Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/f3e67a-cfd7-4745-82b7-2d90c7fd0d60/1/NMSVb4VnESWILFdM0uLSA6q97QU.mft
File:                     NMSVb4VnESWILFdM0uLSA6q97QU.mft (raw, json)
Hash identifier:          qExdZRgG83N90VSB7pUfOtiL1VUCwIa9LdHVQEeI+xo=
Subject key identifier:   0B:A8:AD:A3:9F:EB:D0:02:A6:F9:FB:83:B9:6D:FB:6B:8D:27:0D:48
Authority key identifier: 34:C4:95:6F:85:67:11:25:88:2C:57:4C:D2:E2:D2:03:AA:BD:ED:05
Certificate issuer:       /CN=34c4956f85671125882c574cd2e2d203aabded05
Certificate serial:       01984777972FC13D22EC41452B7D2C87016D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NMSVb4VnESWILFdM0uLSA6q97QU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/f3e67a-cfd7-4745-82b7-2d90c7fd0d60/1/NMSVb4VnESWILFdM0uLSA6q97QU.mft
Manifest number:          15FF
Signing time:             Sat 26 Jul 2025 16:01:16 +0000
Manifest this update:     Sat 26 Jul 2025 16:01:16 +0000
Manifest next update:     Sun 27 Jul 2025 16:01:16 +0000
Files and hashes:         1: NMSVb4VnESWILFdM0uLSA6q97QU.crl (hash: V4vUWaSxYmqdn+mPoicIfxf5s6xkVEDy/njDOfC53oE=)
                          2: xtLurjJMXgwePFKUT7vd_Bs7y4g.roa (hash: 9QOnyZtRBS25fvMRFyNZdyW0R5uMOP/pXW6ujcGtyGI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/f3e67a-cfd7-4745-82b7-2d90c7fd0d60/1/NMSVb4VnESWILFdM0uLSA6q97QU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/f3e67a-cfd7-4745-82b7-2d90c7fd0d60/1/NMSVb4VnESWILFdM0uLSA6q97QU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NMSVb4VnESWILFdM0uLSA6q97QU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:47:77:97:2f:c1:3d:22:ec:41:45:2b:7d:2c:87:01:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34c4956f85671125882c574cd2e2d203aabded05
        Validity
            Not Before: Jul 26 16:01:16 2025 GMT
            Not After : Jul 27 16:01:16 2025 GMT
        Subject: CN=0ba8ada39febd002a6f9fb83b96dfb6b8d270d48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:8a:27:0e:a3:7c:c6:3e:17:29:2f:1c:d6:ab:
                    96:31:a3:e9:5e:e9:6b:a5:16:85:0d:10:94:d1:a9:
                    89:65:f2:df:21:f8:d0:cc:49:f3:da:21:77:ab:c3:
                    c6:50:80:a9:d1:18:90:cb:b5:86:dc:8d:09:5a:65:
                    ae:74:51:3e:a2:43:28:03:30:42:70:26:7d:e1:4b:
                    74:80:57:1f:70:4e:9e:95:46:4e:2a:49:76:a5:a1:
                    6d:6d:5e:29:67:c8:16:e5:cf:f3:41:41:0e:e7:5d:
                    75:dd:bf:33:0b:cb:c7:1e:37:17:98:e3:28:ea:96:
                    c1:dd:64:ef:84:f5:c6:b9:32:f5:79:9f:1d:46:1e:
                    86:96:f1:a7:16:43:6e:5d:9e:18:d7:f9:a5:a7:83:
                    9a:d6:43:c2:1f:6a:f3:a0:27:d0:46:ba:cb:4c:2c:
                    5f:87:5c:02:98:c5:f3:14:3e:cd:54:4f:ae:a4:b1:
                    ee:6f:0e:ac:2e:f0:0f:f8:8f:3d:e5:9f:a7:bf:0e:
                    bf:d0:ac:12:c4:63:16:ac:a9:6f:a5:35:b1:18:e3:
                    f5:5b:ce:60:ae:49:7d:26:bb:9b:6e:25:45:5c:f4:
                    79:d6:d2:3c:5f:c6:c9:f8:aa:d8:d7:c2:d2:92:bb:
                    a4:76:02:e9:c1:b1:71:7d:1b:4f:b8:2b:b7:04:b8:
                    a0:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:A8:AD:A3:9F:EB:D0:02:A6:F9:FB:83:B9:6D:FB:6B:8D:27:0D:48
            X509v3 Authority Key Identifier:
                keyid:34:C4:95:6F:85:67:11:25:88:2C:57:4C:D2:E2:D2:03:AA:BD:ED:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NMSVb4VnESWILFdM0uLSA6q97QU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f3e67a-cfd7-4745-82b7-2d90c7fd0d60/1/NMSVb4VnESWILFdM0uLSA6q97QU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f3e67a-cfd7-4745-82b7-2d90c7fd0d60/1/NMSVb4VnESWILFdM0uLSA6q97QU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:25:10:b8:77:48:f2:69:e6:9a:b1:2e:01:f2:35:40:3c:49:
         72:1c:f9:98:44:d8:5e:34:b1:52:3b:18:01:83:e2:8b:95:3b:
         dc:72:dc:e3:9b:49:82:e6:47:a5:fb:bc:dd:fa:bd:75:16:9a:
         e5:51:0a:7c:31:24:5d:ff:d6:3f:87:6f:06:85:7a:4a:39:d1:
         5c:21:23:65:31:d3:78:0d:53:93:1d:26:dc:c8:5b:93:48:b1:
         a7:52:ff:ae:6b:f7:72:47:35:de:46:e6:cd:9b:6f:43:de:06:
         b7:76:50:e6:1e:c0:34:cc:5e:ee:4a:75:96:48:b8:a0:f2:c4:
         c9:58:97:3d:80:7d:81:a3:14:8e:58:b1:53:49:6e:a1:c0:d4:
         d0:5c:5f:eb:fd:21:ea:fb:45:09:13:d1:8a:8b:6f:ad:94:b7:
         ea:ca:04:1c:36:71:1e:c3:e2:54:e2:bc:ca:aa:4b:87:11:91:
         bc:92:8f:0d:a6:72:a5:03:18:0c:da:91:72:ee:31:67:a6:3d:
         41:2c:65:a4:14:aa:97:4c:39:c7:64:af:71:9c:6d:ec:ab:f1:
         b8:89:00:9e:3c:18:ed:ea:b2:47:3d:ac:dc:08:72:c7:95:f9:
         c9:b9:56:6f:89:69:c2:1e:81:86:f3:44:6a:34:1f:97:94:77:
         a6:ea:57:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 19:56:30 2025 by rpki-client