Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/2a942a-f1bf-43e2-b92a-1dec40584806/1/NpHSlQFF3OrADAyk61NtkoZ7ONM.mft
File:                     NpHSlQFF3OrADAyk61NtkoZ7ONM.mft (raw, json)
Hash identifier:          lXP5pviafMYAPgzFmge27Mh2E46XjOCa3GisAXbB92I=
Subject key identifier:   BC:29:61:6B:76:E5:AA:72:CC:23:15:4D:52:A8:DB:A8:BD:8E:1D:AB
Authority key identifier: 36:91:D2:95:01:45:DC:EA:C0:0C:0C:A4:EB:53:6D:92:86:7B:38:D3
Certificate issuer:       /CN=3691d2950145dceac00c0ca4eb536d92867b38d3
Certificate serial:       01984099495AE7B233D476E8CECF3FE26DD5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NpHSlQFF3OrADAyk61NtkoZ7ONM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/2a942a-f1bf-43e2-b92a-1dec40584806/1/NpHSlQFF3OrADAyk61NtkoZ7ONM.mft
Manifest number:          0C4A
Signing time:             Fri 25 Jul 2025 08:00:44 +0000
Manifest this update:     Fri 25 Jul 2025 08:00:44 +0000
Manifest next update:     Sat 26 Jul 2025 08:00:44 +0000
Files and hashes:         1: AYNfqVlSCZxSkottsPIfKriDdHo.roa (hash: DR+WljYSnHEBz/1Nc0C8V29PSzaZP+WZg97TUOW5Zds=)
                          2: I7WvLIen2Qt15jt5djzF4qVwAeA.roa (hash: TDT2LdFRYTW16jzLI/jmwBH74PERZ5uRk6SAxtSvBQc=)
                          3: KX4BdF1jeIPrlBaQXcm4-FxDbVI.roa (hash: Tzk0TQLXuHX7Z8zB6m4PRwPBrghVQJ9zPu5wXgONfUs=)
                          4: Ma-ZL87NKbXOh3PKteMYs4_0CwA.roa (hash: 8ACKMnvKrVu9alfiMw6lXVKm3qwxGI4mZvc+z4si/8c=)
                          5: NpHSlQFF3OrADAyk61NtkoZ7ONM.crl (hash: SNSBShfGj5OR/7ProoQtaXGHcpL9/FcwqBujSo4U+BE=)
                          6: ZdlemGQCA8jrtuYIR9ZFtWke_wc.roa (hash: yL1F1JtC6s6D+a5TG0GVaaYEiJsHRH7GC/1uOa8xe0w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/2a942a-f1bf-43e2-b92a-1dec40584806/1/NpHSlQFF3OrADAyk61NtkoZ7ONM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/2a942a-f1bf-43e2-b92a-1dec40584806/1/NpHSlQFF3OrADAyk61NtkoZ7ONM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NpHSlQFF3OrADAyk61NtkoZ7ONM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Jul 2025 08:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:40:99:49:5a:e7:b2:33:d4:76:e8:ce:cf:3f:e2:6d:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3691d2950145dceac00c0ca4eb536d92867b38d3
        Validity
            Not Before: Jul 25 08:00:44 2025 GMT
            Not After : Jul 26 08:00:44 2025 GMT
        Subject: CN=bc29616b76e5aa72cc23154d52a8dba8bd8e1dab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:af:8a:3f:e1:b4:77:de:84:68:08:31:2b:19:
                    a2:ba:bf:a7:00:99:63:28:44:bf:18:81:d3:6a:24:
                    a9:b7:4e:fc:18:ce:70:b3:e5:62:41:d0:30:5a:19:
                    32:cb:41:99:f8:0a:f8:f2:ed:a9:4b:08:0e:8c:b3:
                    66:62:d1:9e:56:9e:6d:64:c1:4f:88:e9:9e:5f:9e:
                    d2:0b:1d:9e:e6:69:40:f7:4f:90:b3:b0:5b:6d:7f:
                    6c:d2:02:5a:cd:e6:ce:12:e7:1f:23:c7:1e:ec:0d:
                    ad:fb:91:07:e9:06:a9:74:22:36:6e:c3:a4:5f:aa:
                    d7:c7:47:ef:62:9b:15:11:a2:e6:0e:64:45:6d:4a:
                    e8:d9:e1:ac:52:6d:74:b2:6a:a2:d4:a3:54:46:fe:
                    98:aa:85:df:10:2e:e3:90:cd:c6:fc:90:d3:22:f3:
                    95:bf:bf:69:cb:dd:ca:20:8d:20:2f:31:c0:46:48:
                    04:69:9b:ed:79:45:e3:21:db:90:91:26:95:09:6c:
                    b9:08:58:cd:c7:97:89:f1:61:d1:e2:d8:30:0e:9c:
                    50:de:6e:02:e0:c7:81:10:94:9c:bb:bd:0d:e5:6a:
                    9e:bb:79:4f:68:63:58:82:de:c3:68:28:3a:e2:82:
                    d1:14:5e:ef:be:b0:4f:08:5b:2c:18:a9:aa:af:6e:
                    1e:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:29:61:6B:76:E5:AA:72:CC:23:15:4D:52:A8:DB:A8:BD:8E:1D:AB
            X509v3 Authority Key Identifier:
                keyid:36:91:D2:95:01:45:DC:EA:C0:0C:0C:A4:EB:53:6D:92:86:7B:38:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpHSlQFF3OrADAyk61NtkoZ7ONM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2a942a-f1bf-43e2-b92a-1dec40584806/1/NpHSlQFF3OrADAyk61NtkoZ7ONM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2a942a-f1bf-43e2-b92a-1dec40584806/1/NpHSlQFF3OrADAyk61NtkoZ7ONM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:58:5f:24:05:d2:96:d8:92:2e:08:25:06:74:b6:13:a3:0f:
         3c:d0:8d:bc:e3:c9:71:23:bc:3a:76:93:fb:2e:d7:24:57:91:
         6d:98:d4:1a:ed:a6:e4:c4:38:8e:c4:83:94:92:b1:73:ea:ce:
         4c:3c:31:54:b5:41:bf:f3:36:f9:2e:75:90:4c:2a:6d:f4:0f:
         39:28:2b:d4:cc:cb:4a:4b:40:b8:84:9a:a9:1c:1e:09:d1:d5:
         02:6c:26:a4:60:0e:76:96:74:29:4a:9b:71:71:27:de:d1:79:
         d6:9b:e4:84:61:f4:bc:41:d6:02:fc:c6:00:98:6c:8d:00:5a:
         ef:9a:26:82:37:ce:b9:1a:93:58:c5:d6:90:31:ca:85:c6:48:
         9c:71:7c:52:35:e1:77:19:f2:8a:ff:db:7c:3c:64:3d:06:bd:
         b3:d8:ab:8a:72:27:51:47:f6:cb:94:8b:58:32:eb:22:74:23:
         5e:24:5c:fc:b5:76:66:46:d9:77:48:86:0f:0e:d6:c0:37:80:
         ff:f4:12:10:a8:06:3d:24:2c:f5:ad:b5:a0:48:3f:1f:7a:02:
         ad:f8:1e:a3:c2:7f:47:71:8f:1b:2d:bc:6e:bc:21:aa:f8:66:
         4a:c2:df:4d:59:26:c9:62:91:51:5c:6e:d1:1e:9d:95:8e:96:
         c6:ff:38:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 12:44:04 2025 by rpki-client