Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7d7323-9e84-4f87-b5f9-286a828dd7d5/1/nTXgMBWeVx-qvTebUsHZoa77FEQ.mft
File:                     nTXgMBWeVx-qvTebUsHZoa77FEQ.mft (raw, json)
Hash identifier:          E8Fr+Cuiu7TnuaPgC4+TWxhiUclzeqmXIeHzhtUJMYs=
Subject key identifier:   B2:4C:C0:A2:FA:E8:E4:45:64:2B:B9:C8:A6:67:F3:19:98:B6:A3:43
Authority key identifier: 9D:35:E0:30:15:9E:57:1F:AA:BD:37:9B:52:C1:D9:A1:AE:FB:14:44
Certificate issuer:       /CN=9d35e030159e571faabd379b52c1d9a1aefb1444
Certificate serial:       01984852B45A78A109DDF3F08762EB8B9E2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nTXgMBWeVx-qvTebUsHZoa77FEQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/7d7323-9e84-4f87-b5f9-286a828dd7d5/1/nTXgMBWeVx-qvTebUsHZoa77FEQ.mft
Manifest number:          89
Signing time:             Sat 26 Jul 2025 20:00:36 +0000
Manifest this update:     Sat 26 Jul 2025 20:00:36 +0000
Manifest next update:     Sun 27 Jul 2025 20:00:36 +0000
Files and hashes:         1: nTXgMBWeVx-qvTebUsHZoa77FEQ.crl (hash: egCoUaEu3GFeUxmDrU6kVRh1EeKP1HrWedU0OsDqnyM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/7d7323-9e84-4f87-b5f9-286a828dd7d5/1/nTXgMBWeVx-qvTebUsHZoa77FEQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/7d7323-9e84-4f87-b5f9-286a828dd7d5/1/nTXgMBWeVx-qvTebUsHZoa77FEQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nTXgMBWeVx-qvTebUsHZoa77FEQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:52:b4:5a:78:a1:09:dd:f3:f0:87:62:eb:8b:9e:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d35e030159e571faabd379b52c1d9a1aefb1444
        Validity
            Not Before: Jul 26 20:00:36 2025 GMT
            Not After : Jul 27 20:00:36 2025 GMT
        Subject: CN=b24cc0a2fae8e445642bb9c8a667f31998b6a343
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:3a:80:69:3a:0f:92:02:85:76:e2:27:c0:d9:
                    5b:08:a6:89:71:b0:31:d0:02:ac:ad:ff:a4:a8:71:
                    c9:6d:78:e1:0e:31:22:dd:45:89:7b:eb:72:48:b4:
                    3b:44:6e:f2:5e:1c:e5:25:31:11:9c:c7:eb:0b:7d:
                    88:9a:e0:f1:65:2c:47:29:ae:1a:90:3e:bb:ca:f3:
                    58:49:26:06:d5:1f:90:d4:93:15:ad:e3:b0:01:5b:
                    6f:a9:84:be:d7:a6:2d:cd:17:b6:b7:a4:f8:78:c4:
                    2b:96:ae:bd:32:10:b0:fe:2c:04:f8:4d:74:32:7a:
                    98:b0:8b:8f:fe:61:fc:ab:7f:a9:ac:b4:ad:5d:dd:
                    e5:4f:85:c4:b3:de:ce:0e:40:1e:8d:93:49:29:b6:
                    0a:40:76:ec:47:78:11:66:af:58:92:75:f2:a0:08:
                    5d:62:56:5c:24:8c:b5:49:cc:d9:a5:57:12:f8:a8:
                    31:4f:a2:e7:d8:3b:2f:2a:34:dc:81:d1:7e:c4:ab:
                    17:56:52:42:fe:6b:09:5b:d2:cb:36:9f:1d:b6:f7:
                    47:25:fc:a8:28:e2:10:04:64:06:6b:4e:74:42:7d:
                    22:8a:29:99:29:8b:28:7f:ad:81:92:6e:1c:bf:9c:
                    89:7e:49:0f:8c:70:94:3f:43:cb:55:c3:f9:60:86:
                    f0:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:4C:C0:A2:FA:E8:E4:45:64:2B:B9:C8:A6:67:F3:19:98:B6:A3:43
            X509v3 Authority Key Identifier:
                keyid:9D:35:E0:30:15:9E:57:1F:AA:BD:37:9B:52:C1:D9:A1:AE:FB:14:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nTXgMBWeVx-qvTebUsHZoa77FEQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7d7323-9e84-4f87-b5f9-286a828dd7d5/1/nTXgMBWeVx-qvTebUsHZoa77FEQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7d7323-9e84-4f87-b5f9-286a828dd7d5/1/nTXgMBWeVx-qvTebUsHZoa77FEQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:fc:fa:79:4b:4f:02:4b:4e:3b:a6:9f:e9:37:6d:77:5c:e3:
         11:4f:99:bb:52:78:b6:d1:b0:85:3d:64:72:02:d7:0c:57:97:
         9f:42:a8:65:d6:03:35:ec:d3:8a:3f:ba:12:d8:a4:a2:8a:58:
         c6:22:4d:ce:0a:84:3c:37:43:1b:8e:99:5f:e8:5d:bc:4b:55:
         a5:e4:3c:93:fb:b3:85:53:f1:6c:bd:77:b3:16:5d:a7:43:29:
         12:77:f4:3c:3d:2d:75:e2:65:65:43:49:c9:f1:cb:e6:7e:c2:
         d7:fe:86:44:89:d4:9d:9b:a1:4f:5e:60:2d:b1:84:4e:28:85:
         dd:61:ce:c3:64:7a:ef:0e:c5:94:7b:a8:53:04:d8:14:c5:13:
         86:6e:d5:ac:1e:c0:1f:cf:48:e4:80:f6:0e:64:9a:32:f6:77:
         4c:ce:92:cd:cc:65:4b:c5:44:13:db:7d:d2:41:eb:b4:b4:ca:
         1e:e7:b9:b0:29:36:10:f5:a7:3a:8b:ff:18:7d:3c:7c:9f:78:
         9a:14:22:86:ff:ae:33:81:af:a2:e9:57:27:72:4c:9e:5f:82:
         40:45:97:2b:d3:56:00:d6:07:38:e4:40:b9:2c:96:f5:cf:f4:
         28:df:03:73:a0:d4:a9:da:03:16:60:f9:62:7b:d9:a0:9d:04:
         c5:c1:70:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:37:22 2025 by rpki-client