Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.mft
File:                     U_NZCAnRh_ezYfskzUP5P2ZLILM.mft (raw, json)
Hash identifier:          0R//9g5AzkTWl5OFGB/iT0auSLtpCnME+4NV7QZ9onk=
Subject key identifier:   53:05:38:F1:48:B1:F2:11:BF:A2:B6:62:77:07:1E:97:2C:D9:12:20
Authority key identifier: 53:F3:59:08:09:D1:87:F7:B3:61:FB:24:CD:43:F9:3F:66:4B:20:B3
Certificate issuer:       /CN=53f3590809d187f7b361fb24cd43f93f664b20b3
Certificate serial:       01987418BD3845A69C1972780A7831BFC69C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U_NZCAnRh_ezYfskzUP5P2ZLILM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.mft
Manifest number:          161C
Signing time:             Mon 04 Aug 2025 08:00:35 +0000
Manifest this update:     Mon 04 Aug 2025 08:00:35 +0000
Manifest next update:     Tue 05 Aug 2025 08:00:35 +0000
Files and hashes:         1: 4yhrEPquDWqMWiUEurgxgpe4Z64.roa (hash: GAPEp0iDkhSK0QKol83Ga2o50iNkeUXCz5jUqWOb9Ow=)
                          2: 5piZhUc6B_Q8SXnCvmVdLn755tk.roa (hash: 1kX1fTcGnU3vqt6H68WNwGSWbpk3Ul9d3oLOLIk5xOI=)
                          3: 8nljJg7c24IFr_Sv-LV4LOMZqPI.roa (hash: deVXwXvj6xoqe5dfSwVOJXQZSoWKbMhfJNni40tWyZY=)
                          4: U_NZCAnRh_ezYfskzUP5P2ZLILM.crl (hash: Q6IJTA32CzUSljtyXP+9NuAnumUJ6ZG4I3/olzSLMQ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U_NZCAnRh_ezYfskzUP5P2ZLILM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:18:bd:38:45:a6:9c:19:72:78:0a:78:31:bf:c6:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53f3590809d187f7b361fb24cd43f93f664b20b3
        Validity
            Not Before: Aug  4 08:00:35 2025 GMT
            Not After : Aug  5 08:00:35 2025 GMT
        Subject: CN=530538f148b1f211bfa2b66277071e972cd91220
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:be:00:d2:8c:dc:2b:a0:e5:97:36:c9:f1:ed:
                    be:d4:ab:ce:c9:5b:f2:1b:52:92:e6:14:4e:ae:c1:
                    a8:88:52:d2:c7:c9:c4:43:4b:27:0b:dd:2a:03:b1:
                    01:d6:48:cc:02:7d:a1:59:b4:f5:cb:e8:fc:d7:b6:
                    ee:ba:d6:96:65:ca:cf:22:35:6a:29:01:ba:74:4b:
                    1b:53:7b:2e:b9:14:23:0d:71:01:8b:3b:18:fa:87:
                    69:9c:12:38:17:08:f8:73:9a:7b:86:72:a3:db:b9:
                    f3:f3:39:4e:45:d8:48:2e:bd:39:87:b3:5a:b4:e2:
                    af:4a:03:eb:3e:69:09:2d:88:ca:50:c6:6b:16:99:
                    3e:13:4d:23:15:3c:7a:ec:fb:10:87:d2:1e:68:33:
                    e6:ed:7b:27:2e:0d:2d:94:4b:64:a8:f8:dd:41:42:
                    5c:4b:29:e4:74:d5:04:e2:d6:f9:28:b5:d6:03:6b:
                    c0:cb:09:5b:bb:2b:6f:24:b4:56:27:c1:9c:5c:b6:
                    e2:3c:c7:33:35:e0:54:9a:c9:ad:e5:88:d9:44:a2:
                    53:d3:84:f9:da:33:09:7f:78:bc:6f:99:33:a7:e1:
                    90:4d:3e:d3:a6:13:1b:fd:90:a5:0b:d1:c7:f4:c2:
                    d3:d5:bb:bf:d1:63:c2:48:9d:af:5b:f7:2f:22:ed:
                    16:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:05:38:F1:48:B1:F2:11:BF:A2:B6:62:77:07:1E:97:2C:D9:12:20
            X509v3 Authority Key Identifier:
                keyid:53:F3:59:08:09:D1:87:F7:B3:61:FB:24:CD:43:F9:3F:66:4B:20:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_NZCAnRh_ezYfskzUP5P2ZLILM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:9f:67:ef:92:49:78:37:8e:9a:2b:b8:d4:01:82:9e:15:9a:
         20:4b:60:ef:49:59:3a:4c:a3:32:f0:c3:18:b7:79:62:16:13:
         56:b5:fc:bd:15:9a:5c:27:84:a5:1e:44:ca:04:71:ef:45:4f:
         80:96:59:d3:26:72:9e:73:02:fd:85:4e:0c:e9:8f:aa:7d:a8:
         4f:8b:0a:1f:97:ac:e7:67:2c:ff:af:c8:fe:fb:0b:ac:02:95:
         4e:35:f9:21:65:10:7e:20:f9:f2:8c:9e:d7:15:29:e3:6a:39:
         17:4c:5d:c4:d8:70:63:b9:f5:44:cc:a4:57:1d:18:3c:2f:e9:
         cc:31:b5:b9:39:6b:8b:29:e4:74:da:64:2d:5d:02:27:43:b5:
         94:76:94:32:72:7a:64:ec:16:f1:c6:40:82:87:fb:0e:73:54:
         5e:c4:0f:da:b9:d5:59:e7:38:56:5a:cd:4c:6e:38:32:2a:fc:
         86:8d:98:42:e5:0a:65:09:b6:5e:70:ea:45:18:af:1c:49:e5:
         d4:d7:4f:8c:6e:3b:66:46:ef:e1:81:36:94:d6:b4:44:3d:00:
         94:ef:1d:cf:b2:fe:35:68:b8:ec:fe:48:4d:51:ae:dc:6f:0d:
         12:94:35:7b:5f:91:88:5d:68:55:47:2c:85:ac:b6:09:cc:0a:
         ef:e8:e2:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:06:10 2025 by rpki-client