Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/f17722-e58b-4452-8135-eaa5acf35fd1/1/nNZ9EDPKRytbuA_VlruDbRLiImE.mft
File:                     nNZ9EDPKRytbuA_VlruDbRLiImE.mft (raw, json)
Hash identifier:          0T8RrciWzs/zyFaU96hkmbdoDQUfFmr4XmxCh0rgzZA=
Subject key identifier:   29:AF:6E:DE:79:78:D9:F3:B0:22:2E:BD:95:5B:F1:84:CC:87:15:51
Authority key identifier: 9C:D6:7D:10:33:CA:47:2B:5B:B8:0F:D5:96:BB:83:6D:12:E2:22:61
Certificate issuer:       /CN=9cd67d1033ca472b5bb80fd596bb836d12e22261
Certificate serial:       01974D0E158029A1C98CE8F9525C0EEBB755
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nNZ9EDPKRytbuA_VlruDbRLiImE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/f17722-e58b-4452-8135-eaa5acf35fd1/1/nNZ9EDPKRytbuA_VlruDbRLiImE.mft
Manifest number:          0B6F
Signing time:             Sun 08 Jun 2025 01:00:57 +0000
Manifest this update:     Sun 08 Jun 2025 01:00:57 +0000
Manifest next update:     Mon 09 Jun 2025 01:00:57 +0000
Files and hashes:         1: nNZ9EDPKRytbuA_VlruDbRLiImE.crl (hash: G7M4gZs2YCys6pcOthN/BijoeGXQNPUfo2vf6M1bA1I=)
                          2: vJEpt2EZ5UHOHzXUt6_FIB9pq2c.roa (hash: wfxwNWs85u9qLCuI6Hzz2FjX0JN3uzdqSv3NQ+LC9RE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/f17722-e58b-4452-8135-eaa5acf35fd1/1/nNZ9EDPKRytbuA_VlruDbRLiImE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/f17722-e58b-4452-8135-eaa5acf35fd1/1/nNZ9EDPKRytbuA_VlruDbRLiImE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nNZ9EDPKRytbuA_VlruDbRLiImE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4d:0e:15:80:29:a1:c9:8c:e8:f9:52:5c:0e:eb:b7:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cd67d1033ca472b5bb80fd596bb836d12e22261
        Validity
            Not Before: Jun  8 01:00:57 2025 GMT
            Not After : Jun  9 01:00:57 2025 GMT
        Subject: CN=29af6ede7978d9f3b0222ebd955bf184cc871551
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:33:10:4d:69:7e:fe:83:fa:a3:84:b7:24:00:
                    b7:53:05:ca:28:d9:58:d7:d1:6d:39:b2:eb:89:23:
                    e1:e0:2c:3a:d7:60:f6:d4:5b:cd:a9:99:5c:fe:e7:
                    cb:2e:29:58:4b:eb:87:7c:f0:d0:c3:b9:1e:a6:9c:
                    77:f8:c1:b9:f1:62:52:b5:80:cb:82:5d:bc:6a:ee:
                    07:29:f1:03:a6:bf:a8:66:0e:7d:89:43:19:eb:6f:
                    82:34:e5:24:d2:fa:7e:aa:8b:c8:af:d1:19:cc:cc:
                    30:9c:b6:72:a1:07:ec:c3:c5:7f:75:f2:58:bb:dc:
                    20:ce:e4:ac:b9:b2:ee:64:28:78:c6:2c:44:13:c2:
                    a1:a6:bf:07:4c:4a:cc:61:be:3e:80:cc:f9:38:81:
                    10:a5:85:27:f9:b4:9e:b7:83:d2:31:2c:49:3c:32:
                    ae:d4:0f:09:02:28:31:01:a6:d3:63:7c:72:c5:f5:
                    6a:20:11:97:6c:a8:19:1b:45:05:3d:21:c4:ec:06:
                    f2:4f:a3:d1:f9:fb:cd:c4:8c:6a:91:d2:78:e6:d4:
                    07:bd:5e:79:1d:b4:3c:fd:4f:8d:05:f6:94:ff:49:
                    af:40:ed:50:ed:6c:36:2f:b1:5d:03:f2:73:42:09:
                    c4:6e:78:34:2a:e1:ae:db:c7:cc:e6:e1:81:59:82:
                    43:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:AF:6E:DE:79:78:D9:F3:B0:22:2E:BD:95:5B:F1:84:CC:87:15:51
            X509v3 Authority Key Identifier:
                keyid:9C:D6:7D:10:33:CA:47:2B:5B:B8:0F:D5:96:BB:83:6D:12:E2:22:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nNZ9EDPKRytbuA_VlruDbRLiImE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f17722-e58b-4452-8135-eaa5acf35fd1/1/nNZ9EDPKRytbuA_VlruDbRLiImE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f17722-e58b-4452-8135-eaa5acf35fd1/1/nNZ9EDPKRytbuA_VlruDbRLiImE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:77:05:1b:a2:d2:c7:93:c1:38:74:ba:77:07:55:7e:4b:4f:
         0f:5b:bf:42:88:dc:27:64:57:85:1e:07:d8:27:03:96:cd:6c:
         38:6d:0d:29:ce:7b:3a:c6:ce:28:a7:74:e5:81:0b:0e:94:e5:
         d4:67:1b:69:6f:f7:5e:01:af:c7:56:01:88:31:f5:a6:5a:8b:
         31:cd:01:66:2b:c7:a5:84:83:12:2d:34:b3:c3:dd:d6:c4:23:
         0c:c6:8c:97:c6:f4:66:04:b4:87:9b:71:05:7c:d7:0d:4f:58:
         2b:8f:75:00:58:0a:67:e4:c9:12:99:38:aa:c8:74:a5:cd:2a:
         a5:1f:42:ef:ee:87:ad:48:9f:06:39:a4:b9:f9:ab:c8:c5:ed:
         7e:67:dd:3d:57:6a:fe:f6:f8:c1:dd:8a:c7:b1:8e:9b:f0:b1:
         49:61:29:f3:80:6f:12:27:12:76:7f:2f:11:8b:0a:a5:6d:3a:
         38:5f:5c:7c:cf:d9:bb:09:a7:8b:ae:9d:bd:a2:fd:a7:4a:3b:
         35:ae:de:c8:e3:db:07:82:93:9f:f4:31:d3:71:6f:84:79:91:
         90:fc:85:83:5c:e7:42:29:40:7c:c9:a6:00:85:58:41:c2:b2:
         bf:e1:9d:cc:5c:ff:ee:20:61:f0:d0:cb:5d:61:d4:1a:ac:90:
         2c:e9:46:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdNDhWAKaHJjOj5UlwO67dVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljZDY3ZDEwMzNjYTQ3MmI1YmI4MGZkNTk2YmI4MzZkMTJl
MjIyNjEwHhcNMjUwNjA4MDEwMDU3WhcNMjUwNjA5MDEwMDU3WjAzMTEwLwYDVQQD
EygyOWFmNmVkZTc5NzhkOWYzYjAyMjJlYmQ5NTViZjE4NGNjODcxNTUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzMQTWl+/oP6o4S3JAC3UwXKKNlY
19FtObLriSPh4Cw612D21FvNqZlc/ufLLilYS+uHfPDQw7keppx3+MG58WJStYDL
gl28au4HKfEDpr+oZg59iUMZ62+CNOUk0vp+qovIr9EZzMwwnLZyoQfsw8V/dfJY
u9wgzuSsubLuZCh4xixEE8Khpr8HTErMYb4+gMz5OIEQpYUn+bSet4PSMSxJPDKu
1A8JAigxAabTY3xyxfVqIBGXbKgZG0UFPSHE7AbyT6PR+fvNxIxqkdJ45tQHvV55
HbQ8/U+NBfaU/0mvQO1Q7Ww2L7FdA/JzQgnEbng0KuGu28fM5uGBWYJDpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCmvbt55eNnzsCIuvZVb8YTMhxVRMB8GA1UdIwQY
MBaAFJzWfRAzykcrW7gP1Za7g20S4iJhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbk5aOUVEUEtSeXRidUFfVmxydURiUkxpSW1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9mMTc3MjItZTU4Yi00NDUyLTgxMzUt
ZWFhNWFjZjM1ZmQxLzEvbk5aOUVEUEtSeXRidUFfVmxydURiUkxpSW1FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9mMTc3MjItZTU4Yi00NDUyLTgxMzUtZWFhNWFjZjM1ZmQx
LzEvbk5aOUVEUEtSeXRidUFfVmxydURiUkxpSW1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYXcFG6LS
x5PBOHS6dwdVfktPD1u/QojcJ2RXhR4H2CcDls1sOG0NKc57OsbOKKd05YELDpTl
1GcbaW/3XgGvx1YBiDH1plqLMc0BZivHpYSDEi00s8Pd1sQjDMaMl8b0ZgS0h5tx
BXzXDU9YK491AFgKZ+TJEpk4qsh0pc0qpR9C7+6HrUifBjmkufmryMXtfmfdPVdq
/vb4wd2Kx7GOm/CxSWEp84BvEicSdn8vEYsKpW06OF9cfM/Zuwmni66dvaL9p0o7
Na7eyOPbB4KTn/Qx03FvhHmRkPyFg1znQilAfMmmAIVYQcKyv+GdzFz/7iBh8NDL
XWHUGqyQLOlGoA==
-----END CERTIFICATE-----
Generated at Sun Jun 8 06:42:43 2025 by rpki-client