Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/1146ec-03ed-4025-8aa6-7a63590a06bd/1/NuoqvtiQjzJ_huKwrxXUgxBJzqo.mft
File:                     NuoqvtiQjzJ_huKwrxXUgxBJzqo.mft (raw, json)
Hash identifier:          UqNmYIeUT8QjbdiCKaoYAxeGiJW0OykR7OgI4BMUqXM=
Subject key identifier:   C0:84:21:A7:E2:F3:6B:87:80:E6:81:8A:50:38:83:14:24:3A:52:F5
Authority key identifier: 36:EA:2A:BE:D8:90:8F:32:7F:86:E2:B0:AF:15:D4:83:10:49:CE:AA
Certificate issuer:       /CN=36ea2abed8908f327f86e2b0af15d4831049ceaa
Certificate serial:       0199221EFE052B4938A2C3417061CC916984
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NuoqvtiQjzJ_huKwrxXUgxBJzqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/1146ec-03ed-4025-8aa6-7a63590a06bd/1/NuoqvtiQjzJ_huKwrxXUgxBJzqo.mft
Manifest number:          1670
Signing time:             Sun 07 Sep 2025 03:01:20 +0000
Manifest this update:     Sun 07 Sep 2025 03:01:20 +0000
Manifest next update:     Mon 08 Sep 2025 03:01:20 +0000
Files and hashes:         1: NuoqvtiQjzJ_huKwrxXUgxBJzqo.crl (hash: EOoXm9LE3K7RsZicC5QkAi/8Y9OEsyvBu3sdhdCxTo8=)
                          2: jyQjff39PkjIcb2c4y6sicxo6PU.roa (hash: NTGQ8Vsi7SBxb0wiOjPR2Eb0JAGTh/a1kL30gt2n6ww=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/1146ec-03ed-4025-8aa6-7a63590a06bd/1/NuoqvtiQjzJ_huKwrxXUgxBJzqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/1146ec-03ed-4025-8aa6-7a63590a06bd/1/NuoqvtiQjzJ_huKwrxXUgxBJzqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NuoqvtiQjzJ_huKwrxXUgxBJzqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 03:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:1e:fe:05:2b:49:38:a2:c3:41:70:61:cc:91:69:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36ea2abed8908f327f86e2b0af15d4831049ceaa
        Validity
            Not Before: Sep  7 03:01:20 2025 GMT
            Not After : Sep  8 03:01:20 2025 GMT
        Subject: CN=c08421a7e2f36b8780e6818a50388314243a52f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:42:05:e3:10:3a:3e:40:b9:4e:c1:e7:46:90:
                    df:b3:f5:81:71:54:3a:ab:78:5c:38:e3:c0:45:00:
                    30:b2:73:37:62:77:d8:c6:94:63:f5:1a:58:e8:0c:
                    2b:54:02:a8:e1:90:c4:88:67:93:92:01:cf:18:53:
                    36:91:d2:24:4e:57:6a:9c:10:cd:7f:e4:31:c4:7c:
                    45:7c:50:64:55:fe:f8:5b:29:aa:6e:b4:04:70:71:
                    e6:71:e2:93:38:e0:a3:81:92:63:9d:d1:5f:cf:0c:
                    50:00:59:93:05:83:6d:29:fd:bb:0f:9e:f6:76:7b:
                    50:ef:21:a4:01:9a:39:07:44:21:a7:26:3a:76:b3:
                    ea:11:61:bd:fd:44:f0:55:9f:d1:91:fe:c3:89:a3:
                    9f:44:87:4e:01:95:90:98:2d:f2:1b:18:a5:74:62:
                    06:4a:50:01:9e:fb:54:dc:6a:52:7c:b4:57:29:53:
                    d7:5c:55:70:e8:b5:b1:68:c7:75:62:15:47:d0:bb:
                    3f:90:40:e5:dc:f0:50:28:05:68:ab:03:a6:e7:7f:
                    d1:7e:c3:15:49:ed:3c:f1:f3:72:c5:2a:81:f0:bf:
                    99:cf:8f:7f:1c:7f:db:c1:d9:f4:92:68:1b:52:1e:
                    e6:55:bb:cf:05:27:0d:7a:17:c1:a0:cf:51:8b:78:
                    f2:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:84:21:A7:E2:F3:6B:87:80:E6:81:8A:50:38:83:14:24:3A:52:F5
            X509v3 Authority Key Identifier:
                keyid:36:EA:2A:BE:D8:90:8F:32:7F:86:E2:B0:AF:15:D4:83:10:49:CE:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NuoqvtiQjzJ_huKwrxXUgxBJzqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1146ec-03ed-4025-8aa6-7a63590a06bd/1/NuoqvtiQjzJ_huKwrxXUgxBJzqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1146ec-03ed-4025-8aa6-7a63590a06bd/1/NuoqvtiQjzJ_huKwrxXUgxBJzqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:c9:aa:e6:61:5c:f4:12:ac:e6:9a:34:cf:cd:a0:77:87:2b:
         4b:b1:a3:78:5d:75:bd:86:c4:8c:d6:83:e4:05:d3:dc:61:d3:
         b1:d4:32:af:cb:c5:60:ed:64:d1:51:c4:24:32:bc:b3:2a:c2:
         52:d2:2f:91:17:f6:e8:f5:e2:40:2f:52:47:01:33:f3:dd:19:
         29:31:e1:ef:a9:4c:0c:26:87:ef:18:b2:dc:38:74:9e:36:9c:
         af:14:a8:29:a4:d9:22:7f:12:ea:36:dc:36:66:e3:06:fb:b5:
         d3:c7:94:3a:d6:4f:42:4e:2d:c9:e9:67:16:c2:5d:49:ec:0d:
         29:ff:21:d2:e1:70:11:dc:42:00:35:ae:61:0c:e9:90:5a:4c:
         01:56:b9:9d:b3:f0:94:90:06:25:4e:6a:68:cb:ea:ca:6c:02:
         6c:d3:47:58:74:74:5d:cf:20:2d:2d:e0:78:ba:b4:93:e2:a5:
         53:df:c9:78:d4:37:91:d9:ce:9a:a9:52:9a:b2:c3:dc:57:d7:
         f7:46:d5:2b:00:93:bb:2b:0f:f8:26:74:52:91:75:77:c8:06:
         0b:83:43:2b:6f:1b:f7:d3:ec:bc:73:28:78:f8:c2:46:4a:68:
         02:20:8b:f5:2d:18:b4:95:8d:de:ee:03:51:b9:e1:ff:d8:9f:
         30:82:39:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:57:05 2025 by rpki-client