Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/464260-8d7e-4507-b44b-2864707b2b3f/1/nHIayAejJvhxu6oYSWPNYCtcwtY.mft
File:                     nHIayAejJvhxu6oYSWPNYCtcwtY.mft (raw, json)
Hash identifier:          enL/yk5lPNdLPRdYtmfpfsIzzHCaNs0cIG2Yjpc5zA0=
Subject key identifier:   70:46:6B:76:EE:3A:7F:0E:AE:5B:B1:CB:CE:07:2F:D9:B3:E8:9B:FD
Authority key identifier: 9C:72:1A:C8:07:A3:26:F8:71:BB:AA:18:49:63:CD:60:2B:5C:C2:D6
Certificate issuer:       /CN=9c721ac807a326f871bbaa184963cd602b5cc2d6
Certificate serial:       019922C388BCE8C4F437ED181DFF10D4148C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nHIayAejJvhxu6oYSWPNYCtcwtY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/464260-8d7e-4507-b44b-2864707b2b3f/1/nHIayAejJvhxu6oYSWPNYCtcwtY.mft
Manifest number:          1672
Signing time:             Sun 07 Sep 2025 06:01:03 +0000
Manifest this update:     Sun 07 Sep 2025 06:01:03 +0000
Manifest next update:     Mon 08 Sep 2025 06:01:03 +0000
Files and hashes:         1: 9jfoHjHhXlQUp0QHnvy8Xfhd38g.roa (hash: /upMq7FxxL/VBqHPpqBK/s+Z/2QbORhxGy0ijXbQbKE=)
                          2: nHIayAejJvhxu6oYSWPNYCtcwtY.crl (hash: FaZSiO7KeYtPZsMiDgurGCniJx9/62AMxri9j+rf18c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/464260-8d7e-4507-b44b-2864707b2b3f/1/nHIayAejJvhxu6oYSWPNYCtcwtY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/464260-8d7e-4507-b44b-2864707b2b3f/1/nHIayAejJvhxu6oYSWPNYCtcwtY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nHIayAejJvhxu6oYSWPNYCtcwtY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:c3:88:bc:e8:c4:f4:37:ed:18:1d:ff:10:d4:14:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c721ac807a326f871bbaa184963cd602b5cc2d6
        Validity
            Not Before: Sep  7 06:01:03 2025 GMT
            Not After : Sep  8 06:01:03 2025 GMT
        Subject: CN=70466b76ee3a7f0eae5bb1cbce072fd9b3e89bfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:96:56:7a:64:18:9f:d0:e3:6d:0e:55:92:51:
                    c7:aa:06:2d:56:2a:f6:34:83:5f:25:80:fb:46:b4:
                    93:01:44:2b:db:23:66:e4:91:57:23:68:51:36:47:
                    09:42:c7:93:28:b2:3d:a1:ec:28:5f:47:d6:e4:6b:
                    5a:e8:4f:b2:7b:90:0f:5f:f1:17:6a:e2:88:04:0d:
                    39:c7:0d:c3:a8:a3:e7:39:56:11:f2:e8:d1:1b:5c:
                    53:1a:5d:da:aa:05:e8:1a:ec:46:28:68:50:df:e9:
                    d9:8c:2f:be:a0:24:e3:c9:67:ee:82:76:8f:d9:4b:
                    d3:05:2a:5e:57:70:0d:d6:d4:0c:58:ad:05:3d:7a:
                    67:ae:df:3e:d5:84:1f:90:42:3e:74:19:e0:a6:f3:
                    84:65:c5:b5:10:16:2b:81:dc:04:b3:03:52:e2:18:
                    a5:6e:af:63:e3:f7:a4:f0:95:8f:1a:1a:90:5e:70:
                    64:29:9b:df:7e:f6:20:61:45:ff:94:35:f2:07:e6:
                    44:e6:53:55:43:b6:8e:92:ec:a3:ea:21:dc:33:22:
                    42:99:18:dc:a1:ec:16:21:e3:6d:55:86:14:57:c1:
                    9c:11:a7:b4:fe:30:bd:be:54:8a:96:cf:db:20:d8:
                    10:43:81:f0:e8:05:5b:8b:6e:7b:5e:46:bb:a3:2f:
                    c0:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:46:6B:76:EE:3A:7F:0E:AE:5B:B1:CB:CE:07:2F:D9:B3:E8:9B:FD
            X509v3 Authority Key Identifier:
                keyid:9C:72:1A:C8:07:A3:26:F8:71:BB:AA:18:49:63:CD:60:2B:5C:C2:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nHIayAejJvhxu6oYSWPNYCtcwtY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/464260-8d7e-4507-b44b-2864707b2b3f/1/nHIayAejJvhxu6oYSWPNYCtcwtY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/464260-8d7e-4507-b44b-2864707b2b3f/1/nHIayAejJvhxu6oYSWPNYCtcwtY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:96:42:6f:e2:dd:24:42:44:e0:bc:2f:18:b7:b4:fa:e9:81:
         ae:88:e1:d6:2a:12:ef:60:64:b3:de:9e:61:b1:28:94:89:3f:
         6e:99:21:f7:7e:58:43:22:d9:23:cf:94:37:1e:ff:23:08:dc:
         0c:3d:c8:3e:cc:bf:4a:b5:33:34:0e:7e:9b:72:12:57:ea:c8:
         03:61:73:ff:48:80:89:7e:15:05:e3:95:de:81:47:79:13:81:
         41:8a:f9:3d:c2:95:1f:ae:08:8c:db:85:f7:fb:5e:ba:ec:91:
         18:ac:21:6e:a8:65:ca:94:c7:ea:03:53:65:67:69:0a:ec:d8:
         44:65:df:a5:0b:f8:60:e6:88:be:3e:b1:f7:10:ef:b2:25:8c:
         ef:d2:35:e3:d5:b4:31:34:e2:01:67:74:9e:e7:86:2d:2d:6b:
         1e:f5:8a:d9:db:6b:7a:e8:de:be:ff:97:45:a8:c1:81:fa:e9:
         16:32:3c:d3:34:06:89:1b:2b:f2:40:41:82:94:e8:7c:57:7e:
         b4:cf:c1:91:f6:06:a4:2f:e2:f1:35:99:ec:d8:d8:e0:91:cd:
         7b:0f:0e:ee:b7:7c:34:8d:d8:98:ff:db:ce:bf:25:60:57:d0:
         fa:ef:d1:1d:8b:49:48:f8:88:09:dc:de:14:15:f5:82:c7:45:
         26:a6:64:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiw4i86MT0N+0YHf8Q1BSMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljNzIxYWM4MDdhMzI2Zjg3MWJiYWExODQ5NjNjZDYwMmI1
Y2MyZDYwHhcNMjUwOTA3MDYwMTAzWhcNMjUwOTA4MDYwMTAzWjAzMTEwLwYDVQQD
Eyg3MDQ2NmI3NmVlM2E3ZjBlYWU1YmIxY2JjZTA3MmZkOWIzZTg5YmZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJZWemQYn9DjbQ5VklHHqgYtVir2
NINfJYD7RrSTAUQr2yNm5JFXI2hRNkcJQseTKLI9oewoX0fW5Gta6E+ye5APX/EX
auKIBA05xw3DqKPnOVYR8ujRG1xTGl3aqgXoGuxGKGhQ3+nZjC++oCTjyWfugnaP
2UvTBSpeV3AN1tQMWK0FPXpnrt8+1YQfkEI+dBngpvOEZcW1EBYrgdwEswNS4hil
bq9j4/ek8JWPGhqQXnBkKZvffvYgYUX/lDXyB+ZE5lNVQ7aOkuyj6iHcMyJCmRjc
oewWIeNtVYYUV8GcEae0/jC9vlSKls/bINgQQ4Hw6AVbi257Xka7oy/AbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHBGa3buOn8Orluxy84HL9mz6Jv9MB8GA1UdIwQY
MBaAFJxyGsgHoyb4cbuqGEljzWArXMLWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkhJYXlBZWpKdmh4dTZvWVNXUE5ZQ3Rjd3RZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi80NjQyNjAtOGQ3ZS00NTA3LWI0NGIt
Mjg2NDcwN2IyYjNmLzEvbkhJYXlBZWpKdmh4dTZvWVNXUE5ZQ3Rjd3RZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi80NjQyNjAtOGQ3ZS00NTA3LWI0NGItMjg2NDcwN2IyYjNm
LzEvbkhJYXlBZWpKdmh4dTZvWVNXUE5ZQ3Rjd3RZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA5ZCb+Ld
JEJE4LwvGLe0+umBrojh1ioS72Bks96eYbEolIk/bpkh935YQyLZI8+UNx7/Iwjc
DD3IPsy/SrUzNA5+m3ISV+rIA2Fz/0iAiX4VBeOV3oFHeROBQYr5PcKVH64IjNuF
9/teuuyRGKwhbqhlypTH6gNTZWdpCuzYRGXfpQv4YOaIvj6x9xDvsiWM79I149W0
MTTiAWd0nueGLS1rHvWK2dtreujevv+XRajBgfrpFjI80zQGiRsr8kBBgpTofFd+
tM/BkfYGpC/i8TWZ7NjY4JHNew8O7rd8NI3YmP/bzr8lYFfQ+u/RHYtJSPiICdze
FBX1gsdFJqZk6Q==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:09:31 2025 by rpki-client