Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/nCCRV794nmu6NODb0-_s2bIN0Gs.mft
File:                     nCCRV794nmu6NODb0-_s2bIN0Gs.mft (raw, json)
Hash identifier:          c5RJCzCu3UuYbTNT2t05jfBlYvygDccvjOu1FQoUBvk=
Subject key identifier:   6B:F3:39:AC:97:1E:BC:F6:E5:05:01:E7:26:F3:3D:39:73:4E:BB:E7
Authority key identifier: 9C:20:91:57:BF:78:9E:6B:BA:34:E0:DB:D3:EF:EC:D9:B2:0D:D0:6B
Certificate issuer:       /CN=9c209157bf789e6bba34e0dbd3efecd9b20dd06b
Certificate serial:       01976960D7CF784C8E5227C0BED310DADF87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nCCRV794nmu6NODb0-_s2bIN0Gs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/nCCRV794nmu6NODb0-_s2bIN0Gs.mft
Manifest number:          0D04
Signing time:             Fri 13 Jun 2025 13:00:43 +0000
Manifest this update:     Fri 13 Jun 2025 13:00:43 +0000
Manifest next update:     Sat 14 Jun 2025 13:00:43 +0000
Files and hashes:         1: DwD4MRqZCp-c4uFsMsWnYL0-SzA.roa (hash: 2tkEE6WjjJq4tK+YMGxG4bkpbYxQV0qlFZ5Ps3gC3Vo=)
                          2: nCCRV794nmu6NODb0-_s2bIN0Gs.crl (hash: FV/VzZ5H2/u9mYnDbFS5JOMnTvVUSRDGADmarXNYpTE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/nCCRV794nmu6NODb0-_s2bIN0Gs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/nCCRV794nmu6NODb0-_s2bIN0Gs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nCCRV794nmu6NODb0-_s2bIN0Gs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:60:d7:cf:78:4c:8e:52:27:c0:be:d3:10:da:df:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c209157bf789e6bba34e0dbd3efecd9b20dd06b
        Validity
            Not Before: Jun 13 13:00:43 2025 GMT
            Not After : Jun 14 13:00:43 2025 GMT
        Subject: CN=6bf339ac971ebcf6e50501e726f33d39734ebbe7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:c9:c7:d9:ce:65:b5:9f:0d:4f:cd:9f:29:be:
                    68:a2:f3:5f:0d:5b:97:f4:83:c9:ac:3a:f7:c6:f5:
                    45:01:3e:e7:53:2a:4e:2f:ec:5c:ce:39:03:01:05:
                    44:5b:aa:33:bf:93:a5:cf:66:a4:56:14:6c:bf:8c:
                    fd:be:48:c3:e7:e3:48:13:6d:53:f4:a5:cc:27:b7:
                    94:62:c8:7b:a2:c5:f5:eb:07:58:fb:ea:a8:7e:9a:
                    78:2e:9d:6a:f6:a7:b9:37:4f:66:aa:47:bd:8c:38:
                    f1:11:a0:5b:4a:a1:06:84:49:a8:3c:8d:f4:4e:7e:
                    9a:b8:90:7c:f7:fe:b1:74:d1:2d:1b:ef:4e:03:d0:
                    5d:12:97:06:ae:06:f1:a6:16:ed:6e:89:2c:39:90:
                    08:b4:8c:db:f1:4d:6a:4c:15:fd:e8:cc:14:8d:24:
                    b6:ff:51:bd:90:3e:8a:f1:88:2e:de:90:92:63:c5:
                    c9:7d:9c:bf:33:04:40:0a:35:13:3a:af:41:94:64:
                    d9:f6:b9:e3:c2:4a:a6:28:f4:d7:43:64:9e:0e:37:
                    e3:ab:1f:c6:09:cf:3a:a3:7d:19:45:e2:fd:12:2d:
                    e0:cc:e0:ff:04:ed:d4:3d:87:dc:08:df:ca:d5:58:
                    3e:a5:4e:bc:aa:33:4c:4f:d1:50:b0:85:ae:c8:07:
                    fd:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:F3:39:AC:97:1E:BC:F6:E5:05:01:E7:26:F3:3D:39:73:4E:BB:E7
            X509v3 Authority Key Identifier:
                keyid:9C:20:91:57:BF:78:9E:6B:BA:34:E0:DB:D3:EF:EC:D9:B2:0D:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nCCRV794nmu6NODb0-_s2bIN0Gs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/nCCRV794nmu6NODb0-_s2bIN0Gs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5489e6-3e33-4df2-90b8-116909e43824/1/nCCRV794nmu6NODb0-_s2bIN0Gs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:9a:b3:09:ac:5d:08:ba:4a:e6:42:ab:c8:7f:4c:4d:9a:13:
         e3:b6:f3:de:a7:5c:60:2d:2e:70:86:97:9c:f8:88:06:bd:0e:
         01:c9:27:c4:f4:07:bd:2f:9b:6c:5e:f0:1b:51:51:be:6f:61:
         9d:74:3b:b5:ee:b4:8a:ce:5b:7f:0b:2d:a1:f1:66:d8:18:ce:
         8f:58:1a:cf:4a:cc:c6:18:df:2a:b5:ee:cd:d3:61:26:3c:9f:
         ea:04:63:8d:96:48:6f:89:45:f4:67:44:50:97:76:eb:7f:6d:
         c9:b3:82:1b:e0:d9:49:7e:fc:aa:66:24:ce:9d:a0:8a:d1:e8:
         13:57:94:d8:17:e9:3c:15:a0:70:6d:8a:32:e8:fd:4b:95:5a:
         ef:89:62:f7:c4:b5:6d:7b:60:99:5b:3c:cd:cb:5c:6a:ce:88:
         34:fc:d0:18:1b:e1:a2:b8:e1:76:68:7f:5c:1d:a9:5d:75:02:
         1f:db:10:17:e7:8b:cd:e9:5e:02:af:86:92:ad:8f:da:ad:1c:
         54:8f:f8:98:9f:81:78:85:4b:47:98:c1:b5:c4:9b:af:c5:0a:
         8a:e3:d1:8f:e9:74:94:ef:d5:31:8f:7c:69:dc:52:ef:0b:46:
         65:06:2c:40:e3:6b:76:11:14:ea:28:5d:6f:85:78:68:45:06:
         40:c5:bc:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:37:59 2025 by rpki-client