Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/e9fb61-b566-4f36-95c9-f975ea4e3674/1/n-GzNgF3oAvD3FdD4CYyhGBPm3Q.mft
File:                     n-GzNgF3oAvD3FdD4CYyhGBPm3Q.mft (raw, json)
Hash identifier:          e0BV+YXZ6VUolehGLQLIFPi/hK+049HlvR3XKkE23co=
Subject key identifier:   7F:B4:FE:E5:22:90:82:FA:38:12:7B:2C:37:5E:34:CB:BD:A4:27:30
Authority key identifier: 9F:E1:B3:36:01:77:A0:0B:C3:DC:57:43:E0:26:32:84:60:4F:9B:74
Certificate issuer:       /CN=9fe1b3360177a00bc3dc5743e0263284604f9b74
Certificate serial:       01974BFBA0120A73FFEE9E579FA5EB3454FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n-GzNgF3oAvD3FdD4CYyhGBPm3Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/e9fb61-b566-4f36-95c9-f975ea4e3674/1/n-GzNgF3oAvD3FdD4CYyhGBPm3Q.mft
Manifest number:          0322
Signing time:             Sat 07 Jun 2025 20:01:10 +0000
Manifest this update:     Sat 07 Jun 2025 20:01:10 +0000
Manifest next update:     Sun 08 Jun 2025 20:01:10 +0000
Files and hashes:         1: n-GzNgF3oAvD3FdD4CYyhGBPm3Q.crl (hash: hKIJN8SEYexl4yfeFq0wpvH7tHp5oF4JljMsabTntxA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/e9fb61-b566-4f36-95c9-f975ea4e3674/1/n-GzNgF3oAvD3FdD4CYyhGBPm3Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/e9fb61-b566-4f36-95c9-f975ea4e3674/1/n-GzNgF3oAvD3FdD4CYyhGBPm3Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n-GzNgF3oAvD3FdD4CYyhGBPm3Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:fb:a0:12:0a:73:ff:ee:9e:57:9f:a5:eb:34:54:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fe1b3360177a00bc3dc5743e0263284604f9b74
        Validity
            Not Before: Jun  7 20:01:10 2025 GMT
            Not After : Jun  8 20:01:10 2025 GMT
        Subject: CN=7fb4fee5229082fa38127b2c375e34cbbda42730
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:af:cf:c4:70:0d:43:96:a7:1a:9f:d1:a9:04:
                    bc:75:b0:79:78:ca:5a:18:5d:de:cc:9a:bb:09:7b:
                    71:b2:c8:83:fa:da:af:b0:8a:a7:6f:f1:92:6e:b8:
                    22:59:50:45:4d:e3:a4:dc:bb:25:ed:2a:74:a5:73:
                    5f:a3:8c:3e:cc:2a:71:82:5d:70:fd:62:bc:0d:43:
                    3a:5b:26:d5:87:41:76:b7:a5:1a:93:1f:df:3c:e5:
                    35:61:81:2f:5e:b9:c8:16:c0:8c:a0:2e:61:76:7b:
                    b8:9a:f0:d4:7d:a0:c3:4b:e0:05:cd:6e:39:00:bb:
                    80:33:38:51:a7:3b:07:04:76:b7:c4:66:e1:eb:72:
                    fb:0f:43:b3:06:bf:3f:2e:f1:60:73:3d:90:b8:11:
                    3d:61:ea:8b:75:85:83:c6:5a:1a:61:1a:8e:27:82:
                    19:a9:60:ef:4c:4e:4a:25:ac:74:33:18:01:4c:69:
                    e9:5d:95:ae:dd:14:36:79:1f:9b:ed:fd:5f:9d:67:
                    6a:29:a2:71:ff:c6:95:3a:e6:52:e2:3e:23:51:24:
                    c8:51:3c:6f:e9:f6:15:7e:a7:21:26:df:64:56:8f:
                    d9:ad:b9:ac:08:3e:88:f1:35:da:96:74:9b:b3:31:
                    0e:be:1b:b9:15:eb:a6:57:64:33:de:8b:4a:07:0e:
                    13:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:B4:FE:E5:22:90:82:FA:38:12:7B:2C:37:5E:34:CB:BD:A4:27:30
            X509v3 Authority Key Identifier:
                keyid:9F:E1:B3:36:01:77:A0:0B:C3:DC:57:43:E0:26:32:84:60:4F:9B:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n-GzNgF3oAvD3FdD4CYyhGBPm3Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/e9fb61-b566-4f36-95c9-f975ea4e3674/1/n-GzNgF3oAvD3FdD4CYyhGBPm3Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/e9fb61-b566-4f36-95c9-f975ea4e3674/1/n-GzNgF3oAvD3FdD4CYyhGBPm3Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:6c:ed:4a:8d:3f:9f:16:3c:58:b5:4a:8c:b5:ee:e9:f2:a6:
         e7:41:2c:d7:ad:79:8c:aa:2c:d7:e2:81:13:37:e2:72:11:86:
         e2:85:71:22:a9:8b:7e:c8:4f:bb:c1:84:56:1f:b3:33:52:a2:
         25:09:a2:cf:b7:90:ba:69:0b:a1:ec:f3:2d:9b:86:a3:91:65:
         a9:19:ea:2c:09:43:fa:8e:49:3f:a5:68:9c:f4:62:2e:ac:90:
         5f:d6:ae:fb:5c:d7:4c:34:60:e5:e2:09:b2:05:87:bd:ec:65:
         f5:b4:da:bf:d8:07:58:27:17:e2:46:88:19:96:4f:4e:fa:3f:
         54:0d:bf:85:5d:45:53:29:19:eb:c2:69:eb:30:71:b6:2c:9e:
         6c:90:96:47:63:ff:98:5e:b8:e6:43:48:e4:24:20:f0:41:f2:
         90:e7:9f:0e:d8:0a:83:f6:e3:91:8e:d5:ac:58:d0:43:60:ee:
         99:74:c4:22:fb:63:7e:67:04:94:04:8a:a8:e0:8c:eb:2c:1f:
         b8:45:04:4b:96:18:0b:cc:d4:c7:27:1c:93:56:5b:62:ec:81:
         24:f0:0f:7a:9d:19:03:13:d6:19:c0:61:63:0b:48:12:ff:2c:
         d5:87:51:bf:2a:9d:44:ef:66:8e:ce:15:cb:5d:5a:b2:59:e0:
         ce:f3:e2:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdL+6ASCnP/7p5Xn6XrNFT+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmZTFiMzM2MDE3N2EwMGJjM2RjNTc0M2UwMjYzMjg0NjA0
ZjliNzQwHhcNMjUwNjA3MjAwMTEwWhcNMjUwNjA4MjAwMTEwWjAzMTEwLwYDVQQD
Eyg3ZmI0ZmVlNTIyOTA4MmZhMzgxMjdiMmMzNzVlMzRjYmJkYTQyNzMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqq/PxHANQ5anGp/RqQS8dbB5eMpa
GF3ezJq7CXtxssiD+tqvsIqnb/GSbrgiWVBFTeOk3Lsl7Sp0pXNfo4w+zCpxgl1w
/WK8DUM6WybVh0F2t6Uakx/fPOU1YYEvXrnIFsCMoC5hdnu4mvDUfaDDS+AFzW45
ALuAMzhRpzsHBHa3xGbh63L7D0OzBr8/LvFgcz2QuBE9YeqLdYWDxloaYRqOJ4IZ
qWDvTE5KJax0MxgBTGnpXZWu3RQ2eR+b7f1fnWdqKaJx/8aVOuZS4j4jUSTIUTxv
6fYVfqchJt9kVo/ZrbmsCD6I8TXalnSbszEOvhu5FeumV2Qz3otKBw4TBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH+0/uUikIL6OBJ7LDdeNMu9pCcwMB8GA1UdIwQY
MBaAFJ/hszYBd6ALw9xXQ+AmMoRgT5t0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbi1Hek5nRjNvQXZEM0ZkRDRDWXloR0JQbTNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9lOWZiNjEtYjU2Ni00ZjM2LTk1Yzkt
Zjk3NWVhNGUzNjc0LzEvbi1Hek5nRjNvQXZEM0ZkRDRDWXloR0JQbTNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy9lOWZiNjEtYjU2Ni00ZjM2LTk1YzktZjk3NWVhNGUzNjc0
LzEvbi1Hek5nRjNvQXZEM0ZkRDRDWXloR0JQbTNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAimztSo0/
nxY8WLVKjLXu6fKm50Es1615jKos1+KBEzfichGG4oVxIqmLfshPu8GEVh+zM1Ki
JQmiz7eQumkLoezzLZuGo5FlqRnqLAlD+o5JP6VonPRiLqyQX9au+1zXTDRg5eIJ
sgWHvexl9bTav9gHWCcX4kaIGZZPTvo/VA2/hV1FUykZ68Jp6zBxtiyebJCWR2P/
mF645kNI5CQg8EHykOefDtgKg/bjkY7VrFjQQ2DumXTEIvtjfmcElASKqOCM6ywf
uEUES5YYC8zUxycck1ZbYuyBJPAPep0ZAxPWGcBhYwtIEv8s1YdRvyqdRO9mjs4V
y11aslngzvPi/Q==
-----END CERTIFICATE-----
Generated at Sun Jun 8 06:35:42 2025 by rpki-client