:32:5B:B3:E4:24:59:18:F3:24:FF:ED:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nv1unnrLN1gyW7PkJFkY8yT_7aE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/e29852-7e5c-452a-9e73-0c10dc507173/1/Nv1unnrLN1gyW7PkJFkY8yT_7aE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/e29852-7e5c-452a-9e73-0c10dc507173/1/Nv1unnrLN1gyW7PkJFkY8yT_7aE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:81:a2:7c:64:a9:9d:09:a9:f6:30:52:df:33:e9:79:cd:01:
         a1:d1:85:05:88:b7:40:14:bb:71:58:de:28:6f:27:c0:1c:d3:
         02:84:4f:0a:35:09:3d:00:0e:e1:fa:ea:1a:10:47:cb:f3:9f:
         40:81:67:75:c5:13:00:ea:a1:7c:42:3f:97:c5:60:62:4f:e8:
         c8:86:7d:55:bb:60:4f:dc:b6:2c:d8:1a:82:98:62:43:04:96:
         95:e4:17:c4:c1:69:62:f2:a0:14:f6:4b:94:f6:b6:45:0c:ab:
         16:02:1b:07:ca:0d:8a:c2:6d:af:e2:54:bc:e4:3b:27:dd:f0:
         43:71:04:6d:31:4f:89:a7:ce:3e:46:1d:0a:f2:30:1d:7e:f4:
         cc:12:37:2c:f4:45:89:a8:74:30:b3:ac:62:c7:03:02:84:e2:
         60:9f:55:53:d8:4f:e3:f8:04:3f:21:f2:5b:ec:d7:cd:db:6a:
         b1:b1:bd:61:ac:2b:48:5c:6d:23:3f:93:25:01:38:db:c9:a6:
         3c:a9:d7:12:78:70:00:37:40:e9:1c:69:27:f5:ea:2a:90:a3:
         d8:89:5a:a1:ba:d5:fa:20:47:ae:98:ef:94:eb:c3:68:e7:27:
         5c:8d:7c:71:d8:15:22:c1:e2:35:ea:58:c8:e5:b8:d4:c1:3f:
         60:62:60:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:31:21 2025 by rpki-client