Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.mft
File:                     NmFLrpbBM315e9lm59aoKojfnSk.mft (raw, json)
Hash identifier:          jxEgmdEvry0+tLUKAe0Rb9qW7QK8cTXXRp21gg57iQw=
Subject key identifier:   15:58:A7:1C:8F:D5:E4:DA:6E:A7:6A:EC:08:97:F1:1B:0A:DE:DF:98
Authority key identifier: 36:61:4B:AE:96:C1:33:7D:79:7B:D9:66:E7:D6:A8:2A:88:DF:9D:29
Certificate issuer:       /CN=36614bae96c1337d797bd966e7d6a82a88df9d29
Certificate serial:       01974E8E62C987F6B3CBB8AA9FF7A81947F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NmFLrpbBM315e9lm59aoKojfnSk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.mft
Manifest number:          02A9
Signing time:             Sun 08 Jun 2025 08:00:43 +0000
Manifest this update:     Sun 08 Jun 2025 08:00:43 +0000
Manifest next update:     Mon 09 Jun 2025 08:00:43 +0000
Files and hashes:         1: NmFLrpbBM315e9lm59aoKojfnSk.crl (hash: 9mrBjuvjqr8D1AjV/B/FfUFDhWY1UYpkCS0RbgNx1UE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NmFLrpbBM315e9lm59aoKojfnSk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 08:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4e:8e:62:c9:87:f6:b3:cb:b8:aa:9f:f7:a8:19:47:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36614bae96c1337d797bd966e7d6a82a88df9d29
        Validity
            Not Before: Jun  8 08:00:43 2025 GMT
            Not After : Jun  9 08:00:43 2025 GMT
        Subject: CN=1558a71c8fd5e4da6ea76aec0897f11b0adedf98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:2b:5f:4f:16:f9:4b:2c:3e:40:98:fa:fd:bd:
                    cb:aa:c8:e4:e0:11:6b:f9:98:62:a3:7a:2e:22:8f:
                    1c:1c:2f:3c:21:1b:91:98:3b:20:bf:e2:01:a1:cb:
                    a0:01:db:8e:a3:4a:3b:c2:9e:d0:5c:3f:67:3e:e9:
                    fe:23:b5:de:97:a6:16:30:f4:97:ca:80:4c:f0:ed:
                    43:a2:84:b0:fd:1d:bf:07:b7:70:3c:c4:ae:a3:0f:
                    7f:a8:22:96:ea:a9:a5:af:e0:bc:69:7b:24:95:49:
                    1f:b8:38:83:ce:21:00:b3:2e:5e:0e:cd:90:8c:2a:
                    c7:4b:65:7e:7a:ae:1a:70:cc:19:6f:1d:a8:9a:6b:
                    e4:08:a6:aa:ac:5e:be:d6:0f:e8:a3:0a:13:0a:6c:
                    bd:04:5e:3f:32:91:87:89:44:e2:1a:6a:d5:6d:f4:
                    ce:b0:4c:f0:30:25:64:a1:f2:ea:bc:d7:b6:10:82:
                    50:d8:72:57:47:ed:f7:5e:4c:97:b2:37:6c:a3:70:
                    27:2a:5f:e2:5f:ed:fc:4a:57:6b:55:a5:ff:83:96:
                    3c:5c:74:1e:d6:ed:31:79:e0:0d:f5:17:0d:e6:10:
                    fe:d0:bb:33:74:b5:61:e5:e7:54:93:47:cf:33:e0:
                    fe:ee:e7:14:54:dc:77:e0:c4:74:10:62:30:63:cc:
                    11:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:58:A7:1C:8F:D5:E4:DA:6E:A7:6A:EC:08:97:F1:1B:0A:DE:DF:98
            X509v3 Authority Key Identifier:
                keyid:36:61:4B:AE:96:C1:33:7D:79:7B:D9:66:E7:D6:A8:2A:88:DF:9D:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NmFLrpbBM315e9lm59aoKojfnSk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/cf2cab-e182-4e9b-a6ee-af014fabf4be/1/NmFLrpbBM315e9lm59aoKojfnSk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:4f:91:5f:03:44:a7:0b:5e:7a:a2:9c:d2:25:da:3f:e4:7d:
         f9:25:77:30:3f:12:da:cf:cb:07:cc:d3:f1:82:ca:16:a9:92:
         41:c7:a2:b6:d5:2f:97:6c:d0:f9:90:ff:34:cd:5c:9c:86:40:
         ad:54:21:60:80:b1:42:9c:51:43:a7:b1:88:d0:28:44:0f:c1:
         7c:bc:c9:d0:6d:84:20:cf:db:31:41:e3:db:e6:d9:c9:60:e9:
         62:fd:d2:0a:24:0e:33:7e:59:82:1d:60:28:d7:79:55:fe:dd:
         33:12:07:d5:7b:2a:50:4f:ba:a6:bf:c3:cb:63:41:15:d9:03:
         f2:c8:8c:17:57:b6:71:68:67:53:d0:1d:a3:5b:a7:bf:fd:83:
         b2:a5:49:71:e1:15:31:de:04:f1:ad:b7:6b:09:d7:5d:2f:ed:
         d4:73:93:cd:5c:7a:56:2a:6f:44:3b:75:75:57:70:f7:46:f7:
         70:e7:62:bf:05:d7:30:26:f5:b6:28:3c:50:84:aa:1c:7e:26:
         25:97:a6:04:12:93:e6:19:66:4b:bc:da:e5:db:ec:06:d4:e7:
         c3:4f:c6:d1:0f:be:2e:6f:29:75:23:dd:10:59:23:7a:ca:9a:
         1b:ea:a8:fd:72:71:b2:e1:37:9c:47:ce:0c:1c:4c:62:dd:6d:
         8f:10:bb:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdOjmLJh/azy7iqn/eoGUf0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2NjE0YmFlOTZjMTMzN2Q3OTdiZDk2NmU3ZDZhODJhODhk
ZjlkMjkwHhcNMjUwNjA4MDgwMDQzWhcNMjUwNjA5MDgwMDQzWjAzMTEwLwYDVQQD
EygxNTU4YTcxYzhmZDVlNGRhNmVhNzZhZWMwODk3ZjExYjBhZGVkZjk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvitfTxb5Syw+QJj6/b3Lqsjk4BFr
+Zhio3ouIo8cHC88IRuRmDsgv+IBocugAduOo0o7wp7QXD9nPun+I7Xel6YWMPSX
yoBM8O1DooSw/R2/B7dwPMSuow9/qCKW6qmlr+C8aXsklUkfuDiDziEAsy5eDs2Q
jCrHS2V+eq4acMwZbx2ommvkCKaqrF6+1g/oowoTCmy9BF4/MpGHiUTiGmrVbfTO
sEzwMCVkofLqvNe2EIJQ2HJXR+33XkyXsjdso3AnKl/iX+38SldrVaX/g5Y8XHQe
1u0xeeAN9RcN5hD+0LszdLVh5edUk0fPM+D+7ucUVNx34MR0EGIwY8wRMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBVYpxyP1eTabqdq7AiX8RsK3t+YMB8GA1UdIwQY
MBaAFDZhS66WwTN9eXvZZufWqCqI350pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTm1GTHJwYkJNMzE1ZTlsbTU5YW9Lb2pmblNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9jZjJjYWItZTE4Mi00ZTliLWE2ZWUt
YWYwMTRmYWJmNGJlLzEvTm1GTHJwYkJNMzE1ZTlsbTU5YW9Lb2pmblNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9jZjJjYWItZTE4Mi00ZTliLWE2ZWUtYWYwMTRmYWJmNGJl
LzEvTm1GTHJwYkJNMzE1ZTlsbTU5YW9Lb2pmblNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZE+RXwNE
pwteeqKc0iXaP+R9+SV3MD8S2s/LB8zT8YLKFqmSQceittUvl2zQ+ZD/NM1cnIZA
rVQhYICxQpxRQ6exiNAoRA/BfLzJ0G2EIM/bMUHj2+bZyWDpYv3SCiQOM35Zgh1g
KNd5Vf7dMxIH1XsqUE+6pr/Dy2NBFdkD8siMF1e2cWhnU9Ado1unv/2DsqVJceEV
Md4E8a23awnXXS/t1HOTzVx6VipvRDt1dVdw90b3cOdivwXXMCb1tig8UISqHH4m
JZemBBKT5hlmS7za5dvsBtTnw0/G0Q++Lm8pdSPdEFkjesqaG+qo/XJxsuE3nEfO
DBxMYt1tjxC7uA==
-----END CERTIFICATE-----
Generated at Sun Jun 8 18:41:50 2025 by rpki-client