Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft
File:                     NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft (raw, json)
Hash identifier:          xyj29CDSs78pfV797pNzMek9JVYGBmNhfP32QqlFps8=
Subject key identifier:   9D:C0:FA:16:DE:4E:87:B9:62:97:B7:91:08:D4:6B:A9:30:7C:D8:13
Authority key identifier: 35:9F:0F:5F:F6:20:E0:DB:53:11:F6:47:36:90:99:73:AC:60:F6:F3
Certificate issuer:       /CN=359f0f5ff620e0db5311f64736909973ac60f6f3
Certificate serial:       0197741B258B8406F31A041DE0F65B0C87B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft
Manifest number:          15AF
Signing time:             Sun 15 Jun 2025 15:00:25 +0000
Manifest this update:     Sun 15 Jun 2025 15:00:25 +0000
Manifest next update:     Mon 16 Jun 2025 15:00:25 +0000
Files and hashes:         1: 2UrKpNpXwQRG_RCEBy6jwKiUGY0.roa (hash: ga3NEHKHpZo6kUdfR8ZMTo0qgNot+btN7z+ZQk3zhiI=)
                          2: 4qMGWpgEfUvVfuYkCpl-cDfdOi8.roa (hash: 38HpzPTEyuA+scZwZQcFdTVJsXUC8CY1Kfy5zMrptq8=)
                          3: 77pFQYmLGFFV08L576oEHW3GDp0.roa (hash: w0kLGHk3jpcfZ/BQP6p+01FDOOb/LMYSuRYLEGuQI/g=)
                          4: Gc4moE6h-0LPBafiLK_GmYOfnf8.roa (hash: B7ulvc5vYjfcQvRj4GAOq2Tqzy61ptY6XfnMhYDDe+Y=)
                          5: IoRXomrFNDnoBIF4qoE29SIUorU.roa (hash: 1sHe1bcx24ru9glaxoxQWRHjWb8ipfsqMRJr8SbCC/s=)
                          6: NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.crl (hash: UgNJF0uBS7CgY0vUW8HlNDZ94+5mSXL+nJ8d5qevfaU=)
                          7: PkUBswB6akpRoaWoY8idhiZO-0s.roa (hash: FTb6NXOjB3gAzHYZQp3OqT2aASeT3Lw8OwXcNy1cX04=)
                          8: SYmYEPxKLxZh6c3-MXblu3M5Kdk.roa (hash: uMOvwdNxylFgJ11y31h0VRFk89Sfs25xLoK9OyLbapc=)
                          9: TNCpqe-GffYO9Oy5tCERO1-eUvc.roa (hash: tEekWUTWURynqaTdFQTnecYYou9fV3Tv2zuhFon83g0=)
                          10: VFBedq1I_YG5NP5YD9No0ItCqAI.roa (hash: Cca2YTmO6sfJdE+XLr3wI40Aj8jX93VIto7rInwpMCo=)
                          11: WW-Eg4lD08WXRjKIyMf5a9JN3sI.roa (hash: 4fdk3ZCxEVJ8pj7G/mfXogiKk5sTyJuf3rTPCLrHXpA=)
                          12: aNywjk-hRURwFzlW2WgXo-tyI7k.roa (hash: 7GvPvCBbcDqco5BuG4uUSLpM+i4KeC8ZMy4qhRktBZ8=)
                          13: b1B34JvO-GcunbVTm8j4sBQw6MA.roa (hash: 0+rTmm2udmOGJ/v+UrcQLZyo966itB803WI6uUxjsqQ=)
                          14: d3a2WBeR1A3tJcpu4fWQBY6byfA.roa (hash: Zp2NY2sCUEQGxT621HkEtGngfanR7ZMZDlkAzEAeyIw=)
                          15: iFRYVznuoLn764Hzk0y8UncknZI.roa (hash: uIDffq/3bRoUd9ry3L4WiOXaxdw7ef/Tzoj8TcFGzHc=)
                          16: kUh2F-fVmltK7tW5jk5XUjsjxVQ.roa (hash: F9Uv120hAnV+E46AVbmB2sboaMIO2I3P8j+LmwLqm1M=)
                          17: mq2NxcwMUGbKqpSJLEjhdlVNidw.roa (hash: vE05RIMpgESTy8av4PcX8xn6jeiXKLqRql6sXAZ5+aE=)
                          18: rI3BUUNmmdz_A7GTMa-NmL7qtcI.roa (hash: aUp66qmmCZlHuRPbWVjj6jt7emRrai3ZD6hH/ipGctU=)
                          19: u2jjT9a7gurHsCBuG6MLd36hk6U.roa (hash: 5ifFXhTaQ0rt9DDM8OyMYLPCzUHaKXbmifUQMc2oMtc=)
                          20: xX9yJEiYtOsEPk6D2Z_dgnJG6u8.roa (hash: brPlifO1VEl2vFMFC83o8IYbgEjTUIbuxorWEUgGfc8=)
                          21: xXju9qGmfbY7jtuhCeomjVXSGgc.roa (hash: aLsgVbOegZpDj1KVoAXCqtR2JSEILQDuwOxScth37yg=)
                          22: ziTaHEBzu703E1AnoRdGaeDxKDM.roa (hash: eQUr4D3nQGW0Uu+rc2TbhNUKE96ryh4ra9nO6RUZ5yo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 13:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:74:1b:25:8b:84:06:f3:1a:04:1d:e0:f6:5b:0c:87:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=359f0f5ff620e0db5311f64736909973ac60f6f3
        Validity
            Not Before: Jun 15 15:00:25 2025 GMT
            Not After : Jun 16 15:00:25 2025 GMT
        Subject: CN=9dc0fa16de4e87b96297b79108d46ba9307cd813
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:97:6a:8b:0e:62:28:da:93:fd:06:2c:b1:78:
                    6b:6d:02:1b:53:74:b5:b4:7b:36:e1:25:e5:33:fa:
                    e3:3d:18:57:bf:a8:88:8d:3e:fd:78:22:06:22:a1:
                    51:5f:3f:77:17:c9:4a:c3:99:39:46:27:ad:41:14:
                    6e:91:d5:9f:52:5c:2a:aa:12:a2:34:06:86:da:48:
                    d4:3f:4e:70:bf:ac:26:88:a3:2e:f5:4c:a1:6c:64:
                    cc:9f:d2:f3:12:cb:7f:dd:65:a7:b6:ff:f0:cb:28:
                    fa:b1:bf:35:70:29:b2:40:05:e4:71:86:bf:45:db:
                    54:0c:2f:43:d0:b9:2c:a9:16:b3:4f:f4:4d:0e:1a:
                    bc:5e:62:56:86:f5:fe:c4:9b:1d:f0:c6:f4:76:c7:
                    5a:aa:2e:cf:e6:85:97:f4:56:d8:15:1f:7d:a5:81:
                    a9:e2:a0:95:6f:9c:b6:52:fd:9a:78:c5:68:3a:c9:
                    fc:22:4b:f1:b4:97:0a:2f:75:fd:f4:2d:57:f4:2e:
                    2c:74:15:ab:1a:8b:bb:f1:72:58:85:fb:48:51:4e:
                    d3:df:29:3b:3c:e5:00:34:a0:29:50:de:32:09:af:
                    19:12:5d:c6:6d:14:e9:42:94:b7:9a:39:ff:ce:b7:
                    22:c9:11:fa:42:a8:31:37:fb:16:45:d7:19:3d:dc:
                    ff:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:C0:FA:16:DE:4E:87:B9:62:97:B7:91:08:D4:6B:A9:30:7C:D8:13
            X509v3 Authority Key Identifier:
                keyid:35:9F:0F:5F:F6:20:E0:DB:53:11:F6:47:36:90:99:73:AC:60:F6:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:26:92:51:dc:3a:89:0b:10:56:f9:2e:43:16:38:bd:fb:b8:
         04:ba:d3:59:50:4f:3b:11:4b:2e:09:66:a9:7b:9d:cf:a3:fb:
         63:72:6c:e0:c0:fe:7a:52:08:ef:92:6a:ce:62:a0:44:8e:de:
         42:d1:fe:77:0d:96:4f:19:82:47:ff:65:76:8c:71:db:be:aa:
         00:41:ba:09:f6:fe:88:ba:e0:2c:99:e3:6b:d7:d0:35:a8:b2:
         5c:bf:20:15:6b:b2:08:0d:39:ee:ba:29:c0:e4:21:bc:8a:3d:
         65:81:f7:04:d3:dd:1b:df:ca:32:8b:3c:69:22:d9:25:fc:cb:
         0c:e4:00:96:42:d9:0e:7a:54:7a:8a:a0:d1:09:78:e9:df:4a:
         1e:d7:16:47:49:71:ef:0e:79:dc:06:4c:74:d0:20:d0:a6:a0:
         34:83:c6:38:d6:e5:46:ff:52:36:ec:6b:9f:14:fd:d1:73:86:
         5d:c4:5e:47:c9:a9:9e:53:f0:1e:b5:fc:58:99:de:62:db:61:
         4b:fd:4d:e2:5e:e5:b2:67:33:95:3d:b7:76:8d:9d:2a:51:60:
         db:37:85:55:ee:e5:ad:7c:44:ba:57:c9:90:52:fc:26:5a:12:
         8c:cf:aa:9c:0b:2e:4a:74:3f:a7:8f:60:4c:b1:7d:3f:e2:fa:
         b2:53:2a:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:37:27 2025 by rpki-client