Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/16429c-9334-4705-8821-3f2eb56b2bd3/1/Nyha4i1x7yRHjwyuwPKcfdkUw8g.mft
File:                     Nyha4i1x7yRHjwyuwPKcfdkUw8g.mft (raw, json)
Hash identifier:          vetiIU4MFG/VkPuZM3hoj1YTYcev2bdPvmQKVem0V+c=
Subject key identifier:   75:7C:55:1D:DC:5C:D0:29:C6:BD:82:DE:16:0C:5A:F9:1A:D4:A1:8D
Authority key identifier: 37:28:5A:E2:2D:71:EF:24:47:8F:0C:AE:C0:F2:9C:7D:D9:14:C3:C8
Certificate issuer:       /CN=37285ae22d71ef24478f0caec0f29c7dd914c3c8
Certificate serial:       01976170A9A53A8EE2307DB39703A8EA7F9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nyha4i1x7yRHjwyuwPKcfdkUw8g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/16429c-9334-4705-8821-3f2eb56b2bd3/1/Nyha4i1x7yRHjwyuwPKcfdkUw8g.mft
Manifest number:          0758
Signing time:             Thu 12 Jun 2025 00:01:02 +0000
Manifest this update:     Thu 12 Jun 2025 00:01:02 +0000
Manifest next update:     Fri 13 Jun 2025 00:01:02 +0000
Files and hashes:         1: GfCkDNWZJC7tTqAONgQkcSI9t8c.roa (hash: ioLhHD20h58KhY7GJ61ivoHQWsANqXCHQxdSr8iWjVQ=)
                          2: Nyha4i1x7yRHjwyuwPKcfdkUw8g.crl (hash: 8bzLl6sHiLdLi8tvYS+TbyUzC/r1JIfT5ydXBK7KUwY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/16429c-9334-4705-8821-3f2eb56b2bd3/1/Nyha4i1x7yRHjwyuwPKcfdkUw8g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/16429c-9334-4705-8821-3f2eb56b2bd3/1/Nyha4i1x7yRHjwyuwPKcfdkUw8g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Nyha4i1x7yRHjwyuwPKcfdkUw8g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Jun 2025 21:26:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:61:70:a9:a5:3a:8e:e2:30:7d:b3:97:03:a8:ea:7f:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37285ae22d71ef24478f0caec0f29c7dd914c3c8
        Validity
            Not Before: Jun 12 00:01:02 2025 GMT
            Not After : Jun 13 00:01:02 2025 GMT
        Subject: CN=757c551ddc5cd029c6bd82de160c5af91ad4a18d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:71:84:6f:1c:4b:92:8f:71:49:19:e1:58:aa:
                    fe:da:a0:c3:10:0c:42:33:3d:23:c2:bf:2b:a9:01:
                    7d:77:8f:23:01:38:b9:54:31:c0:2c:08:a8:a1:ff:
                    66:7a:95:2e:03:d9:70:d5:a7:6c:fd:e1:33:3d:f0:
                    da:61:ea:66:5e:64:dc:ab:93:63:e2:f0:19:77:56:
                    17:b0:99:b0:17:c0:3f:7e:b0:13:d1:87:ee:4f:25:
                    cc:5a:f2:db:81:f2:59:28:da:c4:c1:68:b0:64:53:
                    f9:90:06:e3:8a:55:45:73:1c:28:98:bd:9a:ea:75:
                    61:02:66:b8:f1:fb:4c:c2:6c:a9:54:32:04:7f:f8:
                    c0:ee:46:21:53:7e:ac:2a:00:cf:22:cb:20:03:f0:
                    c7:9b:56:ee:f4:42:15:90:d0:2b:31:a2:ac:35:5c:
                    d5:c2:dc:26:39:b0:dd:49:33:06:b9:1f:5f:b2:49:
                    82:fe:35:a0:7e:f2:ec:e2:c0:85:e0:c3:04:8d:f2:
                    26:40:03:4a:96:7a:b7:c4:f7:59:0c:05:8e:ac:59:
                    b5:0c:80:e7:56:37:a4:06:03:ec:e0:1d:8a:8d:0c:
                    a8:71:b7:65:79:ed:8b:4e:ce:0e:e2:f7:33:d7:55:
                    10:f7:91:3a:84:41:d1:de:1d:1d:42:61:bd:c9:d9:
                    8c:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:7C:55:1D:DC:5C:D0:29:C6:BD:82:DE:16:0C:5A:F9:1A:D4:A1:8D
            X509v3 Authority Key Identifier:
                keyid:37:28:5A:E2:2D:71:EF:24:47:8F:0C:AE:C0:F2:9C:7D:D9:14:C3:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nyha4i1x7yRHjwyuwPKcfdkUw8g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/16429c-9334-4705-8821-3f2eb56b2bd3/1/Nyha4i1x7yRHjwyuwPKcfdkUw8g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/16429c-9334-4705-8821-3f2eb56b2bd3/1/Nyha4i1x7yRHjwyuwPKcfdkUw8g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:ff:8a:e1:51:c3:7c:c5:e3:5b:be:3c:4c:66:b3:c6:75:e3:
         02:63:75:2e:23:e7:23:cc:56:8b:17:a3:92:16:3e:a8:d7:42:
         0a:fc:95:11:a3:f9:f1:25:4c:b9:9d:d3:74:f1:26:87:4c:39:
         14:b6:42:e5:16:1b:cf:53:90:0e:21:58:9b:01:17:44:5a:bd:
         b2:db:09:d0:fc:d6:9a:23:8c:3a:76:e9:28:4e:89:8d:ac:bf:
         84:c9:f4:27:62:6d:da:20:9f:c2:d3:ce:6b:bd:f9:dd:68:66:
         69:ae:72:3b:5f:31:a2:83:20:bb:5a:a8:b8:d2:04:e2:30:ba:
         24:f8:cc:9d:c4:96:9d:bb:b5:8d:d2:40:df:21:e7:30:d3:47:
         b3:06:a3:1c:35:93:52:08:94:40:bd:f6:1b:df:37:55:ce:8b:
         1a:e6:4d:6f:87:c4:b8:07:fc:57:4d:6c:e3:a5:80:6c:bd:5b:
         02:f0:8c:21:2c:90:a2:ed:dc:af:c3:44:62:40:b2:e9:ec:8f:
         f9:b9:f0:ca:3a:76:79:d2:23:07:0b:a9:c5:7b:8e:dd:c5:d8:
         30:e6:09:36:8c:db:19:c6:21:79:de:bc:0e:ef:a2:ec:e8:44:
         bd:9f:63:85:d9:a8:75:fa:17:f2:d5:5e:9f:be:3c:2d:f7:54:
         ae:bf:a6:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdhcKmlOo7iMH2zlwOo6n+aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3Mjg1YWUyMmQ3MWVmMjQ0NzhmMGNhZWMwZjI5YzdkZDkx
NGMzYzgwHhcNMjUwNjEyMDAwMTAyWhcNMjUwNjEzMDAwMTAyWjAzMTEwLwYDVQQD
Eyg3NTdjNTUxZGRjNWNkMDI5YzZiZDgyZGUxNjBjNWFmOTFhZDRhMThkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyHGEbxxLko9xSRnhWKr+2qDDEAxC
Mz0jwr8rqQF9d48jATi5VDHALAioof9mepUuA9lw1ads/eEzPfDaYepmXmTcq5Nj
4vAZd1YXsJmwF8A/frAT0YfuTyXMWvLbgfJZKNrEwWiwZFP5kAbjilVFcxwomL2a
6nVhAma48ftMwmypVDIEf/jA7kYhU36sKgDPIssgA/DHm1bu9EIVkNArMaKsNVzV
wtwmObDdSTMGuR9fskmC/jWgfvLs4sCF4MMEjfImQANKlnq3xPdZDAWOrFm1DIDn
VjekBgPs4B2KjQyocbdlee2LTs4O4vcz11UQ95E6hEHR3h0dQmG9ydmMxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHV8VR3cXNApxr2C3hYMWvka1KGNMB8GA1UdIwQY
MBaAFDcoWuItce8kR48MrsDynH3ZFMPIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnloYTRpMXg3eVJIand5dXdQS2NmZGtVdzhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8xNjQyOWMtOTMzNC00NzA1LTg4MjEt
M2YyZWI1NmIyYmQzLzEvTnloYTRpMXg3eVJIand5dXdQS2NmZGtVdzhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS8xNjQyOWMtOTMzNC00NzA1LTg4MjEtM2YyZWI1NmIyYmQz
LzEvTnloYTRpMXg3eVJIand5dXdQS2NmZGtVdzhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvP+K4VHD
fMXjW748TGazxnXjAmN1LiPnI8xWixejkhY+qNdCCvyVEaP58SVMuZ3TdPEmh0w5
FLZC5RYbz1OQDiFYmwEXRFq9stsJ0PzWmiOMOnbpKE6Jjay/hMn0J2Jt2iCfwtPO
a7353Whmaa5yO18xooMgu1qouNIE4jC6JPjMncSWnbu1jdJA3yHnMNNHswajHDWT
UgiUQL32G983Vc6LGuZNb4fEuAf8V01s46WAbL1bAvCMISyQou3cr8NEYkCy6eyP
+bnwyjp2edIjBwupxXuO3cXYMOYJNozbGcYhed68Du+i7OhEvZ9jhdmodfoX8tVe
n748LfdUrr+mBw==
-----END CERTIFICATE-----
Generated at Thu Jun 12 05:49:00 2025 by rpki-client