Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/NhrfV8jct7_TTprs2D42NC7Do8k.mft
File:                     NhrfV8jct7_TTprs2D42NC7Do8k.mft (raw, json)
Hash identifier:          vdE8WmHL/0ftpIFumhG79CZhK8QH527feZPMoVbh264=
Subject key identifier:   00:9B:A3:B8:01:47:05:16:45:F4:26:08:51:0B:84:2D:18:8B:0D:79
Authority key identifier: 36:1A:DF:57:C8:DC:B7:BF:D3:4E:9A:EC:D8:3E:36:34:2E:C3:A3:C9
Certificate issuer:       /CN=361adf57c8dcb7bfd34e9aecd83e36342ec3a3c9
Certificate serial:       0198D54EAA78F7519C10DFF6650A9AE187C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NhrfV8jct7_TTprs2D42NC7Do8k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/NhrfV8jct7_TTprs2D42NC7Do8k.mft
Manifest number:          1406
Signing time:             Sat 23 Aug 2025 05:02:39 +0000
Manifest this update:     Sat 23 Aug 2025 05:02:39 +0000
Manifest next update:     Sun 24 Aug 2025 05:02:39 +0000
Files and hashes:         1: 8GuN-54fOOWK-SbVRHbvHD1t258.roa (hash: +JAgmZYVHbTg/tn7L+SSKAVcpZBlqMe4rbmvvs3DmTY=)
                          2: KFmrVFMv5VvGN18H4jdGIeWGvn8.roa (hash: /z+1/Ei//uOKicmtTi2XHrdGdq2SuXHHljqI7g0rhfE=)
                          3: NhrfV8jct7_TTprs2D42NC7Do8k.crl (hash: FgKt4cQUHTrLpQMqNb5H7RzoETFXu/5U25ptvqUKcvQ=)
                          4: gaApv-P3VWnlKNagOLOw5elCXUg.roa (hash: uJOMrg9lvM87wMjmTs9ZCZY0pZU1l+jJJKNSBI4+HgI=)
                          5: mldZ02SgByZkxb9-hN-tKmR0o0s.roa (hash: DrkW1wHvYpTjqDlBZkGq/sAaUPB7borOxMsYKMVFock=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/NhrfV8jct7_TTprs2D42NC7Do8k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/NhrfV8jct7_TTprs2D42NC7Do8k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NhrfV8jct7_TTprs2D42NC7Do8k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:aa:78:f7:51:9c:10:df:f6:65:0a:9a:e1:87:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=361adf57c8dcb7bfd34e9aecd83e36342ec3a3c9
        Validity
            Not Before: Aug 23 05:02:39 2025 GMT
            Not After : Aug 24 05:02:39 2025 GMT
        Subject: CN=009ba3b80147051645f42608510b842d188b0d79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:3c:e5:32:4c:5a:4d:db:fb:40:70:92:96:71:
                    f5:79:16:55:f9:1d:e4:33:19:af:6e:5d:bc:c9:67:
                    5c:c4:e2:2d:32:b5:56:57:4d:85:b6:00:1d:24:4d:
                    26:fe:51:28:92:73:4b:b7:6d:3c:e8:bd:e0:14:6a:
                    b2:5f:23:67:1d:fe:5e:8f:b4:ab:00:86:90:71:43:
                    a3:a3:55:54:14:80:9b:f6:6c:4a:2c:90:da:88:19:
                    df:ac:74:22:f0:8e:bd:cf:2e:a6:98:a4:c5:29:e0:
                    7c:4b:cf:22:64:07:61:ea:db:2a:26:0e:8e:70:d3:
                    d1:98:ce:f4:b8:42:f3:bb:4a:4d:96:26:ae:d1:be:
                    5c:1f:5d:0c:9d:1a:31:fc:1b:03:ee:97:3b:51:fc:
                    09:87:40:e5:91:97:f1:35:12:14:63:33:49:9a:33:
                    49:9a:ed:0f:39:43:74:e0:59:0e:bb:c1:16:4e:3f:
                    87:23:b7:46:83:5d:18:e9:71:c8:b4:6c:e9:92:2f:
                    3e:31:f0:57:81:b9:60:0e:c3:84:83:d2:0b:0f:5b:
                    76:e6:24:1b:e3:49:49:3b:73:d0:d1:8f:e5:7c:4f:
                    df:22:11:67:24:fe:90:8c:c7:42:55:b1:a3:f7:01:
                    fc:9b:0a:e5:cb:e4:7f:18:9e:b4:f8:9f:4f:21:cc:
                    f6:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:9B:A3:B8:01:47:05:16:45:F4:26:08:51:0B:84:2D:18:8B:0D:79
            X509v3 Authority Key Identifier:
                keyid:36:1A:DF:57:C8:DC:B7:BF:D3:4E:9A:EC:D8:3E:36:34:2E:C3:A3:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhrfV8jct7_TTprs2D42NC7Do8k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/NhrfV8jct7_TTprs2D42NC7Do8k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/NhrfV8jct7_TTprs2D42NC7Do8k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:5f:55:00:c6:2a:a2:48:e1:49:1e:b3:fe:ea:9e:67:dc:d0:
         47:49:09:ed:5f:ba:0a:d7:77:63:82:6e:3a:d5:09:f2:5a:e5:
         aa:34:a8:13:00:c2:b9:c7:4d:7c:dd:7d:46:67:b2:68:b2:3e:
         df:57:96:37:ec:b8:7c:61:90:91:d3:6a:56:b5:7c:f3:0d:b6:
         ec:bd:b5:ed:64:c2:0d:3b:1c:d4:42:73:50:a9:d8:65:bc:df:
         64:bf:61:4a:67:36:4a:07:bc:bf:39:a6:4c:1a:b8:0d:16:60:
         8e:33:6e:f6:1e:8f:04:4e:d0:13:c0:c0:7f:56:d1:5a:04:cd:
         0c:60:90:5a:fb:f2:67:52:b1:31:be:db:1e:2f:5a:17:e2:9d:
         3c:64:f6:78:7e:2e:34:aa:2f:31:87:b7:a4:cc:a1:93:d0:f6:
         12:11:03:ca:a1:c7:a7:0e:93:60:9a:f2:aa:ca:a2:c4:63:f3:
         4f:f8:d7:3b:0a:7c:20:de:ab:1c:ed:b1:9c:7f:0d:86:92:19:
         6d:a2:1c:d4:f0:11:b6:de:47:be:e8:f3:98:66:e9:53:50:1f:
         57:2d:cb:9b:8e:b1:ab:80:fb:f0:0d:16:a2:f5:2e:21:69:5e:
         5c:fa:c0:3f:e5:80:25:4a:cc:8e:62:44:13:89:fb:20:9e:52:
         0f:7e:58:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:49:13 2025 by rpki-client