Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/8d666d-06ab-44d2-a6a5-af635d875575/1/nM9T8eCub18z28-A6ox0H2gkhf4.mft
File:                     nM9T8eCub18z28-A6ox0H2gkhf4.mft (raw, json)
Hash identifier:          Y3o+GNt4eOtZICJh14DhmLgIDpC+DCE3U+SbohKpKLE=
Subject key identifier:   A6:9D:BF:80:77:C4:82:A3:CE:12:6E:C9:4C:36:FF:CE:01:5E:A0:55
Authority key identifier: 9C:CF:53:F1:E0:AE:6F:5F:33:DB:CF:80:EA:8C:74:1F:68:24:85:FE
Certificate issuer:       /CN=9ccf53f1e0ae6f5f33dbcf80ea8c741f682485fe
Certificate serial:       019848C0B2FB7991FCF3333C6E31554F1F4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nM9T8eCub18z28-A6ox0H2gkhf4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/8d666d-06ab-44d2-a6a5-af635d875575/1/nM9T8eCub18z28-A6ox0H2gkhf4.mft
Manifest number:          05BC
Signing time:             Sat 26 Jul 2025 22:00:44 +0000
Manifest this update:     Sat 26 Jul 2025 22:00:44 +0000
Manifest next update:     Sun 27 Jul 2025 22:00:44 +0000
Files and hashes:         1: nM9T8eCub18z28-A6ox0H2gkhf4.crl (hash: e93DxFiKOdmnOKecmYdqaLBPc+uiPFLe025aMJNonA0=)
                          2: ypZztjZlxetD-72tfNr-C4vUMMo.roa (hash: KOjPZ5JmKNPLP4XD3KiiaO/OQDRjqwb/lVaqB3ewFWk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/8d666d-06ab-44d2-a6a5-af635d875575/1/nM9T8eCub18z28-A6ox0H2gkhf4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/8d666d-06ab-44d2-a6a5-af635d875575/1/nM9T8eCub18z28-A6ox0H2gkhf4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nM9T8eCub18z28-A6ox0H2gkhf4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:c0:b2:fb:79:91:fc:f3:33:3c:6e:31:55:4f:1f:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ccf53f1e0ae6f5f33dbcf80ea8c741f682485fe
        Validity
            Not Before: Jul 26 22:00:44 2025 GMT
            Not After : Jul 27 22:00:44 2025 GMT
        Subject: CN=a69dbf8077c482a3ce126ec94c36ffce015ea055
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:37:49:db:24:b5:6c:6e:d5:98:e4:4f:0f:db:
                    7a:f3:d1:6c:6e:f4:79:ff:77:93:87:0f:95:06:bc:
                    cf:97:a9:2f:86:b0:b6:30:9d:8a:58:7b:74:c0:4d:
                    0f:81:2d:b4:0d:7e:e5:e2:f7:00:0e:cc:72:55:80:
                    3d:b5:68:4a:5c:b1:c8:3f:0f:9e:ea:d5:ae:da:b9:
                    68:bb:b1:19:48:08:41:3e:85:a8:3e:40:f9:76:8c:
                    5e:87:14:34:ae:ec:86:c5:ed:27:dc:b8:e7:43:b8:
                    54:99:d8:4f:1e:d3:ab:fc:e4:63:5e:66:7d:1a:c4:
                    ff:47:b5:08:c8:7a:c4:3c:1d:37:c8:34:04:e5:41:
                    8b:00:8a:49:a0:33:15:e7:f8:60:3a:8f:a3:b0:27:
                    38:b4:b9:ee:ec:0b:13:98:0e:5e:9a:95:4a:c3:8b:
                    64:4e:64:8a:52:01:1f:05:55:32:2d:2e:9e:ba:b9:
                    80:50:fb:cd:3c:f4:2f:36:73:0e:dd:bc:aa:ad:30:
                    fe:25:bd:ca:f8:6f:05:15:55:8f:0f:fa:3f:6a:bf:
                    6a:bf:5a:72:bb:41:9d:c8:74:00:dd:89:b3:50:0f:
                    dd:e6:23:2a:c5:43:06:eb:fe:7b:80:88:ba:b2:a2:
                    1f:c3:c5:ed:f3:d2:23:bb:a5:14:93:cd:67:ee:72:
                    fe:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:9D:BF:80:77:C4:82:A3:CE:12:6E:C9:4C:36:FF:CE:01:5E:A0:55
            X509v3 Authority Key Identifier:
                keyid:9C:CF:53:F1:E0:AE:6F:5F:33:DB:CF:80:EA:8C:74:1F:68:24:85:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nM9T8eCub18z28-A6ox0H2gkhf4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/8d666d-06ab-44d2-a6a5-af635d875575/1/nM9T8eCub18z28-A6ox0H2gkhf4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/8d666d-06ab-44d2-a6a5-af635d875575/1/nM9T8eCub18z28-A6ox0H2gkhf4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:ff:0e:f2:14:d2:2c:03:8a:a4:a1:75:ec:2d:c5:f1:f4:c9:
         a1:08:46:6b:1c:b7:18:4d:f8:60:7b:2a:a4:6d:e3:8c:65:74:
         1c:48:68:4b:f3:6b:81:e2:51:b3:e3:e7:83:37:9c:ee:6b:47:
         97:e0:10:07:5c:5b:2d:52:7c:b2:31:ec:be:0b:41:94:2f:b1:
         eb:3f:2b:e6:89:67:11:0b:61:c2:ae:58:4d:c8:89:bf:7c:16:
         67:a7:51:89:96:71:4a:3e:6a:28:04:fe:0a:40:16:20:4c:9f:
         fd:b1:b9:93:a1:dc:eb:b9:54:d6:c3:f1:bc:a3:07:55:ea:76:
         2e:86:d4:de:86:13:87:ea:4d:46:c4:44:4d:44:47:d7:3b:72:
         ea:06:6d:a8:65:ce:b7:38:d3:d0:d1:94:38:98:5e:ea:fd:fb:
         7d:d1:fa:31:ed:bd:b9:53:4a:eb:2e:dc:ea:52:0d:f2:ee:e2:
         3b:91:d0:10:67:55:80:07:c2:ad:4b:9f:15:74:a9:23:cb:48:
         4a:76:e2:c9:6b:ba:5b:c6:4d:3e:23:2f:d1:d7:ce:5b:59:09:
         8a:5c:43:23:bb:ac:46:b3:50:e4:78:82:a3:e0:db:08:c0:0a:
         a5:c3:47:7a:7b:d6:b0:53:ea:c7:f6:bc:4b:42:15:58:99:21:
         db:1e:b1:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhIwLL7eZH88zM8bjFVTx9OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljY2Y1M2YxZTBhZTZmNWYzM2RiY2Y4MGVhOGM3NDFmNjgy
NDg1ZmUwHhcNMjUwNzI2MjIwMDQ0WhcNMjUwNzI3MjIwMDQ0WjAzMTEwLwYDVQQD
EyhhNjlkYmY4MDc3YzQ4MmEzY2UxMjZlYzk0YzM2ZmZjZTAxNWVhMDU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTdJ2yS1bG7VmORPD9t689FsbvR5
/3eThw+VBrzPl6kvhrC2MJ2KWHt0wE0PgS20DX7l4vcADsxyVYA9tWhKXLHIPw+e
6tWu2rlou7EZSAhBPoWoPkD5doxehxQ0ruyGxe0n3LjnQ7hUmdhPHtOr/ORjXmZ9
GsT/R7UIyHrEPB03yDQE5UGLAIpJoDMV5/hgOo+jsCc4tLnu7AsTmA5empVKw4tk
TmSKUgEfBVUyLS6eurmAUPvNPPQvNnMO3byqrTD+Jb3K+G8FFVWPD/o/ar9qv1py
u0GdyHQA3YmzUA/d5iMqxUMG6/57gIi6sqIfw8Xt89Iju6UUk81n7nL+ZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKadv4B3xIKjzhJuyUw2/84BXqBVMB8GA1UdIwQY
MBaAFJzPU/Hgrm9fM9vPgOqMdB9oJIX+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbk05VDhlQ3ViMTh6MjgtQTZveDBIMmdraGY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi84ZDY2NmQtMDZhYi00NGQyLWE2YTUt
YWY2MzVkODc1NTc1LzEvbk05VDhlQ3ViMTh6MjgtQTZveDBIMmdraGY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi84ZDY2NmQtMDZhYi00NGQyLWE2YTUtYWY2MzVkODc1NTc1
LzEvbk05VDhlQ3ViMTh6MjgtQTZveDBIMmdraGY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxf8O8hTS
LAOKpKF17C3F8fTJoQhGaxy3GE34YHsqpG3jjGV0HEhoS/NrgeJRs+Pngzec7mtH
l+AQB1xbLVJ8sjHsvgtBlC+x6z8r5olnEQthwq5YTciJv3wWZ6dRiZZxSj5qKAT+
CkAWIEyf/bG5k6Hc67lU1sPxvKMHVep2LobU3oYTh+pNRsRETURH1zty6gZtqGXO
tzjT0NGUOJhe6v37fdH6Me29uVNK6y7c6lIN8u7iO5HQEGdVgAfCrUufFXSpI8tI
SnbiyWu6W8ZNPiMv0dfOW1kJilxDI7usRrNQ5HiCo+DbCMAKpcNHenvWsFPqx/a8
S0IVWJkh2x6xMA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 02:29:22 2025 by rpki-client