Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.mft
File:                     CNedINdqndsHW5T58ABSqyGCdrc.mft (raw, json)
Hash identifier:          XG3YGAJg4AO4luGKbdJ/u7m0YAPrloaz5jV+njXKUXs=
Subject key identifier:   58:30:73:91:F6:DB:EF:43:E8:06:99:1B:E2:50:4A:D8:78:5F:EE:E3
Authority key identifier: 08:D7:9D:20:D7:6A:9D:DB:07:5B:94:F9:F0:00:52:AB:21:82:76:B7
Certificate issuer:       /CN=08d79d20d76a9ddb075b94f9f00052ab218276b7
Certificate serial:       0198368356E82A21272931EB3048AF156B53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CNedINdqndsHW5T58ABSqyGCdrc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.mft
Manifest number:          0FC2
Signing time:             Wed 23 Jul 2025 09:00:33 +0000
Manifest this update:     Wed 23 Jul 2025 09:00:33 +0000
Manifest next update:     Thu 24 Jul 2025 09:00:33 +0000
Files and hashes:         1: CNedINdqndsHW5T58ABSqyGCdrc.crl (hash: MnMhFU0kzG012qBBhVl2NbT3ml+RAfKm5d31G0wMTZo=)
                          2: NxR6rjQYDvK-6beKZqhb21Ma0h0.roa (hash: eDS+0w8Ojc9YalXnJemejPGahb1kTWYCKBq2prUt9qg=)
                          3: _BQI9-Z6Ir5h5KACcOfrToSjkeU.roa (hash: +8QwmWebGpDaCA9AoYcnSa24keLkeW7OwUobTrC8xMY=)
                          4: ytooMvIrVe1UKIoWb2AsvqDHusU.roa (hash: FNi924Rn+Q0YpiKfx0DUW4i6K1Um3nkEm9RbN6FN7Eg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CNedINdqndsHW5T58ABSqyGCdrc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Jul 2025 09:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:36:83:56:e8:2a:21:27:29:31:eb:30:48:af:15:6b:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08d79d20d76a9ddb075b94f9f00052ab218276b7
        Validity
            Not Before: Jul 23 09:00:33 2025 GMT
            Not After : Jul 24 09:00:33 2025 GMT
        Subject: CN=58307391f6dbef43e806991be2504ad8785feee3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e2:ae:77:db:81:35:e7:f1:de:d3:16:d7:15:
                    44:53:25:ff:22:b1:db:1a:15:fd:53:b8:2e:35:c7:
                    1b:13:bb:77:c9:4d:28:a7:86:f7:46:f3:22:2f:c7:
                    83:13:b9:97:77:b0:62:6c:48:20:de:8a:06:92:ff:
                    53:19:ac:1a:6b:19:25:37:9c:24:26:f4:9f:89:3c:
                    b0:2b:66:7d:4e:e4:29:2a:f9:49:5a:f7:9e:a0:21:
                    97:de:af:3d:f5:aa:ee:b1:33:99:db:ad:72:7c:71:
                    f4:c1:54:93:e8:fa:74:b5:43:a7:9a:df:d8:e8:ab:
                    d8:d8:1c:3d:75:05:7b:b2:79:8c:39:99:4e:57:de:
                    5f:a1:6f:7b:70:7a:42:80:22:85:80:8f:6f:49:74:
                    74:c9:48:bc:e7:af:2e:8f:06:a3:63:9a:71:f2:1d:
                    a6:67:90:a6:5d:c0:66:0a:1e:4b:85:96:6b:d7:61:
                    dc:cb:ef:c5:46:b3:35:32:5b:19:9f:12:95:83:8f:
                    21:9b:94:e7:e9:96:28:d5:64:60:90:71:7c:72:54:
                    11:c4:f0:df:25:8b:a4:e9:13:aa:b7:dd:56:54:43:
                    94:89:0e:8d:40:f7:d4:e1:ea:60:14:db:41:5e:0f:
                    76:e8:9d:d9:03:e4:c6:57:2f:63:8c:2d:ba:1c:b0:
                    50:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:30:73:91:F6:DB:EF:43:E8:06:99:1B:E2:50:4A:D8:78:5F:EE:E3
            X509v3 Authority Key Identifier:
                keyid:08:D7:9D:20:D7:6A:9D:DB:07:5B:94:F9:F0:00:52:AB:21:82:76:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNedINdqndsHW5T58ABSqyGCdrc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/37109d-1337-4b2d-bc1b-48dc88b56020/1/CNedINdqndsHW5T58ABSqyGCdrc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:89:74:be:cf:0b:c4:91:b9:d0:85:8f:41:62:59:56:82:50:
         82:82:44:42:d8:1c:89:bb:8d:e5:b3:52:16:ae:fa:a3:58:e7:
         1e:aa:b6:1a:d0:d5:3a:c5:a0:b1:b2:06:d0:2d:67:dd:83:ac:
         78:25:83:8f:01:65:dd:00:c1:79:08:8b:8b:ae:ae:55:a9:74:
         1f:f0:75:fa:38:d9:67:d4:43:ee:c4:76:7b:72:6a:0a:f2:dd:
         8d:db:a6:b8:61:5e:81:21:23:f1:8d:0d:26:10:a3:5b:e0:6f:
         e0:e7:13:ad:ce:ca:e3:77:ac:7f:58:cd:62:e5:ec:e3:fc:83:
         04:53:46:36:73:02:ab:d4:25:28:25:f9:d7:d3:d6:ae:5a:3e:
         b2:be:b9:56:0f:4b:5d:b7:82:84:79:8d:46:a4:83:7b:92:60:
         b1:f9:47:c5:4b:c8:8d:0c:a4:23:f4:11:34:cd:b5:a1:bb:7f:
         98:c6:8b:50:fc:60:98:e1:41:12:f2:16:cb:e1:f3:35:a5:ce:
         b6:37:d0:eb:33:83:50:17:47:7a:57:0a:27:ca:db:81:19:a9:
         57:d0:07:1d:ee:72:64:30:2a:71:30:c1:bc:65:c3:da:52:c0:
         4c:df:41:64:b8:c5:a4:95:f2:34:12:eb:bc:8e:87:d3:b7:e8:
         fb:00:0e:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZg2g1boKiEnKTHrMEivFWtTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ZDc5ZDIwZDc2YTlkZGIwNzViOTRmOWYwMDA1MmFiMjE4
Mjc2YjcwHhcNMjUwNzIzMDkwMDMzWhcNMjUwNzI0MDkwMDMzWjAzMTEwLwYDVQQD
Eyg1ODMwNzM5MWY2ZGJlZjQzZTgwNjk5MWJlMjUwNGFkODc4NWZlZWUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqeKud9uBNefx3tMW1xVEUyX/IrHb
GhX9U7guNccbE7t3yU0op4b3RvMiL8eDE7mXd7BibEgg3ooGkv9TGawaaxklN5wk
JvSfiTywK2Z9TuQpKvlJWveeoCGX3q899arusTOZ261yfHH0wVST6Pp0tUOnmt/Y
6KvY2Bw9dQV7snmMOZlOV95foW97cHpCgCKFgI9vSXR0yUi8568ujwajY5px8h2m
Z5CmXcBmCh5LhZZr12Hcy+/FRrM1MlsZnxKVg48hm5Tn6ZYo1WRgkHF8clQRxPDf
JYuk6ROqt91WVEOUiQ6NQPfU4epgFNtBXg926J3ZA+TGVy9jjC26HLBQ2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFgwc5H22+9D6AaZG+JQSth4X+7jMB8GA1UdIwQY
MBaAFAjXnSDXap3bB1uU+fAAUqshgna3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ05lZElOZHFuZHNIVzVUNThBQlNxeUdDZHJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8zNzEwOWQtMTMzNy00YjJkLWJjMWIt
NDhkYzg4YjU2MDIwLzEvQ05lZElOZHFuZHNIVzVUNThBQlNxeUdDZHJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS8zNzEwOWQtMTMzNy00YjJkLWJjMWItNDhkYzg4YjU2MDIw
LzEvQ05lZElOZHFuZHNIVzVUNThBQlNxeUdDZHJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqIl0vs8L
xJG50IWPQWJZVoJQgoJEQtgcibuN5bNSFq76o1jnHqq2GtDVOsWgsbIG0C1n3YOs
eCWDjwFl3QDBeQiLi66uVal0H/B1+jjZZ9RD7sR2e3JqCvLdjdumuGFegSEj8Y0N
JhCjW+Bv4OcTrc7K43esf1jNYuXs4/yDBFNGNnMCq9QlKCX519PWrlo+sr65Vg9L
XbeChHmNRqSDe5JgsflHxUvIjQykI/QRNM21obt/mMaLUPxgmOFBEvIWy+HzNaXO
tjfQ6zODUBdHelcKJ8rbgRmpV9AHHe5yZDAqcTDBvGXD2lLATN9BZLjFpJXyNBLr
vI6H07fo+wAOLQ==
-----END CERTIFICATE-----
Generated at Wed Jul 23 18:09:20 2025 by rpki-client