Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/60e51f-b803-474d-b27a-f2990ceb94ec/1/nfGF6Z_-YRUnoOlDMRUf_i7nKuk.mft
File:                     nfGF6Z_-YRUnoOlDMRUf_i7nKuk.mft (raw, json)
Hash identifier:          oq7aDKXJN5OlVIAxC4KWkeQeaWLbW1yI+MqaEPeFC9A=
Subject key identifier:   E3:7D:9B:AD:96:8E:8A:99:EC:C8:8A:41:6D:B5:99:1C:DA:E3:15:8F
Authority key identifier: 9D:F1:85:E9:9F:FE:61:15:27:A0:E9:43:31:15:1F:FE:2E:E7:2A:E9
Certificate issuer:       /CN=9df185e99ffe611527a0e94331151ffe2ee72ae9
Certificate serial:       0197B6A0D3986A39C37F0868C8C6ADAA44EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nfGF6Z_-YRUnoOlDMRUf_i7nKuk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/60e51f-b803-474d-b27a-f2990ceb94ec/1/nfGF6Z_-YRUnoOlDMRUf_i7nKuk.mft
Manifest number:          0835
Signing time:             Sat 28 Jun 2025 13:01:22 +0000
Manifest this update:     Sat 28 Jun 2025 13:01:22 +0000
Manifest next update:     Sun 29 Jun 2025 13:01:22 +0000
Files and hashes:         1: 91cINY9woI_zH6e1r3Wkrenr7Yg.roa (hash: 3OQuboWAG+RQMvSWcHif8T7bhj5yD9lJGrTB5RXF988=)
                          2: nfGF6Z_-YRUnoOlDMRUf_i7nKuk.crl (hash: ecixgkb1BmE97+NlMLWWH7cS2Dhtj0ZXtOtgUE8+iCA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/60e51f-b803-474d-b27a-f2990ceb94ec/1/nfGF6Z_-YRUnoOlDMRUf_i7nKuk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/60e51f-b803-474d-b27a-f2990ceb94ec/1/nfGF6Z_-YRUnoOlDMRUf_i7nKuk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nfGF6Z_-YRUnoOlDMRUf_i7nKuk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a0:d3:98:6a:39:c3:7f:08:68:c8:c6:ad:aa:44:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9df185e99ffe611527a0e94331151ffe2ee72ae9
        Validity
            Not Before: Jun 28 13:01:22 2025 GMT
            Not After : Jun 29 13:01:22 2025 GMT
        Subject: CN=e37d9bad968e8a99ecc88a416db5991cdae3158f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ce:f7:99:e7:ef:0c:ea:0a:3f:dd:29:77:61:
                    73:83:37:ac:86:36:b1:1e:4d:23:10:b0:6e:be:43:
                    ca:ac:10:07:4a:e0:c3:35:2b:18:1a:fe:71:74:ec:
                    8c:b9:e7:36:f1:b9:a9:79:97:8c:c5:ec:08:a3:cc:
                    f4:47:49:f3:1b:6e:a9:37:d5:ee:a9:d3:35:67:39:
                    70:47:07:1f:d3:5a:53:06:01:25:d9:a6:28:08:f9:
                    5f:11:2c:f5:0b:de:44:96:8f:7f:48:af:6c:6b:81:
                    49:1a:b6:43:36:c7:4a:2b:39:8e:19:53:29:29:de:
                    30:1f:20:a4:8b:bf:71:cb:ca:90:e5:88:8c:6b:c8:
                    2f:58:21:43:74:f0:c4:f1:d7:83:cc:9f:b4:3e:00:
                    49:ba:31:ea:24:95:dd:0f:ca:db:97:31:50:67:85:
                    11:08:21:cc:ab:ef:df:86:89:0a:46:f8:ef:42:71:
                    c4:1c:c8:f8:bb:68:f5:eb:ab:c2:79:00:13:51:3d:
                    55:76:e5:00:67:b5:e3:e8:5c:5c:a1:0c:cf:59:23:
                    2f:88:59:13:ff:3f:c0:b2:65:0f:60:63:26:59:4c:
                    c0:18:42:c1:60:bd:27:bc:8e:30:e1:b0:39:b1:a9:
                    b2:8a:f1:63:a4:75:9a:ba:ca:bb:a0:d1:e0:8e:1d:
                    d5:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:7D:9B:AD:96:8E:8A:99:EC:C8:8A:41:6D:B5:99:1C:DA:E3:15:8F
            X509v3 Authority Key Identifier:
                keyid:9D:F1:85:E9:9F:FE:61:15:27:A0:E9:43:31:15:1F:FE:2E:E7:2A:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfGF6Z_-YRUnoOlDMRUf_i7nKuk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/60e51f-b803-474d-b27a-f2990ceb94ec/1/nfGF6Z_-YRUnoOlDMRUf_i7nKuk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/60e51f-b803-474d-b27a-f2990ceb94ec/1/nfGF6Z_-YRUnoOlDMRUf_i7nKuk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:ca:04:88:21:76:26:9d:b9:69:7d:e6:01:a4:b4:23:52:4a:
         a9:f2:d1:04:74:d6:90:be:fe:bf:32:8a:b5:12:31:f0:18:5e:
         f1:14:60:46:c4:fe:13:de:9b:de:ba:63:ad:bd:e8:81:d1:e2:
         cb:f7:a8:2f:4a:32:73:39:da:e8:97:10:9a:df:e3:32:6f:fc:
         3c:81:31:33:d4:60:36:60:3b:f9:13:12:90:54:dc:d1:82:2d:
         d1:8d:35:a3:72:90:ff:54:d9:17:76:d8:ce:43:01:2d:15:99:
         17:ca:72:50:57:0c:79:77:14:dc:63:d7:5b:ee:e7:94:ad:b6:
         1a:03:ff:10:36:fb:95:fe:9d:8b:cc:ea:86:3c:7b:30:e9:4a:
         1c:45:aa:63:65:d0:96:fa:21:95:33:a5:ed:be:89:58:c0:30:
         a1:74:ae:db:96:9f:1b:b7:12:ca:e8:4a:06:d2:d3:4f:bf:6f:
         8c:1d:17:8b:cc:08:e2:47:85:47:12:81:ae:76:c8:5f:43:66:
         3c:95:7e:82:f9:b2:7f:50:c8:fa:aa:2c:9a:ad:8c:2b:8a:0d:
         e6:f1:5b:ea:88:18:4c:8e:d9:18:cc:c4:17:d1:e0:f2:61:37:
         cc:7b:80:ba:6a:a3:09:48:d7:21:4e:83:6d:12:8a:35:03:e2:
         45:fa:6a:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oNOYajnDfwhoyMatqkTvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkZjE4NWU5OWZmZTYxMTUyN2EwZTk0MzMxMTUxZmZlMmVl
NzJhZTkwHhcNMjUwNjI4MTMwMTIyWhcNMjUwNjI5MTMwMTIyWjAzMTEwLwYDVQQD
EyhlMzdkOWJhZDk2OGU4YTk5ZWNjODhhNDE2ZGI1OTkxY2RhZTMxNThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmc73mefvDOoKP90pd2Fzgzeshjax
Hk0jELBuvkPKrBAHSuDDNSsYGv5xdOyMuec28bmpeZeMxewIo8z0R0nzG26pN9Xu
qdM1ZzlwRwcf01pTBgEl2aYoCPlfESz1C95Elo9/SK9sa4FJGrZDNsdKKzmOGVMp
Kd4wHyCki79xy8qQ5YiMa8gvWCFDdPDE8deDzJ+0PgBJujHqJJXdD8rblzFQZ4UR
CCHMq+/fhokKRvjvQnHEHMj4u2j166vCeQATUT1VduUAZ7Xj6FxcoQzPWSMviFkT
/z/AsmUPYGMmWUzAGELBYL0nvI4w4bA5samyivFjpHWausq7oNHgjh3VtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFON9m62WjoqZ7MiKQW21mRza4xWPMB8GA1UdIwQY
MBaAFJ3xhemf/mEVJ6DpQzEVH/4u5yrpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmZHRjZaXy1ZUlVub09sRE1SVWZfaTduS3VrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy82MGU1MWYtYjgwMy00NzRkLWIyN2Et
ZjI5OTBjZWI5NGVjLzEvbmZHRjZaXy1ZUlVub09sRE1SVWZfaTduS3VrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy82MGU1MWYtYjgwMy00NzRkLWIyN2EtZjI5OTBjZWI5NGVj
LzEvbmZHRjZaXy1ZUlVub09sRE1SVWZfaTduS3VrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAisoEiCF2
Jp25aX3mAaS0I1JKqfLRBHTWkL7+vzKKtRIx8Bhe8RRgRsT+E96b3rpjrb3ogdHi
y/eoL0oyczna6JcQmt/jMm/8PIExM9RgNmA7+RMSkFTc0YIt0Y01o3KQ/1TZF3bY
zkMBLRWZF8pyUFcMeXcU3GPXW+7nlK22GgP/EDb7lf6di8zqhjx7MOlKHEWqY2XQ
lvohlTOl7b6JWMAwoXSu25afG7cSyuhKBtLTT79vjB0Xi8wI4keFRxKBrnbIX0Nm
PJV+gvmyf1DI+qosmq2MK4oN5vFb6ogYTI7ZGMzEF9Hg8mE3zHuAumqjCUjXIU6D
bRKKNQPiRfpq/Q==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:55:42 2025 by rpki-client