Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/83aa47-c7fb-4e05-9fac-e4ca6b73ac76/1/N0CDrw__F2igfGVfH-OGAJxSLM8.mft
File:                     N0CDrw__F2igfGVfH-OGAJxSLM8.mft (raw, json)
Hash identifier:          6UXvc57ZaGFK7fbMyG0iaN0XBb4dcwwPmLCPlxk9vnQ=
Subject key identifier:   CE:2D:C7:1A:CB:5A:93:64:86:E7:8E:A2:DF:CD:64:00:EB:82:3D:2D
Authority key identifier: 37:40:83:AF:0F:FF:17:68:A0:7C:65:5F:1F:E3:86:00:9C:52:2C:CF
Certificate issuer:       /CN=374083af0fff1768a07c655f1fe386009c522ccf
Certificate serial:       0198820C271A647A9C4130F7F29CBB19AC2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N0CDrw__F2igfGVfH-OGAJxSLM8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/83aa47-c7fb-4e05-9fac-e4ca6b73ac76/1/N0CDrw__F2igfGVfH-OGAJxSLM8.mft
Manifest number:          1202
Signing time:             Thu 07 Aug 2025 01:01:31 +0000
Manifest this update:     Thu 07 Aug 2025 01:01:31 +0000
Manifest next update:     Fri 08 Aug 2025 01:01:31 +0000
Files and hashes:         1: N0CDrw__F2igfGVfH-OGAJxSLM8.crl (hash: Q7B1WUqsIfxObL89VKJ79PQ2b9iK9ZKe3wyX7WsxrJ8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/83aa47-c7fb-4e05-9fac-e4ca6b73ac76/1/N0CDrw__F2igfGVfH-OGAJxSLM8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/83aa47-c7fb-4e05-9fac-e4ca6b73ac76/1/N0CDrw__F2igfGVfH-OGAJxSLM8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N0CDrw__F2igfGVfH-OGAJxSLM8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:82:0c:27:1a:64:7a:9c:41:30:f7:f2:9c:bb:19:ac:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=374083af0fff1768a07c655f1fe386009c522ccf
        Validity
            Not Before: Aug  7 01:01:31 2025 GMT
            Not After : Aug  8 01:01:31 2025 GMT
        Subject: CN=ce2dc71acb5a936486e78ea2dfcd6400eb823d2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:bc:52:17:aa:25:ca:56:64:64:7f:c8:54:b0:
                    51:b5:24:76:d5:f1:73:67:9d:84:bf:be:15:8f:13:
                    0f:79:b4:d6:fc:79:ff:f8:7b:e7:1e:91:d8:a1:bd:
                    dd:b7:b8:f3:4a:44:92:72:e3:5e:af:ed:6a:8a:e2:
                    ac:78:33:06:4f:a7:26:96:b4:65:7b:20:0a:7f:85:
                    28:a2:4b:ea:6e:f7:f4:2b:85:dc:e3:92:d5:b5:f1:
                    75:06:47:7c:08:25:e4:43:b0:59:95:4a:ed:fc:d0:
                    51:5b:65:7c:59:f4:0a:99:56:81:a3:1d:05:35:0e:
                    29:70:e9:2e:c3:c6:3e:1b:a7:81:2f:71:64:a8:fc:
                    04:a0:26:09:f2:81:1d:26:57:9f:8c:05:2f:bb:a1:
                    57:c3:ca:af:4d:f9:51:92:a3:9c:82:c6:85:9e:fe:
                    38:a4:59:4b:e1:95:e1:17:d1:ae:a1:8a:66:f8:10:
                    1a:8f:35:19:47:6f:6d:81:a4:56:f5:0b:1f:2f:85:
                    8e:47:9a:c6:c5:75:9b:f7:1e:29:eb:65:e4:6d:0c:
                    92:7c:ba:2a:7a:5c:25:e8:3c:9a:31:cc:58:95:a4:
                    d0:57:2e:f9:8d:47:e0:dc:51:24:f2:e5:95:9e:f0:
                    aa:25:28:0a:eb:4a:70:20:69:e4:f9:e8:fd:a0:9b:
                    65:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:2D:C7:1A:CB:5A:93:64:86:E7:8E:A2:DF:CD:64:00:EB:82:3D:2D
            X509v3 Authority Key Identifier:
                keyid:37:40:83:AF:0F:FF:17:68:A0:7C:65:5F:1F:E3:86:00:9C:52:2C:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0CDrw__F2igfGVfH-OGAJxSLM8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/83aa47-c7fb-4e05-9fac-e4ca6b73ac76/1/N0CDrw__F2igfGVfH-OGAJxSLM8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/83aa47-c7fb-4e05-9fac-e4ca6b73ac76/1/N0CDrw__F2igfGVfH-OGAJxSLM8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:91:15:c6:b4:b5:34:0e:ae:ee:f1:85:ae:9c:8a:97:c7:7c:
         80:57:50:60:c1:c5:76:61:f1:0a:22:c4:a1:9b:65:b0:ec:e5:
         de:e8:e3:a6:1b:4c:dd:57:e4:15:6d:b6:ea:de:01:a3:cb:20:
         9a:03:63:8f:79:95:b1:8e:5a:ef:11:35:aa:86:8b:d2:2f:46:
         fa:48:3d:be:31:a6:7f:25:bb:f2:44:ce:a3:e8:da:1f:c9:68:
         22:ec:e9:52:89:2c:34:52:00:ed:56:78:00:57:1d:cc:de:be:
         2d:8d:a0:8a:ba:05:9c:45:51:ab:0a:27:9c:eb:4b:81:30:e4:
         ce:50:cd:90:29:01:bc:1b:f8:54:d1:04:94:de:23:08:b1:b0:
         b5:05:85:b7:ac:73:3b:13:7a:2a:10:0a:c7:6c:f8:3d:cd:60:
         19:4c:fc:60:74:5c:79:9c:10:01:61:4d:53:e8:18:2e:85:6e:
         27:78:b9:e5:d8:cf:7a:9a:10:f7:50:f0:10:75:21:06:a5:99:
         4e:dc:bf:67:53:12:a3:0d:35:aa:38:bc:c3:96:d5:f5:9a:21:
         2d:e5:04:8a:84:7e:fd:96:9c:e7:aa:77:35:1f:34:fc:b4:2a:
         34:71:c6:39:3f:8d:1b:c5:2f:86:7e:ab:c9:2b:79:b7:83:48:
         d1:d9:0d:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:16:39 2025 by rpki-client