Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/40079b-fcaa-46d9-8161-66a6c80d26a5/1/nyQGT5UzHPHzFdxQ3k2wX_lapBA.mft
File:                     nyQGT5UzHPHzFdxQ3k2wX_lapBA.mft (raw, json)
Hash identifier:          FraD4c1768n2r+g0MYaRr1+8mnokWHgPJsdwQ15reKQ=
Subject key identifier:   FD:C2:26:32:10:CF:D0:A5:BE:FC:67:AD:A5:23:6D:B7:30:93:E7:D6
Authority key identifier: 9F:24:06:4F:95:33:1C:F1:F3:15:DC:50:DE:4D:B0:5F:F9:5A:A4:10
Certificate issuer:       /CN=9f24064f95331cf1f315dc50de4db05ff95aa410
Certificate serial:       0198D54E2DFD69CAE77E6E63A53832417264
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nyQGT5UzHPHzFdxQ3k2wX_lapBA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/40079b-fcaa-46d9-8161-66a6c80d26a5/1/nyQGT5UzHPHzFdxQ3k2wX_lapBA.mft
Manifest number:          0F6F
Signing time:             Sat 23 Aug 2025 05:02:07 +0000
Manifest this update:     Sat 23 Aug 2025 05:02:07 +0000
Manifest next update:     Sun 24 Aug 2025 05:02:07 +0000
Files and hashes:         1: nyQGT5UzHPHzFdxQ3k2wX_lapBA.crl (hash: csS3V4/4znmOQ3VvZtYcQ+aXyqUSJzbU7sXgc40qKfk=)
                          2: xk36of5GcRMNZGUJt-_5r_QctTo.roa (hash: BbMVXEvQwTUOBV0n4W+iUw7Na6Uh7I6Smkrm6hqGQWQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/40079b-fcaa-46d9-8161-66a6c80d26a5/1/nyQGT5UzHPHzFdxQ3k2wX_lapBA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/40079b-fcaa-46d9-8161-66a6c80d26a5/1/nyQGT5UzHPHzFdxQ3k2wX_lapBA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nyQGT5UzHPHzFdxQ3k2wX_lapBA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:2d:fd:69:ca:e7:7e:6e:63:a5:38:32:41:72:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f24064f95331cf1f315dc50de4db05ff95aa410
        Validity
            Not Before: Aug 23 05:02:07 2025 GMT
            Not After : Aug 24 05:02:07 2025 GMT
        Subject: CN=fdc2263210cfd0a5befc67ada5236db73093e7d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e0:c7:47:de:fd:b7:9c:16:47:d3:38:21:02:
                    61:f3:96:88:7b:54:56:31:6e:72:dd:37:58:90:91:
                    a5:a6:d4:9b:37:a4:42:93:a4:65:7f:32:ce:d8:3c:
                    e4:69:0b:6e:ce:3e:aa:8a:c4:d5:53:f9:66:e9:62:
                    4f:0f:72:44:ff:91:1a:4d:d6:ee:e7:fb:29:60:8d:
                    cc:0d:da:3b:4a:64:96:70:3a:b3:1f:6e:38:5c:99:
                    53:f6:5f:7d:b4:89:55:1c:be:76:c1:f4:e9:43:04:
                    93:ad:89:3c:b3:5b:dc:2b:30:3d:2e:c4:06:48:26:
                    51:c4:59:3b:1f:14:0a:ea:90:d2:01:60:d6:13:85:
                    cf:59:21:eb:e5:d6:81:fc:fe:ed:3f:b4:d3:33:b1:
                    67:f9:78:29:99:36:f4:98:da:0c:07:5f:54:7c:aa:
                    48:07:e0:f5:9c:60:42:b0:23:c5:75:fc:ca:4d:5c:
                    42:3c:cc:47:a1:0b:4b:57:5b:f7:f6:7d:3e:c3:15:
                    07:00:dd:ff:e6:81:90:16:e3:7e:23:13:fa:67:56:
                    6b:41:5e:bc:20:6e:1c:9b:0b:b9:ce:14:8e:8e:49:
                    d0:5e:cb:55:9b:0c:83:ab:7b:96:30:50:cc:19:83:
                    c3:c5:0b:0e:3c:a7:ca:3f:61:d2:4c:b3:26:e1:4b:
                    fd:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:C2:26:32:10:CF:D0:A5:BE:FC:67:AD:A5:23:6D:B7:30:93:E7:D6
            X509v3 Authority Key Identifier:
                keyid:9F:24:06:4F:95:33:1C:F1:F3:15:DC:50:DE:4D:B0:5F:F9:5A:A4:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyQGT5UzHPHzFdxQ3k2wX_lapBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/40079b-fcaa-46d9-8161-66a6c80d26a5/1/nyQGT5UzHPHzFdxQ3k2wX_lapBA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/40079b-fcaa-46d9-8161-66a6c80d26a5/1/nyQGT5UzHPHzFdxQ3k2wX_lapBA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:55:fe:a5:0c:64:46:e6:4c:ee:e9:f6:5a:ee:35:4c:e7:d0:
         eb:2e:bd:da:ca:4a:11:a4:11:b8:9b:46:8e:4b:4c:31:4d:98:
         b3:75:52:6f:2c:8a:28:73:1e:59:65:6f:7d:99:74:f6:72:79:
         9a:b5:85:fa:d0:20:58:af:4d:03:25:17:34:de:3b:f3:ea:b8:
         b1:14:10:aa:87:42:40:1d:e5:09:cd:ff:87:28:47:fe:a6:49:
         b6:a8:ab:71:3a:b1:16:3b:d8:74:fe:ef:6f:40:6c:18:9c:c5:
         2e:a7:5c:eb:10:19:5f:49:c0:cd:bb:7d:72:73:87:5a:14:19:
         4d:3e:08:3a:0e:8b:9c:43:7d:68:e1:8c:d1:a4:d2:1b:30:83:
         35:26:f1:6b:6f:d7:3a:cf:be:0c:3f:50:73:9a:87:9b:12:14:
         8a:92:02:d4:22:a9:64:a9:52:09:6a:40:e7:99:25:c4:5b:57:
         06:8f:38:77:f6:47:bc:35:9d:d5:f4:b1:10:a4:b7:be:34:22:
         71:d0:90:f7:26:74:71:19:f8:34:9a:b6:bf:b3:d7:d9:a4:85:
         17:6d:06:5f:70:ba:1a:60:9b:48:1b:2e:d2:5b:06:d0:7a:b2:
         27:89:aa:79:0a:f9:5c:11:50:e9:9d:bb:6b:38:fb:4f:a6:21:
         ca:7a:4b:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:02:09 2025 by rpki-client