Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.mft
File:                     n9mIbi2ycJ2yI2TjNNOeLuSI024.mft (raw, json)
Hash identifier:          99vcx2rAbWgGfC7jKAtkdksCS7cZzSd+nrjSM1OIgRo=
Subject key identifier:   99:D7:10:15:A2:BA:92:01:53:22:AF:37:3C:4B:FF:D1:12:C6:F0:82
Authority key identifier: 9F:D9:88:6E:2D:B2:70:9D:B2:23:64:E3:34:D3:9E:2E:E4:88:D3:6E
Certificate issuer:       /CN=9fd9886e2db2709db22364e334d39e2ee488d36e
Certificate serial:       01976EF53DED04489C28368949CD24F4893C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n9mIbi2ycJ2yI2TjNNOeLuSI024.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.mft
Manifest number:          034E
Signing time:             Sat 14 Jun 2025 15:00:55 +0000
Manifest this update:     Sat 14 Jun 2025 15:00:55 +0000
Manifest next update:     Sun 15 Jun 2025 15:00:55 +0000
Files and hashes:         1: Rjc45YVuDrAMQdY8qgjKUXqz9To.roa (hash: VkM0hIqEPGBmrXo8E00kzKR2aWKMeDBdfCqKvjZR58E=)
                          2: n9mIbi2ycJ2yI2TjNNOeLuSI024.crl (hash: CmUdw/yF5tbW1f61LqR08lvPHANGJZlLGEfvb3+huus=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n9mIbi2ycJ2yI2TjNNOeLuSI024.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 15:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6e:f5:3d:ed:04:48:9c:28:36:89:49:cd:24:f4:89:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fd9886e2db2709db22364e334d39e2ee488d36e
        Validity
            Not Before: Jun 14 15:00:55 2025 GMT
            Not After : Jun 15 15:00:55 2025 GMT
        Subject: CN=99d71015a2ba92015322af373c4bffd112c6f082
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:0d:c0:12:8b:f0:f9:1c:90:4e:bd:ef:6d:c2:
                    aa:c7:96:c0:64:8f:be:e5:d5:0e:22:ea:ef:cc:14:
                    5b:2d:d0:7d:1c:f3:48:50:4b:52:da:f8:03:d9:e6:
                    fc:b6:bf:94:f8:ab:ac:9a:1a:91:9b:01:49:f9:c2:
                    35:13:8f:f0:89:8f:f9:b4:d6:52:ee:fc:98:75:ef:
                    24:1a:15:98:0c:f5:b5:6b:98:94:a9:f4:a1:27:05:
                    98:9b:e7:86:9b:b4:8b:19:d1:32:46:c8:20:92:e0:
                    4b:01:85:db:86:fb:5b:cd:2e:b6:97:23:a3:9a:f3:
                    70:26:19:51:6c:02:f2:5d:ee:42:58:39:ac:1a:f1:
                    93:ae:0d:c8:f1:93:36:bc:a7:02:a6:74:91:bd:5e:
                    d4:41:fc:be:a4:7f:80:3a:ed:6f:aa:de:32:20:79:
                    f5:4d:32:5b:81:cf:50:b5:ed:3c:53:01:80:91:67:
                    5a:66:9d:15:55:06:a6:3f:64:12:c6:36:a1:16:6f:
                    a7:25:0e:77:26:b4:f3:69:4a:cc:ad:94:5a:36:cd:
                    6b:21:34:9c:07:9f:eb:86:f0:e5:d7:13:31:49:8f:
                    5c:b9:6e:15:53:8c:38:e9:1f:ce:27:20:41:dc:a2:
                    0f:e4:65:ef:28:47:ad:db:92:2f:13:be:59:cd:a8:
                    42:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:D7:10:15:A2:BA:92:01:53:22:AF:37:3C:4B:FF:D1:12:C6:F0:82
            X509v3 Authority Key Identifier:
                keyid:9F:D9:88:6E:2D:B2:70:9D:B2:23:64:E3:34:D3:9E:2E:E4:88:D3:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n9mIbi2ycJ2yI2TjNNOeLuSI024.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:8b:0e:f0:06:41:8a:9c:af:40:46:ee:a4:a7:5b:83:e2:40:
         14:3e:b3:58:44:f0:84:66:71:bf:c1:fd:b5:c1:25:5f:46:10:
         6c:33:79:06:d9:fa:4d:1d:81:16:c1:b9:28:f8:a3:65:da:a7:
         ed:db:7c:24:ca:56:9f:9e:41:5f:b3:f6:ad:5b:2f:8c:41:34:
         b0:dd:35:91:5e:8b:6d:06:ae:4f:52:45:e1:e8:c5:4b:74:3a:
         b5:90:1e:b9:24:73:f7:0b:dc:3d:81:10:32:b5:c2:00:55:f9:
         2f:58:37:bb:b1:1a:cf:88:2c:de:91:b4:2c:15:f3:e1:e3:da:
         3c:4f:e7:8e:3e:d1:65:67:c0:50:79:08:77:01:85:65:63:eb:
         22:95:52:8c:8b:bf:21:cb:03:d8:1d:6d:78:58:9b:78:df:4f:
         64:36:c0:42:12:f7:67:d2:f9:5e:52:3c:b9:ab:c1:a8:e4:82:
         51:da:ea:b7:ad:fa:ab:d9:cf:24:45:6b:04:12:08:10:87:03:
         4c:f4:3a:35:a5:f4:2a:1e:bf:43:67:64:e0:b2:30:4c:03:90:
         ac:ef:8b:11:56:8c:e4:2f:14:ff:a5:aa:27:bf:3b:b1:cb:e7:
         9d:8c:be:d8:9d:81:66:38:c2:93:38:df:59:bd:47:46:31:65:
         81:41:0f:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdu9T3tBEicKDaJSc0k9Ik8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmZDk4ODZlMmRiMjcwOWRiMjIzNjRlMzM0ZDM5ZTJlZTQ4
OGQzNmUwHhcNMjUwNjE0MTUwMDU1WhcNMjUwNjE1MTUwMDU1WjAzMTEwLwYDVQQD
Eyg5OWQ3MTAxNWEyYmE5MjAxNTMyMmFmMzczYzRiZmZkMTEyYzZmMDgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjw3AEovw+RyQTr3vbcKqx5bAZI++
5dUOIurvzBRbLdB9HPNIUEtS2vgD2eb8tr+U+KusmhqRmwFJ+cI1E4/wiY/5tNZS
7vyYde8kGhWYDPW1a5iUqfShJwWYm+eGm7SLGdEyRsggkuBLAYXbhvtbzS62lyOj
mvNwJhlRbALyXe5CWDmsGvGTrg3I8ZM2vKcCpnSRvV7UQfy+pH+AOu1vqt4yIHn1
TTJbgc9Qte08UwGAkWdaZp0VVQamP2QSxjahFm+nJQ53JrTzaUrMrZRaNs1rITSc
B5/rhvDl1xMxSY9cuW4VU4w46R/OJyBB3KIP5GXvKEet25IvE75ZzahCUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJnXEBWiupIBUyKvNzxL/9ESxvCCMB8GA1UdIwQY
MBaAFJ/ZiG4tsnCdsiNk4zTTni7kiNNuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjltSWJpMnljSjJ5STJUak5OT2VMdVNJMDI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS85ZjY4NzItNTgxYi00ZDQ3LWJjNmEt
ZWJhMGNkNTdjMDIwLzEvbjltSWJpMnljSjJ5STJUak5OT2VMdVNJMDI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS85ZjY4NzItNTgxYi00ZDQ3LWJjNmEtZWJhMGNkNTdjMDIw
LzEvbjltSWJpMnljSjJ5STJUak5OT2VMdVNJMDI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI4sO8AZB
ipyvQEbupKdbg+JAFD6zWETwhGZxv8H9tcElX0YQbDN5Btn6TR2BFsG5KPijZdqn
7dt8JMpWn55BX7P2rVsvjEE0sN01kV6LbQauT1JF4ejFS3Q6tZAeuSRz9wvcPYEQ
MrXCAFX5L1g3u7Eaz4gs3pG0LBXz4ePaPE/njj7RZWfAUHkIdwGFZWPrIpVSjIu/
IcsD2B1teFibeN9PZDbAQhL3Z9L5XlI8uavBqOSCUdrqt636q9nPJEVrBBIIEIcD
TPQ6NaX0Kh6/Q2dk4LIwTAOQrO+LEVaM5C8U/6WqJ787scvnnYy+2J2BZjjCkzjf
Wb1HRjFlgUEP6Q==
-----END CERTIFICATE-----
Generated at Sun Jun 15 00:49:35 2025 by rpki-client