Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/nHPZRT--37gMRUO7Up_DMMH4wc4.mft
File:                     nHPZRT--37gMRUO7Up_DMMH4wc4.mft (raw, json)
Hash identifier:          C841iNy5qUL3iM45LyDczEl3MXXRJVWw1wA3Yp9Pthc=
Subject key identifier:   23:36:DC:EE:E3:ED:5F:96:82:D9:9A:52:D8:F9:2D:52:76:43:47:90
Authority key identifier: 9C:73:D9:45:3F:BE:DF:B8:0C:45:43:BB:52:9F:C3:30:C1:F8:C1:CE
Certificate issuer:       /CN=9c73d9453fbedfb80c4543bb529fc330c1f8c1ce
Certificate serial:       019849D312E9B951F03D2C811D5F627228A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nHPZRT--37gMRUO7Up_DMMH4wc4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/nHPZRT--37gMRUO7Up_DMMH4wc4.mft
Manifest number:          0BB6
Signing time:             Sun 27 Jul 2025 03:00:26 +0000
Manifest this update:     Sun 27 Jul 2025 03:00:26 +0000
Manifest next update:     Mon 28 Jul 2025 03:00:26 +0000
Files and hashes:         1: AMTfdcOhvN2UxA7mt3gv3KECuGg.roa (hash: k51GSY+oL6d3vSnVOqR7gGcER+6PBSvBsmHDXYmEq2c=)
                          2: IZ4_8o0uG1RVAax56_hcAW3WTtc.roa (hash: BLF9NvSAp12xGKGCWF6fmakXoIQEimqM8wkdCYNJdbY=)
                          3: OfxRKdN2bPZI0fvyGrpUm_OCPQs.roa (hash: lVQukuR8pvFzQlCkS5KRF6YO+By1WT+Hs0uHk5OATm0=)
                          4: ieAfCh_vwbBTbF3DGBJXQYMx9Pw.roa (hash: N095uXaZbk2Jvru/0oYsrQzeZ/eKCMXo6ETE3DefpcQ=)
                          5: j4cd6L8tYRDjLejdv94aClKAGXU.roa (hash: WlNinENED4PfFKrXHfbYinzDLlIPfYjUPCjvbvhk+i8=)
                          6: nHPZRT--37gMRUO7Up_DMMH4wc4.crl (hash: 9VOopOkpTHv1NaKbunjBhVH1Zxa7Ohb1LNncBU9gnek=)
                          7: xe-87aH9X1grSznD-2-c4OZyYHo.roa (hash: S80ekAfHbqsZOpsBTbZwj0DAL1iEaOufRZ1+nQUXDqE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/nHPZRT--37gMRUO7Up_DMMH4wc4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/nHPZRT--37gMRUO7Up_DMMH4wc4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nHPZRT--37gMRUO7Up_DMMH4wc4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:d3:12:e9:b9:51:f0:3d:2c:81:1d:5f:62:72:28:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c73d9453fbedfb80c4543bb529fc330c1f8c1ce
        Validity
            Not Before: Jul 27 03:00:26 2025 GMT
            Not After : Jul 28 03:00:26 2025 GMT
        Subject: CN=2336dceee3ed5f9682d99a52d8f92d5276434790
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:3d:47:16:e6:b1:45:12:21:32:75:fa:ea:68:
                    71:7f:8e:bb:1b:ef:b5:15:37:5c:f2:98:54:a5:b2:
                    9e:21:6a:53:cc:c2:a9:76:84:15:7c:4c:3f:f3:e3:
                    02:fc:53:19:10:03:f2:ee:9a:ce:13:b4:d4:26:af:
                    d5:fd:c1:b1:db:92:4a:45:61:43:07:e9:f6:bb:e8:
                    2b:e5:4c:ca:3f:f1:53:96:48:2f:84:97:74:cd:28:
                    92:2b:2a:4a:7f:c2:e8:5b:ce:02:6c:ce:bc:56:c6:
                    c9:c9:1d:ba:cd:97:c2:f6:30:1b:03:2b:58:5d:8f:
                    76:ea:94:69:40:e6:af:91:b1:9b:dc:ec:f0:bb:8a:
                    eb:70:35:fa:73:4e:c4:e1:84:70:7d:4e:00:ec:1b:
                    99:7f:a6:28:81:0b:94:ac:7e:cf:f6:9f:7d:7f:c1:
                    1e:56:3f:3b:b7:a4:f1:a8:bb:d8:05:9a:62:6f:83:
                    ca:19:cc:ff:7e:2b:04:42:50:5f:3e:db:6e:cf:d8:
                    06:e5:61:31:41:a3:3c:36:f6:ed:44:80:30:3b:86:
                    2a:a2:64:5c:b0:f3:3c:45:78:8c:1c:88:28:5f:b6:
                    a5:80:38:fb:3f:fd:67:8d:a1:84:e5:bf:a0:b1:c7:
                    c9:cb:2e:83:5b:a8:31:b5:13:5e:7d:3b:cc:b6:b6:
                    60:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:36:DC:EE:E3:ED:5F:96:82:D9:9A:52:D8:F9:2D:52:76:43:47:90
            X509v3 Authority Key Identifier:
                keyid:9C:73:D9:45:3F:BE:DF:B8:0C:45:43:BB:52:9F:C3:30:C1:F8:C1:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nHPZRT--37gMRUO7Up_DMMH4wc4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/nHPZRT--37gMRUO7Up_DMMH4wc4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/nHPZRT--37gMRUO7Up_DMMH4wc4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:1a:c9:37:34:06:e8:7f:71:f4:98:90:62:09:52:b0:71:18:
         cd:30:6a:a1:32:3a:30:e9:70:97:01:78:78:c8:34:cf:49:70:
         b1:22:97:2f:c8:75:e8:56:62:4b:1d:7b:16:a2:27:63:fc:93:
         9c:0c:c9:0f:14:35:ab:8b:d3:6b:cb:67:74:9b:f9:f8:88:7d:
         76:6e:4b:7f:74:6a:a1:25:27:b7:5f:41:75:9a:56:30:64:36:
         cb:c9:2d:95:49:0d:0c:50:60:ab:b4:d0:be:30:fe:86:55:19:
         7f:2c:75:7e:05:fb:15:01:60:80:ec:5b:f5:ca:c4:78:3b:b1:
         d5:16:99:14:46:a9:fb:12:95:0b:4a:27:f3:99:73:83:9a:93:
         42:23:1d:2d:ec:ed:c0:8e:fe:84:58:62:2d:7e:28:c0:b0:ba:
         ce:99:a9:1b:01:80:61:2d:ea:e7:88:31:d6:62:32:61:63:29:
         ce:31:3a:90:68:a8:18:ab:d5:b1:fc:4d:81:db:4c:a7:29:b2:
         a9:0b:c6:9a:14:4c:90:d1:12:b6:cc:b9:b2:8d:e6:e2:78:6d:
         ce:1d:b2:06:0e:ac:cd:b1:4c:fd:2e:52:c8:94:3f:d1:50:34:
         d6:96:fb:bf:32:79:fb:20:16:dd:de:0a:82:ae:6d:1f:80:fa:
         a5:ee:b7:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJ0xLpuVHwPSyBHV9iciihMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljNzNkOTQ1M2ZiZWRmYjgwYzQ1NDNiYjUyOWZjMzMwYzFm
OGMxY2UwHhcNMjUwNzI3MDMwMDI2WhcNMjUwNzI4MDMwMDI2WjAzMTEwLwYDVQQD
EygyMzM2ZGNlZWUzZWQ1Zjk2ODJkOTlhNTJkOGY5MmQ1Mjc2NDM0NzkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnD1HFuaxRRIhMnX66mhxf467G++1
FTdc8phUpbKeIWpTzMKpdoQVfEw/8+MC/FMZEAPy7prOE7TUJq/V/cGx25JKRWFD
B+n2u+gr5UzKP/FTlkgvhJd0zSiSKypKf8LoW84CbM68VsbJyR26zZfC9jAbAytY
XY926pRpQOavkbGb3Ozwu4rrcDX6c07E4YRwfU4A7BuZf6YogQuUrH7P9p99f8Ee
Vj87t6TxqLvYBZpib4PKGcz/fisEQlBfPttuz9gG5WExQaM8NvbtRIAwO4YqomRc
sPM8RXiMHIgoX7algDj7P/1njaGE5b+gscfJyy6DW6gxtRNefTvMtrZg0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCM23O7j7V+WgtmaUtj5LVJ2Q0eQMB8GA1UdIwQY
MBaAFJxz2UU/vt+4DEVDu1KfwzDB+MHOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkhQWlJULS0zN2dNUlVPN1VwX0RNTUg0d2M0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9iMzUzNzktMjEyMi00MTkxLTg4MjEt
YzQ3ZTE4ZGYwMzcxLzEvbkhQWlJULS0zN2dNUlVPN1VwX0RNTUg0d2M0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC9iMzUzNzktMjEyMi00MTkxLTg4MjEtYzQ3ZTE4ZGYwMzcx
LzEvbkhQWlJULS0zN2dNUlVPN1VwX0RNTUg0d2M0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAixrJNzQG
6H9x9JiQYglSsHEYzTBqoTI6MOlwlwF4eMg0z0lwsSKXL8h16FZiSx17FqInY/yT
nAzJDxQ1q4vTa8tndJv5+Ih9dm5Lf3RqoSUnt19BdZpWMGQ2y8ktlUkNDFBgq7TQ
vjD+hlUZfyx1fgX7FQFggOxb9crEeDux1RaZFEap+xKVC0on85lzg5qTQiMdLezt
wI7+hFhiLX4owLC6zpmpGwGAYS3q54gx1mIyYWMpzjE6kGioGKvVsfxNgdtMpymy
qQvGmhRMkNEStsy5so3m4nhtzh2yBg6szbFM/S5SyJQ/0VA01pb7vzJ5+yAW3d4K
gq5tH4D6pe63gg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 08:28:20 2025 by rpki-client