Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/4f17fa-d5e8-439d-87a2-df32a25c5f2f/1/nM4WAPUHNZYPhtYhzU9fWfh5oOg.mft
File:                     nM4WAPUHNZYPhtYhzU9fWfh5oOg.mft (raw, json)
Hash identifier:          Gy0qu8bfbeTjvRr6RZhu49V8w/DxpiWhK3nPv993ZwU=
Subject key identifier:   27:AB:1C:3C:BC:E3:73:9D:8C:2C:B3:19:D7:62:7A:D1:77:3E:E5:CC
Authority key identifier: 9C:CE:16:00:F5:07:35:96:0F:86:D6:21:CD:4F:5F:59:F8:79:A0:E8
Certificate issuer:       /CN=9cce1600f50735960f86d621cd4f5f59f879a0e8
Certificate serial:       01974854FDE77885AF61E31CC0637146C214
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nM4WAPUHNZYPhtYhzU9fWfh5oOg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/4f17fa-d5e8-439d-87a2-df32a25c5f2f/1/nM4WAPUHNZYPhtYhzU9fWfh5oOg.mft
Manifest number:          017F
Signing time:             Sat 07 Jun 2025 03:00:18 +0000
Manifest this update:     Sat 07 Jun 2025 03:00:18 +0000
Manifest next update:     Sun 08 Jun 2025 03:00:18 +0000
Files and hashes:         1: TC7wZtb8eH22VqPATxdM0AYHsBI.roa (hash: WSEkQ29EN6gMplRxrm+JsVbPQFVHYc/Oyz8wGNQAkUY=)
                          2: nM4WAPUHNZYPhtYhzU9fWfh5oOg.crl (hash: 7+pRCdUuTu3ddyjKF+GdywluvHz/7YLwI+/sJshfbCI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/4f17fa-d5e8-439d-87a2-df32a25c5f2f/1/nM4WAPUHNZYPhtYhzU9fWfh5oOg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/4f17fa-d5e8-439d-87a2-df32a25c5f2f/1/nM4WAPUHNZYPhtYhzU9fWfh5oOg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nM4WAPUHNZYPhtYhzU9fWfh5oOg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:54:fd:e7:78:85:af:61:e3:1c:c0:63:71:46:c2:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cce1600f50735960f86d621cd4f5f59f879a0e8
        Validity
            Not Before: Jun  7 03:00:18 2025 GMT
            Not After : Jun  8 03:00:18 2025 GMT
        Subject: CN=27ab1c3cbce3739d8c2cb319d7627ad1773ee5cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:b7:28:20:87:ea:aa:96:1a:fb:00:89:66:91:
                    0a:d8:fb:3f:2a:bb:4d:1e:c4:23:8a:1a:bc:91:a4:
                    7c:e3:b9:f0:73:20:6e:10:c7:f2:03:e5:9c:d3:5e:
                    d2:68:6c:c6:66:d8:6c:9f:91:2f:0e:4e:29:78:39:
                    cd:3b:b3:65:5d:bb:58:dd:63:d9:bd:a2:ec:6d:5d:
                    9a:19:13:79:38:33:fe:07:ee:ba:41:f4:40:88:8e:
                    73:02:2f:dc:1a:a4:66:95:74:65:97:29:a1:3f:dd:
                    69:bf:ae:1a:09:b9:fc:d0:19:6b:4f:c0:d8:aa:15:
                    e6:68:a5:2e:61:46:ff:91:6d:70:4a:62:6b:66:bf:
                    1a:6a:e8:a2:46:ed:c2:7c:dc:5f:3d:c5:b6:bd:da:
                    cb:0b:ca:5c:14:db:a8:fc:66:59:37:8d:c3:b0:9b:
                    b2:2a:0a:73:3d:77:0c:9a:5b:76:d0:ae:64:99:8a:
                    b7:53:0a:7a:11:4c:7a:0a:94:68:56:e1:47:a7:93:
                    40:b7:3b:c0:36:b0:41:85:e6:dd:cd:0e:0a:e7:0b:
                    c5:32:02:93:0e:d8:dd:cf:cf:22:23:ba:5d:db:ed:
                    e2:e1:c3:06:88:f8:c0:e2:51:88:8e:34:5a:51:80:
                    b3:3d:8b:31:25:f0:c4:14:31:f3:c0:d1:bd:92:85:
                    36:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:AB:1C:3C:BC:E3:73:9D:8C:2C:B3:19:D7:62:7A:D1:77:3E:E5:CC
            X509v3 Authority Key Identifier:
                keyid:9C:CE:16:00:F5:07:35:96:0F:86:D6:21:CD:4F:5F:59:F8:79:A0:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nM4WAPUHNZYPhtYhzU9fWfh5oOg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/4f17fa-d5e8-439d-87a2-df32a25c5f2f/1/nM4WAPUHNZYPhtYhzU9fWfh5oOg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/4f17fa-d5e8-439d-87a2-df32a25c5f2f/1/nM4WAPUHNZYPhtYhzU9fWfh5oOg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:38:9f:92:bb:b5:d6:bf:f6:59:93:41:aa:31:cc:0b:31:cc:
         b0:65:f4:cf:92:60:2c:d5:ba:68:e4:4a:4f:f4:7a:19:2c:f0:
         24:4d:f2:3b:00:60:6e:81:91:8c:6c:e3:72:bb:78:54:1a:77:
         c2:ec:42:b8:b2:37:a0:df:98:6a:ad:b6:a7:19:f8:0c:bb:22:
         e5:4b:03:a3:81:cf:74:38:50:4a:75:9c:0b:17:c4:20:8c:05:
         d5:0b:d2:3c:67:93:e5:c1:f4:73:71:69:be:e8:cc:84:13:f6:
         eb:a3:68:87:d0:9a:8b:26:89:94:35:c3:36:cf:bd:97:49:d7:
         c4:29:86:92:83:d1:bf:6c:6a:cd:17:ca:76:03:f2:92:58:0e:
         de:bc:ee:37:d8:c9:78:01:7a:16:d4:70:c9:91:36:97:cb:de:
         3e:4c:90:a8:b6:fd:86:71:78:9a:ac:92:4c:40:d7:6f:cb:c3:
         bf:c3:f2:f8:3c:62:8a:f2:3e:e3:67:0e:88:bc:b3:77:3f:6b:
         b5:6b:ac:74:55:16:94:f4:c6:85:70:f7:3b:05:ca:d6:7b:df:
         a7:7f:fd:9f:cd:b9:28:36:16:71:e7:7a:85:4f:49:ad:58:a3:
         2e:60:6f:cc:3d:51:ac:1c:ee:92:c6:81:91:23:82:94:e7:a1:
         e4:94:ac:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:34:51 2025 by rpki-client