Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/ff25d7-5ffa-4686-8326-69d79c9d0721/1/nfbRY1k964rv8HL-yljm8_HE5-U.mft
File:                     nfbRY1k964rv8HL-yljm8_HE5-U.mft (raw, json)
Hash identifier:          3uFg0m3cCmw6wmkPEdDn5Fho94Ebll3tvXmIeouBl98=
Subject key identifier:   B9:31:5F:E4:98:CA:30:47:25:4E:81:8A:2C:FA:FA:AF:38:CA:58:EF
Authority key identifier: 9D:F6:D1:63:59:3D:EB:8A:EF:F0:72:FE:CA:58:E6:F3:F1:C4:E7:E5
Certificate issuer:       /CN=9df6d163593deb8aeff072feca58e6f3f1c4e7e5
Certificate serial:       0198880E3969CA6C86C0E5D2CD1E17F3B84E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nfbRY1k964rv8HL-yljm8_HE5-U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/ff25d7-5ffa-4686-8326-69d79c9d0721/1/nfbRY1k964rv8HL-yljm8_HE5-U.mft
Manifest number:          0CBD
Signing time:             Fri 08 Aug 2025 05:01:30 +0000
Manifest this update:     Fri 08 Aug 2025 05:01:30 +0000
Manifest next update:     Sat 09 Aug 2025 05:01:30 +0000
Files and hashes:         1: XM057xIBl4X4QJASTmfkRwaiNaE.roa (hash: vZ1H1/yQjb9EVPL0oyydRTCpB/F5AEPyVx/M+2z5CZ0=)
                          2: nfbRY1k964rv8HL-yljm8_HE5-U.crl (hash: r6v0bqV85TZQjis5zXPEzteFGQx0pKqyyNCke2BZyDs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/ff25d7-5ffa-4686-8326-69d79c9d0721/1/nfbRY1k964rv8HL-yljm8_HE5-U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/ff25d7-5ffa-4686-8326-69d79c9d0721/1/nfbRY1k964rv8HL-yljm8_HE5-U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfbRY1k964rv8HL-yljm8_HE5-U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 05:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:88:0e:39:69:ca:6c:86:c0:e5:d2:cd:1e:17:f3:b8:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9df6d163593deb8aeff072feca58e6f3f1c4e7e5
        Validity
            Not Before: Aug  8 05:01:30 2025 GMT
            Not After : Aug  9 05:01:30 2025 GMT
        Subject: CN=b9315fe498ca3047254e818a2cfafaaf38ca58ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:36:05:be:2d:ce:35:d5:bd:8f:2a:38:0c:e9:
                    f5:bc:ed:d4:e5:44:45:6d:6e:73:5b:41:26:28:cb:
                    37:37:22:92:1c:8d:ad:17:99:64:fc:3a:a0:24:e6:
                    07:03:70:b6:40:c5:05:d0:c2:91:26:d0:cf:77:a4:
                    be:0f:f4:16:5d:39:db:80:f7:b1:22:8a:3f:4f:6b:
                    ba:d3:b1:00:e8:bf:92:0c:46:88:cc:4c:75:b7:6e:
                    50:b5:bc:61:61:59:64:0e:98:6b:64:33:c9:41:8f:
                    5d:f4:43:57:79:ae:8d:0d:6d:df:1c:e5:66:2b:d6:
                    cb:37:b6:65:d1:09:f4:56:f2:5e:da:7d:a6:77:29:
                    9b:a2:47:9c:85:77:03:4a:3f:4c:a7:8b:cd:4b:e4:
                    2e:b6:27:4c:cb:73:5e:25:9b:2f:10:a3:7b:65:51:
                    f1:44:e4:c8:fe:44:ed:62:e6:67:1d:9a:17:f5:1e:
                    08:82:32:a6:f8:05:b9:9c:6a:f4:fc:d4:a6:27:e9:
                    f2:7d:e6:65:b4:eb:c9:17:09:ea:b0:20:4c:c5:a4:
                    68:b2:2a:1d:ce:fc:a5:c4:05:39:37:e2:bd:73:7c:
                    6b:d8:b2:2c:f6:51:70:b9:09:91:39:05:ee:e9:7f:
                    6d:7f:7e:f6:d9:ef:a5:b2:d3:04:f9:70:0b:3b:5f:
                    9d:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:31:5F:E4:98:CA:30:47:25:4E:81:8A:2C:FA:FA:AF:38:CA:58:EF
            X509v3 Authority Key Identifier:
                keyid:9D:F6:D1:63:59:3D:EB:8A:EF:F0:72:FE:CA:58:E6:F3:F1:C4:E7:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfbRY1k964rv8HL-yljm8_HE5-U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ff25d7-5ffa-4686-8326-69d79c9d0721/1/nfbRY1k964rv8HL-yljm8_HE5-U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ff25d7-5ffa-4686-8326-69d79c9d0721/1/nfbRY1k964rv8HL-yljm8_HE5-U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:ee:d1:b7:14:f2:16:b3:91:ba:d1:36:f1:d2:77:b0:b0:ba:
         55:d3:7a:b1:36:94:13:2b:65:7c:43:87:94:bf:34:bd:26:24:
         1c:bf:92:08:da:a0:ba:9e:5b:28:0a:8e:e8:22:db:9a:88:72:
         91:f8:d5:5e:ef:70:56:32:a0:4b:c9:52:03:88:ba:74:3f:c2:
         f9:b5:89:83:5c:01:e8:6b:31:94:f4:e2:de:40:c1:cf:9f:32:
         55:d6:fb:92:42:14:63:99:74:e5:2e:ce:64:83:ad:bd:ec:99:
         9b:19:8d:ec:c3:70:c8:bd:f7:91:2c:01:12:d9:fd:23:4c:eb:
         da:80:08:33:bf:24:b1:18:04:bc:d6:5d:ad:61:7b:d1:48:d7:
         15:fb:fc:01:9f:dc:86:99:dd:1c:01:c8:3d:4e:e1:93:10:23:
         62:a3:27:40:10:d0:0e:38:92:2b:6b:57:83:ba:3c:5d:bf:84:
         22:46:5e:65:94:24:a6:8a:41:ce:2d:f4:33:c2:d3:68:5a:4c:
         30:5d:4a:43:c6:bc:0c:01:fb:d5:98:e3:44:45:9e:fb:52:8c:
         d3:21:21:7e:01:e8:b0:d4:a6:b4:0a:ae:38:ab:b8:9e:96:a8:
         78:1e:ab:77:97:2b:15:73:2f:3b:73:84:0a:01:ea:74:fb:54:
         db:0e:ac:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 12:53:09 2025 by rpki-client