Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/579507-0f1c-4482-81f8-23becabee485/1/nhk9b0gGf_uHMsxDJpdUIxPcZ4M.mft
File:                     nhk9b0gGf_uHMsxDJpdUIxPcZ4M.mft (raw, json)
Hash identifier:          uMmw205ymdKijgN7Upa+jPx/EvAXshypMYsaQjMeC/k=
Subject key identifier:   7E:CA:7E:01:D0:02:0C:D7:D2:6B:6E:F4:86:56:70:17:8F:50:4A:BF
Authority key identifier: 9E:19:3D:6F:48:06:7F:FB:87:32:CC:43:26:97:54:23:13:DC:67:83
Certificate issuer:       /CN=9e193d6f48067ffb8732cc432697542313dc6783
Certificate serial:       0198496713293A3FE2EC546725E250CDF6FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nhk9b0gGf_uHMsxDJpdUIxPcZ4M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/579507-0f1c-4482-81f8-23becabee485/1/nhk9b0gGf_uHMsxDJpdUIxPcZ4M.mft
Manifest number:          0265
Signing time:             Sun 27 Jul 2025 01:02:28 +0000
Manifest this update:     Sun 27 Jul 2025 01:02:28 +0000
Manifest next update:     Mon 28 Jul 2025 01:02:28 +0000
Files and hashes:         1: nhk9b0gGf_uHMsxDJpdUIxPcZ4M.crl (hash: 7uy8+Zg3RIy1NW01NXWhHh+i+iOt77wvzUdYbQa1wjI=)
                          2: qretLq-2TRV_kLur_ZfrXtWfGk4.roa (hash: K7yWDcrFHXcXI8MhU1CBJxRjChOhWDTmYbsiBA7G8MM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/579507-0f1c-4482-81f8-23becabee485/1/nhk9b0gGf_uHMsxDJpdUIxPcZ4M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/579507-0f1c-4482-81f8-23becabee485/1/nhk9b0gGf_uHMsxDJpdUIxPcZ4M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nhk9b0gGf_uHMsxDJpdUIxPcZ4M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:67:13:29:3a:3f:e2:ec:54:67:25:e2:50:cd:f6:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e193d6f48067ffb8732cc432697542313dc6783
        Validity
            Not Before: Jul 27 01:02:28 2025 GMT
            Not After : Jul 28 01:02:28 2025 GMT
        Subject: CN=7eca7e01d0020cd7d26b6ef4865670178f504abf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:85:82:b2:61:20:cb:76:63:c1:30:0b:21:de:
                    6e:fb:dc:95:63:52:37:c4:74:78:b7:e5:80:2c:b0:
                    ba:72:c7:67:40:d2:0d:7e:1e:f5:3f:fd:5c:ae:b1:
                    76:d8:68:0e:83:3a:26:94:dd:50:cf:00:38:92:ba:
                    9d:37:af:5d:6b:e2:22:96:26:bf:0e:80:21:82:6a:
                    bb:2f:89:fd:54:44:19:54:29:5a:ce:9c:ce:58:8b:
                    78:bb:cd:63:9c:7b:9e:f6:3b:de:26:bb:ca:12:80:
                    92:63:f9:22:ac:62:fc:65:bd:c1:5b:a9:1e:42:20:
                    52:f2:e1:ab:2f:5e:6f:30:3e:0f:77:7e:ed:2c:dc:
                    a6:f1:1d:75:83:e8:1a:06:4e:57:27:48:8a:e3:92:
                    42:60:db:34:5a:5e:09:55:54:98:44:70:81:9d:4e:
                    80:e6:d0:26:7a:97:fa:a1:0f:f0:84:ae:83:d3:72:
                    e0:d9:3d:29:dc:f3:a3:23:b4:a3:fb:17:d4:e8:a0:
                    a8:84:91:17:7d:50:4b:6d:70:e7:66:b1:1d:3c:18:
                    d9:e5:ad:06:63:91:6e:e2:0f:6b:9b:9c:40:63:e0:
                    cf:e3:e9:73:55:af:ac:dd:19:54:b6:a9:92:f3:65:
                    8d:66:f1:0a:55:0b:22:e1:4d:ca:4d:c8:d4:75:e2:
                    ff:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:CA:7E:01:D0:02:0C:D7:D2:6B:6E:F4:86:56:70:17:8F:50:4A:BF
            X509v3 Authority Key Identifier:
                keyid:9E:19:3D:6F:48:06:7F:FB:87:32:CC:43:26:97:54:23:13:DC:67:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nhk9b0gGf_uHMsxDJpdUIxPcZ4M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/579507-0f1c-4482-81f8-23becabee485/1/nhk9b0gGf_uHMsxDJpdUIxPcZ4M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/579507-0f1c-4482-81f8-23becabee485/1/nhk9b0gGf_uHMsxDJpdUIxPcZ4M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:01:46:ae:8f:fe:e6:bf:27:53:fa:c1:05:f9:c3:9f:f5:f8:
         7e:22:9e:67:42:4e:86:25:37:ad:26:34:9b:f4:4f:f8:11:7e:
         dc:fa:92:91:7c:8c:34:2d:e0:2b:3a:30:ca:33:71:d7:c8:1d:
         63:c0:ab:18:ed:0a:00:57:c1:67:3d:9c:5f:50:b8:4b:14:02:
         ba:5d:e2:48:3a:5b:9e:42:3d:28:b0:4e:1b:98:4b:1a:a4:0a:
         0c:06:db:ce:57:12:f5:4a:14:2d:18:0b:da:56:08:7f:11:a3:
         8f:18:b2:a1:0a:6f:51:87:a9:53:b2:d6:94:f2:f2:0d:f4:68:
         08:6a:9f:7b:ba:e8:d0:78:d4:5e:0d:b5:01:94:79:7e:ae:cf:
         8e:01:a0:58:92:68:59:4a:42:ec:64:54:15:f8:a3:99:20:ed:
         3d:7b:ac:db:6b:e3:ce:5a:f7:ff:4d:f4:7e:ee:3b:60:a7:90:
         8d:f6:56:92:ee:34:7f:7c:4f:17:ae:68:2d:06:38:cb:81:20:
         96:36:84:93:46:95:ee:1a:68:e2:6d:24:23:94:93:f0:d2:21:
         97:21:22:7d:fa:0a:a7:6c:53:49:26:01:89:9a:cc:36:ab:c5:
         e3:08:e7:d8:d4:57:9e:42:21:7a:f4:57:fe:a2:55:f5:dc:e8:
         f9:9c:ae:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJZxMpOj/i7FRnJeJQzfb7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllMTkzZDZmNDgwNjdmZmI4NzMyY2M0MzI2OTc1NDIzMTNk
YzY3ODMwHhcNMjUwNzI3MDEwMjI4WhcNMjUwNzI4MDEwMjI4WjAzMTEwLwYDVQQD
Eyg3ZWNhN2UwMWQwMDIwY2Q3ZDI2YjZlZjQ4NjU2NzAxNzhmNTA0YWJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA04WCsmEgy3ZjwTALId5u+9yVY1I3
xHR4t+WALLC6csdnQNINfh71P/1crrF22GgOgzomlN1QzwA4krqdN69da+Iilia/
DoAhgmq7L4n9VEQZVClazpzOWIt4u81jnHue9jveJrvKEoCSY/kirGL8Zb3BW6ke
QiBS8uGrL15vMD4Pd37tLNym8R11g+gaBk5XJ0iK45JCYNs0Wl4JVVSYRHCBnU6A
5tAmepf6oQ/whK6D03Lg2T0p3POjI7Sj+xfU6KCohJEXfVBLbXDnZrEdPBjZ5a0G
Y5Fu4g9rm5xAY+DP4+lzVa+s3RlUtqmS82WNZvEKVQsi4U3KTcjUdeL/QwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH7KfgHQAgzX0mtu9IZWcBePUEq/MB8GA1UdIwQY
MBaAFJ4ZPW9IBn/7hzLMQyaXVCMT3GeDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmhrOWIwZ0dmX3VITXN4REpwZFVJeFBjWjRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny81Nzk1MDctMGYxYy00NDgyLTgxZjgt
MjNiZWNhYmVlNDg1LzEvbmhrOWIwZ0dmX3VITXN4REpwZFVJeFBjWjRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny81Nzk1MDctMGYxYy00NDgyLTgxZjgtMjNiZWNhYmVlNDg1
LzEvbmhrOWIwZ0dmX3VITXN4REpwZFVJeFBjWjRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhAFGro/+
5r8nU/rBBfnDn/X4fiKeZ0JOhiU3rSY0m/RP+BF+3PqSkXyMNC3gKzowyjNx18gd
Y8CrGO0KAFfBZz2cX1C4SxQCul3iSDpbnkI9KLBOG5hLGqQKDAbbzlcS9UoULRgL
2lYIfxGjjxiyoQpvUYepU7LWlPLyDfRoCGqfe7ro0HjUXg21AZR5fq7PjgGgWJJo
WUpC7GRUFfijmSDtPXus22vjzlr3/030fu47YKeQjfZWku40f3xPF65oLQY4y4Eg
ljaEk0aV7hpo4m0kI5ST8NIhlyEiffoKp2xTSSYBiZrMNqvF4wjn2NRXnkIhevRX
/qJV9dzo+ZyuKA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 04:46:21 2025 by rpki-client