Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/464260-8d7e-4507-b44b-2864707b2b3f/1/nHIayAejJvhxu6oYSWPNYCtcwtY.mft
File:                     nHIayAejJvhxu6oYSWPNYCtcwtY.mft (raw, json)
Hash identifier:          KCLUkPSgAYxMQtcalN+qzwjvbuOQVRIKvnz9ICRzMa8=
Subject key identifier:   FD:E7:F3:A1:82:3D:06:51:EC:07:C3:55:C3:EB:F7:4C:D4:4A:90:B7
Authority key identifier: 9C:72:1A:C8:07:A3:26:F8:71:BB:AA:18:49:63:CD:60:2B:5C:C2:D6
Certificate issuer:       /CN=9c721ac807a326f871bbaa184963cd602b5cc2d6
Certificate serial:       0197722CF9089006F689B612A5E4D1B922F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nHIayAejJvhxu6oYSWPNYCtcwtY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/464260-8d7e-4507-b44b-2864707b2b3f/1/nHIayAejJvhxu6oYSWPNYCtcwtY.mft
Manifest number:          1592
Signing time:             Sun 15 Jun 2025 06:00:39 +0000
Manifest this update:     Sun 15 Jun 2025 06:00:39 +0000
Manifest next update:     Mon 16 Jun 2025 06:00:39 +0000
Files and hashes:         1: 9jfoHjHhXlQUp0QHnvy8Xfhd38g.roa (hash: /upMq7FxxL/VBqHPpqBK/s+Z/2QbORhxGy0ijXbQbKE=)
                          2: nHIayAejJvhxu6oYSWPNYCtcwtY.crl (hash: UlO/ULy5NE3avvh9cHnY0C1HprdKEc8NPQOb6fqG3Z4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/464260-8d7e-4507-b44b-2864707b2b3f/1/nHIayAejJvhxu6oYSWPNYCtcwtY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/464260-8d7e-4507-b44b-2864707b2b3f/1/nHIayAejJvhxu6oYSWPNYCtcwtY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nHIayAejJvhxu6oYSWPNYCtcwtY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 04:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:72:2c:f9:08:90:06:f6:89:b6:12:a5:e4:d1:b9:22:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c721ac807a326f871bbaa184963cd602b5cc2d6
        Validity
            Not Before: Jun 15 06:00:39 2025 GMT
            Not After : Jun 16 06:00:39 2025 GMT
        Subject: CN=fde7f3a1823d0651ec07c355c3ebf74cd44a90b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:96:e4:e2:2a:07:d8:9d:bc:35:07:a6:11:1e:
                    b6:9d:75:e4:af:e5:7e:1e:7c:c4:0a:d7:4d:d3:4c:
                    c5:53:b5:69:e2:fc:a6:d9:77:d2:0c:43:0d:b6:9a:
                    8c:3b:26:5b:14:4f:d3:dc:19:4d:5f:0e:0e:f6:65:
                    02:a2:ba:18:0e:5b:8c:ff:0a:fb:63:ef:57:6a:4f:
                    a3:08:ce:d9:0f:50:e0:80:0d:99:73:fc:38:6d:63:
                    bd:04:6a:76:0a:14:52:f4:1e:95:8e:d3:b3:72:a9:
                    b2:14:a4:eb:db:69:17:71:f3:08:bd:56:ee:de:46:
                    d6:69:ed:d1:d9:d3:a8:ce:81:79:e8:0b:35:00:93:
                    e6:9e:7b:93:31:eb:f3:9e:6b:cf:92:41:2e:2e:99:
                    14:d5:7f:92:ac:ce:db:87:36:97:24:df:c5:d6:42:
                    29:ad:0d:0b:1b:53:eb:1c:e1:2a:d9:83:df:ff:5b:
                    10:42:2b:eb:47:12:e8:36:d4:8d:cd:92:36:57:43:
                    a3:17:7c:d9:2d:53:00:21:19:19:6c:2b:ae:46:2c:
                    87:39:0c:79:37:99:75:1a:80:ed:79:60:45:98:38:
                    44:75:a7:07:35:5d:91:90:11:27:54:54:5e:9d:f6:
                    d0:72:fb:ef:86:b1:c0:c7:fc:89:c1:88:83:bc:2e:
                    b7:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:E7:F3:A1:82:3D:06:51:EC:07:C3:55:C3:EB:F7:4C:D4:4A:90:B7
            X509v3 Authority Key Identifier:
                keyid:9C:72:1A:C8:07:A3:26:F8:71:BB:AA:18:49:63:CD:60:2B:5C:C2:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nHIayAejJvhxu6oYSWPNYCtcwtY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/464260-8d7e-4507-b44b-2864707b2b3f/1/nHIayAejJvhxu6oYSWPNYCtcwtY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/464260-8d7e-4507-b44b-2864707b2b3f/1/nHIayAejJvhxu6oYSWPNYCtcwtY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:2c:ae:14:6f:ad:e7:83:84:1b:e8:46:d6:62:1e:98:ad:68:
         44:41:2e:aa:67:6e:b2:f3:0c:13:2f:a1:fa:29:48:31:8e:f5:
         22:f9:7f:f8:c1:bd:13:7d:13:0a:bd:51:ed:bc:42:34:c0:9d:
         5e:ca:88:e8:3b:11:1c:39:10:3b:f3:65:37:54:57:ef:f2:58:
         58:d3:b0:01:9a:3e:18:32:cd:6c:d2:c7:d1:96:9a:f2:23:de:
         51:7d:b8:12:6a:2f:9f:45:45:1b:8f:91:3b:c1:b7:31:b1:ee:
         1f:5a:80:57:09:f8:1f:c0:4b:27:1d:1f:dc:40:e7:d5:cb:f6:
         07:e6:e1:1d:c0:8c:81:d6:28:43:4d:ae:52:26:ec:da:3d:a2:
         53:0d:26:97:4c:d6:16:b9:32:bb:a2:66:90:47:31:10:38:55:
         e3:46:44:22:a1:bf:e0:a1:95:b1:37:d9:0c:40:eb:99:d0:cc:
         c3:8c:9b:0f:17:b0:85:91:73:7b:1e:81:6d:3c:b7:c0:ac:11:
         37:b1:cc:ea:9e:7c:5e:6b:99:75:2f:b8:bf:4d:d6:f4:ce:d8:
         dd:f4:1b:4a:06:87:a1:a4:5b:4a:cf:b2:c8:fb:95:6b:5d:8b:
         5b:1f:63:c3:48:1f:21:3e:c8:06:8e:1e:bb:94:40:9f:f4:6b:
         c0:85:24:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdyLPkIkAb2ibYSpeTRuSL0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljNzIxYWM4MDdhMzI2Zjg3MWJiYWExODQ5NjNjZDYwMmI1
Y2MyZDYwHhcNMjUwNjE1MDYwMDM5WhcNMjUwNjE2MDYwMDM5WjAzMTEwLwYDVQQD
EyhmZGU3ZjNhMTgyM2QwNjUxZWMwN2MzNTVjM2ViZjc0Y2Q0NGE5MGI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJbk4ioH2J28NQemER62nXXkr+V+
HnzECtdN00zFU7Vp4vym2XfSDEMNtpqMOyZbFE/T3BlNXw4O9mUCoroYDluM/wr7
Y+9Xak+jCM7ZD1DggA2Zc/w4bWO9BGp2ChRS9B6VjtOzcqmyFKTr22kXcfMIvVbu
3kbWae3R2dOozoF56As1AJPmnnuTMevznmvPkkEuLpkU1X+SrM7bhzaXJN/F1kIp
rQ0LG1PrHOEq2YPf/1sQQivrRxLoNtSNzZI2V0OjF3zZLVMAIRkZbCuuRiyHOQx5
N5l1GoDteWBFmDhEdacHNV2RkBEnVFRenfbQcvvvhrHAx/yJwYiDvC637wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP3n86GCPQZR7AfDVcPr90zUSpC3MB8GA1UdIwQY
MBaAFJxyGsgHoyb4cbuqGEljzWArXMLWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkhJYXlBZWpKdmh4dTZvWVNXUE5ZQ3Rjd3RZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi80NjQyNjAtOGQ3ZS00NTA3LWI0NGIt
Mjg2NDcwN2IyYjNmLzEvbkhJYXlBZWpKdmh4dTZvWVNXUE5ZQ3Rjd3RZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi80NjQyNjAtOGQ3ZS00NTA3LWI0NGItMjg2NDcwN2IyYjNm
LzEvbkhJYXlBZWpKdmh4dTZvWVNXUE5ZQ3Rjd3RZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmyyuFG+t
54OEG+hG1mIemK1oREEuqmdusvMMEy+h+ilIMY71Ivl/+MG9E30TCr1R7bxCNMCd
XsqI6DsRHDkQO/NlN1RX7/JYWNOwAZo+GDLNbNLH0Zaa8iPeUX24Emovn0VFG4+R
O8G3MbHuH1qAVwn4H8BLJx0f3EDn1cv2B+bhHcCMgdYoQ02uUibs2j2iUw0ml0zW
Frkyu6JmkEcxEDhV40ZEIqG/4KGVsTfZDEDrmdDMw4ybDxewhZFzex6BbTy3wKwR
N7HM6p58XmuZdS+4v03W9M7Y3fQbSgaHoaRbSs+yyPuVa12LWx9jw0gfIT7IBo4e
u5RAn/RrwIUk3A==
-----END CERTIFICATE-----
Generated at Sun Jun 15 10:16:01 2025 by rpki-client