Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/ccef23-5341-41cc-9ae9-61efb6f89f0a/1/nuxqatPVR_hR05uGb7FAn6GXL78.mft
File:                     nuxqatPVR_hR05uGb7FAn6GXL78.mft (raw, json)
Hash identifier:          8DB7b7wOeqf+Fc2VTw4CnUQ6GZ3Ch5w6HBf3CgTH7Ds=
Subject key identifier:   9C:E9:07:55:32:4B:E0:82:0E:4F:71:CF:69:53:D8:6E:69:54:DF:75
Authority key identifier: 9E:EC:6A:6A:D3:D5:47:F8:51:D3:9B:86:6F:B1:40:9F:A1:97:2F:BF
Certificate issuer:       /CN=9eec6a6ad3d547f851d39b866fb1409fa1972fbf
Certificate serial:       01976D3E0FAA937C7452DA100D8CC9804EA9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nuxqatPVR_hR05uGb7FAn6GXL78.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/ccef23-5341-41cc-9ae9-61efb6f89f0a/1/nuxqatPVR_hR05uGb7FAn6GXL78.mft
Manifest number:          158A
Signing time:             Sat 14 Jun 2025 07:01:13 +0000
Manifest this update:     Sat 14 Jun 2025 07:01:13 +0000
Manifest next update:     Sun 15 Jun 2025 07:01:13 +0000
Files and hashes:         1: nuxqatPVR_hR05uGb7FAn6GXL78.crl (hash: MCRQiyzwv0MxMaUY+5PdS+wrXjtAfz0fLdCn0dqTDW0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/ccef23-5341-41cc-9ae9-61efb6f89f0a/1/nuxqatPVR_hR05uGb7FAn6GXL78.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/ccef23-5341-41cc-9ae9-61efb6f89f0a/1/nuxqatPVR_hR05uGb7FAn6GXL78.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nuxqatPVR_hR05uGb7FAn6GXL78.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:3e:0f:aa:93:7c:74:52:da:10:0d:8c:c9:80:4e:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9eec6a6ad3d547f851d39b866fb1409fa1972fbf
        Validity
            Not Before: Jun 14 07:01:13 2025 GMT
            Not After : Jun 15 07:01:13 2025 GMT
        Subject: CN=9ce90755324be0820e4f71cf6953d86e6954df75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:42:2e:bc:d1:6b:93:fc:ed:46:3f:de:18:fb:
                    e9:9b:c9:33:72:1f:7f:3a:45:4b:ff:b3:63:3e:a0:
                    75:76:dc:6a:b2:6c:c0:4e:1c:3c:7c:a0:70:e8:0c:
                    d4:c6:69:b1:43:ad:fc:99:76:1e:70:b8:2f:ee:b5:
                    01:99:82:2c:23:27:e1:73:b6:f0:27:2a:84:97:d8:
                    ed:eb:50:ef:1a:8e:b4:87:40:45:25:10:9a:47:c1:
                    b7:73:15:37:bf:2a:80:f9:07:69:71:e7:42:f1:fe:
                    69:8d:21:cb:57:3d:86:51:5c:7a:8d:91:fe:34:b4:
                    0b:f3:fa:98:be:3d:00:f1:71:fa:4b:d9:f6:05:21:
                    9e:38:a1:63:3c:3d:bc:93:e1:ee:51:26:14:97:2c:
                    88:59:c9:44:a5:45:3b:86:be:78:6a:c8:6b:ef:e5:
                    78:cb:f0:8f:5a:5c:1c:6e:a3:63:41:2e:91:80:6a:
                    b8:20:38:4b:33:e6:bf:6a:ab:90:7d:3f:5a:e1:b0:
                    b6:a4:ba:17:e1:01:4c:db:7e:f5:d0:a2:b3:d3:32:
                    d6:c4:b8:c2:c0:b7:37:1b:49:89:30:ee:0c:fd:51:
                    d3:0a:16:0d:23:4e:10:66:ca:1d:95:08:4a:1d:21:
                    62:9f:fe:7c:41:97:f2:55:f5:58:c4:92:5a:65:43:
                    cd:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:E9:07:55:32:4B:E0:82:0E:4F:71:CF:69:53:D8:6E:69:54:DF:75
            X509v3 Authority Key Identifier:
                keyid:9E:EC:6A:6A:D3:D5:47:F8:51:D3:9B:86:6F:B1:40:9F:A1:97:2F:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nuxqatPVR_hR05uGb7FAn6GXL78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/ccef23-5341-41cc-9ae9-61efb6f89f0a/1/nuxqatPVR_hR05uGb7FAn6GXL78.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/ccef23-5341-41cc-9ae9-61efb6f89f0a/1/nuxqatPVR_hR05uGb7FAn6GXL78.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:19:19:b3:b7:e5:8c:82:88:92:bc:54:a1:36:35:46:21:fb:
         e4:a4:56:c5:3a:dd:4e:d6:cd:68:df:37:6e:b0:a8:69:9d:92:
         7a:10:f6:ab:15:60:e8:62:91:aa:d4:55:be:75:cf:b6:a0:24:
         b4:2d:bf:c3:7e:53:ee:66:97:f3:d4:73:e4:bf:05:1d:09:b1:
         82:3d:92:b8:c6:34:82:aa:41:5d:c3:6b:41:3e:a5:d9:8c:f1:
         2e:25:a3:40:0d:97:7f:2b:68:ee:ba:92:77:a1:45:15:2e:d1:
         a1:45:05:16:a8:fe:e5:3f:96:24:5a:d8:0e:62:d5:c4:02:3d:
         79:a0:eb:fd:3c:1d:e8:57:12:2d:44:c7:b3:f5:1c:f1:48:92:
         ff:7d:46:c3:41:26:a9:14:24:a2:a2:f5:8e:ab:ba:11:cb:4c:
         a5:9b:2b:fb:e8:f1:19:00:e5:88:81:d7:0c:bc:ff:f7:34:f4:
         59:e3:2f:b0:9d:10:44:9b:28:7f:f4:a2:c3:b5:cc:8c:dc:67:
         ca:90:71:08:dc:70:03:9e:78:44:f2:c3:d0:45:08:ae:82:13:
         dd:0a:67:58:b9:f5:9b:b2:94:55:ba:78:9d:7d:50:05:0e:11:
         67:2f:8a:19:39:fe:ed:08:d7:b4:23:9c:c6:09:1c:20:62:89:
         3a:9c:83:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtPg+qk3x0UtoQDYzJgE6pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllZWM2YTZhZDNkNTQ3Zjg1MWQzOWI4NjZmYjE0MDlmYTE5
NzJmYmYwHhcNMjUwNjE0MDcwMTEzWhcNMjUwNjE1MDcwMTEzWjAzMTEwLwYDVQQD
Eyg5Y2U5MDc1NTMyNGJlMDgyMGU0ZjcxY2Y2OTUzZDg2ZTY5NTRkZjc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUIuvNFrk/ztRj/eGPvpm8kzch9/
OkVL/7NjPqB1dtxqsmzAThw8fKBw6AzUxmmxQ638mXYecLgv7rUBmYIsIyfhc7bw
JyqEl9jt61DvGo60h0BFJRCaR8G3cxU3vyqA+QdpcedC8f5pjSHLVz2GUVx6jZH+
NLQL8/qYvj0A8XH6S9n2BSGeOKFjPD28k+HuUSYUlyyIWclEpUU7hr54ashr7+V4
y/CPWlwcbqNjQS6RgGq4IDhLM+a/aquQfT9a4bC2pLoX4QFM23710KKz0zLWxLjC
wLc3G0mJMO4M/VHTChYNI04QZsodlQhKHSFin/58QZfyVfVYxJJaZUPNZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJzpB1UyS+CCDk9xz2lT2G5pVN91MB8GA1UdIwQY
MBaAFJ7samrT1Uf4UdObhm+xQJ+hly+/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnV4cWF0UFZSX2hSMDV1R2I3RkFuNkdYTDc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9jY2VmMjMtNTM0MS00MWNjLTlhZTkt
NjFlZmI2Zjg5ZjBhLzEvbnV4cWF0UFZSX2hSMDV1R2I3RkFuNkdYTDc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9jY2VmMjMtNTM0MS00MWNjLTlhZTktNjFlZmI2Zjg5ZjBh
LzEvbnV4cWF0UFZSX2hSMDV1R2I3RkFuNkdYTDc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVBkZs7fl
jIKIkrxUoTY1RiH75KRWxTrdTtbNaN83brCoaZ2SehD2qxVg6GKRqtRVvnXPtqAk
tC2/w35T7maX89Rz5L8FHQmxgj2SuMY0gqpBXcNrQT6l2YzxLiWjQA2Xfyto7rqS
d6FFFS7RoUUFFqj+5T+WJFrYDmLVxAI9eaDr/Twd6FcSLUTHs/Uc8UiS/31Gw0Em
qRQkoqL1jqu6EctMpZsr++jxGQDliIHXDLz/9zT0WeMvsJ0QRJsof/Siw7XMjNxn
ypBxCNxwA554RPLD0EUIroIT3QpnWLn1m7KUVbp4nX1QBQ4RZy+KGTn+7QjXtCOc
xgkcIGKJOpyDwQ==
-----END CERTIFICATE-----
Generated at Sat Jun 14 11:55:10 2025 by rpki-client