Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft
File:                     nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft (raw, json)
Hash identifier:          I0ALFzTu6/I2p/54qHtLd+EOC+rH/ZyjFWZe6RWXz7Y=
Subject key identifier:   52:15:74:5C:C9:AB:10:D7:A6:AE:C3:9D:3B:DE:D4:D2:F1:D6:43:92
Authority key identifier: 9F:06:7E:52:B4:B5:B2:41:2F:EC:01:48:DF:C6:CB:1B:34:E9:27:4B
Certificate issuer:       /CN=9f067e52b4b5b2412fec0148dfc6cb1b34e9274b
Certificate serial:       0198752C0299AE2A94543400CCFC5B273D28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nwZ-UrS1skEv7AFI38bLGzTpJ0s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft
Manifest number:          0101
Signing time:             Mon 04 Aug 2025 13:01:15 +0000
Manifest this update:     Mon 04 Aug 2025 13:01:15 +0000
Manifest next update:     Tue 05 Aug 2025 13:01:15 +0000
Files and hashes:         1: 4hEwPlQV2R3wkknVQDbhfUdi-Hg.roa (hash: mjLFc+VoWHA5LJYiCj4OZP4v7wKlAoLVjBHa2WdTgLI=)
                          2: nwZ-UrS1skEv7AFI38bLGzTpJ0s.crl (hash: /jnVzkvX401aMGOtMD4Foe6wl+mLIo5FRThHFdezprQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nwZ-UrS1skEv7AFI38bLGzTpJ0s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 12:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:75:2c:02:99:ae:2a:94:54:34:00:cc:fc:5b:27:3d:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f067e52b4b5b2412fec0148dfc6cb1b34e9274b
        Validity
            Not Before: Aug  4 13:01:15 2025 GMT
            Not After : Aug  5 13:01:15 2025 GMT
        Subject: CN=5215745cc9ab10d7a6aec39d3bded4d2f1d64392
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:87:c2:b0:56:dd:ab:82:08:bb:5c:f6:ad:46:
                    47:9d:20:fe:a6:e4:bd:c8:60:77:0d:74:12:4b:32:
                    e8:e5:c6:21:15:e2:2f:e2:ad:51:d4:bb:58:d4:d2:
                    10:7e:8f:50:31:b2:e2:ee:14:b1:ca:7f:ef:22:46:
                    83:b9:0c:c7:57:40:3a:c3:f4:8c:38:83:e2:2b:27:
                    2b:64:e7:15:67:42:b0:ec:4a:e8:47:33:9f:e4:6b:
                    53:73:3b:b3:02:e0:ef:45:cf:31:06:a5:ad:13:4a:
                    8b:79:be:81:ea:dc:0e:66:39:a1:12:8d:5e:ac:8f:
                    39:05:e5:77:38:4d:b7:79:f7:e8:ab:41:78:c8:e0:
                    d0:1c:1c:b7:a7:10:c8:cc:4f:18:99:ef:0f:96:41:
                    e1:af:cd:8b:65:6d:26:67:12:c2:65:29:b5:2e:e7:
                    65:f0:a8:d9:f7:6c:ae:0e:97:4e:30:f0:fa:c2:ce:
                    2f:51:3f:d3:81:fe:a2:5c:55:60:a8:c2:db:39:7a:
                    18:1f:f0:67:21:e0:f6:8d:56:2a:22:62:52:64:a7:
                    01:02:6c:70:51:2d:34:0f:28:20:f6:1e:49:22:5f:
                    0e:bf:66:3f:e4:08:62:3d:15:4f:b9:b5:3b:06:b9:
                    8f:2e:01:eb:ff:18:b0:57:a8:47:21:03:22:37:52:
                    6c:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:15:74:5C:C9:AB:10:D7:A6:AE:C3:9D:3B:DE:D4:D2:F1:D6:43:92
            X509v3 Authority Key Identifier:
                keyid:9F:06:7E:52:B4:B5:B2:41:2F:EC:01:48:DF:C6:CB:1B:34:E9:27:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwZ-UrS1skEv7AFI38bLGzTpJ0s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/0cd65c-e57d-412e-ba65-02a09b7a4eb7/1/nwZ-UrS1skEv7AFI38bLGzTpJ0s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:fc:b8:55:bf:be:00:94:8e:95:d9:b8:88:02:87:92:44:1c:
         52:56:20:9c:88:c6:cc:cc:14:65:e7:bf:1a:11:cd:8c:cd:fd:
         4b:04:5d:0a:60:d9:8c:a8:21:73:75:7f:ba:43:bf:e9:00:b2:
         66:77:62:90:62:02:4e:1d:34:bc:59:63:26:8a:32:a2:63:44:
         19:91:0c:0e:ab:62:ca:00:07:c1:5c:f3:3f:70:c3:79:05:0d:
         ad:96:c7:7d:5e:d5:90:2d:eb:88:04:71:70:13:cd:38:83:8c:
         a0:6a:90:0a:5f:e8:97:04:81:97:1e:fc:ac:37:ae:12:e2:21:
         e2:84:a6:0e:4c:05:fe:3e:16:bc:66:21:45:23:1e:94:f1:bf:
         ed:71:61:4b:eb:41:a6:95:10:76:95:60:b2:c5:68:95:49:89:
         01:7b:ae:11:73:18:2c:37:d1:83:64:db:48:a5:cd:b2:df:8f:
         71:33:5d:5a:92:76:16:9f:cb:f7:10:9c:c4:84:16:03:24:12:
         1a:ef:8f:c4:05:50:32:01:f9:03:76:9b:3d:c7:a7:38:eb:c1:
         44:49:7d:84:91:50:1b:b2:04:b3:67:7e:fc:f6:67:c4:15:9e:
         68:ee:6b:50:96:1e:84:dd:72:ec:10:76:a6:52:42:38:28:7f:
         18:be:3b:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:00:05 2025 by rpki-client