Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft
File:                     NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft (raw, json)
Hash identifier:          meqcztxHUlc/7ifUJwqHCmfzpCbZBEio7qt5P5Rc1DQ=
Subject key identifier:   04:F8:D9:6F:DB:7A:BF:69:F1:DF:96:6C:24:63:74:BD:EE:6A:C7:D7
Authority key identifier: 36:22:FC:2F:8A:D8:B0:08:35:7D:BE:6F:01:95:96:0C:9D:E6:1B:D5
Certificate issuer:       /CN=3622fc2f8ad8b008357dbe6f0195960c9de61bd5
Certificate serial:       01984589F23116637758F806C67FADBF413E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft
Manifest number:          0AA9
Signing time:             Sat 26 Jul 2025 07:02:04 +0000
Manifest this update:     Sat 26 Jul 2025 07:02:04 +0000
Manifest next update:     Sun 27 Jul 2025 07:02:04 +0000
Files and hashes:         1: 43HN-WojVqeLOGbjlvU4KmuDcw8.roa (hash: lA6GODL3wPZINRy3RkLrOMCh7lQspm9tGiMrGo/nCbk=)
                          2: CatpJtFda_C5L7VOLYcMS7IQGMg.roa (hash: idVH/OL7AqXzhoz+Z8IbgG5ci5Pbk+MePCPcgx0hXD0=)
                          3: IilMeITi2WRlzRXCm9op0c2uedk.roa (hash: UrspHFNf1bj1Z6XmUbLX3sSXcdX5yH0r772wbyb2ttQ=)
                          4: NiL8L4rYsAg1fb5vAZWWDJ3mG9U.crl (hash: Pu6YoF2cbZAoDe4bhC4i4ClJVyjp4cCRmzoHseblZ/0=)
                          5: Qv4r9KoCM0llZGGIu0ESO7fsTrk.roa (hash: 2dbd9G4ssUUV7QjZ8jn5D3p3tWBPiALD7SCeLQ3ju+s=)
                          6: pAzvrIoWwcHpcNO5iNiHfwLiAJA.roa (hash: DLnt9qWRp3EI4stZNmwt/HobGa97g3RTR8iRLREX4YA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 06:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:45:89:f2:31:16:63:77:58:f8:06:c6:7f:ad:bf:41:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3622fc2f8ad8b008357dbe6f0195960c9de61bd5
        Validity
            Not Before: Jul 26 07:02:04 2025 GMT
            Not After : Jul 27 07:02:04 2025 GMT
        Subject: CN=04f8d96fdb7abf69f1df966c246374bdee6ac7d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a7:5d:d2:62:b9:56:0a:ef:01:6b:34:38:32:
                    2f:55:dc:f1:03:56:88:74:7a:cf:45:f8:9a:29:af:
                    d4:d9:68:4c:8d:03:19:d8:83:47:27:92:6a:5a:a7:
                    1e:7b:e7:d1:f8:10:3a:c4:94:ac:6a:9c:e9:6f:bf:
                    d6:40:da:9a:e7:3a:94:db:f0:d4:06:66:4a:57:1a:
                    4a:c5:14:54:cd:5d:af:a6:8e:5e:fa:ce:25:c2:52:
                    63:a5:7b:e4:7e:f9:02:e5:f9:de:cb:ae:85:8a:7a:
                    7b:e3:11:05:c3:e1:54:42:30:d3:53:51:b3:a3:ec:
                    48:cd:e1:14:84:fe:81:d2:90:e4:bc:27:fc:0c:75:
                    a5:18:0c:d3:30:8a:98:bc:48:af:42:fd:f6:f3:56:
                    d5:91:56:dc:96:dd:63:6c:64:79:6d:06:db:66:8c:
                    5d:86:1d:f1:31:b1:13:08:22:a8:e1:72:24:a2:82:
                    92:dd:02:ea:b2:32:5f:fe:f5:9b:79:0b:b8:96:ed:
                    6b:46:af:70:77:42:a4:64:7c:be:cb:76:a3:34:c3:
                    32:5c:ab:87:df:e5:4d:f9:25:39:f9:0a:bd:ab:47:
                    f8:2b:97:08:2b:5b:39:ef:ed:1c:1f:20:0b:57:aa:
                    7d:02:e6:31:0d:52:9f:51:46:58:16:04:3b:ca:b8:
                    39:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:F8:D9:6F:DB:7A:BF:69:F1:DF:96:6C:24:63:74:BD:EE:6A:C7:D7
            X509v3 Authority Key Identifier:
                keyid:36:22:FC:2F:8A:D8:B0:08:35:7D:BE:6F:01:95:96:0C:9D:E6:1B:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:b9:1f:b3:04:1d:08:45:17:5f:b2:e6:76:d7:8e:b2:b0:f7:
         d2:d3:7d:a6:85:11:7d:18:ff:d9:aa:09:0d:ce:49:7b:d9:a0:
         c5:88:50:28:f0:c4:8e:ba:a5:5c:b1:67:96:08:5e:80:0a:69:
         73:a2:12:61:29:f2:e3:3d:12:d1:ca:cf:63:26:4f:77:12:97:
         63:44:14:05:b1:fd:98:1c:09:2e:9e:df:19:55:99:6b:14:5e:
         bf:3f:29:16:5e:ae:6f:43:72:2a:30:50:31:2d:a3:fd:54:9e:
         01:e6:2f:5d:13:e8:b3:c4:96:20:b0:de:ff:54:91:6e:99:4b:
         bd:30:8b:5e:64:91:ce:2d:c8:8d:ec:e7:6c:84:33:68:f0:9e:
         c6:61:6e:db:6c:63:74:8a:c9:9a:90:81:5d:c0:2d:6f:86:7a:
         d1:95:ff:7a:cb:7a:68:1c:99:78:c2:81:3e:9c:de:c2:7f:05:
         a0:09:df:f8:63:bc:35:3c:c1:c2:70:b6:c9:af:4f:66:21:9e:
         75:01:cf:0f:39:f5:21:8e:63:9f:72:80:c4:b2:e1:8e:ec:2e:
         cd:94:3f:f2:71:c6:b6:78:a2:15:78:e5:8c:5c:0b:0f:f5:12:
         fd:17:92:0b:c5:0d:db:9a:8a:56:a3:43:10:73:53:a3:3b:16:
         fc:8c:c2:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhFifIxFmN3WPgGxn+tv0E+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2MjJmYzJmOGFkOGIwMDgzNTdkYmU2ZjAxOTU5NjBjOWRl
NjFiZDUwHhcNMjUwNzI2MDcwMjA0WhcNMjUwNzI3MDcwMjA0WjAzMTEwLwYDVQQD
EygwNGY4ZDk2ZmRiN2FiZjY5ZjFkZjk2NmMyNDYzNzRiZGVlNmFjN2Q3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy6dd0mK5VgrvAWs0ODIvVdzxA1aI
dHrPRfiaKa/U2WhMjQMZ2INHJ5JqWqcee+fR+BA6xJSsapzpb7/WQNqa5zqU2/DU
BmZKVxpKxRRUzV2vpo5e+s4lwlJjpXvkfvkC5fney66Finp74xEFw+FUQjDTU1Gz
o+xIzeEUhP6B0pDkvCf8DHWlGAzTMIqYvEivQv3281bVkVbclt1jbGR5bQbbZoxd
hh3xMbETCCKo4XIkooKS3QLqsjJf/vWbeQu4lu1rRq9wd0KkZHy+y3ajNMMyXKuH
3+VN+SU5+Qq9q0f4K5cIK1s57+0cHyALV6p9AuYxDVKfUUZYFgQ7yrg57wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAT42W/ber9p8d+WbCRjdL3uasfXMB8GA1UdIwQY
MBaAFDYi/C+K2LAINX2+bwGVlgyd5hvVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmlMOEw0cllzQWcxZmI1dkFaV1dESjNtRzlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9mNjNlNTgtOWVmYy00MDgyLTgyYmIt
MDg4MzVkZmY2YzRmLzEvTmlMOEw0cllzQWcxZmI1dkFaV1dESjNtRzlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS9mNjNlNTgtOWVmYy00MDgyLTgyYmItMDg4MzVkZmY2YzRm
LzEvTmlMOEw0cllzQWcxZmI1dkFaV1dESjNtRzlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOLkfswQd
CEUXX7LmdteOsrD30tN9poURfRj/2aoJDc5Je9mgxYhQKPDEjrqlXLFnlghegApp
c6ISYSny4z0S0crPYyZPdxKXY0QUBbH9mBwJLp7fGVWZaxRevz8pFl6ub0NyKjBQ
MS2j/VSeAeYvXRPos8SWILDe/1SRbplLvTCLXmSRzi3IjeznbIQzaPCexmFu22xj
dIrJmpCBXcAtb4Z60ZX/est6aByZeMKBPpzewn8FoAnf+GO8NTzBwnC2ya9PZiGe
dQHPDzn1IY5jn3KAxLLhjuwuzZQ/8nHGtniiFXjljFwLD/US/ReSC8UN25qKVqND
EHNTozsW/IzC0A==
-----END CERTIFICATE-----
Generated at Sat Jul 26 15:13:20 2025 by rpki-client