Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/660cca-c1aa-4558-ad1e-e53f904a1f58/1/N3eGgTYbH_-HzjmEAu-mOGnlv9E.mft
File:                     N3eGgTYbH_-HzjmEAu-mOGnlv9E.mft (raw, json)
Hash identifier:          pbBa1a4R/xW+mBHSwTjr9XsRmJdl5WlY72bBHZ8Jyfo=
Subject key identifier:   0D:1B:3D:3E:92:6B:8B:67:A3:C0:32:B9:F4:1D:58:2D:1D:90:40:32
Authority key identifier: 37:77:86:81:36:1B:1F:FF:87:CE:39:84:02:EF:A6:38:69:E5:BF:D1
Certificate issuer:       /CN=37778681361b1fff87ce398402efa63869e5bfd1
Certificate serial:       01976C990D5AA321AE35C10586F4347CDB3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N3eGgTYbH_-HzjmEAu-mOGnlv9E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/660cca-c1aa-4558-ad1e-e53f904a1f58/1/N3eGgTYbH_-HzjmEAu-mOGnlv9E.mft
Manifest number:          0B3B
Signing time:             Sat 14 Jun 2025 04:00:59 +0000
Manifest this update:     Sat 14 Jun 2025 04:00:59 +0000
Manifest next update:     Sun 15 Jun 2025 04:00:59 +0000
Files and hashes:         1: N3eGgTYbH_-HzjmEAu-mOGnlv9E.crl (hash: onrgxGi7n4vfNqoJil/61BqpxfwvDILgiNBRNGFRLLQ=)
                          2: vmuvpxt5NWFRchGpjymjM-OTFyk.roa (hash: xudIwgzuBx5c488Lg5NntvMmtHShvLXZUS8ATmxeVvo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/660cca-c1aa-4558-ad1e-e53f904a1f58/1/N3eGgTYbH_-HzjmEAu-mOGnlv9E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/660cca-c1aa-4558-ad1e-e53f904a1f58/1/N3eGgTYbH_-HzjmEAu-mOGnlv9E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N3eGgTYbH_-HzjmEAu-mOGnlv9E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:99:0d:5a:a3:21:ae:35:c1:05:86:f4:34:7c:db:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37778681361b1fff87ce398402efa63869e5bfd1
        Validity
            Not Before: Jun 14 04:00:59 2025 GMT
            Not After : Jun 15 04:00:59 2025 GMT
        Subject: CN=0d1b3d3e926b8b67a3c032b9f41d582d1d904032
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:77:ea:37:cf:85:76:15:56:47:92:3f:9d:b6:
                    db:a6:bb:ad:68:cb:a0:d9:e8:88:59:a3:03:df:a5:
                    f6:4c:18:1e:07:29:69:b3:b8:ef:f5:5b:04:71:83:
                    9d:dc:dd:22:aa:5d:88:e1:9a:23:8b:cb:8d:1c:b2:
                    de:4d:1c:4e:13:93:bc:fb:6a:e7:d3:7c:26:7c:10:
                    09:57:56:fb:16:8e:0e:d5:a0:0a:06:44:b6:8a:cc:
                    a0:2f:0d:38:22:5b:a1:97:4f:53:f4:e6:e1:84:1e:
                    38:4b:d5:0e:cb:49:d0:59:34:74:ac:da:fb:28:f9:
                    0a:47:5c:fa:2a:f8:32:ee:9e:c5:46:40:28:a3:e2:
                    71:65:35:28:53:e3:12:44:3f:75:bd:cc:3f:1b:44:
                    5d:a6:96:46:f7:c4:88:b9:9e:af:25:53:dd:c1:55:
                    f9:51:fd:44:92:a6:fe:50:28:98:dc:94:0d:41:5d:
                    28:21:17:72:1e:82:26:74:cf:82:b6:de:96:a6:15:
                    37:53:40:39:3c:52:db:c0:5e:e2:e7:a0:bd:1e:82:
                    60:51:93:e4:a4:ea:ea:c2:a7:2c:05:a6:f6:62:e9:
                    02:e2:fd:d7:be:ee:d7:4f:45:75:7d:6c:55:bf:72:
                    88:93:7e:3c:18:bc:23:4b:ee:60:55:d1:79:f7:1b:
                    fa:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:1B:3D:3E:92:6B:8B:67:A3:C0:32:B9:F4:1D:58:2D:1D:90:40:32
            X509v3 Authority Key Identifier:
                keyid:37:77:86:81:36:1B:1F:FF:87:CE:39:84:02:EF:A6:38:69:E5:BF:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N3eGgTYbH_-HzjmEAu-mOGnlv9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/660cca-c1aa-4558-ad1e-e53f904a1f58/1/N3eGgTYbH_-HzjmEAu-mOGnlv9E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/660cca-c1aa-4558-ad1e-e53f904a1f58/1/N3eGgTYbH_-HzjmEAu-mOGnlv9E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:7e:4a:22:56:44:30:00:14:05:d0:3f:80:fb:f4:28:79:9d:
         3b:8f:8f:d3:f7:f4:18:74:ac:22:bd:e6:7d:52:89:15:a9:d4:
         ef:ff:60:c8:cf:18:10:ab:87:bc:6d:3c:fb:49:29:8d:e8:45:
         a2:34:f9:83:49:e3:4c:ea:65:63:c0:97:2f:79:4d:64:7a:7a:
         43:54:07:cf:e2:be:75:19:f2:4e:67:28:aa:0d:22:78:d4:a6:
         0a:e0:ed:43:55:b2:57:5a:30:ad:09:50:8a:d5:4d:ae:5d:72:
         18:93:c5:6b:46:c4:f6:93:f8:33:d4:3e:4f:b1:6c:d1:ea:ec:
         6f:e7:77:e7:a6:d6:d0:fe:3c:f3:92:7e:9e:74:16:98:b0:dd:
         4e:55:5b:b9:0a:8a:98:06:d4:f6:b7:60:a1:a3:d8:49:9c:36:
         a4:7c:8f:cd:48:40:f3:0a:98:52:68:49:3a:b9:ba:c7:a5:8b:
         04:14:67:27:6d:f7:eb:00:a0:b9:b8:44:52:f6:7c:83:ae:d3:
         df:37:11:87:25:88:2e:f3:b8:9b:cd:b4:cf:fe:d7:5d:8d:34:
         d2:09:db:a1:d8:61:03:e6:c8:54:4b:df:46:d3:75:62:8e:bb:
         d9:8c:9a:fb:70:cb:a1:08:d7:5d:d0:11:dd:c5:4a:43:02:59:
         f5:87:65:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsmQ1aoyGuNcEFhvQ0fNs8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3Nzc4NjgxMzYxYjFmZmY4N2NlMzk4NDAyZWZhNjM4Njll
NWJmZDEwHhcNMjUwNjE0MDQwMDU5WhcNMjUwNjE1MDQwMDU5WjAzMTEwLwYDVQQD
EygwZDFiM2QzZTkyNmI4YjY3YTNjMDMyYjlmNDFkNTgyZDFkOTA0MDMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnfqN8+FdhVWR5I/nbbbprutaMug
2eiIWaMD36X2TBgeBylps7jv9VsEcYOd3N0iql2I4Zoji8uNHLLeTRxOE5O8+2rn
03wmfBAJV1b7Fo4O1aAKBkS2isygLw04Iluhl09T9ObhhB44S9UOy0nQWTR0rNr7
KPkKR1z6Kvgy7p7FRkAoo+JxZTUoU+MSRD91vcw/G0RdppZG98SIuZ6vJVPdwVX5
Uf1Ekqb+UCiY3JQNQV0oIRdyHoImdM+Ctt6WphU3U0A5PFLbwF7i56C9HoJgUZPk
pOrqwqcsBab2YukC4v3Xvu7XT0V1fWxVv3KIk348GLwjS+5gVdF59xv6TQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA0bPT6Sa4tno8AyufQdWC0dkEAyMB8GA1UdIwQY
MBaAFDd3hoE2Gx//h845hALvpjhp5b/RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjNlR2dUWWJIXy1IemptRUF1LW1PR25sdjlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC82NjBjY2EtYzFhYS00NTU4LWFkMWUt
ZTUzZjkwNGExZjU4LzEvTjNlR2dUWWJIXy1IemptRUF1LW1PR25sdjlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC82NjBjY2EtYzFhYS00NTU4LWFkMWUtZTUzZjkwNGExZjU4
LzEvTjNlR2dUWWJIXy1IemptRUF1LW1PR25sdjlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyH5KIlZE
MAAUBdA/gPv0KHmdO4+P0/f0GHSsIr3mfVKJFanU7/9gyM8YEKuHvG08+0kpjehF
ojT5g0njTOplY8CXL3lNZHp6Q1QHz+K+dRnyTmcoqg0ieNSmCuDtQ1WyV1owrQlQ
itVNrl1yGJPFa0bE9pP4M9Q+T7Fs0ersb+d356bW0P4885J+nnQWmLDdTlVbuQqK
mAbU9rdgoaPYSZw2pHyPzUhA8wqYUmhJOrm6x6WLBBRnJ2336wCgubhEUvZ8g67T
3zcRhyWILvO4m820z/7XXY000gnbodhhA+bIVEvfRtN1Yo672Yya+3DLoQjXXdAR
3cVKQwJZ9YdlsA==
-----END CERTIFICATE-----
Generated at Sat Jun 14 10:17:48 2025 by rpki-client