Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/9d17bb-6d16-4e6d-be2d-371fc5c80950/1/nKxPYfRotyACqyXxEuUgEe14LM4.mft
File:                     nKxPYfRotyACqyXxEuUgEe14LM4.mft (raw, json)
Hash identifier:          9JbQ31c+TVo6OeZDx1OwTfXuoVjItXB7wt9LsAcwF8c=
Subject key identifier:   22:03:D1:10:BB:89:FE:01:7B:E1:6F:24:D2:41:8F:2A:7F:12:2A:EB
Authority key identifier: 9C:AC:4F:61:F4:68:B7:20:02:AB:25:F1:12:E5:20:11:ED:78:2C:CE
Certificate issuer:       /CN=9cac4f61f468b72002ab25f112e52011ed782cce
Certificate serial:       019879AD82FF125FF4E1E938D0E8CC3BC98C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nKxPYfRotyACqyXxEuUgEe14LM4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/9d17bb-6d16-4e6d-be2d-371fc5c80950/1/nKxPYfRotyACqyXxEuUgEe14LM4.mft
Manifest number:          0D91
Signing time:             Tue 05 Aug 2025 10:01:11 +0000
Manifest this update:     Tue 05 Aug 2025 10:01:11 +0000
Manifest next update:     Wed 06 Aug 2025 10:01:11 +0000
Files and hashes:         1: 1-ctCBWTM9YEJSb9HauIUKPqVwas.roa (hash: F+Ql00NFkP6u64/1DSJGoJFeSPLMPLBWzAqmumx63J4=)
                          2: nKxPYfRotyACqyXxEuUgEe14LM4.crl (hash: JGw0CII4PrczdvZIdrhh+PhjA1VXksDtCu3SjrXHkNg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/9d17bb-6d16-4e6d-be2d-371fc5c80950/1/nKxPYfRotyACqyXxEuUgEe14LM4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/9d17bb-6d16-4e6d-be2d-371fc5c80950/1/nKxPYfRotyACqyXxEuUgEe14LM4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nKxPYfRotyACqyXxEuUgEe14LM4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 10:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:79:ad:82:ff:12:5f:f4:e1:e9:38:d0:e8:cc:3b:c9:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cac4f61f468b72002ab25f112e52011ed782cce
        Validity
            Not Before: Aug  5 10:01:11 2025 GMT
            Not After : Aug  6 10:01:11 2025 GMT
        Subject: CN=2203d110bb89fe017be16f24d2418f2a7f122aeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:26:f5:14:cb:7b:0f:7f:17:91:40:76:c4:45:
                    01:f2:9e:14:55:11:62:1a:44:93:fd:4f:80:c6:57:
                    de:37:05:a6:58:c3:37:61:50:ad:cc:9e:0c:97:0f:
                    c3:f3:34:27:28:04:1d:cd:f8:07:98:8a:ea:f3:41:
                    65:f3:8a:66:29:ba:f4:d6:ee:19:3d:c1:5a:3c:61:
                    f1:e3:26:6b:df:78:72:d0:9d:75:c3:f2:5c:45:ad:
                    16:f0:51:e8:4c:fa:39:28:07:e2:af:cf:16:f9:01:
                    ee:a3:7d:26:7e:27:a9:b0:f3:19:a9:84:97:00:85:
                    56:68:a3:86:38:10:85:05:c5:84:ba:f9:6f:1e:bd:
                    82:52:31:46:c5:03:16:a2:c9:ee:26:57:e8:51:7c:
                    2d:b8:37:b7:8f:92:4c:1c:c7:95:55:fd:74:83:be:
                    c1:6c:dc:1e:e2:25:d1:b4:e8:1b:9c:1c:52:75:4c:
                    85:b9:7d:10:3e:43:bc:4e:79:0c:b2:e4:13:1c:0a:
                    e9:36:92:a7:d9:d2:1a:9c:88:ac:e8:28:37:c0:76:
                    89:f6:f8:6e:1e:41:84:30:2c:f4:46:f5:c9:7f:c6:
                    5c:35:91:fa:d9:5f:6a:f4:0c:f5:83:00:7e:8e:74:
                    5a:19:42:9b:43:0d:dd:84:16:a4:c7:be:50:e0:10:
                    59:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:03:D1:10:BB:89:FE:01:7B:E1:6F:24:D2:41:8F:2A:7F:12:2A:EB
            X509v3 Authority Key Identifier:
                keyid:9C:AC:4F:61:F4:68:B7:20:02:AB:25:F1:12:E5:20:11:ED:78:2C:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nKxPYfRotyACqyXxEuUgEe14LM4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/9d17bb-6d16-4e6d-be2d-371fc5c80950/1/nKxPYfRotyACqyXxEuUgEe14LM4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/9d17bb-6d16-4e6d-be2d-371fc5c80950/1/nKxPYfRotyACqyXxEuUgEe14LM4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:9c:0a:91:dc:1b:57:a6:f8:84:95:e3:24:b0:16:5c:7c:a0:
         08:bd:a1:2f:0b:f5:2c:b1:d8:4a:ac:30:b1:0c:93:11:3b:03:
         ef:32:54:42:a0:fa:2a:fc:54:1a:49:8e:d4:b4:44:e5:3c:99:
         f6:8a:60:c4:d1:49:67:c1:de:f1:e7:a0:67:61:da:32:c7:d7:
         a1:75:ef:d9:74:8f:c6:dc:f5:a4:b1:78:53:37:d4:f0:83:99:
         fd:f3:d6:7c:0d:6c:a7:36:63:34:98:7a:4f:74:58:ff:c7:10:
         11:de:99:f1:29:3c:23:a7:e9:d1:e9:fd:4f:42:df:05:11:e9:
         3c:3b:6f:4e:44:43:5a:03:97:74:8a:db:b6:ce:21:96:f6:04:
         57:99:c4:a7:62:5e:ba:77:7f:01:d8:6f:af:b2:41:f9:19:b7:
         9c:f9:6d:04:64:a6:a9:12:3f:6f:47:c3:96:50:c9:95:37:c8:
         12:ac:ae:bf:23:99:55:0a:b9:b4:0c:ee:c6:04:45:0f:78:f1:
         8d:0b:f9:82:82:95:20:c9:37:5d:de:c9:a1:24:17:b2:c3:70:
         0d:4b:f5:7e:4f:33:dd:e1:5a:4f:24:00:2d:5f:d6:b4:c7:2f:
         a2:6b:10:6f:68:0f:99:63:c9:ea:ee:40:df:67:92:c3:6c:7e:
         c2:8e:fd:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:24:20 2025 by rpki-client