Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/cdbd0a-68ec-487d-8fea-619281380bc2/1/n2m9-bvSpFl-Js4gv-E4YkytM9w.mft
File:                     n2m9-bvSpFl-Js4gv-E4YkytM9w.mft (raw, json)
Hash identifier:          xTmQgfmq6mupkRKxt1AWve3aQ6a9PNMTxDxBygc3CgI=
Subject key identifier:   DB:FF:85:B7:5D:17:F7:D1:47:4C:EC:BE:A1:80:29:48:A5:3F:A7:95
Authority key identifier: 9F:69:BD:F9:BB:D2:A4:59:7E:26:CE:20:BF:E1:38:62:4C:AD:33:DC
Certificate issuer:       /CN=9f69bdf9bbd2a4597e26ce20bfe138624cad33dc
Certificate serial:       01988B4573126236CC0038A1F3B867F24ED5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n2m9-bvSpFl-Js4gv-E4YkytM9w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/cdbd0a-68ec-487d-8fea-619281380bc2/1/n2m9-bvSpFl-Js4gv-E4YkytM9w.mft
Manifest number:          1627
Signing time:             Fri 08 Aug 2025 20:00:41 +0000
Manifest this update:     Fri 08 Aug 2025 20:00:41 +0000
Manifest next update:     Sat 09 Aug 2025 20:00:41 +0000
Files and hashes:         1: c6IRErIGfaFkFauAsD0yX1D2OJo.roa (hash: xl23q8TaDjC94/sI1Iw9HbGjuwzReW51qdpjOFZcIcI=)
                          2: n2m9-bvSpFl-Js4gv-E4YkytM9w.crl (hash: gpjAzkfle6Z4J121r2vJbBa4C2HNS1G3+3xyYLvoQ2Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/cdbd0a-68ec-487d-8fea-619281380bc2/1/n2m9-bvSpFl-Js4gv-E4YkytM9w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/cdbd0a-68ec-487d-8fea-619281380bc2/1/n2m9-bvSpFl-Js4gv-E4YkytM9w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n2m9-bvSpFl-Js4gv-E4YkytM9w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 20:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:45:73:12:62:36:cc:00:38:a1:f3:b8:67:f2:4e:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f69bdf9bbd2a4597e26ce20bfe138624cad33dc
        Validity
            Not Before: Aug  8 20:00:41 2025 GMT
            Not After : Aug  9 20:00:41 2025 GMT
        Subject: CN=dbff85b75d17f7d1474cecbea1802948a53fa795
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:aa:af:9b:ad:98:d2:cb:5f:02:c6:6c:1b:21:
                    62:d0:89:96:9c:e1:94:7f:54:4d:e8:59:73:b2:91:
                    02:89:1c:d5:51:ed:b3:7a:4e:8b:a6:80:ee:3e:49:
                    6e:d2:78:8d:af:3a:b3:53:44:81:35:89:d4:65:76:
                    e8:1f:93:ae:0a:dd:e8:82:41:a7:82:c6:7c:31:36:
                    39:6b:db:d3:88:1e:a2:81:98:a5:c5:51:5e:8a:24:
                    b4:9f:3d:c9:80:11:18:9f:51:ab:a2:17:18:e9:8e:
                    a9:3c:24:88:b9:b2:cf:9f:55:36:b8:22:35:fe:d6:
                    d4:0a:86:c2:48:14:48:63:41:9e:c2:fd:1c:a5:7d:
                    21:b5:77:33:62:3f:5e:f7:c0:c4:88:36:60:a9:4b:
                    af:ab:7d:ad:db:cd:f2:f0:67:f2:c5:c3:6d:b3:89:
                    ea:20:ee:17:38:f6:e9:9c:cc:25:4f:f8:66:7f:5a:
                    e2:d4:e8:88:fc:c3:d2:ed:25:e7:45:d0:a0:91:a0:
                    22:74:c4:23:a4:be:4c:f6:e4:97:2a:07:ff:ee:4e:
                    94:ac:38:ec:dd:61:b7:52:97:8a:01:49:8e:8e:5b:
                    27:b8:65:d8:48:e6:1d:98:13:4c:b1:42:c9:68:03:
                    48:54:b2:2c:37:a1:48:02:d2:07:56:1a:65:fb:8f:
                    7d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:FF:85:B7:5D:17:F7:D1:47:4C:EC:BE:A1:80:29:48:A5:3F:A7:95
            X509v3 Authority Key Identifier:
                keyid:9F:69:BD:F9:BB:D2:A4:59:7E:26:CE:20:BF:E1:38:62:4C:AD:33:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n2m9-bvSpFl-Js4gv-E4YkytM9w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/cdbd0a-68ec-487d-8fea-619281380bc2/1/n2m9-bvSpFl-Js4gv-E4YkytM9w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/cdbd0a-68ec-487d-8fea-619281380bc2/1/n2m9-bvSpFl-Js4gv-E4YkytM9w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:d2:70:a9:b2:a2:91:e4:51:9e:90:bd:23:63:67:38:1e:cd:
         35:c7:7a:58:47:ab:4b:d8:91:02:31:10:09:1c:34:a3:42:aa:
         2e:fc:8e:91:bf:38:a7:eb:1c:a4:1f:51:fc:ac:0e:99:72:3d:
         38:54:ab:30:11:61:12:85:46:07:82:43:26:ae:22:3a:b8:41:
         da:09:f8:cd:d3:bc:52:e0:cf:72:50:21:43:0a:5f:81:f1:d3:
         74:ca:e3:40:84:93:5a:0a:61:52:cc:46:3e:8f:02:52:4c:6c:
         dd:38:25:86:fe:57:64:7f:41:59:56:9e:c0:d4:22:4f:e6:d1:
         84:2c:2a:42:18:77:e3:27:97:a3:67:fa:bf:6e:5d:9d:67:ae:
         83:93:76:3a:5c:fd:4c:60:a3:fa:8f:9a:c9:8d:1a:0c:43:e3:
         05:54:62:3f:d1:0c:3a:41:a6:3a:62:5a:e3:07:52:7d:2e:59:
         9b:47:24:b8:a9:85:b6:ae:0d:d9:47:5d:87:d4:cf:7b:2f:6f:
         3a:8d:c3:25:8e:ac:a4:67:16:06:a8:c9:74:09:29:5d:4c:6c:
         73:ca:c1:cf:32:67:43:8f:69:69:95:a2:b4:2b:6c:be:22:40:
         c0:63:07:9a:d9:ab:29:94:3c:a0:2d:6e:04:5f:f9:79:f7:24:
         a2:61:e1:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:43:54 2025 by rpki-client