Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/791963-af47-4c4c-88b7-a30e96db49c4/1/nMHPS2otJ73LJqeD6Ddu5uspX9g.mft
File:                     nMHPS2otJ73LJqeD6Ddu5uspX9g.mft (raw, json)
Hash identifier:          nBDRMYZhYNmRrXpm0VIxSqLtJJEzYdoBw3YTwqGP2b0=
Subject key identifier:   65:EC:39:C5:41:12:76:EB:94:04:C5:70:A4:55:0A:7E:6F:4E:01:FE
Authority key identifier: 9C:C1:CF:4B:6A:2D:27:BD:CB:26:A7:83:E8:37:6E:E6:EB:29:5F:D8
Certificate issuer:       /CN=9cc1cf4b6a2d27bdcb26a783e8376ee6eb295fd8
Certificate serial:       01976960F297CDE78004441FFE942A5AAB78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nMHPS2otJ73LJqeD6Ddu5uspX9g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/791963-af47-4c4c-88b7-a30e96db49c4/1/nMHPS2otJ73LJqeD6Ddu5uspX9g.mft
Manifest number:          0BB6
Signing time:             Fri 13 Jun 2025 13:00:50 +0000
Manifest this update:     Fri 13 Jun 2025 13:00:50 +0000
Manifest next update:     Sat 14 Jun 2025 13:00:50 +0000
Files and hashes:         1: nMHPS2otJ73LJqeD6Ddu5uspX9g.crl (hash: tqrS1U4+8wPFmeCruMtSMoizDztFmW2vN+kkaCK6Drw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/791963-af47-4c4c-88b7-a30e96db49c4/1/nMHPS2otJ73LJqeD6Ddu5uspX9g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/791963-af47-4c4c-88b7-a30e96db49c4/1/nMHPS2otJ73LJqeD6Ddu5uspX9g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nMHPS2otJ73LJqeD6Ddu5uspX9g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:60:f2:97:cd:e7:80:04:44:1f:fe:94:2a:5a:ab:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cc1cf4b6a2d27bdcb26a783e8376ee6eb295fd8
        Validity
            Not Before: Jun 13 13:00:50 2025 GMT
            Not After : Jun 14 13:00:50 2025 GMT
        Subject: CN=65ec39c5411276eb9404c570a4550a7e6f4e01fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:0d:76:5e:ed:a9:d0:31:ac:cf:da:1f:96:84:
                    71:df:74:bd:5f:d9:4e:4b:6f:1f:41:d3:be:7f:62:
                    e5:ab:46:e0:35:c5:c8:2b:98:c1:b4:57:fa:3a:26:
                    ba:3e:84:12:75:01:1f:47:1b:b6:1c:fd:78:08:54:
                    10:5f:0e:ce:16:4a:1d:26:34:63:ff:2f:58:74:c2:
                    02:2b:c0:34:93:63:91:31:63:33:7a:1a:02:f7:da:
                    f9:6e:d9:c7:5f:af:37:51:99:ad:cb:c0:1d:28:72:
                    d9:f1:2a:5e:3c:2d:e7:6d:20:03:39:c7:41:3b:7a:
                    4c:9e:3d:50:3a:f8:b8:f2:9a:42:9b:de:33:f9:63:
                    60:b9:47:87:fa:30:e7:3f:03:4b:b7:d7:3d:0f:cc:
                    4d:e4:36:7d:d0:74:62:74:81:cc:88:15:f0:ce:7e:
                    34:5f:32:d4:a0:3a:cb:b6:bd:09:58:bd:c7:53:e4:
                    69:23:dc:26:c9:81:77:12:96:b1:df:e8:05:cd:a3:
                    94:8a:70:ea:51:d4:26:ee:27:f9:4a:10:c2:bb:56:
                    59:cf:08:4f:d2:f4:77:46:e7:d9:cc:9f:69:cf:40:
                    03:7c:14:55:0c:6d:f4:25:45:04:62:1f:23:ee:03:
                    6e:25:39:c9:52:32:b5:27:49:35:26:fc:b4:39:60:
                    d4:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:EC:39:C5:41:12:76:EB:94:04:C5:70:A4:55:0A:7E:6F:4E:01:FE
            X509v3 Authority Key Identifier:
                keyid:9C:C1:CF:4B:6A:2D:27:BD:CB:26:A7:83:E8:37:6E:E6:EB:29:5F:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nMHPS2otJ73LJqeD6Ddu5uspX9g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/791963-af47-4c4c-88b7-a30e96db49c4/1/nMHPS2otJ73LJqeD6Ddu5uspX9g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/791963-af47-4c4c-88b7-a30e96db49c4/1/nMHPS2otJ73LJqeD6Ddu5uspX9g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:f5:40:9c:ee:80:08:c3:32:c3:25:09:d3:8d:ab:48:da:24:
         2e:3a:4d:13:5f:61:19:02:79:0d:13:36:31:de:e8:32:af:f4:
         5d:34:bd:1f:46:ce:8b:12:cb:df:f3:59:67:b4:87:2a:95:82:
         4f:46:d8:b7:2c:99:18:83:63:fb:f2:c9:a4:49:34:29:d8:71:
         6a:ee:9a:8e:93:f3:6e:75:cb:7e:94:3b:01:b2:fc:8f:36:dc:
         06:8c:a5:3e:03:29:22:c2:f1:37:00:43:34:fa:dd:e3:05:86:
         a9:82:a3:2b:c0:22:ef:51:0d:97:d2:5b:89:63:07:33:60:17:
         8e:fd:24:35:0d:73:e8:3d:8c:b9:69:17:53:14:d2:bf:ae:87:
         37:7c:1f:33:d9:d1:be:cb:37:e0:c3:79:4f:49:16:73:f8:c3:
         f0:91:22:3c:ff:62:70:26:e7:a3:64:d8:07:3b:7a:37:14:d8:
         df:6c:d8:f3:91:dd:b4:c8:f7:1c:fd:11:b2:68:a6:e3:0c:b8:
         e8:66:e7:0f:e0:33:5a:3c:bf:6f:29:5f:b4:2f:f7:82:1d:4c:
         8f:90:fc:f4:30:c6:d0:74:a9:fa:28:6c:07:57:7e:5a:65:fa:
         c3:d7:df:fe:a3:9a:20:52:a3:e0:61:d4:97:14:a3:18:b8:55:
         49:7a:5d:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpYPKXzeeABEQf/pQqWqt4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljYzFjZjRiNmEyZDI3YmRjYjI2YTc4M2U4Mzc2ZWU2ZWIy
OTVmZDgwHhcNMjUwNjEzMTMwMDUwWhcNMjUwNjE0MTMwMDUwWjAzMTEwLwYDVQQD
Eyg2NWVjMzljNTQxMTI3NmViOTQwNGM1NzBhNDU1MGE3ZTZmNGUwMWZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8w12Xu2p0DGsz9ofloRx33S9X9lO
S28fQdO+f2Llq0bgNcXIK5jBtFf6Oia6PoQSdQEfRxu2HP14CFQQXw7OFkodJjRj
/y9YdMICK8A0k2ORMWMzehoC99r5btnHX683UZmty8AdKHLZ8SpePC3nbSADOcdB
O3pMnj1QOvi48ppCm94z+WNguUeH+jDnPwNLt9c9D8xN5DZ90HRidIHMiBXwzn40
XzLUoDrLtr0JWL3HU+RpI9wmyYF3Epax3+gFzaOUinDqUdQm7if5ShDCu1ZZzwhP
0vR3RufZzJ9pz0ADfBRVDG30JUUEYh8j7gNuJTnJUjK1J0k1Jvy0OWDUvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGXsOcVBEnbrlATFcKRVCn5vTgH+MB8GA1UdIwQY
MBaAFJzBz0tqLSe9yyang+g3bubrKV/YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbk1IUFMyb3RKNzNMSnFlRDZEZHU1dXNwWDlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS83OTE5NjMtYWY0Ny00YzRjLTg4Yjct
YTMwZTk2ZGI0OWM0LzEvbk1IUFMyb3RKNzNMSnFlRDZEZHU1dXNwWDlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS83OTE5NjMtYWY0Ny00YzRjLTg4YjctYTMwZTk2ZGI0OWM0
LzEvbk1IUFMyb3RKNzNMSnFlRDZEZHU1dXNwWDlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP/VAnO6A
CMMywyUJ042rSNokLjpNE19hGQJ5DRM2Md7oMq/0XTS9H0bOixLL3/NZZ7SHKpWC
T0bYtyyZGINj+/LJpEk0Kdhxau6ajpPzbnXLfpQ7AbL8jzbcBoylPgMpIsLxNwBD
NPrd4wWGqYKjK8Ai71ENl9JbiWMHM2AXjv0kNQ1z6D2MuWkXUxTSv66HN3wfM9nR
vss34MN5T0kWc/jD8JEiPP9icCbno2TYBzt6NxTY32zY85HdtMj3HP0Rsmim4wy4
6GbnD+AzWjy/bylftC/3gh1Mj5D89DDG0HSp+ihsB1d+WmX6w9ff/qOaIFKj4GHU
lxSjGLhVSXpdMw==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:02:31 2025 by rpki-client