Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.mft
File:                     Nq8EHRLErbZvjBYRPJphR9AjiNk.mft (raw, json)
Hash identifier:          Iz3dZINQYFr4oR5KJ6s2/g3tdSR5fL8s3sPJGFqJVgc=
Subject key identifier:   77:C4:48:F2:08:5B:9E:A3:1A:F4:09:A6:D3:1C:23:8E:45:3C:90:06
Authority key identifier: 36:AF:04:1D:12:C4:AD:B6:6F:8C:16:11:3C:9A:61:47:D0:23:88:D9
Certificate issuer:       /CN=36af041d12c4adb66f8c16113c9a6147d02388d9
Certificate serial:       0198955BC84366DC9770B32D6E84042F0C9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nq8EHRLErbZvjBYRPJphR9AjiNk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.mft
Manifest number:          0F77
Signing time:             Sun 10 Aug 2025 19:01:16 +0000
Manifest this update:     Sun 10 Aug 2025 19:01:16 +0000
Manifest next update:     Mon 11 Aug 2025 19:01:16 +0000
Files and hashes:         1: Nq8EHRLErbZvjBYRPJphR9AjiNk.crl (hash: h6xwrjiMI8+c4Cx7VWZruwYWr70aRh8o5K3TjPQQQQU=)
                          2: nxVkwWxp31G9Nhk5RnHhT1dH-NE.roa (hash: dlhfhOwY+Ae+4z4M/Srqh6E06sqatloTn5dl72qTwng=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Nq8EHRLErbZvjBYRPJphR9AjiNk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 17:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:95:5b:c8:43:66:dc:97:70:b3:2d:6e:84:04:2f:0c:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36af041d12c4adb66f8c16113c9a6147d02388d9
        Validity
            Not Before: Aug 10 19:01:16 2025 GMT
            Not After : Aug 11 19:01:16 2025 GMT
        Subject: CN=77c448f2085b9ea31af409a6d31c238e453c9006
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:f3:ae:7f:e7:48:1f:4e:7c:de:b7:b9:59:2b:
                    18:5b:e4:7c:4d:61:8a:49:05:e3:b9:21:4c:a6:87:
                    d9:88:2a:27:06:f3:a8:a6:3a:8c:e6:aa:1e:2a:b5:
                    76:2e:43:e8:6a:3f:d0:3d:d8:7b:90:33:05:d8:78:
                    f4:43:40:6b:b1:fc:da:83:68:f0:62:89:6a:ba:ae:
                    a7:07:d7:df:87:8c:b0:73:19:ca:f3:07:5c:6f:b3:
                    07:b8:c0:f7:5e:94:ec:f3:51:53:3d:4b:00:ff:30:
                    01:26:d5:ca:c6:10:04:c4:bd:26:3a:79:c9:cd:e3:
                    ed:ee:e2:7f:00:7f:05:85:c7:1c:3e:19:84:97:f9:
                    96:9a:7d:08:36:9e:15:54:19:45:0b:1b:6e:13:eb:
                    67:b9:3a:bd:1c:17:d5:34:37:19:fe:14:a5:44:5a:
                    1b:76:a9:2a:95:4f:20:42:2c:2d:12:7a:e4:e8:e1:
                    a5:c6:4b:8e:2b:d2:87:19:1f:46:e3:09:27:55:67:
                    ed:2f:07:7b:c4:53:12:97:f9:1e:39:c0:51:cf:ae:
                    62:7e:35:ab:98:e9:3f:db:9f:04:98:26:cd:c3:10:
                    f2:27:37:d9:95:a4:29:16:94:8c:11:dc:56:b3:f7:
                    49:3c:d4:7a:fe:22:06:af:0a:02:0c:66:36:72:4a:
                    bc:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:C4:48:F2:08:5B:9E:A3:1A:F4:09:A6:D3:1C:23:8E:45:3C:90:06
            X509v3 Authority Key Identifier:
                keyid:36:AF:04:1D:12:C4:AD:B6:6F:8C:16:11:3C:9A:61:47:D0:23:88:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nq8EHRLErbZvjBYRPJphR9AjiNk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7a542d-719e-46d0-a5cc-061dd681332c/1/Nq8EHRLErbZvjBYRPJphR9AjiNk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:12:4a:7c:ad:cd:09:1d:2d:07:e5:91:49:7f:74:a4:95:46:
         1a:f0:ac:6f:8a:a9:8d:dc:92:54:5b:81:be:e6:e2:1b:2b:dc:
         ab:ba:a9:fc:8c:82:59:02:fe:48:4d:a6:3a:a8:68:9c:00:9b:
         4c:7e:4e:56:17:27:66:d7:46:ab:7e:79:f4:53:a7:8e:7c:49:
         a3:61:31:2a:7f:9f:f9:1f:1c:07:f7:84:27:9c:ce:8e:2f:da:
         54:cd:c3:ac:c0:2d:4e:a9:d0:17:fd:5c:2c:dd:cc:76:bb:af:
         cc:29:e0:f7:70:85:ed:02:4b:6c:38:8c:a3:b3:0f:35:95:50:
         2b:30:f5:02:77:64:e2:ac:15:88:b7:e8:87:52:cf:b2:ee:f2:
         b2:4a:c6:58:82:e3:64:68:4b:21:4c:09:e3:4c:37:c2:ac:e7:
         66:86:f2:b0:5c:2b:28:04:ae:89:f1:f5:24:07:14:38:58:81:
         42:0d:7f:b2:26:41:99:0c:31:a9:20:f9:ad:3a:ec:ea:bc:63:
         9f:44:89:c1:53:64:15:da:d1:b2:6a:88:86:14:c2:69:09:95:
         75:f4:db:98:6f:39:ca:59:83:91:c9:bf:11:81:50:de:0f:db:
         02:a9:ab:28:8b:a4:cd:ac:fe:38:f7:05:78:50:a9:25:02:e0:
         51:30:4b:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 21:02:30 2025 by rpki-client