Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/a4ff33-b290-4307-afc8-f520a7d71ef5/1/n68L-T_EOB__fnqoa0B2wDMkL_o.mft
File:                     n68L-T_EOB__fnqoa0B2wDMkL_o.mft (raw, json)
Hash identifier:          tMpfmqlYi4TqCzKJfJQcgRWmunEnhkKO4qN6Zq47KDw=
Subject key identifier:   E7:36:51:AA:AE:6F:D5:06:C8:0A:FD:F7:C1:7B:33:65:98:AD:A5:B7
Authority key identifier: 9F:AF:0B:F9:3F:C4:38:1F:FF:7E:7A:A8:6B:40:76:C0:33:24:2F:FA
Certificate issuer:       /CN=9faf0bf93fc4381fff7e7aa86b4076c033242ffa
Certificate serial:       01992D483F5A777477DD92B8115ADB537B71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n68L-T_EOB__fnqoa0B2wDMkL_o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/a4ff33-b290-4307-afc8-f520a7d71ef5/1/n68L-T_EOB__fnqoa0B2wDMkL_o.mft
Manifest number:          1681
Signing time:             Tue 09 Sep 2025 07:02:13 +0000
Manifest this update:     Tue 09 Sep 2025 07:02:13 +0000
Manifest next update:     Wed 10 Sep 2025 07:02:13 +0000
Files and hashes:         1: OVVR3FCbfp3jjB7Sg0nyhLl-uEU.roa (hash: Zbh2pSj5uCxLOZOhjwLbd9C4j+pE0Ww3t3Q7C+NOMwU=)
                          2: lDWyFXs9JgGOhDKJmAMUd3zIK5w.roa (hash: 2q/dpzMOt8Z4VXz7M3w9S5I7SSYKdZBx6BiCTtjP4qg=)
                          3: n2XhVDe2ggLEf7MqKLu4m2oiDCI.roa (hash: s/3Lc9LGACFlvJc5xu/AbuESJL8OCx+FeCaTIr0OPuE=)
                          4: n68L-T_EOB__fnqoa0B2wDMkL_o.crl (hash: DbOX7tUMQ67E1InpHUhzcDOy+VYHtLpcJoAI2byPWAA=)
                          5: sU28xKNoz0ebnELHinDQhAfTGOk.roa (hash: LcOsotfaJ4XCbUKW+GqA754WNTnRpE0EUj8P0SYZfGM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/a4ff33-b290-4307-afc8-f520a7d71ef5/1/n68L-T_EOB__fnqoa0B2wDMkL_o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/a4ff33-b290-4307-afc8-f520a7d71ef5/1/n68L-T_EOB__fnqoa0B2wDMkL_o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n68L-T_EOB__fnqoa0B2wDMkL_o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 10 Sep 2025 07:02:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:2d:48:3f:5a:77:74:77:dd:92:b8:11:5a:db:53:7b:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9faf0bf93fc4381fff7e7aa86b4076c033242ffa
        Validity
            Not Before: Sep  9 07:02:13 2025 GMT
            Not After : Sep 10 07:02:13 2025 GMT
        Subject: CN=e73651aaae6fd506c80afdf7c17b336598ada5b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:04:c9:7f:a2:86:fe:b4:36:08:2b:1e:0e:6a:
                    20:57:5d:84:a1:e0:cc:8d:a0:b0:3c:d5:5c:d4:39:
                    8a:af:c9:51:b4:cf:c8:17:6b:61:f1:62:5b:e9:96:
                    ad:0e:83:77:57:ff:d4:f5:64:82:28:1d:f0:bf:32:
                    83:9d:3f:78:31:d9:4f:d9:0e:97:a0:08:48:e9:38:
                    ee:52:fa:7e:c8:a5:8a:2d:d7:19:d1:3a:d6:93:31:
                    92:5a:e7:82:4b:9b:15:53:48:3b:e4:fd:15:cb:94:
                    5f:db:c6:f2:74:55:5c:f0:fd:b4:5a:b7:bf:be:ad:
                    fb:e6:68:75:55:a8:9c:0d:71:2d:7b:81:4b:2f:c8:
                    8f:0b:c6:11:ab:e4:c6:0d:29:d9:ed:6d:29:a2:77:
                    bf:a9:4b:64:42:01:52:a2:97:57:27:a5:a0:ec:38:
                    d4:a3:78:92:a0:3c:d8:66:08:f9:96:65:17:d9:8e:
                    7e:a2:2e:78:2c:f8:9e:b1:15:72:bf:53:38:dc:b1:
                    00:3f:bb:2e:cd:5c:c0:90:97:3d:14:0b:99:2c:ce:
                    f6:83:c3:c8:5e:8f:dc:fe:19:e9:e5:02:09:5e:c8:
                    6f:8f:e1:f8:53:46:f8:71:bb:d4:da:9b:61:65:64:
                    28:e1:35:51:95:55:58:40:64:74:a6:e3:0d:5a:1e:
                    0e:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:36:51:AA:AE:6F:D5:06:C8:0A:FD:F7:C1:7B:33:65:98:AD:A5:B7
            X509v3 Authority Key Identifier:
                keyid:9F:AF:0B:F9:3F:C4:38:1F:FF:7E:7A:A8:6B:40:76:C0:33:24:2F:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n68L-T_EOB__fnqoa0B2wDMkL_o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a4ff33-b290-4307-afc8-f520a7d71ef5/1/n68L-T_EOB__fnqoa0B2wDMkL_o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a4ff33-b290-4307-afc8-f520a7d71ef5/1/n68L-T_EOB__fnqoa0B2wDMkL_o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:60:85:39:aa:0d:a2:d9:13:45:76:1a:c8:b7:b5:ac:a2:7d:
         37:f9:88:31:13:4a:fb:ad:fb:b2:ce:d6:8a:39:e2:32:2c:73:
         2b:d9:0a:6d:8a:37:81:d6:63:92:33:ac:eb:67:fc:82:77:b9:
         a3:b9:e1:0f:4c:5a:a9:00:fb:03:2f:09:38:f6:24:cf:db:e3:
         b9:de:35:2b:9c:16:5e:47:61:1f:9d:82:f1:27:87:35:66:7b:
         cf:02:60:58:cb:db:cd:67:89:4c:39:f2:dd:3b:68:36:d5:9f:
         b0:df:17:4c:da:01:a4:92:39:b0:27:d7:1d:d6:52:ad:c3:7e:
         3f:fa:00:4c:62:72:a0:de:99:c4:20:05:b6:71:76:ce:01:95:
         94:56:92:14:df:fa:39:10:73:6b:bd:bc:78:88:8e:22:9d:2d:
         16:78:bc:18:52:1d:b8:96:82:3c:3e:f7:04:0b:e1:ef:c6:58:
         57:72:33:4d:2f:52:11:a3:b5:ae:59:31:fa:aa:7a:9c:33:6d:
         f3:0f:08:28:9e:63:70:ee:ff:d1:9c:e6:b7:66:9b:e1:82:51:
         b7:72:4b:43:cb:9d:98:96:ee:73:1d:11:3c:1f:63:5a:b6:89:
         d6:5b:06:38:e6:de:c6:ef:42:ae:ff:c6:45:12:21:d8:3e:3f:
         6f:ad:63:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZktSD9ad3R33ZK4EVrbU3txMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmYWYwYmY5M2ZjNDM4MWZmZjdlN2FhODZiNDA3NmMwMzMy
NDJmZmEwHhcNMjUwOTA5MDcwMjEzWhcNMjUwOTEwMDcwMjEzWjAzMTEwLwYDVQQD
EyhlNzM2NTFhYWFlNmZkNTA2YzgwYWZkZjdjMTdiMzM2NTk4YWRhNWI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzwTJf6KG/rQ2CCseDmogV12EoeDM
jaCwPNVc1DmKr8lRtM/IF2th8WJb6ZatDoN3V//U9WSCKB3wvzKDnT94MdlP2Q6X
oAhI6TjuUvp+yKWKLdcZ0TrWkzGSWueCS5sVU0g75P0Vy5Rf28bydFVc8P20Wre/
vq375mh1VaicDXEte4FLL8iPC8YRq+TGDSnZ7W0pone/qUtkQgFSopdXJ6Wg7DjU
o3iSoDzYZgj5lmUX2Y5+oi54LPiesRVyv1M43LEAP7suzVzAkJc9FAuZLM72g8PI
Xo/c/hnp5QIJXshvj+H4U0b4cbvU2pthZWQo4TVRlVVYQGR0puMNWh4OzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOc2Uaqub9UGyAr998F7M2WYraW3MB8GA1UdIwQY
MBaAFJ+vC/k/xDgf/356qGtAdsAzJC/6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjY4TC1UX0VPQl9fZm5xb2EwQjJ3RE1rTF9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9hNGZmMzMtYjI5MC00MzA3LWFmYzgt
ZjUyMGE3ZDcxZWY1LzEvbjY4TC1UX0VPQl9fZm5xb2EwQjJ3RE1rTF9vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9hNGZmMzMtYjI5MC00MzA3LWFmYzgtZjUyMGE3ZDcxZWY1
LzEvbjY4TC1UX0VPQl9fZm5xb2EwQjJ3RE1rTF9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACWCFOaoN
otkTRXYayLe1rKJ9N/mIMRNK+637ss7WijniMixzK9kKbYo3gdZjkjOs62f8gne5
o7nhD0xaqQD7Ay8JOPYkz9vjud41K5wWXkdhH52C8SeHNWZ7zwJgWMvbzWeJTDny
3TtoNtWfsN8XTNoBpJI5sCfXHdZSrcN+P/oATGJyoN6ZxCAFtnF2zgGVlFaSFN/6
ORBza728eIiOIp0tFni8GFIduJaCPD73BAvh78ZYV3IzTS9SEaO1rlkx+qp6nDNt
8w8IKJ5jcO7/0Zzmt2ab4YJRt3JLQ8udmJbucx0RPB9jWraJ1lsGOObexu9Crv/G
RRIh2D4/b61jbA==
-----END CERTIFICATE-----
Generated at Tue Sep 9 10:33:02 2025 by rpki-client