Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/6ea8f7-cb4a-4e4e-ad79-ac87171f4e5c/1/nuw0uvkiAow0Mvj48ivaavhrd7I.mft
File:                     nuw0uvkiAow0Mvj48ivaavhrd7I.mft (raw, json)
Hash identifier:          PKAjdRT1xbOPatYq4OS/zQ5TGlndJIxuz5L42LLGo4o=
Subject key identifier:   C2:CE:B2:99:BD:38:7C:A2:83:D8:04:D9:22:CB:78:1B:C6:F2:8B:10
Authority key identifier: 9E:EC:34:BA:F9:22:02:8C:34:32:F8:F8:F2:2B:DA:6A:F8:6B:77:B2
Certificate issuer:       /CN=9eec34baf922028c3432f8f8f22bda6af86b77b2
Certificate serial:       01976D3E4F84EE86E126ADBAA46D5324F6D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nuw0uvkiAow0Mvj48ivaavhrd7I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/6ea8f7-cb4a-4e4e-ad79-ac87171f4e5c/1/nuw0uvkiAow0Mvj48ivaavhrd7I.mft
Manifest number:          1597
Signing time:             Sat 14 Jun 2025 07:01:29 +0000
Manifest this update:     Sat 14 Jun 2025 07:01:29 +0000
Manifest next update:     Sun 15 Jun 2025 07:01:29 +0000
Files and hashes:         1: nuw0uvkiAow0Mvj48ivaavhrd7I.crl (hash: PMqTQkv8erueL6sV4r5Mi2mmx69RJpouMqUmg5pb1fE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/6ea8f7-cb4a-4e4e-ad79-ac87171f4e5c/1/nuw0uvkiAow0Mvj48ivaavhrd7I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/6ea8f7-cb4a-4e4e-ad79-ac87171f4e5c/1/nuw0uvkiAow0Mvj48ivaavhrd7I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nuw0uvkiAow0Mvj48ivaavhrd7I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:3e:4f:84:ee:86:e1:26:ad:ba:a4:6d:53:24:f6:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9eec34baf922028c3432f8f8f22bda6af86b77b2
        Validity
            Not Before: Jun 14 07:01:29 2025 GMT
            Not After : Jun 15 07:01:29 2025 GMT
        Subject: CN=c2ceb299bd387ca283d804d922cb781bc6f28b10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b0:05:6a:94:ee:db:85:9f:c1:aa:0c:b8:09:
                    fc:cf:a5:bc:8c:fc:ae:49:53:d3:e9:7f:d1:a0:f7:
                    3d:bd:f6:5b:b1:07:4d:eb:6b:fc:8c:e5:92:4f:e9:
                    e5:77:2c:d2:60:80:5d:2b:e4:bb:74:13:93:41:c8:
                    d7:ee:b5:f3:71:92:4f:4d:34:39:3a:70:54:8f:b1:
                    00:a2:55:d4:e6:d8:74:cb:01:fa:32:2c:29:c0:40:
                    e5:b8:8a:6b:ba:ec:e1:39:2a:af:a9:ab:c8:1b:62:
                    bd:89:e2:16:08:41:85:68:80:d3:72:19:5b:94:d9:
                    96:bb:52:3d:e2:e3:a6:05:b3:87:7c:5b:66:97:ae:
                    f1:ff:99:06:a0:7f:77:02:57:66:42:5f:82:99:06:
                    66:0b:57:13:48:d4:25:18:c0:45:b6:1b:97:01:a8:
                    ee:dd:57:ce:62:03:8c:8f:c3:09:65:7e:bf:fb:ac:
                    03:b9:d9:e5:22:52:9b:df:28:9e:a5:78:cc:e8:9e:
                    23:76:c6:9b:85:02:25:c1:9b:c3:7b:81:ae:fc:1a:
                    bc:f7:4c:3f:a4:a5:c2:c1:bd:4c:96:35:bb:98:3c:
                    a6:1a:3f:5e:fa:6c:8c:22:46:8f:b8:71:40:9b:fe:
                    f2:21:ae:e2:8d:d7:6f:d3:67:30:33:42:b5:3a:55:
                    20:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:CE:B2:99:BD:38:7C:A2:83:D8:04:D9:22:CB:78:1B:C6:F2:8B:10
            X509v3 Authority Key Identifier:
                keyid:9E:EC:34:BA:F9:22:02:8C:34:32:F8:F8:F2:2B:DA:6A:F8:6B:77:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nuw0uvkiAow0Mvj48ivaavhrd7I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6ea8f7-cb4a-4e4e-ad79-ac87171f4e5c/1/nuw0uvkiAow0Mvj48ivaavhrd7I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6ea8f7-cb4a-4e4e-ad79-ac87171f4e5c/1/nuw0uvkiAow0Mvj48ivaavhrd7I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:06:fb:5e:b7:c3:21:6a:c4:d4:4e:0b:af:d9:67:03:7f:1d:
         ef:23:6b:e4:80:d4:7a:a0:a8:88:1f:46:4b:68:ab:9d:4f:26:
         cc:20:44:3f:cb:2f:09:a0:08:d8:1f:f3:46:31:1b:5a:a9:8d:
         c7:01:03:70:98:fb:95:3c:a5:44:f4:3b:c0:c2:3c:b6:53:ac:
         38:d8:bd:9c:36:07:03:65:2f:33:d4:81:cb:e9:1a:ad:36:8b:
         08:02:dc:19:6c:f2:36:ee:d5:19:4f:46:72:09:c5:45:e1:14:
         f0:e0:e9:d1:08:8f:0b:45:d1:b3:44:7c:39:f6:3c:76:8c:54:
         03:2a:39:92:c7:51:d2:da:0e:3b:27:df:c5:df:b5:42:29:ea:
         df:85:50:c7:1a:bf:a9:47:b7:05:ae:b8:98:98:8f:a7:94:87:
         5b:f4:2f:00:bd:4d:29:4a:8f:b4:47:de:ff:38:84:d2:7a:21:
         d8:04:db:d0:ff:c0:04:ac:4f:bb:cf:3c:30:4b:13:90:0e:48:
         5c:47:92:41:82:a2:53:8f:0e:3d:5d:a3:22:92:8d:0b:71:46:
         8d:c7:31:47:cc:af:30:0e:77:83:2a:7a:63:1b:76:67:35:39:
         db:6e:af:9b:32:79:94:d1:93:56:80:f3:a1:6f:19:e8:1e:2e:
         6b:b6:0b:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtPk+E7obhJq26pG1TJPbWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllZWMzNGJhZjkyMjAyOGMzNDMyZjhmOGYyMmJkYTZhZjg2
Yjc3YjIwHhcNMjUwNjE0MDcwMTI5WhcNMjUwNjE1MDcwMTI5WjAzMTEwLwYDVQQD
EyhjMmNlYjI5OWJkMzg3Y2EyODNkODA0ZDkyMmNiNzgxYmM2ZjI4YjEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLAFapTu24WfwaoMuAn8z6W8jPyu
SVPT6X/RoPc9vfZbsQdN62v8jOWST+nldyzSYIBdK+S7dBOTQcjX7rXzcZJPTTQ5
OnBUj7EAolXU5th0ywH6MiwpwEDluIpruuzhOSqvqavIG2K9ieIWCEGFaIDTchlb
lNmWu1I94uOmBbOHfFtml67x/5kGoH93AldmQl+CmQZmC1cTSNQlGMBFthuXAaju
3VfOYgOMj8MJZX6/+6wDudnlIlKb3yiepXjM6J4jdsabhQIlwZvDe4Gu/Bq890w/
pKXCwb1MljW7mDymGj9e+myMIkaPuHFAm/7yIa7ijddv02cwM0K1OlUgUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMLOspm9OHyig9gE2SLLeBvG8osQMB8GA1UdIwQY
MBaAFJ7sNLr5IgKMNDL4+PIr2mr4a3eyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnV3MHV2a2lBb3cwTXZqNDhpdmFhdmhyZDdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC82ZWE4ZjctY2I0YS00ZTRlLWFkNzkt
YWM4NzE3MWY0ZTVjLzEvbnV3MHV2a2lBb3cwTXZqNDhpdmFhdmhyZDdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC82ZWE4ZjctY2I0YS00ZTRlLWFkNzktYWM4NzE3MWY0ZTVj
LzEvbnV3MHV2a2lBb3cwTXZqNDhpdmFhdmhyZDdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMQb7XrfD
IWrE1E4Lr9lnA38d7yNr5IDUeqCoiB9GS2irnU8mzCBEP8svCaAI2B/zRjEbWqmN
xwEDcJj7lTylRPQ7wMI8tlOsONi9nDYHA2UvM9SBy+karTaLCALcGWzyNu7VGU9G
cgnFReEU8ODp0QiPC0XRs0R8OfY8doxUAyo5ksdR0toOOyffxd+1Qinq34VQxxq/
qUe3Ba64mJiPp5SHW/QvAL1NKUqPtEfe/ziE0noh2ATb0P/ABKxPu888MEsTkA5I
XEeSQYKiU48OPV2jIpKNC3FGjccxR8yvMA53gyp6Yxt2ZzU5226vmzJ5lNGTVoDz
oW8Z6B4ua7YLUQ==
-----END CERTIFICATE-----
Generated at Sat Jun 14 12:20:26 2025 by rpki-client