Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/ce21a2-e6d7-4461-a62c-67e8b2654bc6/1/nqPS_roNTk70k6MLRLZakOXg_FU.mft
File:                     nqPS_roNTk70k6MLRLZakOXg_FU.mft (raw, json)
Hash identifier:          E356GX4D2XwvPszWlPkWifSrlLLWYaSKWhjQIN0Wddo=
Subject key identifier:   9C:B8:A5:89:B0:51:1C:FF:97:1F:F5:6D:07:C7:58:75:CE:F2:7A:F9
Authority key identifier: 9E:A3:D2:FE:BA:0D:4E:4E:F4:93:A3:0B:44:B6:5A:90:E5:E0:FC:55
Certificate issuer:       /CN=9ea3d2feba0d4e4ef493a30b44b65a90e5e0fc55
Certificate serial:       019827479ACC920AD270757638E10DCEF878
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nqPS_roNTk70k6MLRLZakOXg_FU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/ce21a2-e6d7-4461-a62c-67e8b2654bc6/1/nqPS_roNTk70k6MLRLZakOXg_FU.mft
Manifest number:          0F
Signing time:             Sun 20 Jul 2025 10:01:00 +0000
Manifest this update:     Sun 20 Jul 2025 10:01:00 +0000
Manifest next update:     Mon 21 Jul 2025 10:01:00 +0000
Files and hashes:         1: 7Dc1lcO56PAR1GzSk2LxIHMn3l0.roa (hash: DzsTRMm8CyoNgGRWl2s9AqtE2tYIihOhSQ3bx478Qoc=)
                          2: nqPS_roNTk70k6MLRLZakOXg_FU.crl (hash: BlG9Op91AWxb+a0gdF7Th1ShiwHHQ4I1O9E1kx5/Ufo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/ce21a2-e6d7-4461-a62c-67e8b2654bc6/1/nqPS_roNTk70k6MLRLZakOXg_FU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/ce21a2-e6d7-4461-a62c-67e8b2654bc6/1/nqPS_roNTk70k6MLRLZakOXg_FU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nqPS_roNTk70k6MLRLZakOXg_FU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Jul 2025 06:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:27:47:9a:cc:92:0a:d2:70:75:76:38:e1:0d:ce:f8:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ea3d2feba0d4e4ef493a30b44b65a90e5e0fc55
        Validity
            Not Before: Jul 20 10:01:00 2025 GMT
            Not After : Jul 21 10:01:00 2025 GMT
        Subject: CN=9cb8a589b0511cff971ff56d07c75875cef27af9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:81:34:4c:72:0a:89:e4:6c:31:a8:ee:7d:26:
                    f8:0c:c4:f4:78:46:e6:42:e1:4f:3d:de:3b:30:60:
                    4e:f5:35:5a:5f:7e:82:d7:c4:ae:e9:3b:e4:34:d7:
                    fe:46:26:de:75:89:e4:af:16:e8:d3:be:da:14:a5:
                    84:65:73:18:30:cd:8f:d1:48:fc:68:6d:51:3e:d5:
                    31:25:ca:8d:65:e4:bb:87:60:c6:a5:a2:ac:75:44:
                    cc:65:cf:c9:bc:05:87:55:f4:05:ec:62:a7:ca:56:
                    5b:fe:b7:68:d3:79:e9:60:ef:a0:bf:a5:7e:0a:4b:
                    0d:de:9e:ca:c1:88:8d:d0:d0:66:eb:87:4e:d6:c9:
                    5a:c7:3b:15:83:f9:f8:6c:b1:1d:c4:64:75:b6:32:
                    61:1a:75:59:90:06:f9:7d:be:05:68:b2:a3:61:53:
                    20:4f:05:fa:42:ec:f3:39:ef:8e:95:42:b6:49:cd:
                    9c:76:6a:db:e5:ab:72:5e:85:3e:18:3a:8e:45:64:
                    81:5b:f6:ec:c8:75:13:af:d7:86:93:df:8f:8a:74:
                    4d:f5:56:82:7f:95:90:9c:14:7d:b2:31:7e:dd:63:
                    16:7c:75:10:4c:2e:f4:85:69:40:b5:61:c9:59:af:
                    63:08:f6:9a:7e:fa:51:58:e3:70:62:26:fc:20:a5:
                    8d:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:B8:A5:89:B0:51:1C:FF:97:1F:F5:6D:07:C7:58:75:CE:F2:7A:F9
            X509v3 Authority Key Identifier:
                keyid:9E:A3:D2:FE:BA:0D:4E:4E:F4:93:A3:0B:44:B6:5A:90:E5:E0:FC:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nqPS_roNTk70k6MLRLZakOXg_FU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/ce21a2-e6d7-4461-a62c-67e8b2654bc6/1/nqPS_roNTk70k6MLRLZakOXg_FU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/ce21a2-e6d7-4461-a62c-67e8b2654bc6/1/nqPS_roNTk70k6MLRLZakOXg_FU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:4f:7a:f9:90:91:d1:c6:a7:e3:5c:7e:a3:45:b2:84:e1:2b:
         ab:2b:a5:53:f7:ff:3a:6e:76:8f:54:72:0f:a2:91:7f:b3:5b:
         ff:b3:43:e9:87:d8:64:29:46:8b:d5:9c:e6:1b:7a:54:4e:4c:
         03:12:8a:3a:6a:67:3b:57:f2:0c:00:b4:42:d0:48:b2:5a:29:
         de:f9:aa:d1:ec:2b:1f:32:94:96:d7:f5:e3:61:89:c5:55:42:
         e6:f5:61:ec:94:ac:c4:54:f8:72:22:8a:89:8d:a7:e8:10:ea:
         84:36:a0:81:e0:a4:66:9e:5d:e7:2f:12:42:f1:14:d5:7f:83:
         ad:14:f1:72:e2:ca:f8:e6:d4:41:39:29:6a:f2:73:8e:2f:4f:
         30:10:49:65:93:6f:07:a9:1f:e1:69:52:16:b3:2b:16:53:78:
         1d:80:f8:ac:34:cf:9c:61:d5:3e:9d:30:66:b1:b5:bc:c5:55:
         c7:a2:79:25:ba:36:9a:35:6b:9d:3d:df:01:0f:51:bf:9d:6e:
         6a:31:34:7e:6d:60:aa:6e:5b:0e:0d:4e:1a:1a:22:4b:84:50:
         65:16:ed:61:1a:a0:f0:de:bc:f3:60:7e:f7:2f:d2:1f:32:c3:
         c8:40:01:23:9d:8e:a3:bb:27:d5:6c:ed:3e:29:f4:f5:86:45:
         0b:2c:52:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 16:20:37 2025 by rpki-client