Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/4f05ce-a382-49a0-9999-e52f70c06c29/1/neeD6azVaZL1g1-0iCGDUAygPIM.mft
File:                     neeD6azVaZL1g1-0iCGDUAygPIM.mft (raw, json)
Hash identifier:          KkboFj0DHnFZzgp1NV2pEIel1cquA3yuaoht8gT0nv8=
Subject key identifier:   6A:78:55:A6:EF:0B:4E:31:FC:56:03:E2:D6:75:74:0B:6A:6F:D9:CF
Authority key identifier: 9D:E7:83:E9:AC:D5:69:92:F5:83:5F:B4:88:21:83:50:0C:A0:3C:83
Certificate issuer:       /CN=9de783e9acd56992f5835fb4882183500ca03c83
Certificate serial:       01976BBCC85E5281126B32E11021A0D742AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/neeD6azVaZL1g1-0iCGDUAygPIM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/4f05ce-a382-49a0-9999-e52f70c06c29/1/neeD6azVaZL1g1-0iCGDUAygPIM.mft
Manifest number:          0552
Signing time:             Sat 14 Jun 2025 00:00:23 +0000
Manifest this update:     Sat 14 Jun 2025 00:00:23 +0000
Manifest next update:     Sun 15 Jun 2025 00:00:23 +0000
Files and hashes:         1: ZsqRMpcA5rVpeghbKlpto90ibM8.roa (hash: nVYdBvobjkBIWWz9Jd+uPsYyriFcHyHbwpsRZ8kZ4Ek=)
                          2: gM98BY1lyRIDiMmnpeavUnwI1rY.roa (hash: ve1xDMahiOfYFvEODore+1Lgn1TnHWQyebyINSLaR/8=)
                          3: neeD6azVaZL1g1-0iCGDUAygPIM.crl (hash: kVp1Sx/7njVBCeytUhCs05nt3ON0mSX84PTqdL2dIhY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/4f05ce-a382-49a0-9999-e52f70c06c29/1/neeD6azVaZL1g1-0iCGDUAygPIM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/4f05ce-a382-49a0-9999-e52f70c06c29/1/neeD6azVaZL1g1-0iCGDUAygPIM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/neeD6azVaZL1g1-0iCGDUAygPIM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 00:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6b:bc:c8:5e:52:81:12:6b:32:e1:10:21:a0:d7:42:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9de783e9acd56992f5835fb4882183500ca03c83
        Validity
            Not Before: Jun 14 00:00:23 2025 GMT
            Not After : Jun 15 00:00:23 2025 GMT
        Subject: CN=6a7855a6ef0b4e31fc5603e2d675740b6a6fd9cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:1f:b4:48:fc:6f:80:f9:a3:45:c7:12:b7:f2:
                    eb:02:2f:0f:21:0c:7e:7e:60:6d:aa:0f:7c:f4:88:
                    1a:31:b2:c5:9a:92:9e:00:54:3d:12:04:70:30:87:
                    77:be:4f:9c:97:2a:ba:c5:21:48:a9:24:76:ed:1e:
                    1b:45:1b:f5:8a:8d:10:5f:87:a9:b9:3a:37:cf:09:
                    41:15:a0:85:b9:3c:80:79:a4:7f:70:6a:c4:c7:c6:
                    cd:05:8e:d8:0e:af:00:82:3e:ad:92:0f:b0:d2:df:
                    d3:97:76:e9:53:25:f3:b4:ce:ad:52:42:ad:5b:21:
                    a3:39:88:58:cd:59:a5:bd:2d:b4:a9:10:d7:53:7a:
                    79:85:b3:06:6d:1c:35:a5:b1:ac:37:b3:0f:a9:53:
                    b6:d6:df:bb:67:11:77:24:7e:1e:b6:33:3e:46:b4:
                    33:55:75:ff:bc:c5:c0:a9:83:de:1f:35:6d:bc:b2:
                    6e:46:81:a3:4c:67:40:0d:30:df:74:44:c4:25:ce:
                    4c:be:04:19:54:a2:b9:4c:15:8d:e4:09:0e:be:02:
                    43:24:19:10:ce:ca:07:10:34:17:5a:29:bd:9f:ad:
                    73:c9:66:b1:58:b2:45:20:c8:92:5b:a2:84:d4:48:
                    a4:7d:d3:b3:b2:99:af:c8:dd:d1:79:21:1d:08:03:
                    e5:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:78:55:A6:EF:0B:4E:31:FC:56:03:E2:D6:75:74:0B:6A:6F:D9:CF
            X509v3 Authority Key Identifier:
                keyid:9D:E7:83:E9:AC:D5:69:92:F5:83:5F:B4:88:21:83:50:0C:A0:3C:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/neeD6azVaZL1g1-0iCGDUAygPIM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4f05ce-a382-49a0-9999-e52f70c06c29/1/neeD6azVaZL1g1-0iCGDUAygPIM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4f05ce-a382-49a0-9999-e52f70c06c29/1/neeD6azVaZL1g1-0iCGDUAygPIM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:0f:17:58:a3:0a:b5:0d:31:ee:a1:10:87:0b:d6:d4:1c:a4:
         29:4a:de:c0:07:57:07:dc:dd:fa:49:be:af:62:78:73:3c:64:
         95:1b:b6:5a:35:d5:7d:44:51:7f:d3:f5:41:64:9d:e9:d4:24:
         b7:23:38:af:76:f9:4b:ee:cb:00:85:8d:9b:56:b5:a8:b4:a4:
         15:d0:4d:85:bc:5b:36:d3:88:dc:66:c4:78:66:e6:36:29:38:
         3f:db:0d:f3:fe:3c:94:a4:c7:df:5c:06:89:bf:6f:03:59:44:
         08:82:9c:d2:66:4b:f9:a5:f8:13:76:7c:4f:d0:f8:e5:1a:de:
         53:e7:2e:ef:f7:06:8a:6d:d3:75:e3:34:01:1f:21:56:7a:7e:
         45:b1:97:b6:0e:f0:d8:87:cf:c2:ce:a8:af:28:1f:1c:f6:ca:
         91:fb:e1:3f:d0:9f:aa:b3:6b:c5:aa:9f:24:04:60:a7:ce:09:
         fc:dd:1d:e9:fd:18:a7:c7:90:5b:08:87:de:17:f7:f0:37:fb:
         c3:53:d0:38:96:5b:06:ff:55:32:9b:af:e2:af:1d:e1:cb:1a:
         38:17:67:3c:58:67:17:03:d4:9a:1b:5d:40:9e:55:b3:13:ad:
         6a:b5:d1:5b:b9:cd:88:05:ed:07:1e:7e:19:d6:30:36:f0:c4:
         5a:e1:f0:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdrvMheUoESazLhECGg10KrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkZTc4M2U5YWNkNTY5OTJmNTgzNWZiNDg4MjE4MzUwMGNh
MDNjODMwHhcNMjUwNjE0MDAwMDIzWhcNMjUwNjE1MDAwMDIzWjAzMTEwLwYDVQQD
Eyg2YTc4NTVhNmVmMGI0ZTMxZmM1NjAzZTJkNjc1NzQwYjZhNmZkOWNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuB+0SPxvgPmjRccSt/LrAi8PIQx+
fmBtqg989IgaMbLFmpKeAFQ9EgRwMId3vk+clyq6xSFIqSR27R4bRRv1io0QX4ep
uTo3zwlBFaCFuTyAeaR/cGrEx8bNBY7YDq8Agj6tkg+w0t/Tl3bpUyXztM6tUkKt
WyGjOYhYzVmlvS20qRDXU3p5hbMGbRw1pbGsN7MPqVO21t+7ZxF3JH4etjM+RrQz
VXX/vMXAqYPeHzVtvLJuRoGjTGdADTDfdETEJc5MvgQZVKK5TBWN5AkOvgJDJBkQ
zsoHEDQXWim9n61zyWaxWLJFIMiSW6KE1EikfdOzspmvyN3ReSEdCAPlXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGp4VabvC04x/FYD4tZ1dAtqb9nPMB8GA1UdIwQY
MBaAFJ3ng+ms1WmS9YNftIghg1AMoDyDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmVlRDZhelZhWkwxZzEtMGlDR0RVQXlnUElNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi80ZjA1Y2UtYTM4Mi00OWEwLTk5OTkt
ZTUyZjcwYzA2YzI5LzEvbmVlRDZhelZhWkwxZzEtMGlDR0RVQXlnUElNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi80ZjA1Y2UtYTM4Mi00OWEwLTk5OTktZTUyZjcwYzA2YzI5
LzEvbmVlRDZhelZhWkwxZzEtMGlDR0RVQXlnUElNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQg8XWKMK
tQ0x7qEQhwvW1BykKUrewAdXB9zd+km+r2J4czxklRu2WjXVfURRf9P1QWSd6dQk
tyM4r3b5S+7LAIWNm1a1qLSkFdBNhbxbNtOI3GbEeGbmNik4P9sN8/48lKTH31wG
ib9vA1lECIKc0mZL+aX4E3Z8T9D45RreU+cu7/cGim3TdeM0AR8hVnp+RbGXtg7w
2IfPws6orygfHPbKkfvhP9CfqrNrxaqfJARgp84J/N0d6f0Yp8eQWwiH3hf38Df7
w1PQOJZbBv9VMpuv4q8d4csaOBdnPFhnFwPUmhtdQJ5VsxOtarXRW7nNiAXtBx5+
GdYwNvDEWuHw6A==
-----END CERTIFICATE-----
Generated at Sat Jun 14 09:21:24 2025 by rpki-client