Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.mft
File:                     Nxi3NDSb8yfZRTuWUB5EsZLlUUI.mft (raw, json)
Hash identifier:          6hq6I+2KhPTcs7QlEWyIm9sloSCPj34ivbgEdx03m5o=
Subject key identifier:   25:3E:CA:DC:D6:3E:C0:60:50:68:FE:97:BA:4E:FB:22:C5:67:79:53
Authority key identifier: 37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42
Certificate issuer:       /CN=3718b734349bf327d9453b96501e44b192e55142
Certificate serial:       019842502D56800CF0CF5B5815432C5568E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.mft
Manifest number:          1633
Signing time:             Fri 25 Jul 2025 16:00:07 +0000
Manifest this update:     Fri 25 Jul 2025 16:00:07 +0000
Manifest next update:     Sat 26 Jul 2025 16:00:07 +0000
Files and hashes:         1: 0XMKEILxys2yOp8HzJuPdvbOz8w.roa (hash: NaH8fDkPBBg5hUhIvVpSAKaOVqcS6CyyPloD7NXZcJc=)
                          2: 2pr-_P6iDqjAxA7czCmuypqm4EU.roa (hash: ej7V7a6TRJZtAHiPijn6nzDCvVHx84y+/K94PPrq0S8=)
                          3: 6Wce0HwyXHqQ5XvowobWiCGASj8.roa (hash: JFU8RjnJrDHjFA6pQUpW2/JnNtPldCW7iPpp3L9hrfw=)
                          4: 7ew9vmcgcgJuvHxbbgCDhgBggzg.roa (hash: u0wbp7PqNlKFQlgee1VKfFdKJWs/LztnZMwBMRcyX9U=)
                          5: GgUE_XL4Sq39Xxf8zIW_JumJGGM.roa (hash: XcS1ZuCgKYC4lujI/f/yKgFd5if0KehDM2OJ7bBb2dY=)
                          6: Nxi3NDSb8yfZRTuWUB5EsZLlUUI.crl (hash: OiM4P+2dlI3d6RPWXrY3d0WghX2n/BA9DUM8LfOhPfw=)
                          7: tqu-QanjX6tyJHx__ZdrkRcFQsk.roa (hash: OLKkbSnqqo0RLnA2/zbv4ebHR3Sjd16V0KLb7Bt5pzw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Jul 2025 16:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:42:50:2d:56:80:0c:f0:cf:5b:58:15:43:2c:55:68:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3718b734349bf327d9453b96501e44b192e55142
        Validity
            Not Before: Jul 25 16:00:07 2025 GMT
            Not After : Jul 26 16:00:07 2025 GMT
        Subject: CN=253ecadcd63ec0605068fe97ba4efb22c5677953
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:13:21:34:fb:24:22:b8:14:67:40:98:49:b8:
                    9e:95:bb:1c:26:19:fa:af:0f:f1:03:7b:96:29:94:
                    75:60:d6:6b:07:f1:64:c9:4f:41:ed:7d:ae:f1:d6:
                    59:b2:f7:61:8b:65:ca:c2:fe:7a:15:c3:92:3e:22:
                    4e:10:d5:71:ff:7f:82:da:50:b1:64:39:1e:0d:3e:
                    dd:74:96:d8:ac:0a:9a:41:2a:3b:ab:4c:d2:83:13:
                    ae:25:c6:5b:23:a8:25:31:af:6e:f7:78:68:cb:49:
                    7f:bb:bd:02:37:58:1b:7a:07:e4:80:80:35:de:05:
                    d0:df:15:c5:32:ed:01:bb:9b:07:71:e8:58:bc:ad:
                    e0:8d:70:36:3c:24:af:f6:dc:67:78:3a:50:7d:75:
                    15:18:2d:4e:12:16:34:ed:e0:01:12:98:f7:fb:60:
                    50:a4:22:0b:8d:fa:5d:45:a0:67:84:4f:93:41:2f:
                    7c:84:8a:fa:f0:de:aa:2c:26:a6:b2:e2:79:1d:7b:
                    e4:f9:05:5f:16:fc:98:27:d1:19:70:6d:5a:1e:f4:
                    91:c8:95:67:b2:02:e5:cb:96:3f:7e:ab:14:d2:a5:
                    75:60:01:f0:a4:a5:ee:f1:ec:23:2f:ac:20:45:ba:
                    90:f6:69:e2:0d:d2:12:57:02:0b:91:24:7b:fe:66:
                    e7:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:3E:CA:DC:D6:3E:C0:60:50:68:FE:97:BA:4E:FB:22:C5:67:79:53
            X509v3 Authority Key Identifier:
                keyid:37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:3c:26:65:c2:07:a3:78:6e:ea:4f:ff:da:0f:f5:1b:97:d4:
         f4:d2:79:cc:c9:3b:fc:09:be:f0:27:78:8e:09:3a:27:7d:cb:
         06:fd:6a:2d:79:9c:81:a0:b4:98:27:40:c6:77:76:65:21:16:
         5c:d6:78:fe:61:a2:ec:77:20:b8:52:d5:01:be:dd:22:f1:ef:
         2e:95:be:8a:99:10:f0:0b:d3:f9:da:cc:06:7f:52:cf:5e:f8:
         ba:35:72:b6:54:af:5d:ad:65:d4:3f:6e:ec:99:fe:86:07:5b:
         38:62:3f:45:95:8b:80:55:ea:8d:d2:85:28:0c:ee:23:fe:d3:
         80:d3:46:89:fe:45:9c:00:dd:ce:be:cf:ca:22:f2:93:c5:e3:
         08:0d:9a:62:dd:3b:95:4d:96:c1:ba:9c:98:8d:f2:b3:b1:3c:
         25:a3:23:fe:cb:ef:c1:36:c8:ec:31:06:b0:f9:ab:db:02:38:
         5c:09:70:97:6c:61:38:43:c7:bb:cb:16:de:d6:fe:e9:52:99:
         72:63:63:44:b7:48:2d:c2:47:7f:e7:cd:25:87:53:30:b1:1c:
         1f:7e:ab:bd:1c:87:c1:2d:e3:31:26:6e:2f:39:1c:2d:3d:bb:
         e2:8f:5c:38:07:ec:99:67:31:ce:97:1c:07:55:18:3b:a9:51:
         1a:88:05:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 18:01:40 2025 by rpki-client