Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.mft
File:                     U_NZCAnRh_ezYfskzUP5P2ZLILM.mft (raw, json)
Hash identifier:          3cQefEYFz0tvZJGQIY/Ds4iEDImqmY4/XUf+9kmq73g=
Subject key identifier:   EB:08:2D:70:D6:A0:2B:25:7F:F6:F8:6C:77:6B:B4:BD:C3:F7:25:28
Authority key identifier: 53:F3:59:08:09:D1:87:F7:B3:61:FB:24:CD:43:F9:3F:66:4B:20:B3
Certificate issuer:       /CN=53f3590809d187f7b361fb24cd43f93f664b20b3
Certificate serial:       01976B8651DF2CC356B0BCBB9090E9BCBF1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U_NZCAnRh_ezYfskzUP5P2ZLILM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.mft
Manifest number:          1593
Signing time:             Fri 13 Jun 2025 23:00:54 +0000
Manifest this update:     Fri 13 Jun 2025 23:00:54 +0000
Manifest next update:     Sat 14 Jun 2025 23:00:54 +0000
Files and hashes:         1: 4yhrEPquDWqMWiUEurgxgpe4Z64.roa (hash: GAPEp0iDkhSK0QKol83Ga2o50iNkeUXCz5jUqWOb9Ow=)
                          2: 5piZhUc6B_Q8SXnCvmVdLn755tk.roa (hash: 1kX1fTcGnU3vqt6H68WNwGSWbpk3Ul9d3oLOLIk5xOI=)
                          3: 8nljJg7c24IFr_Sv-LV4LOMZqPI.roa (hash: deVXwXvj6xoqe5dfSwVOJXQZSoWKbMhfJNni40tWyZY=)
                          4: U_NZCAnRh_ezYfskzUP5P2ZLILM.crl (hash: bWVE2oYnRRqjUgVYbcHF65WFvipoS7Gn2i1VWOxbI20=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U_NZCAnRh_ezYfskzUP5P2ZLILM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 23:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6b:86:51:df:2c:c3:56:b0:bc:bb:90:90:e9:bc:bf:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53f3590809d187f7b361fb24cd43f93f664b20b3
        Validity
            Not Before: Jun 13 23:00:54 2025 GMT
            Not After : Jun 14 23:00:54 2025 GMT
        Subject: CN=eb082d70d6a02b257ff6f86c776bb4bdc3f72528
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e8:37:3f:31:09:99:77:de:9c:03:44:a3:79:
                    27:59:5c:2e:8a:d3:a4:eb:2b:6c:37:25:e6:2e:f3:
                    27:9b:8b:81:7d:cb:6f:db:6d:f5:ad:f9:37:6c:43:
                    d6:01:e2:69:19:34:ea:fc:5f:c5:72:7e:58:4a:9f:
                    1b:0d:85:d2:40:1f:61:1f:3a:de:49:7c:d0:b2:93:
                    eb:79:47:84:dc:2e:42:4d:cc:04:e1:1d:e6:23:54:
                    c4:4c:43:d9:2c:59:80:85:25:5f:27:5a:31:33:fa:
                    ee:a3:bc:fb:97:8d:1c:6b:a7:24:03:17:e1:bf:17:
                    74:58:06:e2:58:ac:58:f2:00:7a:2a:9e:9d:e0:98:
                    58:0e:4c:27:bc:61:e9:7b:38:d2:7f:a1:de:c5:ea:
                    b9:cd:16:bb:76:6d:52:c7:14:ab:fb:0f:5a:06:7f:
                    38:ca:c1:8f:d3:d5:02:f6:23:d3:ff:8e:35:db:8e:
                    b5:ac:f5:0f:dd:53:54:49:55:24:be:07:06:b2:59:
                    12:8f:6a:35:ca:11:c7:cc:b7:e4:45:97:75:2b:e2:
                    8f:e8:e5:55:1c:1d:2e:11:1a:25:ff:93:47:6f:42:
                    1b:f4:a8:19:88:c3:6d:b1:a8:58:f3:96:36:7f:7e:
                    f4:27:b2:e8:39:8e:0a:32:e8:92:eb:69:f0:e6:f0:
                    72:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:08:2D:70:D6:A0:2B:25:7F:F6:F8:6C:77:6B:B4:BD:C3:F7:25:28
            X509v3 Authority Key Identifier:
                keyid:53:F3:59:08:09:D1:87:F7:B3:61:FB:24:CD:43:F9:3F:66:4B:20:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_NZCAnRh_ezYfskzUP5P2ZLILM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/de6383-4ad5-457b-953c-a776fede9905/1/U_NZCAnRh_ezYfskzUP5P2ZLILM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:58:18:16:aa:0f:8e:71:70:81:92:5c:b6:8d:ce:d6:4c:c5:
         48:61:0d:54:94:85:c5:8f:51:76:90:8b:d2:90:ad:01:cb:68:
         f7:af:ba:82:8c:b7:42:00:e5:54:d4:a7:7e:47:ad:90:ef:90:
         64:f5:47:97:e3:57:e1:df:2b:5d:c5:8b:39:af:27:bf:aa:c9:
         c8:1a:b6:9b:69:34:a2:3e:bd:56:f2:9b:0f:52:a7:b1:63:01:
         c6:83:0b:6a:b6:68:b4:e5:06:5d:d6:6d:ed:44:ac:1e:cd:dd:
         e3:c6:25:13:3c:39:b4:73:ee:9b:18:ad:ae:d4:fe:bb:dd:e9:
         f7:d1:7f:eb:f2:65:5e:e1:d0:0f:36:6a:d4:50:95:d4:ce:88:
         44:09:60:1f:d3:20:20:41:b4:a3:fb:19:38:ca:34:dc:cd:b4:
         aa:ac:69:68:1b:a3:5b:9f:87:97:02:2d:ae:79:3f:f1:98:77:
         63:35:1f:2f:e0:00:f6:66:21:16:e8:4f:26:8e:90:52:39:69:
         8e:5f:4f:8c:b0:61:32:8f:20:73:54:32:9f:ed:3e:7f:0f:86:
         9d:c1:8a:e8:04:21:b2:04:ea:47:0e:8b:fa:4d:23:48:57:97:
         95:83:db:78:4d:86:9f:cb:e8:3e:2b:4d:eb:d1:dd:ce:54:cb:
         52:22:71:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdrhlHfLMNWsLy7kJDpvL8dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzZjM1OTA4MDlkMTg3ZjdiMzYxZmIyNGNkNDNmOTNmNjY0
YjIwYjMwHhcNMjUwNjEzMjMwMDU0WhcNMjUwNjE0MjMwMDU0WjAzMTEwLwYDVQQD
EyhlYjA4MmQ3MGQ2YTAyYjI1N2ZmNmY4NmM3NzZiYjRiZGMzZjcyNTI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOg3PzEJmXfenANEo3knWVwuitOk
6ytsNyXmLvMnm4uBfctv2231rfk3bEPWAeJpGTTq/F/Fcn5YSp8bDYXSQB9hHzre
SXzQspPreUeE3C5CTcwE4R3mI1TETEPZLFmAhSVfJ1oxM/ruo7z7l40ca6ckAxfh
vxd0WAbiWKxY8gB6Kp6d4JhYDkwnvGHpezjSf6Hexeq5zRa7dm1SxxSr+w9aBn84
ysGP09UC9iPT/4412461rPUP3VNUSVUkvgcGslkSj2o1yhHHzLfkRZd1K+KP6OVV
HB0uERol/5NHb0Ib9KgZiMNtsahY85Y2f370J7LoOY4KMuiS62nw5vBywQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOsILXDWoCslf/b4bHdrtL3D9yUoMB8GA1UdIwQY
MBaAFFPzWQgJ0Yf3s2H7JM1D+T9mSyCzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVV9OWkNBblJoX2V6WWZza3pVUDVQMlpMSUxNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9kZTYzODMtNGFkNS00NTdiLTk1M2Mt
YTc3NmZlZGU5OTA1LzEvVV9OWkNBblJoX2V6WWZza3pVUDVQMlpMSUxNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9kZTYzODMtNGFkNS00NTdiLTk1M2MtYTc3NmZlZGU5OTA1
LzEvVV9OWkNBblJoX2V6WWZza3pVUDVQMlpMSUxNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPFgYFqoP
jnFwgZJcto3O1kzFSGENVJSFxY9RdpCL0pCtActo96+6goy3QgDlVNSnfketkO+Q
ZPVHl+NX4d8rXcWLOa8nv6rJyBq2m2k0oj69VvKbD1KnsWMBxoMLarZotOUGXdZt
7USsHs3d48YlEzw5tHPumxitrtT+u93p99F/6/JlXuHQDzZq1FCV1M6IRAlgH9Mg
IEG0o/sZOMo03M20qqxpaBujW5+HlwItrnk/8Zh3YzUfL+AA9mYhFuhPJo6QUjlp
jl9PjLBhMo8gc1Qyn+0+fw+GncGK6AQhsgTqRw6L+k0jSFeXlYPbeE2Gn8voPitN
69HdzlTLUiJx2A==
-----END CERTIFICATE-----
Generated at Sat Jun 14 09:18:16 2025 by rpki-client