Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/58005a-5233-4844-b024-29e35ae912da/1/nUZUJyZmhDb6k-dX_u9NReJM1uM.mft
File:                     nUZUJyZmhDb6k-dX_u9NReJM1uM.mft (raw, json)
Hash identifier:          Z0hSvcPoXLHPfZlmfQGqp85VdkLoSh1ADhw5NBnlI3c=
Subject key identifier:   F7:64:79:B8:C4:C0:83:71:1B:EA:79:8A:E1:66:F2:32:F3:1D:4C:4E
Authority key identifier: 9D:46:54:27:26:66:84:36:FA:93:E7:57:FE:EF:4D:45:E2:4C:D6:E3
Certificate issuer:       /CN=9d46542726668436fa93e757feef4d45e24cd6e3
Certificate serial:       0198D4E01A468CF91465FEEF953068FABAC5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nUZUJyZmhDb6k-dX_u9NReJM1uM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/58005a-5233-4844-b024-29e35ae912da/1/nUZUJyZmhDb6k-dX_u9NReJM1uM.mft
Manifest number:          138B
Signing time:             Sat 23 Aug 2025 03:01:53 +0000
Manifest this update:     Sat 23 Aug 2025 03:01:53 +0000
Manifest next update:     Sun 24 Aug 2025 03:01:53 +0000
Files and hashes:         1: _1ZVUyiWiKcUkDQ7d9MEjN-Qxjg.roa (hash: B9N8iWkGu9FMB4JofKmJJULgTYSFoSVSwpeNEHQNG3o=)
                          2: nUZUJyZmhDb6k-dX_u9NReJM1uM.crl (hash: e3jgMDa+zmKyfnoPoUw8H4Ng2a3ImFCeEVn6ELq+3bc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/58005a-5233-4844-b024-29e35ae912da/1/nUZUJyZmhDb6k-dX_u9NReJM1uM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/58005a-5233-4844-b024-29e35ae912da/1/nUZUJyZmhDb6k-dX_u9NReJM1uM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nUZUJyZmhDb6k-dX_u9NReJM1uM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 03:01:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:1a:46:8c:f9:14:65:fe:ef:95:30:68:fa:ba:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d46542726668436fa93e757feef4d45e24cd6e3
        Validity
            Not Before: Aug 23 03:01:53 2025 GMT
            Not After : Aug 24 03:01:53 2025 GMT
        Subject: CN=f76479b8c4c083711bea798ae166f232f31d4c4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:70:43:5a:2d:85:39:47:91:22:54:d5:d9:7f:
                    b0:4b:47:05:ad:93:7b:12:a7:f9:a5:15:fb:30:bb:
                    de:da:65:75:8e:b2:fe:1f:e0:0a:9b:72:e0:8e:1b:
                    88:53:63:91:84:2e:b4:be:43:ad:5e:41:8b:66:59:
                    db:7e:2f:03:b0:04:ce:14:01:19:be:41:e4:5a:c4:
                    21:8c:1c:7f:23:4e:fb:6d:51:30:23:76:5d:91:48:
                    78:8c:45:36:4b:57:91:5c:5f:85:cb:a8:70:b9:bb:
                    f1:98:a7:4d:c5:b6:a2:ce:11:f4:e3:da:b5:11:29:
                    f0:91:39:3d:8b:f6:41:dc:28:88:89:7a:c5:78:d0:
                    36:c5:f6:ca:df:4e:e3:5b:f9:68:9b:5b:d8:14:68:
                    4f:da:97:66:b3:3f:53:49:ab:80:9e:95:d3:e3:db:
                    a5:90:09:74:09:8e:03:61:e9:9f:85:23:f0:37:5e:
                    4c:0d:49:07:9e:56:1c:75:7c:cd:1c:0e:53:08:9b:
                    d5:51:e3:5e:a6:43:8a:44:87:7e:f9:46:36:88:69:
                    d2:d7:b0:11:1f:91:3e:29:69:64:81:f7:20:f9:e5:
                    02:1c:15:8b:1c:cb:ef:bb:6e:b0:51:8e:fb:22:e5:
                    0e:6c:5b:f7:01:0d:2d:05:79:65:bf:30:a8:b5:14:
                    71:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:64:79:B8:C4:C0:83:71:1B:EA:79:8A:E1:66:F2:32:F3:1D:4C:4E
            X509v3 Authority Key Identifier:
                keyid:9D:46:54:27:26:66:84:36:FA:93:E7:57:FE:EF:4D:45:E2:4C:D6:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nUZUJyZmhDb6k-dX_u9NReJM1uM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58005a-5233-4844-b024-29e35ae912da/1/nUZUJyZmhDb6k-dX_u9NReJM1uM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58005a-5233-4844-b024-29e35ae912da/1/nUZUJyZmhDb6k-dX_u9NReJM1uM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:82:c5:06:31:80:42:58:73:fc:f8:61:6c:d9:8c:dc:4b:60:
         49:e8:2a:1d:2d:d3:94:df:0e:44:ae:d1:81:d2:70:45:45:a8:
         e8:a1:44:ff:cc:b7:f1:57:1e:79:1f:2a:57:a5:ad:bb:14:d9:
         94:bc:72:e0:5a:54:e6:f9:a5:0c:b0:66:7e:00:0d:28:19:03:
         0a:f4:9b:3a:ff:ae:a8:53:05:cd:de:5f:f8:f6:8b:9c:fe:47:
         b0:75:8e:4e:7d:c2:0b:4e:d7:29:ed:e0:da:10:7e:48:0b:11:
         15:57:d0:c1:89:eb:bd:9b:b4:cd:ed:01:8b:9a:b8:39:65:ff:
         99:fe:64:c6:af:9a:07:91:c2:b6:f4:3a:a5:b1:aa:1d:45:96:
         cf:ff:c7:d7:aa:0c:a3:ab:5c:f8:39:98:12:9f:b3:ac:32:0d:
         01:e5:cb:68:06:6a:01:8f:8b:6f:88:3e:e4:cf:00:61:a5:2b:
         0c:2c:d0:f8:62:e5:00:e9:cd:9e:29:81:c6:96:8d:ef:29:6a:
         a0:96:30:af:a7:c8:b3:8c:55:4d:27:c8:f0:8f:12:7e:19:1b:
         83:04:4f:cc:4e:bf:83:70:4e:37:fd:da:f1:f8:ff:98:6a:95:
         1a:91:0c:7e:29:32:56:0b:53:08:10:7d:7b:1d:ab:55:9e:b1:
         16:31:78:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:41:21 2025 by rpki-client