Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/802e9e-f982-449d-8b70-76c05cf5f2e6/1/NpxxPFGYfh_6VIInf18cjLci9Es.mft
File:                     NpxxPFGYfh_6VIInf18cjLci9Es.mft (raw, json)
Hash identifier:          Gz8+7pVKOBpEJoTyxUL71l07QYY8Eo19XJagc9KZvQs=
Subject key identifier:   52:FA:10:A8:74:EB:D9:5C:D1:A0:F6:3F:C9:5D:9E:1C:FF:E5:E2:5F
Authority key identifier: 36:9C:71:3C:51:98:7E:1F:FA:54:82:27:7F:5F:1C:8C:B7:22:F4:4B
Certificate issuer:       /CN=369c713c51987e1ffa5482277f5f1c8cb722f44b
Certificate serial:       0197488D17263170BBC0A4BA64614E9FDBDB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NpxxPFGYfh_6VIInf18cjLci9Es.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/802e9e-f982-449d-8b70-76c05cf5f2e6/1/NpxxPFGYfh_6VIInf18cjLci9Es.mft
Manifest number:          097F
Signing time:             Sat 07 Jun 2025 04:01:35 +0000
Manifest this update:     Sat 07 Jun 2025 04:01:35 +0000
Manifest next update:     Sun 08 Jun 2025 04:01:35 +0000
Files and hashes:         1: 6dTT-rARhT9SKaU0Q5LyIvW6cuU.roa (hash: AGsDOWQR4BMJI4oi03KYaFPz/MqqxHtOCzcXxJU+zUU=)
                          2: 9fxVVEARajC-2ASXFi0_DFGSBc8.roa (hash: hXfrG37neyCRh8L2PA4JPhumP6PxcdmlSO8PbLD9FY4=)
                          3: FW_JqLhHC7LyHZmaeSFALgStml0.roa (hash: pWsELGWJQyn59BiBQF9FnS772zDDCwVPNTG6tAAe2Fg=)
                          4: NpxxPFGYfh_6VIInf18cjLci9Es.crl (hash: 9Jz9Sh/FR7jwbGdhU4s4wMsSUmPAF+GrDVlHJn6AdAU=)
                          5: rwCQmNOuZE_kryjC8QIDqyzBek8.roa (hash: OHzMcdBam5j/wfHUyz5DszdE5+OjpxcpG78RADThpWo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/802e9e-f982-449d-8b70-76c05cf5f2e6/1/NpxxPFGYfh_6VIInf18cjLci9Es.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/802e9e-f982-449d-8b70-76c05cf5f2e6/1/NpxxPFGYfh_6VIInf18cjLci9Es.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NpxxPFGYfh_6VIInf18cjLci9Es.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:8d:17:26:31:70:bb:c0:a4:ba:64:61:4e:9f:db:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=369c713c51987e1ffa5482277f5f1c8cb722f44b
        Validity
            Not Before: Jun  7 04:01:35 2025 GMT
            Not After : Jun  8 04:01:35 2025 GMT
        Subject: CN=52fa10a874ebd95cd1a0f63fc95d9e1cffe5e25f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:97:db:27:87:b1:57:87:2f:6d:55:ce:58:ef:
                    93:62:bb:57:58:df:92:ba:6a:94:12:79:39:9b:68:
                    1d:9e:45:9e:3a:91:9d:8d:d9:bc:fd:50:86:20:fd:
                    60:8f:5b:38:c9:d5:e0:20:83:2c:2e:d2:1d:79:c1:
                    46:7e:6d:ee:88:a2:26:3f:1a:bf:96:f1:30:c7:60:
                    44:ed:4c:f2:30:12:c7:20:3d:a7:a6:27:79:20:cf:
                    6b:b8:66:0c:52:95:be:01:8b:f9:76:70:35:94:7d:
                    0a:61:a1:7e:b5:52:91:d3:05:5d:49:ef:d5:5b:5e:
                    52:5f:b9:5b:65:72:2e:88:c5:0b:a0:0d:28:da:83:
                    ca:7c:f0:ac:c1:8d:e2:23:7f:dc:fd:a2:8f:bb:d9:
                    e3:6b:90:22:88:bb:81:54:44:89:00:3f:31:e4:04:
                    cd:93:a3:26:ec:a7:61:a0:b6:73:1b:55:db:5e:5e:
                    f2:81:40:c8:10:f9:35:08:9a:1d:b2:98:b7:38:c3:
                    2e:e1:6b:f4:1a:79:3d:08:f6:85:16:5b:62:e7:c3:
                    23:90:8b:fc:43:ba:45:d4:24:4c:66:ff:c0:12:33:
                    67:66:26:0d:70:9a:df:c0:3d:36:3b:a1:0c:e7:44:
                    b7:b6:8e:87:4e:93:c6:b8:dd:24:19:23:fc:5c:41:
                    7c:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:FA:10:A8:74:EB:D9:5C:D1:A0:F6:3F:C9:5D:9E:1C:FF:E5:E2:5F
            X509v3 Authority Key Identifier:
                keyid:36:9C:71:3C:51:98:7E:1F:FA:54:82:27:7F:5F:1C:8C:B7:22:F4:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpxxPFGYfh_6VIInf18cjLci9Es.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/802e9e-f982-449d-8b70-76c05cf5f2e6/1/NpxxPFGYfh_6VIInf18cjLci9Es.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/802e9e-f982-449d-8b70-76c05cf5f2e6/1/NpxxPFGYfh_6VIInf18cjLci9Es.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:e0:d1:fb:1b:b8:20:c8:52:60:3f:c5:1b:0b:d5:53:75:b7:
         bf:36:0c:81:dd:4f:5c:24:b2:52:f3:41:6e:7c:98:5c:1a:1a:
         15:53:be:15:60:96:2a:48:d9:15:b0:7c:86:55:b8:62:f3:55:
         ad:9d:e3:d5:89:96:0c:08:b7:f2:3a:93:84:cf:3c:29:0b:d2:
         ea:68:d0:01:c6:d1:17:ba:3a:3e:e1:b7:44:82:3e:a5:2f:01:
         5d:c6:63:70:a2:bc:63:b8:84:43:9c:96:75:45:9e:eb:a8:b7:
         e0:9b:43:53:a4:fc:df:e5:06:51:6a:97:3b:25:3b:ba:d0:70:
         52:8e:17:c0:e2:b9:33:d3:92:40:85:3b:22:6b:74:27:87:c3:
         c0:ce:bf:80:bc:2f:ee:54:e4:59:0a:a5:64:c4:17:43:29:03:
         81:cf:b4:17:04:d2:e7:45:7c:0f:cd:be:a0:35:97:0a:fd:6b:
         62:77:e4:af:31:3b:0f:bd:a6:96:a4:24:99:ea:1b:20:a7:5e:
         e1:f2:82:5c:43:07:51:33:19:cf:2e:c7:24:1f:cb:9c:79:af:
         04:93:2d:1d:75:d7:d2:f1:43:d6:24:43:cb:39:f1:27:60:8b:
         06:45:40:56:b5:a3:bc:7a:41:89:6b:d6:7b:86:aa:21:59:18:
         f4:63:32:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIjRcmMXC7wKS6ZGFOn9vbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2OWM3MTNjNTE5ODdlMWZmYTU0ODIyNzdmNWYxYzhjYjcy
MmY0NGIwHhcNMjUwNjA3MDQwMTM1WhcNMjUwNjA4MDQwMTM1WjAzMTEwLwYDVQQD
Eyg1MmZhMTBhODc0ZWJkOTVjZDFhMGY2M2ZjOTVkOWUxY2ZmZTVlMjVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZfbJ4exV4cvbVXOWO+TYrtXWN+S
umqUEnk5m2gdnkWeOpGdjdm8/VCGIP1gj1s4ydXgIIMsLtIdecFGfm3uiKImPxq/
lvEwx2BE7UzyMBLHID2npid5IM9ruGYMUpW+AYv5dnA1lH0KYaF+tVKR0wVdSe/V
W15SX7lbZXIuiMULoA0o2oPKfPCswY3iI3/c/aKPu9nja5AiiLuBVESJAD8x5ATN
k6Mm7KdhoLZzG1XbXl7ygUDIEPk1CJodspi3OMMu4Wv0Gnk9CPaFFlti58MjkIv8
Q7pF1CRMZv/AEjNnZiYNcJrfwD02O6EM50S3to6HTpPGuN0kGSP8XEF8gwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFL6EKh069lc0aD2P8ldnhz/5eJfMB8GA1UdIwQY
MBaAFDaccTxRmH4f+lSCJ39fHIy3IvRLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnB4eFBGR1lmaF82VklJbmYxOGNqTGNpOUVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84MDJlOWUtZjk4Mi00NDlkLThiNzAt
NzZjMDVjZjVmMmU2LzEvTnB4eFBGR1lmaF82VklJbmYxOGNqTGNpOUVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84MDJlOWUtZjk4Mi00NDlkLThiNzAtNzZjMDVjZjVmMmU2
LzEvTnB4eFBGR1lmaF82VklJbmYxOGNqTGNpOUVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaODR+xu4
IMhSYD/FGwvVU3W3vzYMgd1PXCSyUvNBbnyYXBoaFVO+FWCWKkjZFbB8hlW4YvNV
rZ3j1YmWDAi38jqThM88KQvS6mjQAcbRF7o6PuG3RII+pS8BXcZjcKK8Y7iEQ5yW
dUWe66i34JtDU6T83+UGUWqXOyU7utBwUo4XwOK5M9OSQIU7Imt0J4fDwM6/gLwv
7lTkWQqlZMQXQykDgc+0FwTS50V8D82+oDWXCv1rYnfkrzE7D72mlqQkmeobIKde
4fKCXEMHUTMZzy7HJB/LnHmvBJMtHXXX0vFD1iRDyznxJ2CLBkVAVrWjvHpBiWvW
e4aqIVkY9GMyMg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 10:34:50 2025 by rpki-client