Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/9a359f-4b70-48c3-a38f-23b7ce34ebac/1/nE-xCAvPALb912uv2dUTPF4cPTI.mft
File:                     nE-xCAvPALb912uv2dUTPF4cPTI.mft (raw, json)
Hash identifier:          r3W3jXjA2evRDQWtAz+sRjMX26a/waITqn52uo38p60=
Subject key identifier:   91:6E:D6:8A:11:94:D7:0E:0E:0C:D6:9D:D9:0C:09:62:77:6F:11:2F
Authority key identifier: 9C:4F:B1:08:0B:CF:00:B6:FD:D7:6B:AF:D9:D5:13:3C:5E:1C:3D:32
Certificate issuer:       /CN=9c4fb1080bcf00b6fdd76bafd9d5133c5e1c3d32
Certificate serial:       01976C98EC0C8742AA03E8D927F0EB954593
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nE-xCAvPALb912uv2dUTPF4cPTI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/9a359f-4b70-48c3-a38f-23b7ce34ebac/1/nE-xCAvPALb912uv2dUTPF4cPTI.mft
Manifest number:          0575
Signing time:             Sat 14 Jun 2025 04:00:50 +0000
Manifest this update:     Sat 14 Jun 2025 04:00:50 +0000
Manifest next update:     Sun 15 Jun 2025 04:00:50 +0000
Files and hashes:         1: nE-xCAvPALb912uv2dUTPF4cPTI.crl (hash: E+VhR5f1EeqFRv/ReXAYn+nY1KBGbabq6fHdG7dbMRQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/9a359f-4b70-48c3-a38f-23b7ce34ebac/1/nE-xCAvPALb912uv2dUTPF4cPTI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/9a359f-4b70-48c3-a38f-23b7ce34ebac/1/nE-xCAvPALb912uv2dUTPF4cPTI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nE-xCAvPALb912uv2dUTPF4cPTI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:98:ec:0c:87:42:aa:03:e8:d9:27:f0:eb:95:45:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c4fb1080bcf00b6fdd76bafd9d5133c5e1c3d32
        Validity
            Not Before: Jun 14 04:00:50 2025 GMT
            Not After : Jun 15 04:00:50 2025 GMT
        Subject: CN=916ed68a1194d70e0e0cd69dd90c0962776f112f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:0d:f1:19:6f:fd:ef:53:04:71:9f:1c:48:cc:
                    91:a6:69:9b:6e:2c:67:d3:bc:98:d5:fa:a0:32:66:
                    af:9e:5e:51:db:89:bd:89:85:db:ef:fd:c6:4c:19:
                    da:91:88:83:8f:77:3d:77:08:0c:dd:4a:c0:9c:46:
                    0f:26:d6:21:20:87:dd:a3:74:38:4f:f6:ac:75:22:
                    c4:d4:52:49:00:27:51:e5:04:69:ab:04:65:2e:ff:
                    b6:e7:4e:c1:b7:46:d9:cb:46:5f:55:17:bf:0c:6c:
                    c8:aa:8f:46:05:42:1e:2c:f6:f1:e0:97:84:7e:b3:
                    af:e7:43:39:3d:43:5c:83:72:6f:79:33:9d:ff:70:
                    09:b2:52:45:21:46:0b:03:f9:df:f4:bc:59:bd:0f:
                    03:55:36:e8:fd:b4:a6:a3:30:cc:ca:20:49:73:8a:
                    b0:ef:2e:93:c1:e0:81:07:e3:d9:43:bc:7c:e2:35:
                    eb:bf:c1:84:f4:10:fd:86:4c:bc:a0:f4:1e:b9:8b:
                    42:97:dc:a1:77:fb:26:9b:9c:86:bd:ad:1a:a5:5d:
                    cb:fb:02:7b:e9:cf:a1:00:72:c8:62:22:44:df:e5:
                    33:ff:95:80:53:d3:97:35:22:70:36:90:d3:77:60:
                    b5:e0:c8:15:b3:c7:e8:f3:1c:77:fe:5b:81:4e:81:
                    63:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:6E:D6:8A:11:94:D7:0E:0E:0C:D6:9D:D9:0C:09:62:77:6F:11:2F
            X509v3 Authority Key Identifier:
                keyid:9C:4F:B1:08:0B:CF:00:B6:FD:D7:6B:AF:D9:D5:13:3C:5E:1C:3D:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nE-xCAvPALb912uv2dUTPF4cPTI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9a359f-4b70-48c3-a38f-23b7ce34ebac/1/nE-xCAvPALb912uv2dUTPF4cPTI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9a359f-4b70-48c3-a38f-23b7ce34ebac/1/nE-xCAvPALb912uv2dUTPF4cPTI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:34:56:23:6a:8d:bc:ee:1b:af:9d:26:47:8e:02:ee:58:7a:
         1a:a5:cb:a1:6b:62:f5:ab:9f:13:e3:9d:0f:a5:72:6f:20:57:
         b0:83:bb:08:5a:da:60:4a:5b:98:96:24:a1:c7:9a:65:c7:4a:
         7b:80:c6:84:66:c8:c3:e1:c0:e2:40:03:b9:24:c3:bc:b2:51:
         63:cc:5e:ee:18:7c:ae:9e:db:1c:c0:46:af:60:98:c6:fb:b8:
         4c:38:be:3b:de:1c:16:bc:13:ec:cc:59:07:c0:08:57:91:42:
         6d:ca:dd:9b:37:0a:f0:b6:07:53:9d:26:6e:eb:b3:c1:e2:33:
         36:e3:da:88:28:cc:d1:70:64:4c:68:4c:93:8f:d6:fe:00:4d:
         bd:d9:1a:11:30:15:a8:6f:bf:96:65:3e:6c:44:15:aa:a0:22:
         31:9d:17:33:a9:c2:a8:97:c1:74:d0:c2:06:2a:94:a2:e0:d1:
         41:66:1e:e3:b2:02:e1:ea:da:78:52:52:ad:d8:c5:5f:f1:7e:
         8d:51:ef:76:74:bc:48:7e:7f:f8:42:8a:64:e7:f3:42:10:fc:
         0f:fa:cb:e8:ba:d4:c5:c3:32:43:09:e9:df:61:b4:72:1c:95:
         18:0c:91:7f:ed:25:2e:9e:7c:b9:40:bf:be:67:28:84:26:94:
         ed:b6:8d:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsmOwMh0KqA+jZJ/DrlUWTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljNGZiMTA4MGJjZjAwYjZmZGQ3NmJhZmQ5ZDUxMzNjNWUx
YzNkMzIwHhcNMjUwNjE0MDQwMDUwWhcNMjUwNjE1MDQwMDUwWjAzMTEwLwYDVQQD
Eyg5MTZlZDY4YTExOTRkNzBlMGUwY2Q2OWRkOTBjMDk2Mjc3NmYxMTJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQ3xGW/971MEcZ8cSMyRpmmbbixn
07yY1fqgMmavnl5R24m9iYXb7/3GTBnakYiDj3c9dwgM3UrAnEYPJtYhIIfdo3Q4
T/asdSLE1FJJACdR5QRpqwRlLv+2507Bt0bZy0ZfVRe/DGzIqo9GBUIeLPbx4JeE
frOv50M5PUNcg3JveTOd/3AJslJFIUYLA/nf9LxZvQ8DVTbo/bSmozDMyiBJc4qw
7y6TweCBB+PZQ7x84jXrv8GE9BD9hky8oPQeuYtCl9yhd/smm5yGva0apV3L+wJ7
6c+hAHLIYiJE3+Uz/5WAU9OXNSJwNpDTd2C14MgVs8fo8xx3/luBToFj8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJFu1ooRlNcODgzWndkMCWJ3bxEvMB8GA1UdIwQY
MBaAFJxPsQgLzwC2/ddrr9nVEzxeHD0yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkUteENBdlBBTGI5MTJ1djJkVVRQRjRjUFRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS85YTM1OWYtNGI3MC00OGMzLWEzOGYt
MjNiN2NlMzRlYmFjLzEvbkUteENBdlBBTGI5MTJ1djJkVVRQRjRjUFRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS85YTM1OWYtNGI3MC00OGMzLWEzOGYtMjNiN2NlMzRlYmFj
LzEvbkUteENBdlBBTGI5MTJ1djJkVVRQRjRjUFRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALjRWI2qN
vO4br50mR44C7lh6GqXLoWti9aufE+OdD6VybyBXsIO7CFraYEpbmJYkoceaZcdK
e4DGhGbIw+HA4kADuSTDvLJRY8xe7hh8rp7bHMBGr2CYxvu4TDi+O94cFrwT7MxZ
B8AIV5FCbcrdmzcK8LYHU50mbuuzweIzNuPaiCjM0XBkTGhMk4/W/gBNvdkaETAV
qG+/lmU+bEQVqqAiMZ0XM6nCqJfBdNDCBiqUouDRQWYe47IC4eraeFJSrdjFX/F+
jVHvdnS8SH5/+EKKZOfzQhD8D/rL6LrUxcMyQwnp32G0chyVGAyRf+0lLp58uUC/
vmcohCaU7baNBw==
-----END CERTIFICATE-----
Generated at Sat Jun 14 09:17:26 2025 by rpki-client