Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/ff94f1-ba63-40d6-beca-5e624a3038cf/1/nBrtmRP4iAr3VX7vPvAtbg_z_Uk.mft
File:                     nBrtmRP4iAr3VX7vPvAtbg_z_Uk.mft (raw, json)
Hash identifier:          +djnvTbrIuTLecfQy1OzAR86Hb1595Bf1jDRFo5PmlQ=
Subject key identifier:   9A:16:CC:B6:80:5B:AE:D4:A4:E3:9B:9B:A8:9F:00:BB:5A:D0:C9:50
Authority key identifier: 9C:1A:ED:99:13:F8:88:0A:F7:55:7E:EF:3E:F0:2D:6E:0F:F3:FD:49
Certificate issuer:       /CN=9c1aed9913f8880af7557eef3ef02d6e0ff3fd49
Certificate serial:       01977564CE404563086A2C4F1D5A36F41195
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nBrtmRP4iAr3VX7vPvAtbg_z_Uk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/ff94f1-ba63-40d6-beca-5e624a3038cf/1/nBrtmRP4iAr3VX7vPvAtbg_z_Uk.mft
Manifest number:          15B0
Signing time:             Sun 15 Jun 2025 21:00:30 +0000
Manifest this update:     Sun 15 Jun 2025 21:00:30 +0000
Manifest next update:     Mon 16 Jun 2025 21:00:30 +0000
Files and hashes:         1: 3f3HIccO3MohgHCLC_LlaFxa7sU.roa (hash: kCeD4JlEOramRmkp3pFIST1qhopaS50IqgyTgjDtfVo=)
                          2: nBrtmRP4iAr3VX7vPvAtbg_z_Uk.crl (hash: qRL4l/erg8wAOyEU/wkaGTN7rYSbg4JCAZ1MsNFBho8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/ff94f1-ba63-40d6-beca-5e624a3038cf/1/nBrtmRP4iAr3VX7vPvAtbg_z_Uk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/ff94f1-ba63-40d6-beca-5e624a3038cf/1/nBrtmRP4iAr3VX7vPvAtbg_z_Uk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nBrtmRP4iAr3VX7vPvAtbg_z_Uk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:75:64:ce:40:45:63:08:6a:2c:4f:1d:5a:36:f4:11:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c1aed9913f8880af7557eef3ef02d6e0ff3fd49
        Validity
            Not Before: Jun 15 21:00:30 2025 GMT
            Not After : Jun 16 21:00:30 2025 GMT
        Subject: CN=9a16ccb6805baed4a4e39b9ba89f00bb5ad0c950
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:96:07:7b:68:4b:48:74:66:fe:35:cc:f6:28:
                    98:56:6e:09:32:f5:df:2a:be:27:79:c5:06:4b:7f:
                    7d:57:6c:25:8b:59:5c:29:dd:df:05:c2:91:b6:ee:
                    c8:e4:06:c8:2d:32:97:03:76:23:6c:01:e0:d0:a6:
                    81:ec:d8:dc:e3:e7:1d:92:16:e2:1b:2e:a2:b4:74:
                    6c:f3:08:94:8b:49:47:e1:9e:d0:ce:1f:39:75:d5:
                    9a:31:82:9c:31:d4:bb:77:3e:eb:af:16:77:aa:3c:
                    e0:d3:8b:e7:4b:e9:bd:2a:86:9f:47:23:bc:42:01:
                    df:9c:fd:db:bf:56:79:3d:bf:92:0f:e8:86:ef:fe:
                    6f:25:8f:8b:b8:72:ab:ea:29:33:20:c5:ed:e2:f8:
                    50:72:53:7b:2e:0c:3e:2c:f9:1f:5e:e2:c8:10:27:
                    4f:46:3f:a9:52:dd:94:54:de:98:d6:06:0b:1d:e1:
                    6b:f5:cd:3a:62:b2:d0:8e:64:9b:b4:aa:7e:06:12:
                    32:5a:52:4b:98:49:7c:ad:b6:a3:b8:d1:54:29:b5:
                    73:74:46:2e:40:59:03:c0:83:9a:6c:78:95:a7:30:
                    d0:ec:e9:64:e5:58:9d:4a:a5:22:10:33:4d:71:ef:
                    96:25:ea:a1:cb:d3:ef:7f:4f:e3:62:ba:b3:63:ba:
                    34:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:16:CC:B6:80:5B:AE:D4:A4:E3:9B:9B:A8:9F:00:BB:5A:D0:C9:50
            X509v3 Authority Key Identifier:
                keyid:9C:1A:ED:99:13:F8:88:0A:F7:55:7E:EF:3E:F0:2D:6E:0F:F3:FD:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nBrtmRP4iAr3VX7vPvAtbg_z_Uk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/ff94f1-ba63-40d6-beca-5e624a3038cf/1/nBrtmRP4iAr3VX7vPvAtbg_z_Uk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/ff94f1-ba63-40d6-beca-5e624a3038cf/1/nBrtmRP4iAr3VX7vPvAtbg_z_Uk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:38:d3:1e:53:0f:bd:a1:fb:ae:ac:7e:b5:dc:ce:0d:20:70:
         81:c5:92:6d:f3:b8:e8:95:28:c0:3d:76:5d:7c:b9:f2:9f:76:
         fb:a3:84:8d:81:f4:f0:1d:f2:4e:c8:42:9b:b7:09:d8:8e:44:
         84:1d:36:74:20:86:84:d4:95:1b:91:05:16:01:00:f4:95:c9:
         f2:ab:ed:20:d1:45:92:de:60:4d:bd:5c:95:0b:36:a7:3c:22:
         d7:5e:ae:79:ed:38:89:3f:49:5b:95:47:d8:bd:e8:31:c7:37:
         e5:23:87:0b:d6:92:2b:24:22:58:f0:8a:af:d5:e4:fb:3f:5e:
         45:c7:97:e8:07:b4:d0:e2:84:e2:47:fe:c9:a6:4e:62:cd:ba:
         27:d2:23:ab:89:b5:d6:a9:f1:fd:cd:ad:6e:a3:d7:07:2c:bd:
         fc:5e:93:e5:75:dd:4a:ca:24:bf:54:ed:0c:c4:c5:17:11:04:
         a6:aa:1a:44:52:65:2e:56:c0:c0:05:b5:fa:f5:8c:ba:46:b9:
         cd:de:6d:da:e5:39:04:b6:e4:3a:c9:6e:84:78:85:58:d3:20:
         a6:4c:60:56:5b:34:b3:ba:aa:7b:2f:d6:b5:60:ab:a5:af:65:
         4b:c8:e0:e8:94:bd:b3:af:b9:12:1c:87:14:ed:9e:63:db:e6:
         a1:12:7a:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 08:20:12 2025 by rpki-client