Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/60e51f-b803-474d-b27a-f2990ceb94ec/1/nfGF6Z_-YRUnoOlDMRUf_i7nKuk.mft
File:                     nfGF6Z_-YRUnoOlDMRUf_i7nKuk.mft (raw, json)
Hash identifier:          3rrOq/QoH/pRBQdT1yyqkZxILPdfgJe5F8dQJdxUWnA=
Subject key identifier:   90:20:F4:B0:57:D1:01:2F:C8:8D:60:64:D1:06:CD:8E:70:9D:D7:0D
Authority key identifier: 9D:F1:85:E9:9F:FE:61:15:27:A0:E9:43:31:15:1F:FE:2E:E7:2A:E9
Certificate issuer:       /CN=9df185e99ffe611527a0e94331151ffe2ee72ae9
Certificate serial:       0196760C86B6D29B5C4C8D0DB3806569B0EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nfGF6Z_-YRUnoOlDMRUf_i7nKuk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/60e51f-b803-474d-b27a-f2990ceb94ec/1/nfGF6Z_-YRUnoOlDMRUf_i7nKuk.mft
Manifest number:          078F
Signing time:             Sun 27 Apr 2025 07:00:54 +0000
Manifest this update:     Sun 27 Apr 2025 07:00:54 +0000
Manifest next update:     Mon 28 Apr 2025 07:00:54 +0000
Files and hashes:         1: 91cINY9woI_zH6e1r3Wkrenr7Yg.roa (hash: 3OQuboWAG+RQMvSWcHif8T7bhj5yD9lJGrTB5RXF988=)
                          2: nfGF6Z_-YRUnoOlDMRUf_i7nKuk.crl (hash: G9pWcypUkQzUkfE43S8F5iY8/a3hCsR5+X6LBRVozCA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/60e51f-b803-474d-b27a-f2990ceb94ec/1/nfGF6Z_-YRUnoOlDMRUf_i7nKuk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/60e51f-b803-474d-b27a-f2990ceb94ec/1/nfGF6Z_-YRUnoOlDMRUf_i7nKuk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfGF6Z_-YRUnoOlDMRUf_i7nKuk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 07:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:76:0c:86:b6:d2:9b:5c:4c:8d:0d:b3:80:65:69:b0:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9df185e99ffe611527a0e94331151ffe2ee72ae9
        Validity
            Not Before: Apr 27 07:00:54 2025 GMT
            Not After : Apr 28 07:00:54 2025 GMT
        Subject: CN=9020f4b057d1012fc88d6064d106cd8e709dd70d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:bc:dd:52:25:92:5b:5b:bf:74:5a:d9:6b:35:
                    41:6c:6d:5f:8d:64:be:72:22:45:86:95:16:8c:c4:
                    9a:d0:51:32:7e:92:f3:28:89:fa:1a:f4:5f:2d:dd:
                    a0:b7:96:93:21:4c:65:28:58:e0:00:1b:a6:5c:60:
                    27:12:47:51:26:c2:73:f1:fe:1a:20:d7:38:36:d8:
                    78:63:87:60:97:62:2b:57:b3:07:b6:d2:4e:2b:0e:
                    01:8f:d9:51:d5:20:2c:79:f3:93:ff:5e:71:a6:50:
                    7a:ff:e4:f6:6a:4d:bf:38:85:e6:77:f6:b9:c5:21:
                    47:6e:7b:3e:d3:c4:22:7b:26:61:16:37:f7:31:d2:
                    35:3d:51:7e:45:31:39:22:43:58:c2:f7:20:29:56:
                    45:8d:9b:4f:a0:ea:13:fa:77:24:5d:75:a4:1f:86:
                    a1:43:d4:ad:93:d8:a9:07:9b:5a:e0:cc:73:07:78:
                    fc:1b:b0:51:80:2c:e4:90:2e:79:d8:25:12:9d:8d:
                    5b:2e:82:85:df:7a:e9:35:5c:74:fa:0b:9b:ed:28:
                    d6:61:23:8f:ed:19:79:6f:00:4d:31:84:aa:ac:3a:
                    21:12:2d:81:5a:98:af:cd:b9:ea:1f:7c:1c:2f:3b:
                    fe:88:fe:75:f9:4b:c9:44:df:7c:77:f9:27:cb:16:
                    0d:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:20:F4:B0:57:D1:01:2F:C8:8D:60:64:D1:06:CD:8E:70:9D:D7:0D
            X509v3 Authority Key Identifier:
                keyid:9D:F1:85:E9:9F:FE:61:15:27:A0:E9:43:31:15:1F:FE:2E:E7:2A:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfGF6Z_-YRUnoOlDMRUf_i7nKuk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/60e51f-b803-474d-b27a-f2990ceb94ec/1/nfGF6Z_-YRUnoOlDMRUf_i7nKuk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/60e51f-b803-474d-b27a-f2990ceb94ec/1/nfGF6Z_-YRUnoOlDMRUf_i7nKuk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:7c:51:f9:dc:b7:eb:9c:78:30:36:16:0a:39:ef:68:26:f6:
         40:f7:b2:60:d5:4c:fe:de:a7:bc:51:28:2f:b6:52:6b:4f:bc:
         56:75:ac:46:c1:53:56:7c:ed:54:17:ed:bf:04:e8:bf:60:44:
         e4:57:ec:71:01:7e:19:3f:9a:e3:ed:24:58:f0:e3:35:d0:80:
         fb:5f:a0:4a:42:5e:aa:4f:f5:3d:fb:95:26:c6:cf:01:ba:c7:
         d3:24:a4:74:e8:6d:e3:0d:de:22:ff:1c:47:cd:a2:8c:9c:41:
         d4:26:f6:25:3d:b6:59:80:fd:57:ab:fd:d9:20:23:46:cd:55:
         23:20:f4:7b:c5:a7:9f:33:19:ad:ee:36:c6:39:94:59:3f:ce:
         9e:fe:73:48:ea:2b:81:10:3f:b7:99:13:ce:7b:52:43:13:2d:
         65:eb:05:5e:de:49:24:8b:29:c5:d2:36:82:1f:06:27:6f:43:
         10:eb:e2:0d:e6:bb:8c:cb:96:fe:cb:34:86:d4:55:91:0b:b2:
         19:3c:75:d7:2d:db:3a:2c:f1:ef:99:ed:12:b6:6c:7c:88:7d:
         8f:6b:d3:13:20:65:2a:24:d3:4a:52:b2:3f:0d:33:42:d7:12:
         78:90:3a:27:63:85:b8:3c:42:fb:67:0a:49:2c:7d:21:aa:e3:
         1b:f2:b1:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ2DIa20ptcTI0Ns4BlabDsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkZjE4NWU5OWZmZTYxMTUyN2EwZTk0MzMxMTUxZmZlMmVl
NzJhZTkwHhcNMjUwNDI3MDcwMDU0WhcNMjUwNDI4MDcwMDU0WjAzMTEwLwYDVQQD
Eyg5MDIwZjRiMDU3ZDEwMTJmYzg4ZDYwNjRkMTA2Y2Q4ZTcwOWRkNzBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA37zdUiWSW1u/dFrZazVBbG1fjWS+
ciJFhpUWjMSa0FEyfpLzKIn6GvRfLd2gt5aTIUxlKFjgABumXGAnEkdRJsJz8f4a
INc4Nth4Y4dgl2IrV7MHttJOKw4Bj9lR1SAsefOT/15xplB6/+T2ak2/OIXmd/a5
xSFHbns+08QieyZhFjf3MdI1PVF+RTE5IkNYwvcgKVZFjZtPoOoT+nckXXWkH4ah
Q9Stk9ipB5ta4MxzB3j8G7BRgCzkkC552CUSnY1bLoKF33rpNVx0+gub7SjWYSOP
7Rl5bwBNMYSqrDohEi2BWpivzbnqH3wcLzv+iP51+UvJRN98d/knyxYNeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJAg9LBX0QEvyI1gZNEGzY5wndcNMB8GA1UdIwQY
MBaAFJ3xhemf/mEVJ6DpQzEVH/4u5yrpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmZHRjZaXy1ZUlVub09sRE1SVWZfaTduS3VrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy82MGU1MWYtYjgwMy00NzRkLWIyN2Et
ZjI5OTBjZWI5NGVjLzEvbmZHRjZaXy1ZUlVub09sRE1SVWZfaTduS3VrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy82MGU1MWYtYjgwMy00NzRkLWIyN2EtZjI5OTBjZWI5NGVj
LzEvbmZHRjZaXy1ZUlVub09sRE1SVWZfaTduS3VrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq3xR+dy3
65x4MDYWCjnvaCb2QPeyYNVM/t6nvFEoL7ZSa0+8VnWsRsFTVnztVBftvwTov2BE
5FfscQF+GT+a4+0kWPDjNdCA+1+gSkJeqk/1PfuVJsbPAbrH0ySkdOht4w3eIv8c
R82ijJxB1Cb2JT22WYD9V6v92SAjRs1VIyD0e8WnnzMZre42xjmUWT/Onv5zSOor
gRA/t5kTzntSQxMtZesFXt5JJIspxdI2gh8GJ29DEOviDea7jMuW/ss0htRVkQuy
GTx11y3bOizx75ntErZsfIh9j2vTEyBlKiTTSlKyPw0zQtcSeJA6J2OFuDxC+2cK
SSx9IarjG/KxnQ==
-----END CERTIFICATE-----
Generated at Sun Apr 27 16:28:05 2025 by rpki-client