Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/d379db-d90e-43b9-a214-18e36bddc21c/1/nn-k1x_2Hd11Klbl6coxaXqVKzQ.mft
File:                     nn-k1x_2Hd11Klbl6coxaXqVKzQ.mft (raw, json)
Hash identifier:          0zkedezBUJ9CXAjm45kgYbCQT00aPYDHyyiwlFbAgL4=
Subject key identifier:   9B:EE:9C:38:5A:98:1D:5F:5F:69:0D:5E:FE:55:30:BD:57:9A:F0:7B
Authority key identifier: 9E:7F:A4:D7:1F:F6:1D:DD:75:2A:56:E5:E9:CA:31:69:7A:95:2B:34
Certificate issuer:       /CN=9e7fa4d71ff61ddd752a56e5e9ca31697a952b34
Certificate serial:       01984A78164AACA784D99F3FC9E5D56C4C7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nn-k1x_2Hd11Klbl6coxaXqVKzQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/d379db-d90e-43b9-a214-18e36bddc21c/1/nn-k1x_2Hd11Klbl6coxaXqVKzQ.mft
Manifest number:          1603
Signing time:             Sun 27 Jul 2025 06:00:40 +0000
Manifest this update:     Sun 27 Jul 2025 06:00:40 +0000
Manifest next update:     Mon 28 Jul 2025 06:00:40 +0000
Files and hashes:         1: V0WuD8VRAXpoH9WCkjCY95N9EPk.roa (hash: Cr3UcnKUrQny+o+zBLdp0vThzL2+rWNIwyqe8f+7Rnw=)
                          2: nn-k1x_2Hd11Klbl6coxaXqVKzQ.crl (hash: IZz2PBFxJJTmdhFMNWtD4W3n7gfGD6jKgxfW4ncu2g0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/d379db-d90e-43b9-a214-18e36bddc21c/1/nn-k1x_2Hd11Klbl6coxaXqVKzQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/d379db-d90e-43b9-a214-18e36bddc21c/1/nn-k1x_2Hd11Klbl6coxaXqVKzQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nn-k1x_2Hd11Klbl6coxaXqVKzQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:78:16:4a:ac:a7:84:d9:9f:3f:c9:e5:d5:6c:4c:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e7fa4d71ff61ddd752a56e5e9ca31697a952b34
        Validity
            Not Before: Jul 27 06:00:40 2025 GMT
            Not After : Jul 28 06:00:40 2025 GMT
        Subject: CN=9bee9c385a981d5f5f690d5efe5530bd579af07b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d4:18:12:e1:a8:45:30:d9:f4:37:ab:31:51:
                    9e:14:28:68:65:51:42:78:dc:a1:5d:bb:88:45:09:
                    a5:3f:f6:b2:87:88:42:86:06:7f:2b:6e:9d:67:c1:
                    aa:15:12:9f:e8:09:54:08:c8:a3:41:25:70:7e:01:
                    ba:ef:6a:95:0e:58:89:32:f0:5f:be:27:37:75:90:
                    27:c3:b0:35:cb:c2:f4:fb:ac:0d:4b:d1:9b:3a:2d:
                    81:5b:0e:e1:ad:86:7a:3c:d7:ac:60:98:cf:ff:43:
                    f2:34:84:a2:06:1a:55:b1:77:9e:be:c3:1f:fd:a3:
                    60:6a:c9:41:87:0a:11:ea:85:83:fd:b0:d9:60:97:
                    aa:a1:3f:62:fb:8c:e3:51:f0:36:07:63:b3:e3:1a:
                    a1:a1:5d:67:87:bc:8b:75:84:33:88:5b:d8:94:d3:
                    56:ef:a0:c2:28:fd:c7:3f:03:eb:e2:f3:16:a1:d0:
                    58:cb:da:6f:71:4b:d0:85:0a:d8:18:13:4b:4d:67:
                    fd:42:b9:12:65:1b:ce:90:15:6a:4a:00:fb:9a:54:
                    55:69:d8:fe:e1:5a:0f:1f:17:0d:58:9d:18:44:5e:
                    bb:96:44:4c:6f:29:b5:54:e9:db:b2:fe:96:6b:13:
                    56:5e:c4:1d:3a:63:d9:61:bd:44:77:12:1d:d5:9d:
                    8d:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:EE:9C:38:5A:98:1D:5F:5F:69:0D:5E:FE:55:30:BD:57:9A:F0:7B
            X509v3 Authority Key Identifier:
                keyid:9E:7F:A4:D7:1F:F6:1D:DD:75:2A:56:E5:E9:CA:31:69:7A:95:2B:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nn-k1x_2Hd11Klbl6coxaXqVKzQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d379db-d90e-43b9-a214-18e36bddc21c/1/nn-k1x_2Hd11Klbl6coxaXqVKzQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d379db-d90e-43b9-a214-18e36bddc21c/1/nn-k1x_2Hd11Klbl6coxaXqVKzQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:ea:86:d6:1b:db:53:f4:be:77:82:39:aa:fd:04:88:0d:dc:
         37:9f:97:73:39:f2:34:0a:35:ca:e4:52:60:69:9b:bb:76:2e:
         9c:d4:bd:f6:42:2b:e4:16:2d:ae:9b:a3:32:f5:74:52:11:f9:
         4f:16:19:e4:6b:82:84:fa:9e:42:fd:34:e4:f8:84:f9:4a:a1:
         b8:6d:ad:64:e8:98:cd:9a:10:3b:77:79:67:75:75:40:41:af:
         f5:6f:b7:2b:07:47:28:60:6e:6e:cc:4f:8b:7e:3a:25:8e:ed:
         c0:dc:e8:b8:6f:50:b7:c5:1e:a0:c3:d1:2c:27:ff:e3:99:c4:
         09:f4:c8:4d:70:e8:f6:5a:f8:c7:81:b1:80:df:50:ab:41:df:
         93:c1:f0:c3:a0:b8:1f:fa:b4:cc:e0:21:30:6e:4a:07:45:7b:
         c2:3f:a1:02:c9:21:cc:c6:cb:5d:ad:fb:62:ce:1a:2c:d1:57:
         92:e4:38:6f:d1:2a:3d:3d:81:8a:cd:d3:9a:45:b4:c8:dd:ed:
         ca:5d:09:9b:5c:c6:6f:74:4a:86:3c:5c:1c:68:9f:fd:1e:ea:
         8a:52:85:ab:54:38:ff:0c:69:06:ee:1f:c6:56:0a:34:a5:78:
         78:c1:2a:0c:33:66:c9:b9:08:c8:da:29:53:e8:08:36:77:05:
         c8:ba:bf:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:51:31 2025 by rpki-client