Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/46431e-4951-4e1a-9195-68a4551f68a8/1/6_Ngh8P87PsAb1GNeBGyVepXyQ0.mft
File:                     6_Ngh8P87PsAb1GNeBGyVepXyQ0.mft (raw, json)
Hash identifier:          aSA0QgU6GdBdbgt+3b07+P3Gj6cKODTHXf6e+gNpE/k=
Subject key identifier:   5A:5E:20:BA:8A:DE:B3:BD:27:A6:66:95:EF:D1:F3:1E:80:38:D7:80
Authority key identifier: EB:F3:60:87:C3:FC:EC:FB:00:6F:51:8D:78:11:B2:55:EA:57:C9:0D
Certificate issuer:       /CN=ebf36087c3fcecfb006f518d7811b255ea57c90d
Certificate serial:       01977D5586F1A6894FC89EF98B599066C03A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6_Ngh8P87PsAb1GNeBGyVepXyQ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/46431e-4951-4e1a-9195-68a4551f68a8/1/6_Ngh8P87PsAb1GNeBGyVepXyQ0.mft
Manifest number:          1159
Signing time:             Tue 17 Jun 2025 10:00:46 +0000
Manifest this update:     Tue 17 Jun 2025 10:00:46 +0000
Manifest next update:     Wed 18 Jun 2025 10:00:46 +0000
Files and hashes:         1: 6_Ngh8P87PsAb1GNeBGyVepXyQ0.crl (hash: Aa2RwNQvVljqr3gu01RebJhyEq440j1lR9g7mmnpEcM=)
                          2: Cd-K1MEWA2ryKgiTfKMlpJrD0GQ.roa (hash: B7DPcOBfNaFm0TXa9BBHsfzUSprwVkey6QgyDWplAfY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/46431e-4951-4e1a-9195-68a4551f68a8/1/6_Ngh8P87PsAb1GNeBGyVepXyQ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/46431e-4951-4e1a-9195-68a4551f68a8/1/6_Ngh8P87PsAb1GNeBGyVepXyQ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6_Ngh8P87PsAb1GNeBGyVepXyQ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 18 Jun 2025 08:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:7d:55:86:f1:a6:89:4f:c8:9e:f9:8b:59:90:66:c0:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebf36087c3fcecfb006f518d7811b255ea57c90d
        Validity
            Not Before: Jun 17 10:00:46 2025 GMT
            Not After : Jun 18 10:00:46 2025 GMT
        Subject: CN=5a5e20ba8adeb3bd27a66695efd1f31e8038d780
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:db:f5:33:f1:39:94:7e:bc:91:87:19:41:80:
                    b1:10:1d:f1:2f:a4:91:61:ae:7c:be:54:68:bb:ea:
                    d9:30:5a:ec:c3:82:c3:dd:bd:6a:22:9b:b0:3d:9b:
                    76:45:4c:7d:34:b8:d6:32:89:6e:8c:3e:0f:e4:14:
                    32:71:47:a2:86:75:ea:06:eb:56:3b:de:ac:03:39:
                    51:a7:72:c0:7e:00:f8:ff:0a:f3:49:f0:77:75:1f:
                    3a:46:04:fc:67:10:5d:c0:6e:ba:b5:c8:8c:b4:5f:
                    9b:5c:a6:be:06:55:07:f1:28:af:32:67:a6:86:cf:
                    32:85:9d:6c:1b:d0:7b:d9:e9:1a:4a:b1:21:bb:57:
                    6a:23:6a:41:80:21:85:fd:b7:2e:21:40:d7:68:d0:
                    06:e1:5c:0d:fb:9f:8d:32:9a:ee:e0:93:89:59:47:
                    06:6e:7f:73:89:4a:55:ff:db:5c:a2:cc:70:95:7e:
                    cb:4d:c1:9d:20:85:46:ca:50:58:ea:48:11:77:b3:
                    c7:a0:e1:94:fa:ce:5d:29:07:c6:70:fd:9b:e7:cf:
                    22:8e:98:79:4a:b4:e8:76:39:26:a9:bb:42:f8:bd:
                    41:4d:10:54:38:b7:65:25:99:07:70:e0:57:26:5d:
                    5d:9f:72:5c:05:e3:49:ad:b0:e6:8b:c9:5a:4f:ee:
                    b8:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:5E:20:BA:8A:DE:B3:BD:27:A6:66:95:EF:D1:F3:1E:80:38:D7:80
            X509v3 Authority Key Identifier:
                keyid:EB:F3:60:87:C3:FC:EC:FB:00:6F:51:8D:78:11:B2:55:EA:57:C9:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6_Ngh8P87PsAb1GNeBGyVepXyQ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/46431e-4951-4e1a-9195-68a4551f68a8/1/6_Ngh8P87PsAb1GNeBGyVepXyQ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/46431e-4951-4e1a-9195-68a4551f68a8/1/6_Ngh8P87PsAb1GNeBGyVepXyQ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:50:48:8e:d4:c4:3b:74:b2:27:37:d9:d3:98:a4:6b:50:8d:
         ab:96:44:b6:50:6d:c7:33:03:8c:e0:9e:38:29:5f:09:29:3b:
         47:f7:ef:08:75:12:15:f2:51:2a:f7:91:00:03:a0:10:4a:51:
         47:18:2b:6e:3b:e0:0e:ad:a0:a5:20:fd:dc:47:26:80:77:63:
         28:02:e1:64:68:01:fa:1a:a1:98:f6:d9:44:00:fe:d6:c2:22:
         76:56:c4:2c:f0:b3:09:e8:8d:72:4b:1a:6f:5e:d8:49:fb:e1:
         db:57:f6:fc:5e:c3:c6:2d:51:c5:b9:96:a0:0b:bc:f2:e8:74:
         e3:62:f7:9e:f3:c7:b7:17:38:ce:cf:77:a1:4c:26:44:57:f9:
         51:80:fe:e8:3b:01:87:d5:7c:5b:ea:6c:c5:5e:9f:5f:26:5c:
         08:7f:16:b9:9f:25:b1:7c:31:a3:18:46:2a:86:55:60:81:18:
         34:9e:fb:30:68:41:18:81:4e:79:cf:0e:e6:46:10:82:c7:52:
         a2:26:bc:ff:4d:aa:4c:b6:94:00:52:53:e3:52:ab:aa:cb:f3:
         5b:2f:35:d1:5d:d1:f9:12:3b:d6:fe:7c:1b:70:bd:4c:73:b5:
         55:af:82:91:05:91:bb:d8:0c:68:6c:43:5d:1a:50:d1:9d:db:
         cf:ba:08:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd9VYbxpolPyJ75i1mQZsA6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViZjM2MDg3YzNmY2VjZmIwMDZmNTE4ZDc4MTFiMjU1ZWE1
N2M5MGQwHhcNMjUwNjE3MTAwMDQ2WhcNMjUwNjE4MTAwMDQ2WjAzMTEwLwYDVQQD
Eyg1YTVlMjBiYThhZGViM2JkMjdhNjY2OTVlZmQxZjMxZTgwMzhkNzgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+9v1M/E5lH68kYcZQYCxEB3xL6SR
Ya58vlRou+rZMFrsw4LD3b1qIpuwPZt2RUx9NLjWMolujD4P5BQycUeihnXqButW
O96sAzlRp3LAfgD4/wrzSfB3dR86RgT8ZxBdwG66tciMtF+bXKa+BlUH8SivMmem
hs8yhZ1sG9B72ekaSrEhu1dqI2pBgCGF/bcuIUDXaNAG4VwN+5+NMpru4JOJWUcG
bn9ziUpV/9tcosxwlX7LTcGdIIVGylBY6kgRd7PHoOGU+s5dKQfGcP2b588ijph5
SrTodjkmqbtC+L1BTRBUOLdlJZkHcOBXJl1dn3JcBeNJrbDmi8laT+64sQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFpeILqK3rO9J6Zmle/R8x6AONeAMB8GA1UdIwQY
MBaAFOvzYIfD/Oz7AG9RjXgRslXqV8kNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNl9OZ2g4UDg3UHNBYjFHTmVCR3lWZXBYeVEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS80NjQzMWUtNDk1MS00ZTFhLTkxOTUt
NjhhNDU1MWY2OGE4LzEvNl9OZ2g4UDg3UHNBYjFHTmVCR3lWZXBYeVEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS80NjQzMWUtNDk1MS00ZTFhLTkxOTUtNjhhNDU1MWY2OGE4
LzEvNl9OZ2g4UDg3UHNBYjFHTmVCR3lWZXBYeVEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWFBIjtTE
O3SyJzfZ05ika1CNq5ZEtlBtxzMDjOCeOClfCSk7R/fvCHUSFfJRKveRAAOgEEpR
RxgrbjvgDq2gpSD93EcmgHdjKALhZGgB+hqhmPbZRAD+1sIidlbELPCzCeiNcksa
b17YSfvh21f2/F7Dxi1RxbmWoAu88uh042L3nvPHtxc4zs93oUwmRFf5UYD+6DsB
h9V8W+psxV6fXyZcCH8WuZ8lsXwxoxhGKoZVYIEYNJ77MGhBGIFOec8O5kYQgsdS
oia8/02qTLaUAFJT41KrqsvzWy810V3R+RI71v58G3C9THO1Va+CkQWRu9gMaGxD
XRpQ0Z3bz7oIpA==
-----END CERTIFICATE-----
Generated at Tue Jun 17 12:19:12 2025 by rpki-client