Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/362958-06dd-4c04-8864-01398942fb5a/1/nMJvGM-WuGpFBrO4TMxE07NQaiA.mft
File:                     nMJvGM-WuGpFBrO4TMxE07NQaiA.mft (raw, json)
Hash identifier:          MOI3yO8tQIswK6zWwwQEzkODHEnaGOqw+PLyeV32eHA=
Subject key identifier:   75:7B:42:F0:F4:4F:FE:A0:E4:D2:E5:C6:AD:35:F2:4F:44:2B:A1:C6
Authority key identifier: 9C:C2:6F:18:CF:96:B8:6A:45:06:B3:B8:4C:CC:44:D3:B3:50:6A:20
Certificate issuer:       /CN=9cc26f18cf96b86a4506b3b84ccc44d3b3506a20
Certificate serial:       0198D5BBE40D5C594B21414F01B23DAA7159
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nMJvGM-WuGpFBrO4TMxE07NQaiA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/362958-06dd-4c04-8864-01398942fb5a/1/nMJvGM-WuGpFBrO4TMxE07NQaiA.mft
Manifest number:          0811
Signing time:             Sat 23 Aug 2025 07:01:57 +0000
Manifest this update:     Sat 23 Aug 2025 07:01:57 +0000
Manifest next update:     Sun 24 Aug 2025 07:01:57 +0000
Files and hashes:         1: jYsRIvoDURhQER-g8gsgtrlE-uw.roa (hash: GoEsOPwpW5DP9dw5vT+vzZBcfSyAVzSYkZdL0zk1Xg8=)
                          2: nMJvGM-WuGpFBrO4TMxE07NQaiA.crl (hash: Qn/TNCpENB5cN07FfZ8VnCzCDbntgjC6Fd7vijwpK9s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/362958-06dd-4c04-8864-01398942fb5a/1/nMJvGM-WuGpFBrO4TMxE07NQaiA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/362958-06dd-4c04-8864-01398942fb5a/1/nMJvGM-WuGpFBrO4TMxE07NQaiA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nMJvGM-WuGpFBrO4TMxE07NQaiA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bb:e4:0d:5c:59:4b:21:41:4f:01:b2:3d:aa:71:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cc26f18cf96b86a4506b3b84ccc44d3b3506a20
        Validity
            Not Before: Aug 23 07:01:57 2025 GMT
            Not After : Aug 24 07:01:57 2025 GMT
        Subject: CN=757b42f0f44ffea0e4d2e5c6ad35f24f442ba1c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:54:ce:3c:be:18:7c:5f:bd:e0:f5:1f:98:08:
                    8a:97:39:80:e5:80:a9:76:7c:6a:28:70:33:42:52:
                    05:43:52:97:9f:c8:66:2c:77:c0:ff:a8:bc:c3:f0:
                    ff:fa:86:d1:30:8c:e3:46:26:c3:72:fb:05:55:42:
                    bb:45:0f:37:e9:31:af:af:cf:20:aa:30:63:b5:72:
                    23:dc:1b:b9:03:87:b2:c3:d9:56:a0:b5:41:c2:dd:
                    9d:aa:c0:f7:db:78:48:3d:10:f1:19:05:f4:41:3a:
                    3b:d5:1e:9c:10:23:21:cd:43:d9:c5:df:68:e2:67:
                    71:b8:6c:e0:84:fe:97:4e:0d:4f:43:9f:11:b6:4b:
                    d4:9f:46:9e:3d:89:ea:91:fe:91:cc:e6:cd:a4:f5:
                    16:3d:65:b3:29:d3:7d:bf:1a:a1:6b:40:6b:d3:71:
                    0f:ea:1e:12:ae:67:0e:e6:33:6c:2b:6a:df:f0:33:
                    71:7c:94:aa:a6:73:32:0a:b1:6f:09:e0:df:f1:f9:
                    f3:1f:89:9c:37:4b:92:bf:89:e2:41:d5:93:2f:8a:
                    0c:69:6a:b8:0e:04:3e:fc:43:2d:c8:c9:aa:73:c9:
                    e1:6e:86:a7:51:ad:12:2e:37:01:b3:47:2f:97:7c:
                    ed:e6:66:a7:a1:92:82:84:b8:f9:d1:c2:97:4c:bc:
                    b5:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:7B:42:F0:F4:4F:FE:A0:E4:D2:E5:C6:AD:35:F2:4F:44:2B:A1:C6
            X509v3 Authority Key Identifier:
                keyid:9C:C2:6F:18:CF:96:B8:6A:45:06:B3:B8:4C:CC:44:D3:B3:50:6A:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nMJvGM-WuGpFBrO4TMxE07NQaiA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/362958-06dd-4c04-8864-01398942fb5a/1/nMJvGM-WuGpFBrO4TMxE07NQaiA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/362958-06dd-4c04-8864-01398942fb5a/1/nMJvGM-WuGpFBrO4TMxE07NQaiA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:2a:92:8e:bc:3f:02:1e:58:7e:23:28:ba:ae:25:80:26:9c:
         c6:2e:7a:79:d3:c6:c4:4c:22:03:ad:2f:3b:5d:a2:bf:ec:6a:
         ab:79:7c:82:6b:74:a8:09:12:78:c3:7d:82:12:fd:69:bd:1f:
         53:88:69:a6:5b:07:05:1d:58:b8:68:07:a7:bf:35:b7:71:83:
         89:ae:83:45:46:6c:45:91:ef:e1:ad:69:97:3d:1b:dd:a7:62:
         a6:c3:24:7b:75:dd:22:53:05:27:80:e0:b2:01:38:bc:6c:ad:
         0a:be:17:22:a0:dd:6a:60:e5:59:12:c9:d6:17:42:bc:62:36:
         45:a0:ed:db:e9:af:17:3c:6f:e8:c4:38:27:fb:ac:67:e0:0f:
         3c:d1:44:9b:eb:89:f6:5f:07:c7:95:9e:1b:39:9b:d5:71:b5:
         de:e6:03:7e:6e:58:27:6a:cb:17:08:e3:d9:cc:e7:5c:56:16:
         cc:e3:23:63:4b:9b:62:d0:09:14:1d:e7:ad:b9:bd:4e:fc:7a:
         ac:ae:da:85:62:1c:9c:02:c5:40:d0:ed:01:85:26:4e:4f:21:
         09:06:d2:a7:1c:05:8f:37:67:c2:49:fb:4e:c8:bd:c7:c9:e8:
         67:f4:5c:ec:95:ae:96:87:7d:8b:d6:ce:ef:4f:5b:fd:be:0a:
         30:0c:e4:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:45:44 2025 by rpki-client