Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft
File:                     NdRfKsW84Vad9rKtgNFvG5L72Fw.mft (raw, json)
Hash identifier:          AP2GgDt4JRIwkntlWz9FC8o3r4RmXBbebpnjX2UJhNA=
Subject key identifier:   96:8A:6A:6A:D3:A2:72:43:F4:E8:36:8A:9F:4B:1E:8E:E0:60:28:C7
Authority key identifier: 35:D4:5F:2A:C5:BC:E1:56:9D:F6:B2:AD:80:D1:6F:1B:92:FB:D8:5C
Certificate issuer:       /CN=35d45f2ac5bce1569df6b2ad80d16f1b92fbd85c
Certificate serial:       019763276EC84608FB17B141BDD642F3B7A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NdRfKsW84Vad9rKtgNFvG5L72Fw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft
Manifest number:          1589
Signing time:             Thu 12 Jun 2025 08:00:17 +0000
Manifest this update:     Thu 12 Jun 2025 08:00:17 +0000
Manifest next update:     Fri 13 Jun 2025 08:00:17 +0000
Files and hashes:         1: NdRfKsW84Vad9rKtgNFvG5L72Fw.crl (hash: MyzybOxkwv02FHb3BlWhGP/3J5S2eirgroV/lyjauZg=)
                          2: Pxn4Z0bdWmWck5jdH1FaueBsOf0.roa (hash: vg1TLVE75nnwqoL/egav334PmpcLAh17CAvdGO24png=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NdRfKsW84Vad9rKtgNFvG5L72Fw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 08:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:63:27:6e:c8:46:08:fb:17:b1:41:bd:d6:42:f3:b7:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35d45f2ac5bce1569df6b2ad80d16f1b92fbd85c
        Validity
            Not Before: Jun 12 08:00:17 2025 GMT
            Not After : Jun 13 08:00:17 2025 GMT
        Subject: CN=968a6a6ad3a27243f4e8368a9f4b1e8ee06028c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:37:38:36:a0:00:21:0c:52:fd:b2:8f:f3:08:
                    8a:2e:59:93:90:a0:e1:6d:b0:9b:a1:7b:30:fb:6c:
                    16:86:e0:04:cf:c3:6d:a6:14:f7:2c:0d:23:16:38:
                    c6:cd:d1:9a:9f:0e:b9:87:12:8e:64:26:d0:31:00:
                    40:7d:b9:bc:45:b7:7f:f9:25:dc:1b:5f:42:12:d1:
                    39:7e:c1:cf:e3:67:7e:2c:64:f0:75:f3:8b:c4:64:
                    22:38:58:58:07:e0:df:db:76:f2:b1:92:d0:8d:df:
                    80:2f:50:9d:a8:b3:22:e6:e3:bc:7c:b0:c5:51:68:
                    f4:39:bc:7b:70:f4:c8:37:b4:66:d5:6b:c1:c1:d7:
                    11:79:7c:dc:e1:2a:ee:38:83:d6:26:bf:97:12:ae:
                    e9:11:c7:0d:aa:9e:05:fe:e1:bc:f7:a9:df:41:31:
                    20:f3:75:e9:b2:f9:ac:bc:38:8d:b7:5b:9d:33:3e:
                    7f:91:64:3a:e9:48:45:7e:2a:c8:ed:eb:a9:dc:fc:
                    8e:20:69:db:85:ad:d1:92:eb:db:5f:30:ad:d2:95:
                    85:d3:b3:e4:38:8b:d7:fb:a3:b9:14:b9:9d:71:d5:
                    b9:40:12:97:b8:85:11:07:34:d2:f1:c4:7e:4f:e6:
                    bd:86:39:ef:1f:f1:5d:01:7b:5a:af:df:b7:f3:e3:
                    71:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:8A:6A:6A:D3:A2:72:43:F4:E8:36:8A:9F:4B:1E:8E:E0:60:28:C7
            X509v3 Authority Key Identifier:
                keyid:35:D4:5F:2A:C5:BC:E1:56:9D:F6:B2:AD:80:D1:6F:1B:92:FB:D8:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NdRfKsW84Vad9rKtgNFvG5L72Fw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:e0:af:e5:11:1c:90:cf:1a:e9:5c:c4:c6:42:d3:81:49:fe:
         42:be:b9:7e:54:71:6d:a4:9f:1f:51:73:08:a3:47:49:a9:cf:
         38:e8:3a:b2:0e:05:ac:21:be:4c:12:c1:32:63:e0:9a:d3:75:
         e6:8c:3c:72:46:c2:73:17:e8:7a:05:4a:52:6c:3e:5d:6b:36:
         7b:0b:69:e9:8a:46:9a:16:de:6e:c0:8b:e3:ee:72:e8:80:a8:
         03:d7:74:dd:d4:f8:b6:f1:b0:d1:fc:24:ec:f3:28:4b:ef:89:
         11:19:ab:e6:21:7b:cc:8b:0f:ac:6e:bf:4a:25:52:28:93:a2:
         31:aa:cf:6c:9d:d4:89:48:b8:9f:f1:58:c4:f0:79:19:8d:a9:
         50:b2:f1:e7:35:52:fb:36:3a:6b:b4:fe:99:6a:ef:4b:20:57:
         10:0b:d3:38:46:e6:db:11:ee:8f:9c:ec:be:64:00:42:70:04:
         2d:d7:a1:8b:8d:9d:37:3b:01:87:dd:ed:b0:db:8e:60:2e:fb:
         09:e4:48:cf:c7:56:43:f4:b2:70:c8:a7:4a:db:99:0b:1f:67:
         9a:6f:d1:4b:b2:30:31:0f:ab:46:ee:7c:f4:ed:8e:9d:8b:cb:
         a3:d5:b3:17:7f:9d:ad:a6:c5:bc:87:de:a2:7b:80:34:43:43:
         57:d0:53:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdjJ27IRgj7F7FBvdZC87enMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1ZDQ1ZjJhYzViY2UxNTY5ZGY2YjJhZDgwZDE2ZjFiOTJm
YmQ4NWMwHhcNMjUwNjEyMDgwMDE3WhcNMjUwNjEzMDgwMDE3WjAzMTEwLwYDVQQD
Eyg5NjhhNmE2YWQzYTI3MjQzZjRlODM2OGE5ZjRiMWU4ZWUwNjAyOGM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujc4NqAAIQxS/bKP8wiKLlmTkKDh
bbCboXsw+2wWhuAEz8NtphT3LA0jFjjGzdGanw65hxKOZCbQMQBAfbm8Rbd/+SXc
G19CEtE5fsHP42d+LGTwdfOLxGQiOFhYB+Df23bysZLQjd+AL1CdqLMi5uO8fLDF
UWj0Obx7cPTIN7Rm1WvBwdcReXzc4SruOIPWJr+XEq7pEccNqp4F/uG896nfQTEg
83XpsvmsvDiNt1udMz5/kWQ66UhFfirI7eup3PyOIGnbha3RkuvbXzCt0pWF07Pk
OIvX+6O5FLmdcdW5QBKXuIURBzTS8cR+T+a9hjnvH/FdAXtar9+38+NxOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJaKamrTonJD9Og2ip9LHo7gYCjHMB8GA1UdIwQY
MBaAFDXUXyrFvOFWnfayrYDRbxuS+9hcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmRSZktzVzg0VmFkOXJLdGdORnZHNUw3MkZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS80ODEyMzYtYTA2Yy00OTAzLTkzODUt
NmI3ZDdlNGVkNzAxLzEvTmRSZktzVzg0VmFkOXJLdGdORnZHNUw3MkZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS80ODEyMzYtYTA2Yy00OTAzLTkzODUtNmI3ZDdlNGVkNzAx
LzEvTmRSZktzVzg0VmFkOXJLdGdORnZHNUw3MkZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnOCv5REc
kM8a6VzExkLTgUn+Qr65flRxbaSfH1FzCKNHSanPOOg6sg4FrCG+TBLBMmPgmtN1
5ow8ckbCcxfoegVKUmw+XWs2ewtp6YpGmhbebsCL4+5y6ICoA9d03dT4tvGw0fwk
7PMoS++JERmr5iF7zIsPrG6/SiVSKJOiMarPbJ3UiUi4n/FYxPB5GY2pULLx5zVS
+zY6a7T+mWrvSyBXEAvTOEbm2xHuj5zsvmQAQnAELdehi42dNzsBh93tsNuOYC77
CeRIz8dWQ/SycMinStuZCx9nmm/RS7IwMQ+rRu589O2OnYvLo9WzF3+drabFvIfe
onuANENDV9BTiQ==
-----END CERTIFICATE-----
Generated at Thu Jun 12 17:48:26 2025 by rpki-client