Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/381125-0248-4ebc-a74d-b8dad6e5c3bf/1/N0wmF6Ny5GbpjUJTLdC9jlzdmT0.mft
File:                     N0wmF6Ny5GbpjUJTLdC9jlzdmT0.mft (raw, json)
Hash identifier:          JLfcZ5qO9DW7VJyzg1z/ErQbFwfGEo59CIjT/RPJjH4=
Subject key identifier:   54:55:EE:4F:89:C8:44:62:B8:C5:77:03:59:40:17:90:97:43:F8:25
Authority key identifier: 37:4C:26:17:A3:72:E4:66:E9:8D:42:53:2D:D0:BD:8E:5C:DD:99:3D
Certificate issuer:       /CN=374c2617a372e466e98d42532dd0bd8e5cdd993d
Certificate serial:       01993870983AAD9AFAD7EDFE0CEF5D7B3CDC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N0wmF6Ny5GbpjUJTLdC9jlzdmT0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/381125-0248-4ebc-a74d-b8dad6e5c3bf/1/N0wmF6Ny5GbpjUJTLdC9jlzdmT0.mft
Manifest number:          1012
Signing time:             Thu 11 Sep 2025 11:02:06 +0000
Manifest this update:     Thu 11 Sep 2025 11:02:06 +0000
Manifest next update:     Fri 12 Sep 2025 11:02:06 +0000
Files and hashes:         1: 2M9xuwu5AndhxSfR2ZXlPgIY5_M.roa (hash: 0EPkYtcWzG6eUp2dhcekU5xNDT1dEtWLrLrA3RfkTu0=)
                          2: N0wmF6Ny5GbpjUJTLdC9jlzdmT0.crl (hash: uOdj69dXT3aubQa1Kg5ODhaE4zcPJ4c5dni3sfEFMsY=)
                          3: SS113d4UMKkPVDPWmlqWck-x24E.roa (hash: wgyXZKEbfAwwDp/GZ/OmNWIPZihNhq5vxfdpz8GgLCA=)
                          4: tce_jftJ9E_4KJ_uPWaE-OosXF4.roa (hash: wJZcfb6ZEWBCJ/uKNt0y+u5y+6aoB2gLD29sHouunZQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/381125-0248-4ebc-a74d-b8dad6e5c3bf/1/N0wmF6Ny5GbpjUJTLdC9jlzdmT0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/381125-0248-4ebc-a74d-b8dad6e5c3bf/1/N0wmF6Ny5GbpjUJTLdC9jlzdmT0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N0wmF6Ny5GbpjUJTLdC9jlzdmT0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Sep 2025 11:02:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:38:70:98:3a:ad:9a:fa:d7:ed:fe:0c:ef:5d:7b:3c:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=374c2617a372e466e98d42532dd0bd8e5cdd993d
        Validity
            Not Before: Sep 11 11:02:06 2025 GMT
            Not After : Sep 12 11:02:06 2025 GMT
        Subject: CN=5455ee4f89c84462b8c57703594017909743f825
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:1a:7f:af:98:62:f6:0a:7b:b1:73:d3:fe:2d:
                    13:62:86:12:41:21:d7:dd:ed:e4:c3:3b:cc:3e:d3:
                    1c:c4:42:b8:9d:4d:de:cc:9f:f7:0f:4c:8d:63:9c:
                    8a:a1:db:04:f8:b7:17:d0:61:53:6f:e7:98:83:bc:
                    6e:15:37:88:1d:90:a0:fd:c9:6c:c7:71:eb:47:78:
                    43:f5:a0:1a:f0:27:7f:03:0a:85:8f:ec:3e:9f:ed:
                    42:d4:13:66:35:ec:5d:df:df:e3:fe:22:09:40:70:
                    92:f7:d6:cd:fe:dc:9f:f3:53:e1:22:3b:67:83:09:
                    3d:ff:1c:65:78:30:ed:1b:e7:0b:d4:5b:93:48:56:
                    82:63:12:f8:48:34:47:d0:b5:4e:9a:ca:88:66:60:
                    1c:de:b3:9a:59:8e:54:79:47:23:db:b5:cf:c4:ea:
                    fe:63:f6:d1:42:2f:3d:a0:28:62:07:8f:ff:a0:c1:
                    f2:6e:8f:3f:eb:a9:b5:19:27:0e:49:1c:70:ad:1a:
                    4f:fe:a1:85:9f:e4:e3:e4:16:2b:81:2a:12:68:27:
                    64:56:a1:5e:23:b7:82:81:fa:54:98:c3:2b:bd:35:
                    f1:40:f3:59:64:c0:09:25:82:64:5e:68:92:f2:56:
                    ae:a5:51:bc:b7:68:1d:bd:d7:37:41:19:9a:31:e3:
                    16:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:55:EE:4F:89:C8:44:62:B8:C5:77:03:59:40:17:90:97:43:F8:25
            X509v3 Authority Key Identifier:
                keyid:37:4C:26:17:A3:72:E4:66:E9:8D:42:53:2D:D0:BD:8E:5C:DD:99:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0wmF6Ny5GbpjUJTLdC9jlzdmT0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/381125-0248-4ebc-a74d-b8dad6e5c3bf/1/N0wmF6Ny5GbpjUJTLdC9jlzdmT0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/381125-0248-4ebc-a74d-b8dad6e5c3bf/1/N0wmF6Ny5GbpjUJTLdC9jlzdmT0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:ae:64:5a:96:ab:55:a9:89:18:56:03:97:59:53:e2:ee:87:
         92:87:54:72:7a:08:a4:6f:78:e2:cd:41:ab:e1:ea:8e:16:96:
         c3:e8:2b:3c:46:2b:44:71:a9:2b:5c:fe:0c:40:de:7c:f5:e8:
         18:e0:93:d1:43:58:d3:d1:c2:d6:33:7b:5d:30:f3:1c:1a:cd:
         48:52:81:04:d7:d3:dc:36:79:ed:86:11:1d:c0:c4:f4:bf:6e:
         f6:a7:db:37:08:52:90:80:b8:fa:8e:26:96:b1:0a:63:d9:35:
         4c:9c:e3:a0:70:a5:7e:32:4d:03:e5:c2:dc:83:09:50:94:0b:
         26:04:14:ed:e9:67:8c:a2:90:aa:7c:58:52:ff:82:7b:0a:83:
         ad:4f:ef:85:5e:26:85:c5:50:d1:5d:a2:d7:bf:ff:d9:15:3e:
         3f:94:85:50:d0:f1:ff:c1:26:52:a8:a0:43:9a:bf:56:10:09:
         c4:9d:c9:69:7e:20:8b:e2:f6:cd:b6:6a:3a:19:29:96:67:3a:
         ab:4c:53:73:a5:7e:d6:5e:5b:b4:6c:c1:e9:70:c0:26:fe:f4:
         a2:32:c6:df:a1:4e:7a:57:39:16:75:c3:c4:77:f3:7c:1b:99:
         46:3f:1d:fd:c1:8a:cb:53:a0:c3:f0:6d:ad:96:41:54:21:7c:
         73:47:74:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 21:32:11 2025 by rpki-client