Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/79a605-6072-4142-856e-d8e1835693cd/1/nrKJ89nhO-Z6JEtyvSSUWywyCmM.mft
File:                     nrKJ89nhO-Z6JEtyvSSUWywyCmM.mft (raw, json)
Hash identifier:          KF5epSNkI9TQXMVfB+Jnf7bXLkjWKR8MCR6yuCbmkoI=
Subject key identifier:   6A:21:18:1A:7E:1E:4C:96:F7:3F:B2:5B:1B:30:79:4D:0E:3A:21:5F
Authority key identifier: 9E:B2:89:F3:D9:E1:3B:E6:7A:24:4B:72:BD:24:94:5B:2C:32:0A:63
Certificate issuer:       /CN=9eb289f3d9e13be67a244b72bd24945b2c320a63
Certificate serial:       01988AA07C66CCAF92AF706DCE2DF83B44BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nrKJ89nhO-Z6JEtyvSSUWywyCmM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/79a605-6072-4142-856e-d8e1835693cd/1/nrKJ89nhO-Z6JEtyvSSUWywyCmM.mft
Manifest number:          0FFF
Signing time:             Fri 08 Aug 2025 17:00:30 +0000
Manifest this update:     Fri 08 Aug 2025 17:00:30 +0000
Manifest next update:     Sat 09 Aug 2025 17:00:30 +0000
Files and hashes:         1: ftSo4Eg6cJOGHafsmdK7G5PlnAg.roa (hash: 6neyZwVBnZqx4smqdcitrT/v+77yfwQ7GJ0kV3y5qqs=)
                          2: nrKJ89nhO-Z6JEtyvSSUWywyCmM.crl (hash: m/x0yw51xyZxeMCyOtGQZIBdgJUH/TwniGUh1hh5r/M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/79a605-6072-4142-856e-d8e1835693cd/1/nrKJ89nhO-Z6JEtyvSSUWywyCmM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/79a605-6072-4142-856e-d8e1835693cd/1/nrKJ89nhO-Z6JEtyvSSUWywyCmM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nrKJ89nhO-Z6JEtyvSSUWywyCmM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 17:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8a:a0:7c:66:cc:af:92:af:70:6d:ce:2d:f8:3b:44:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9eb289f3d9e13be67a244b72bd24945b2c320a63
        Validity
            Not Before: Aug  8 17:00:30 2025 GMT
            Not After : Aug  9 17:00:30 2025 GMT
        Subject: CN=6a21181a7e1e4c96f73fb25b1b30794d0e3a215f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:39:f3:63:c1:fc:f2:06:cd:04:01:83:a9:16:
                    9e:87:2a:22:43:db:7a:f6:ca:7d:a2:b2:6d:e7:bc:
                    df:06:8a:2a:cb:73:3c:4f:3b:02:57:c9:4f:2b:a2:
                    a9:74:2a:a8:f9:4f:05:75:91:e7:e6:92:56:3c:4b:
                    b9:a5:36:da:33:ee:6c:8a:24:0c:da:db:4a:15:87:
                    87:89:0f:b3:b9:9e:96:8b:c7:ec:3a:28:91:47:87:
                    0b:87:6a:34:d9:66:8b:72:d6:55:a8:dd:be:e0:d0:
                    5d:24:f3:39:6e:84:5d:3b:72:a4:e8:15:a1:e1:23:
                    c0:33:27:6b:02:da:a1:8f:d4:66:59:35:3c:a4:d3:
                    67:0c:34:c0:10:43:75:fe:41:9c:c4:dc:a3:cb:06:
                    cd:2f:f9:5d:a6:a2:cb:4f:83:66:27:73:bb:cb:83:
                    99:48:9f:b5:52:88:6f:af:ac:b0:44:d4:96:51:85:
                    2d:54:77:d1:7f:72:16:ad:32:76:30:28:bf:6c:fe:
                    b4:8d:ee:cb:3e:32:25:db:d8:34:39:e0:bc:9d:59:
                    6a:00:61:bb:fc:2a:60:95:62:63:ab:65:cb:41:fb:
                    f5:45:71:00:c6:cb:da:9d:9a:55:c7:3f:b7:04:42:
                    e3:0a:1c:62:e4:d1:34:d2:63:b4:5e:af:6b:7c:bb:
                    ac:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:21:18:1A:7E:1E:4C:96:F7:3F:B2:5B:1B:30:79:4D:0E:3A:21:5F
            X509v3 Authority Key Identifier:
                keyid:9E:B2:89:F3:D9:E1:3B:E6:7A:24:4B:72:BD:24:94:5B:2C:32:0A:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nrKJ89nhO-Z6JEtyvSSUWywyCmM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/79a605-6072-4142-856e-d8e1835693cd/1/nrKJ89nhO-Z6JEtyvSSUWywyCmM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/79a605-6072-4142-856e-d8e1835693cd/1/nrKJ89nhO-Z6JEtyvSSUWywyCmM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:e5:e9:f6:97:f1:e8:8a:f3:c7:3a:ad:b1:35:dd:65:23:de:
         36:87:1a:85:e5:72:76:14:47:22:9d:82:67:d6:53:49:ca:2a:
         29:ea:e0:ef:f3:ac:4f:0f:ea:e3:0d:c3:fd:c3:7b:39:70:b2:
         c5:05:ec:c7:5d:dc:6c:91:83:ee:84:a7:0f:1c:d3:bb:80:23:
         8a:e6:8d:95:88:e2:a4:02:7a:fd:e2:65:90:e6:2c:74:0e:f3:
         03:bf:fb:1a:7c:d8:2d:10:d6:70:35:e1:bd:50:73:8d:55:a7:
         ca:c2:ad:e7:76:77:95:56:63:b1:20:f0:23:e3:aa:0f:a6:70:
         cc:1f:34:16:a9:1c:e2:a4:78:d4:f6:12:51:ba:be:c4:bf:c3:
         ca:7f:31:0f:a4:a7:d5:16:1d:60:ff:0f:50:52:51:a2:a0:8a:
         09:d7:59:64:84:14:cc:61:4e:c1:b9:aa:c6:9e:60:6f:93:94:
         2d:3b:7f:7f:86:4f:9b:9a:45:81:45:ab:6a:87:0c:7f:eb:a0:
         1d:ef:76:9e:3d:90:49:e9:b0:ac:0a:1a:4d:00:71:79:29:1b:
         3d:dc:34:50:49:55:14:89:20:dc:4a:36:76:35:46:b7:24:84:
         5b:b5:04:bb:c3:93:89:22:4b:a7:37:7c:9e:e4:e8:44:2a:46:
         25:36:c1:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 03:01:41 2025 by rpki-client