Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/8bdb68-7016-468b-9751-0f59527f34cb/1/NoEciv-vsKwfX39v97ZLtwNGRX0.mft
File:                     NoEciv-vsKwfX39v97ZLtwNGRX0.mft (raw, json)
Hash identifier:          L2hwJxUEFuNLISAXKjCr37xoH9W7DXCC52a+en5qVY4=
Subject key identifier:   67:4B:DD:D5:BE:75:80:B1:9E:35:C6:78:3C:F1:E2:23:32:00:5C:00
Authority key identifier: 36:81:1C:8A:FF:AF:B0:AC:1F:5F:7F:6F:F7:B6:4B:B7:03:46:45:7D
Certificate issuer:       /CN=36811c8affafb0ac1f5f7f6ff7b64bb70346457d
Certificate serial:       019769CF20392194C596DBB3798A7CC4F759
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NoEciv-vsKwfX39v97ZLtwNGRX0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/8bdb68-7016-468b-9751-0f59527f34cb/1/NoEciv-vsKwfX39v97ZLtwNGRX0.mft
Manifest number:          073E
Signing time:             Fri 13 Jun 2025 15:01:11 +0000
Manifest this update:     Fri 13 Jun 2025 15:01:11 +0000
Manifest next update:     Sat 14 Jun 2025 15:01:11 +0000
Files and hashes:         1: NoEciv-vsKwfX39v97ZLtwNGRX0.crl (hash: iCEa+06PfPLD6iB4fKM0jkewlRdf0OebnNHomJFY5O4=)
                          2: sKsIMzPD584L0VxOKj3vB4o7BOo.roa (hash: rcaZ/4MvSYNPC9u83vkkXq81Cjv7cMoYe82DYi6JocE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/8bdb68-7016-468b-9751-0f59527f34cb/1/NoEciv-vsKwfX39v97ZLtwNGRX0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/8bdb68-7016-468b-9751-0f59527f34cb/1/NoEciv-vsKwfX39v97ZLtwNGRX0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NoEciv-vsKwfX39v97ZLtwNGRX0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:cf:20:39:21:94:c5:96:db:b3:79:8a:7c:c4:f7:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36811c8affafb0ac1f5f7f6ff7b64bb70346457d
        Validity
            Not Before: Jun 13 15:01:11 2025 GMT
            Not After : Jun 14 15:01:11 2025 GMT
        Subject: CN=674bddd5be7580b19e35c6783cf1e22332005c00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:26:7a:3a:78:50:d7:d9:62:3c:ed:fa:4c:d9:
                    26:8d:b3:a9:c2:f4:16:52:16:25:bd:14:90:44:85:
                    25:30:f7:b8:8e:9c:d4:e5:c1:8a:e6:75:0e:f0:17:
                    e4:62:f3:e6:b9:5e:1f:0e:5f:1e:a5:73:52:45:8d:
                    3f:33:cd:29:19:bd:2a:a8:53:e4:8c:eb:99:83:00:
                    bf:a9:89:18:95:4e:b2:dc:2d:c4:cf:fb:da:ee:9c:
                    68:1d:06:f9:fa:0e:33:37:28:79:a2:03:ed:34:d2:
                    0b:88:70:37:7d:3e:97:73:f7:e6:9c:5a:6c:a0:7b:
                    5a:e5:4b:08:30:fa:b2:49:3e:87:fa:32:3d:67:54:
                    44:dc:c6:74:ae:d6:f3:3e:78:3d:9d:83:d5:d8:9f:
                    8d:60:7b:62:ec:0f:ad:ea:76:d7:34:b3:c1:5f:41:
                    1c:1d:71:8a:41:bd:c2:1a:83:69:11:fa:71:19:19:
                    bf:b6:7d:46:be:38:45:31:63:ed:38:ec:9f:71:ed:
                    fe:a0:13:0f:c4:51:e4:4b:ae:8e:13:05:5e:d0:55:
                    b5:ac:c7:82:53:bd:95:35:bc:2d:7a:aa:62:9b:2e:
                    3c:b9:bc:dd:f5:d3:4f:fb:87:c7:31:2a:55:6d:f3:
                    21:e6:bc:c1:64:66:b1:41:60:0d:8a:b1:63:bb:e3:
                    5a:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:4B:DD:D5:BE:75:80:B1:9E:35:C6:78:3C:F1:E2:23:32:00:5C:00
            X509v3 Authority Key Identifier:
                keyid:36:81:1C:8A:FF:AF:B0:AC:1F:5F:7F:6F:F7:B6:4B:B7:03:46:45:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NoEciv-vsKwfX39v97ZLtwNGRX0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8bdb68-7016-468b-9751-0f59527f34cb/1/NoEciv-vsKwfX39v97ZLtwNGRX0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8bdb68-7016-468b-9751-0f59527f34cb/1/NoEciv-vsKwfX39v97ZLtwNGRX0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:81:d6:25:dd:18:34:2e:83:b1:e1:4c:ca:df:c1:87:fb:91:
         8a:89:83:af:fa:9e:ff:11:d8:ff:9e:10:73:17:6f:30:bb:24:
         64:cd:54:f0:b3:94:f1:c2:78:d2:67:05:55:52:7b:99:8c:5e:
         28:ff:78:a9:3f:78:2a:f8:ce:1f:d1:93:e3:28:6a:f4:cd:da:
         de:86:c8:46:b7:6a:d5:36:ba:6f:2d:6b:55:39:e9:dc:ce:d9:
         40:af:ba:0f:1c:6a:ad:c6:9a:60:61:d1:1b:c7:6f:4c:2e:5c:
         d6:ce:e6:24:7a:68:f6:af:da:4b:55:39:24:33:3c:e4:e9:7a:
         fa:a9:42:d4:f9:22:e4:d6:79:ce:ed:2c:5b:3c:14:13:68:a7:
         df:2a:45:e7:94:6a:7e:73:0d:b3:0d:70:65:8f:74:e2:83:94:
         3b:d9:de:e9:7d:1e:a5:51:df:ac:a5:ee:62:02:9e:2f:b9:8a:
         c0:a8:d8:69:80:40:d7:40:67:11:8a:09:d8:c9:33:38:c8:0c:
         dc:35:28:f7:f3:e5:af:3a:af:bc:34:bc:78:08:ad:d5:06:c5:
         e8:d9:35:ef:82:e3:09:a4:f7:2f:e7:dc:03:29:a2:6a:d8:20:
         d2:49:ed:6d:1f:2f:5f:be:4a:dd:f1:a4:21:10:eb:2d:a4:c8:
         14:23:68:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpzyA5IZTFltuzeYp8xPdZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2ODExYzhhZmZhZmIwYWMxZjVmN2Y2ZmY3YjY0YmI3MDM0
NjQ1N2QwHhcNMjUwNjEzMTUwMTExWhcNMjUwNjE0MTUwMTExWjAzMTEwLwYDVQQD
Eyg2NzRiZGRkNWJlNzU4MGIxOWUzNWM2NzgzY2YxZTIyMzMyMDA1YzAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyZ6OnhQ19liPO36TNkmjbOpwvQW
UhYlvRSQRIUlMPe4jpzU5cGK5nUO8BfkYvPmuV4fDl8epXNSRY0/M80pGb0qqFPk
jOuZgwC/qYkYlU6y3C3Ez/va7pxoHQb5+g4zNyh5ogPtNNILiHA3fT6Xc/fmnFps
oHta5UsIMPqyST6H+jI9Z1RE3MZ0rtbzPng9nYPV2J+NYHti7A+t6nbXNLPBX0Ec
HXGKQb3CGoNpEfpxGRm/tn1GvjhFMWPtOOyfce3+oBMPxFHkS66OEwVe0FW1rMeC
U72VNbwteqpimy48ubzd9dNP+4fHMSpVbfMh5rzBZGaxQWANirFju+Na2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGdL3dW+dYCxnjXGeDzx4iMyAFwAMB8GA1UdIwQY
MBaAFDaBHIr/r7CsH19/b/e2S7cDRkV9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTm9FY2l2LXZzS3dmWDM5djk3Wkx0d05HUlgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi84YmRiNjgtNzAxNi00NjhiLTk3NTEt
MGY1OTUyN2YzNGNiLzEvTm9FY2l2LXZzS3dmWDM5djk3Wkx0d05HUlgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi84YmRiNjgtNzAxNi00NjhiLTk3NTEtMGY1OTUyN2YzNGNi
LzEvTm9FY2l2LXZzS3dmWDM5djk3Wkx0d05HUlgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkIHWJd0Y
NC6DseFMyt/Bh/uRiomDr/qe/xHY/54QcxdvMLskZM1U8LOU8cJ40mcFVVJ7mYxe
KP94qT94KvjOH9GT4yhq9M3a3obIRrdq1Ta6by1rVTnp3M7ZQK+6DxxqrcaaYGHR
G8dvTC5c1s7mJHpo9q/aS1U5JDM85Ol6+qlC1Pki5NZ5zu0sWzwUE2in3ypF55Rq
fnMNsw1wZY904oOUO9ne6X0epVHfrKXuYgKeL7mKwKjYaYBA10BnEYoJ2MkzOMgM
3DUo9/PlrzqvvDS8eAit1QbF6Nk174LjCaT3L+fcAymiatgg0kntbR8vX75K3fGk
IRDrLaTIFCNoJQ==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:40:19 2025 by rpki-client