Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/0RE68_NruSoPL72v47Zx9rn876g.mft
File:                     0RE68_NruSoPL72v47Zx9rn876g.mft (raw, json)
Hash identifier:          TBoEUm+/HFXWOKxN5v5WayK0t5pBtUPqOzfWXI3aw1M=
Subject key identifier:   17:39:C5:02:71:E8:56:49:AB:30:27:0D:C1:BF:48:35:AA:62:BF:C6
Authority key identifier: D1:11:3A:F3:F3:6B:B9:2A:0F:2F:BD:AF:E3:B6:71:F6:B9:FC:EF:A8
Certificate issuer:       /CN=d1113af3f36bb92a0f2fbdafe3b671f6b9fcefa8
Certificate serial:       0198518CB7770534B6D66C4E80001077CBB2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0RE68_NruSoPL72v47Zx9rn876g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/0RE68_NruSoPL72v47Zx9rn876g.mft
Manifest number:          0655
Signing time:             Mon 28 Jul 2025 15:00:33 +0000
Manifest this update:     Mon 28 Jul 2025 15:00:33 +0000
Manifest next update:     Tue 29 Jul 2025 15:00:33 +0000
Files and hashes:         1: 0RE68_NruSoPL72v47Zx9rn876g.crl (hash: hNCLNAge1UScqyNneazijppa+uMEHMnBRcpmhrEOiCs=)
                          2: 3JbDaULXGv_ZtTgUAO-U9hWl8fI.roa (hash: 4zK/hPWGsN27RzuQfqxFG1It8c0g9SrEKBoNyWRQIuA=)
                          3: FkEtOcybmkeU2VY4ZDNh4TQD4Us.roa (hash: /n0EorQrNvumpJCJEydj0xjM/0IAJCZt4aRyN0+hfTc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/0RE68_NruSoPL72v47Zx9rn876g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/0RE68_NruSoPL72v47Zx9rn876g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0RE68_NruSoPL72v47Zx9rn876g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Jul 2025 14:37:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:51:8c:b7:77:05:34:b6:d6:6c:4e:80:00:10:77:cb:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1113af3f36bb92a0f2fbdafe3b671f6b9fcefa8
        Validity
            Not Before: Jul 28 15:00:33 2025 GMT
            Not After : Jul 29 15:00:33 2025 GMT
        Subject: CN=1739c50271e85649ab30270dc1bf4835aa62bfc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:fe:9b:63:60:b5:5e:f3:57:f8:11:e2:7b:d3:
                    88:24:de:0c:ab:33:3e:da:27:f2:65:24:2b:22:d6:
                    38:2e:35:ef:0f:3f:42:61:97:e5:3c:22:e4:d0:84:
                    f1:c3:15:7e:d2:72:b9:b5:8a:53:53:78:74:10:86:
                    b7:56:5f:98:d6:c4:fe:2e:df:f8:1d:ca:57:bb:2b:
                    10:0e:8c:a5:9d:9e:09:44:28:8f:5e:2f:8b:a9:d7:
                    e1:35:11:a6:3b:d6:4a:7f:a8:31:0a:63:59:02:50:
                    35:52:7c:5f:39:ed:75:89:4d:44:35:87:81:7a:aa:
                    80:d0:84:a1:60:79:26:a9:84:d4:07:16:62:90:ff:
                    24:5b:3f:75:93:a5:ae:9f:ae:6d:72:77:66:a3:27:
                    cb:59:0a:a1:3c:41:a6:d5:37:d1:54:81:c2:59:e5:
                    94:a2:7c:1d:a3:e5:8c:70:f9:6d:91:fd:50:c1:a3:
                    99:b4:0e:a5:2f:08:7b:d7:12:14:c1:e5:c2:ee:22:
                    ef:48:75:b4:c0:97:9e:19:0d:cd:ea:e4:7c:5e:5d:
                    55:9f:d8:f6:45:2c:04:86:42:a9:16:a8:0a:e1:3d:
                    ba:ae:d8:fc:7f:0b:3d:6b:67:27:9f:1b:71:b5:06:
                    56:7b:a6:c9:d8:b0:61:a2:11:59:70:1a:57:e1:0d:
                    9f:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:39:C5:02:71:E8:56:49:AB:30:27:0D:C1:BF:48:35:AA:62:BF:C6
            X509v3 Authority Key Identifier:
                keyid:D1:11:3A:F3:F3:6B:B9:2A:0F:2F:BD:AF:E3:B6:71:F6:B9:FC:EF:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0RE68_NruSoPL72v47Zx9rn876g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/0RE68_NruSoPL72v47Zx9rn876g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/88f926-895c-46ce-9e6b-00ce9f08ad83/1/0RE68_NruSoPL72v47Zx9rn876g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:15:5b:b7:db:e1:16:f5:27:5f:54:79:22:6b:13:48:92:cc:
         f1:23:e4:bf:8f:83:76:db:d3:98:42:82:7c:c2:f8:28:9f:3d:
         e0:e9:ae:47:4e:bd:e9:21:b3:b7:42:33:35:02:94:a1:58:d4:
         dc:2f:5f:82:42:3b:f6:84:80:96:0d:83:44:bd:0a:51:0b:96:
         51:74:75:58:23:ae:0d:ac:35:60:5a:79:5f:a0:f9:bd:ee:ee:
         d9:0d:ee:b6:e2:cd:8a:6c:83:cc:6e:71:10:8a:06:ff:bf:e8:
         82:2a:48:82:a4:b3:20:53:cc:ef:09:f8:2e:04:cf:62:b5:d6:
         17:f9:59:61:50:c5:f3:7a:d4:3d:ed:2a:13:09:36:8c:6d:43:
         f4:14:e4:b7:01:63:51:4c:f5:2a:82:af:00:b8:fd:09:cd:a1:
         11:09:58:bb:e2:3d:8c:e0:f2:48:ad:d4:9d:2b:65:dd:1f:17:
         29:67:e4:b0:c8:2c:3a:5d:9f:70:9d:38:ad:19:a1:5f:b8:7f:
         ba:69:81:99:1e:5a:ca:75:ec:fc:78:06:86:ea:f5:ec:0f:55:
         58:e1:05:98:81:91:62:f7:1b:f0:c3:bc:cf:63:26:12:89:ef:
         31:9b:bb:f9:7e:fe:38:6d:01:2a:ab:7e:47:18:4e:73:6a:cb:
         f8:9d:12:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhRjLd3BTS21mxOgAAQd8uyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxMTEzYWYzZjM2YmI5MmEwZjJmYmRhZmUzYjY3MWY2Yjlm
Y2VmYTgwHhcNMjUwNzI4MTUwMDMzWhcNMjUwNzI5MTUwMDMzWjAzMTEwLwYDVQQD
EygxNzM5YzUwMjcxZTg1NjQ5YWIzMDI3MGRjMWJmNDgzNWFhNjJiZmM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxf6bY2C1XvNX+BHie9OIJN4MqzM+
2ifyZSQrItY4LjXvDz9CYZflPCLk0ITxwxV+0nK5tYpTU3h0EIa3Vl+Y1sT+Lt/4
HcpXuysQDoylnZ4JRCiPXi+LqdfhNRGmO9ZKf6gxCmNZAlA1UnxfOe11iU1ENYeB
eqqA0IShYHkmqYTUBxZikP8kWz91k6Wun65tcndmoyfLWQqhPEGm1TfRVIHCWeWU
onwdo+WMcPltkf1QwaOZtA6lLwh71xIUweXC7iLvSHW0wJeeGQ3N6uR8Xl1Vn9j2
RSwEhkKpFqgK4T26rtj8fws9a2cnnxtxtQZWe6bJ2LBhohFZcBpX4Q2fpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBc5xQJx6FZJqzAnDcG/SDWqYr/GMB8GA1UdIwQY
MBaAFNEROvPza7kqDy+9r+O2cfa5/O+oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFJFNjhfTnJ1U29QTDcydjQ3Wng5cm44NzZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi84OGY5MjYtODk1Yy00NmNlLTllNmIt
MDBjZTlmMDhhZDgzLzEvMFJFNjhfTnJ1U29QTDcydjQ3Wng5cm44NzZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi84OGY5MjYtODk1Yy00NmNlLTllNmItMDBjZTlmMDhhZDgz
LzEvMFJFNjhfTnJ1U29QTDcydjQ3Wng5cm44NzZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADxVbt9vh
FvUnX1R5ImsTSJLM8SPkv4+DdtvTmEKCfML4KJ894OmuR0696SGzt0IzNQKUoVjU
3C9fgkI79oSAlg2DRL0KUQuWUXR1WCOuDaw1YFp5X6D5ve7u2Q3utuLNimyDzG5x
EIoG/7/ogipIgqSzIFPM7wn4LgTPYrXWF/lZYVDF83rUPe0qEwk2jG1D9BTktwFj
UUz1KoKvALj9Cc2hEQlYu+I9jODySK3UnStl3R8XKWfksMgsOl2fcJ04rRmhX7h/
ummBmR5aynXs/HgGhur17A9VWOEFmIGRYvcb8MO8z2MmEonvMZu7+X7+OG0BKqt+
RxhOc2rL+J0SIA==
-----END CERTIFICATE-----
Generated at Mon Jul 28 22:15:15 2025 by rpki-client