Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/644501-9d42-4816-89c9-10aca3313387/1/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.mft
File:                     n3LjoM10kAU1tqb4_8ZX2ToJB6Y.mft (raw, json)
Hash identifier:          DrBGYt132zCUUjYBU4UFS7YDXU4NaMNfkaFLgkwnZ88=
Subject key identifier:   62:48:B1:9C:B9:71:7E:17:D0:A7:5F:AB:2B:B4:DA:3F:63:4A:18:F2
Authority key identifier: 9F:72:E3:A0:CD:74:90:05:35:B6:A6:F8:FF:C6:57:D9:3A:09:07:A6
Certificate issuer:       /CN=9f72e3a0cd74900535b6a6f8ffc657d93a0907a6
Certificate serial:       01977F7AF96CEF111322B6986259E54FE689
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/644501-9d42-4816-89c9-10aca3313387/1/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.mft
Manifest number:          09A6
Signing time:             Tue 17 Jun 2025 20:00:54 +0000
Manifest this update:     Tue 17 Jun 2025 20:00:54 +0000
Manifest next update:     Wed 18 Jun 2025 20:00:54 +0000
Files and hashes:         1: n3LjoM10kAU1tqb4_8ZX2ToJB6Y.crl (hash: dw9rwXGwc48j7xYMpiHyun3BRM6gGFJSJCrtwwHsyoQ=)
                          2: xCIH9wp6RKlehql4M5SLCZPHQEs.roa (hash: 80w1j7Z/qMuNCNOWS8szAQAtDk98iD2/lDFP83CUU3U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/644501-9d42-4816-89c9-10aca3313387/1/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/644501-9d42-4816-89c9-10aca3313387/1/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 18 Jun 2025 20:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:7f:7a:f9:6c:ef:11:13:22:b6:98:62:59:e5:4f:e6:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f72e3a0cd74900535b6a6f8ffc657d93a0907a6
        Validity
            Not Before: Jun 17 20:00:54 2025 GMT
            Not After : Jun 18 20:00:54 2025 GMT
        Subject: CN=6248b19cb9717e17d0a75fab2bb4da3f634a18f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:37:6a:86:e2:5c:92:c7:32:19:dd:d0:c1:8c:
                    3e:50:be:b4:6f:8a:2c:ae:fe:54:3a:a1:f1:a8:1b:
                    5b:b7:a1:e6:90:89:2d:fc:bb:af:49:43:0f:84:a9:
                    92:75:fd:0b:de:71:6b:16:f8:ea:24:37:69:9f:4a:
                    7f:e1:07:ac:5d:7f:ba:79:85:3a:96:25:3d:72:68:
                    77:4c:99:d0:a9:47:d7:17:89:51:44:0c:44:08:a6:
                    d3:76:66:00:6d:b4:bc:a6:77:a2:80:a0:d4:39:21:
                    51:be:33:66:84:36:90:04:d7:0a:7c:0d:65:8f:3d:
                    ff:ce:58:d2:11:39:55:37:78:53:bc:6b:61:ab:a6:
                    59:d3:e6:90:26:1b:19:30:ef:d6:58:14:18:bf:f9:
                    1a:0e:ad:d5:db:81:ca:6d:3a:fd:5a:33:df:a3:af:
                    70:ee:f5:9c:8b:dd:ec:e0:70:f7:74:e8:08:2e:17:
                    18:b9:c8:16:5c:76:8e:c2:8d:28:6d:d9:2f:b6:77:
                    60:3f:29:48:7f:31:cc:40:ae:8b:b6:31:24:75:38:
                    88:62:22:71:a6:d5:d0:88:c7:df:d4:47:fa:d1:04:
                    79:43:96:9d:78:dc:88:82:06:f0:bf:74:fa:c7:38:
                    59:d8:fc:c5:61:18:7a:5f:da:8c:4a:8e:e4:1c:7f:
                    62:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:48:B1:9C:B9:71:7E:17:D0:A7:5F:AB:2B:B4:DA:3F:63:4A:18:F2
            X509v3 Authority Key Identifier:
                keyid:9F:72:E3:A0:CD:74:90:05:35:B6:A6:F8:FF:C6:57:D9:3A:09:07:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/644501-9d42-4816-89c9-10aca3313387/1/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/644501-9d42-4816-89c9-10aca3313387/1/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:46:63:5e:02:00:29:0a:ae:96:42:e8:fa:42:45:3a:16:13:
         18:a8:04:1e:e7:5d:79:dd:c5:d2:47:a4:1a:cf:d9:6f:9b:3f:
         59:43:e0:3c:29:8a:8b:3c:98:cb:c5:d1:a2:fb:fd:7f:79:93:
         4c:df:55:fe:94:3d:18:9e:ee:3a:f6:2a:67:46:09:46:80:c7:
         78:fc:21:86:3d:fb:ab:c2:7b:6f:b1:07:04:4c:50:90:34:ce:
         00:89:9a:03:3e:68:2a:1c:13:f8:7a:30:ab:ae:61:cb:3d:dd:
         d9:f7:85:ac:1d:b2:1d:21:6e:09:da:bb:f9:7e:ce:6a:cc:f8:
         df:4e:43:6a:e7:f8:c9:c0:aa:53:b9:97:a1:48:d6:74:62:fe:
         c8:9f:54:5a:8f:5c:ef:7f:95:69:8a:82:a5:34:af:ef:6f:67:
         31:49:6c:83:46:96:db:eb:b8:5b:5d:1a:75:e4:f2:2d:de:9c:
         01:6a:b1:b5:1a:76:94:d0:04:b7:7f:34:a8:9b:a0:cd:3a:f8:
         78:07:5f:4b:a7:be:a8:59:23:1f:ef:95:5a:c2:21:f7:78:2a:
         41:d0:56:2b:19:07:01:7f:a2:4a:b2:c9:c9:b1:58:53:fb:a3:
         cc:04:0a:77:c8:0f:c2:6d:c3:69:a8:cd:f4:41:4a:30:8c:cb:
         81:50:f6:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd/evls7xETIraYYlnlT+aJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmNzJlM2EwY2Q3NDkwMDUzNWI2YTZmOGZmYzY1N2Q5M2Ew
OTA3YTYwHhcNMjUwNjE3MjAwMDU0WhcNMjUwNjE4MjAwMDU0WjAzMTEwLwYDVQQD
Eyg2MjQ4YjE5Y2I5NzE3ZTE3ZDBhNzVmYWIyYmI0ZGEzZjYzNGExOGYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0zdqhuJckscyGd3QwYw+UL60b4os
rv5UOqHxqBtbt6HmkIkt/LuvSUMPhKmSdf0L3nFrFvjqJDdpn0p/4QesXX+6eYU6
liU9cmh3TJnQqUfXF4lRRAxECKbTdmYAbbS8pneigKDUOSFRvjNmhDaQBNcKfA1l
jz3/zljSETlVN3hTvGthq6ZZ0+aQJhsZMO/WWBQYv/kaDq3V24HKbTr9WjPfo69w
7vWci93s4HD3dOgILhcYucgWXHaOwo0obdkvtndgPylIfzHMQK6LtjEkdTiIYiJx
ptXQiMff1Ef60QR5Q5adeNyIggbwv3T6xzhZ2PzFYRh6X9qMSo7kHH9iowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGJIsZy5cX4X0Kdfqyu02j9jShjyMB8GA1UdIwQY
MBaAFJ9y46DNdJAFNbam+P/GV9k6CQemMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjNMam9NMTBrQVUxdHFiNF84WlgyVG9KQjZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy82NDQ1MDEtOWQ0Mi00ODE2LTg5Yzkt
MTBhY2EzMzEzMzg3LzEvbjNMam9NMTBrQVUxdHFiNF84WlgyVG9KQjZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy82NDQ1MDEtOWQ0Mi00ODE2LTg5YzktMTBhY2EzMzEzMzg3
LzEvbjNMam9NMTBrQVUxdHFiNF84WlgyVG9KQjZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYUZjXgIA
KQqulkLo+kJFOhYTGKgEHudded3F0kekGs/Zb5s/WUPgPCmKizyYy8XRovv9f3mT
TN9V/pQ9GJ7uOvYqZ0YJRoDHePwhhj37q8J7b7EHBExQkDTOAImaAz5oKhwT+How
q65hyz3d2feFrB2yHSFuCdq7+X7Oasz4305Dauf4ycCqU7mXoUjWdGL+yJ9UWo9c
73+VaYqCpTSv729nMUlsg0aW2+u4W10adeTyLd6cAWqxtRp2lNAEt380qJugzTr4
eAdfS6e+qFkjH++VWsIh93gqQdBWKxkHAX+iSrLJybFYU/ujzAQKd8gPwm3DaajN
9EFKMIzLgVD2JA==
-----END CERTIFICATE-----
Generated at Wed Jun 18 03:32:39 2025 by rpki-client