Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/4ffcb0-bc57-4602-ad3d-524d144301ff/1/ntw_8WYVXmmIvoCV_LQgAB2L4h0.mft
File:                     ntw_8WYVXmmIvoCV_LQgAB2L4h0.mft (raw, json)
Hash identifier:          t+nAd79hRLhWlsqqWHUG7gNkCoWKRvpUZF33gScUfrA=
Subject key identifier:   0F:B4:48:53:2C:54:96:31:C2:9C:C1:9C:50:9A:49:7F:3F:76:70:DA
Authority key identifier: 9E:DC:3F:F1:66:15:5E:69:88:BE:80:95:FC:B4:20:00:1D:8B:E2:1D
Certificate issuer:       /CN=9edc3ff166155e6988be8095fcb420001d8be21d
Certificate serial:       01988467C23C76854996C764E586F65332EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ntw_8WYVXmmIvoCV_LQgAB2L4h0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/4ffcb0-bc57-4602-ad3d-524d144301ff/1/ntw_8WYVXmmIvoCV_LQgAB2L4h0.mft
Manifest number:          161D
Signing time:             Thu 07 Aug 2025 12:00:49 +0000
Manifest this update:     Thu 07 Aug 2025 12:00:49 +0000
Manifest next update:     Fri 08 Aug 2025 12:00:49 +0000
Files and hashes:         1: 9f1wfLMKGBE8v9MkOS4m3itL3mw.roa (hash: bPIUPhKEdbriAsko7Y4dw04AFw67jLRfl2Ngnf52fJ8=)
                          2: ntw_8WYVXmmIvoCV_LQgAB2L4h0.crl (hash: g641+Xfim0RJFZqlMpPl6D7NrkMdaiFfoIdyguTqe20=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/4ffcb0-bc57-4602-ad3d-524d144301ff/1/ntw_8WYVXmmIvoCV_LQgAB2L4h0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/4ffcb0-bc57-4602-ad3d-524d144301ff/1/ntw_8WYVXmmIvoCV_LQgAB2L4h0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ntw_8WYVXmmIvoCV_LQgAB2L4h0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 08 Aug 2025 12:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:84:67:c2:3c:76:85:49:96:c7:64:e5:86:f6:53:32:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9edc3ff166155e6988be8095fcb420001d8be21d
        Validity
            Not Before: Aug  7 12:00:49 2025 GMT
            Not After : Aug  8 12:00:49 2025 GMT
        Subject: CN=0fb448532c549631c29cc19c509a497f3f7670da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:15:36:f5:4b:26:22:a3:35:01:9a:51:c4:b7:
                    ce:f7:4e:06:2f:6c:c8:db:fc:23:1c:d5:0c:f1:fb:
                    ff:f2:88:f3:32:8b:f0:c7:f5:fd:6a:ca:14:99:ea:
                    10:8a:d6:5d:a6:8a:a7:2f:0d:aa:b1:c5:ca:54:07:
                    8f:47:78:a7:9e:34:24:f1:d3:1e:ab:41:41:2f:3e:
                    c6:9d:c6:bf:78:28:44:c7:f3:99:53:45:f6:e1:2b:
                    e6:ff:29:ad:4f:13:90:f7:6e:c6:de:9b:e7:60:29:
                    d7:0f:43:4c:bb:4f:92:9f:e5:a3:c8:b4:cf:34:b0:
                    cf:7b:b1:8f:ca:cd:99:b7:b8:fc:8c:9d:80:03:a7:
                    e3:40:dd:fc:c9:43:85:e7:71:9c:13:76:2c:da:e3:
                    3e:d9:61:7c:da:c5:0a:82:75:28:c2:cc:37:ec:16:
                    12:40:8d:7f:1f:94:ff:5c:69:7c:05:45:c6:3e:8c:
                    71:52:ab:33:79:79:0a:4a:4b:fc:3c:47:6e:7e:29:
                    ad:5a:a8:9f:3b:17:2b:05:d8:30:38:53:cc:f1:1f:
                    95:c8:e1:ca:ae:6b:55:3f:2f:44:36:a5:c9:e6:08:
                    87:12:89:f1:61:09:0a:6b:83:2d:a8:14:1f:9d:42:
                    cc:fa:17:7c:e3:df:d4:f9:11:d5:c7:06:a0:b1:ff:
                    bb:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:B4:48:53:2C:54:96:31:C2:9C:C1:9C:50:9A:49:7F:3F:76:70:DA
            X509v3 Authority Key Identifier:
                keyid:9E:DC:3F:F1:66:15:5E:69:88:BE:80:95:FC:B4:20:00:1D:8B:E2:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ntw_8WYVXmmIvoCV_LQgAB2L4h0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/4ffcb0-bc57-4602-ad3d-524d144301ff/1/ntw_8WYVXmmIvoCV_LQgAB2L4h0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/4ffcb0-bc57-4602-ad3d-524d144301ff/1/ntw_8WYVXmmIvoCV_LQgAB2L4h0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:78:f9:86:b4:23:9a:1d:ef:1a:33:d8:24:54:2b:d1:01:75:
         32:2e:cd:4e:88:75:6c:b0:74:39:dd:37:4a:e0:dd:0e:6e:3e:
         81:4d:13:32:99:fd:ef:71:9c:7a:5b:80:39:ad:46:de:df:08:
         d0:bb:6a:cf:f6:3c:c5:a6:0d:48:d5:8e:8e:1e:f7:ba:7d:70:
         b4:2e:89:2a:04:a6:c3:f5:eb:d6:46:91:5b:03:03:c1:5f:42:
         e8:90:61:6b:5c:a2:87:82:af:c1:16:49:28:e4:cb:68:7b:ef:
         85:23:19:4b:b0:0c:16:b2:21:9d:ca:c4:f4:62:2a:e8:6d:7d:
         41:17:bb:fe:75:8a:f7:2b:13:ab:c9:ff:7f:ce:db:30:0e:b8:
         7a:6c:41:ef:d2:25:51:6f:58:18:6d:77:e1:b1:eb:28:da:a2:
         31:df:2c:0e:d1:81:d3:d7:e3:10:6c:70:a9:b9:eb:96:11:de:
         b8:e5:34:3b:ad:5d:83:e3:64:dc:99:9a:af:76:db:69:1f:73:
         29:fd:06:0c:d8:71:27:cf:1a:2e:aa:37:f9:81:72:96:44:5c:
         ed:5e:b4:8f:cb:2d:21:da:25:94:50:73:94:27:9b:80:9c:58:
         64:a8:9e:47:42:18:17:f8:21:c0:96:95:62:06:0f:2f:b8:a8:
         47:14:da:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 20:12:58 2025 by rpki-client