Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f974e9-4743-46db-a348-1d1989f06618/1/nL6cQ-51mJYAORlQhzRyM0a_cBY.mft
File:                     nL6cQ-51mJYAORlQhzRyM0a_cBY.mft (raw, json)
Hash identifier:          l8LdjQfvUa2XWatV+5ZaA8ByNhRfFzGEgsd19pTKjQE=
Subject key identifier:   7C:C8:94:06:B1:C2:11:0D:6E:D7:82:43:E2:36:CB:E1:64:58:67:CF
Authority key identifier: 9C:BE:9C:43:EE:75:98:96:00:39:19:50:87:34:72:33:46:BF:70:16
Certificate issuer:       /CN=9cbe9c43ee759896003919508734723346bf7016
Certificate serial:       01976D3D4B0F749397AE4EA0DF56023023B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nL6cQ-51mJYAORlQhzRyM0a_cBY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/f974e9-4743-46db-a348-1d1989f06618/1/nL6cQ-51mJYAORlQhzRyM0a_cBY.mft
Manifest number:          1152
Signing time:             Sat 14 Jun 2025 07:00:22 +0000
Manifest this update:     Sat 14 Jun 2025 07:00:22 +0000
Manifest next update:     Sun 15 Jun 2025 07:00:22 +0000
Files and hashes:         1: UZ53Oxv_ea1DJibe26VPgv4-Vpo.roa (hash: hiy12f2VyI89A+R22FhEyFKlin2hs0EKoXos1apn778=)
                          2: nL6cQ-51mJYAORlQhzRyM0a_cBY.crl (hash: fg5m9ekVcyadsTPa6wFNwidvmTarWJE+KBK3PK0EXDQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/f974e9-4743-46db-a348-1d1989f06618/1/nL6cQ-51mJYAORlQhzRyM0a_cBY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/f974e9-4743-46db-a348-1d1989f06618/1/nL6cQ-51mJYAORlQhzRyM0a_cBY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nL6cQ-51mJYAORlQhzRyM0a_cBY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:3d:4b:0f:74:93:97:ae:4e:a0:df:56:02:30:23:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cbe9c43ee759896003919508734723346bf7016
        Validity
            Not Before: Jun 14 07:00:22 2025 GMT
            Not After : Jun 15 07:00:22 2025 GMT
        Subject: CN=7cc89406b1c2110d6ed78243e236cbe1645867cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:2d:75:ef:6b:c0:ed:e6:47:ee:66:14:a4:1c:
                    98:05:ed:c0:b5:1a:30:d7:c3:d7:a9:1c:08:0d:bd:
                    2e:a3:25:be:67:cc:3a:88:3a:da:ba:e6:c5:db:a7:
                    04:e6:60:e7:11:3e:dd:b0:1a:fe:b7:76:bb:9c:da:
                    9c:86:a9:0f:4a:af:ee:f6:3c:52:de:e0:58:0c:d0:
                    20:90:b8:fd:c5:cd:dd:04:1d:28:94:79:b6:df:7f:
                    0a:78:23:6c:12:b8:dd:bf:3f:a4:cc:36:88:9e:7d:
                    97:a7:4e:e5:46:00:b6:a2:36:34:57:d1:a9:b6:33:
                    77:d7:cb:85:3c:88:e4:cd:bb:f2:fa:d6:29:22:3c:
                    97:89:74:a6:db:9d:fb:0d:1f:67:66:1f:b5:26:ac:
                    46:3e:e1:86:f0:e4:84:4b:94:22:47:07:13:2d:ac:
                    5b:36:01:86:5a:8b:66:e8:ec:79:ee:56:03:27:64:
                    c4:7d:a6:fb:a4:e6:2b:78:59:8d:a0:b0:3c:c6:7f:
                    2f:c5:af:a4:a0:ed:db:2a:3f:2c:51:45:91:17:a5:
                    4e:17:2d:3c:83:ae:13:c6:52:c2:02:2b:47:b9:92:
                    16:73:15:71:b5:07:f6:30:32:9b:1d:c5:8a:67:73:
                    83:e8:76:c6:99:7a:b7:32:5a:55:4f:cd:40:57:fa:
                    c7:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:C8:94:06:B1:C2:11:0D:6E:D7:82:43:E2:36:CB:E1:64:58:67:CF
            X509v3 Authority Key Identifier:
                keyid:9C:BE:9C:43:EE:75:98:96:00:39:19:50:87:34:72:33:46:BF:70:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nL6cQ-51mJYAORlQhzRyM0a_cBY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f974e9-4743-46db-a348-1d1989f06618/1/nL6cQ-51mJYAORlQhzRyM0a_cBY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f974e9-4743-46db-a348-1d1989f06618/1/nL6cQ-51mJYAORlQhzRyM0a_cBY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:91:55:53:45:ef:47:47:ca:8a:62:0a:5f:81:52:b4:38:48:
         a7:26:98:2d:f0:18:da:07:07:99:23:f7:fa:82:a3:55:77:b0:
         2f:c0:5c:d2:1b:32:74:01:22:a8:b1:95:b1:41:43:f4:82:e6:
         63:5b:f3:2a:a6:bc:73:bf:20:9e:74:95:c5:3d:27:88:45:2b:
         ff:21:2f:dc:d2:b4:61:19:97:38:08:dd:24:f8:1e:e9:9f:43:
         ab:54:1e:5c:e7:b9:18:48:f7:b3:d0:f8:ec:b1:a4:df:d7:cf:
         3d:8e:5f:77:69:cb:1f:0b:51:bc:85:c2:bc:7f:98:13:48:a5:
         f5:e4:61:89:36:1d:8c:fd:40:10:60:03:b6:a2:9a:61:0f:3c:
         3a:5b:b6:22:ce:bc:04:56:b3:ee:2f:8c:68:55:06:71:b8:c0:
         c8:d2:8c:86:c4:99:2d:b6:67:d8:72:d5:1a:6b:ba:c2:cb:d0:
         62:c6:ee:64:c3:66:ca:98:41:7e:47:43:e9:ed:b9:51:88:d3:
         8f:66:0c:f3:70:ad:8c:41:d5:32:69:58:37:6c:5f:bc:3f:25:
         a5:51:ce:2c:c8:fe:a6:86:a5:31:84:27:21:b2:04:64:6d:e9:
         1c:d4:0e:52:57:c9:b6:b3:1a:6b:53:56:04:c8:b0:f1:b8:ba:
         b5:82:8b:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:36:10 2025 by rpki-client