Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/4d74d9-6c4c-4b14-815f-d262803cf644/1/n6c21GmBzkhjlN_vnHOLfr62Gm0.mft
File:                     n6c21GmBzkhjlN_vnHOLfr62Gm0.mft (raw, json)
Hash identifier:          4h7p1j2V3zKbdSt0+BqV3rIHWi7pxKExsf0mTDOJmxs=
Subject key identifier:   E3:65:E7:C3:19:7A:B6:28:D2:3A:D9:3B:2B:92:DB:D5:32:CD:B0:DC
Authority key identifier: 9F:A7:36:D4:69:81:CE:48:63:94:DF:EF:9C:73:8B:7E:BE:B6:1A:6D
Certificate issuer:       /CN=9fa736d46981ce486394dfef9c738b7ebeb61a6d
Certificate serial:       0198D4E042C20005FD4AD1D2C783A77638A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n6c21GmBzkhjlN_vnHOLfr62Gm0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/4d74d9-6c4c-4b14-815f-d262803cf644/1/n6c21GmBzkhjlN_vnHOLfr62Gm0.mft
Manifest number:          123E
Signing time:             Sat 23 Aug 2025 03:02:03 +0000
Manifest this update:     Sat 23 Aug 2025 03:02:03 +0000
Manifest next update:     Sun 24 Aug 2025 03:02:03 +0000
Files and hashes:         1: _h71B272PJZJXIBvxnSAiFkPc3o.roa (hash: 8epdxNIo68sqlqhgpXPr6uBYOM7OF4qT5O2HTRBPkF4=)
                          2: n6c21GmBzkhjlN_vnHOLfr62Gm0.crl (hash: HdfhUA01QSFfe/6jSS2RiA8EqVley3PtCxqCHHiVTqk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/4d74d9-6c4c-4b14-815f-d262803cf644/1/n6c21GmBzkhjlN_vnHOLfr62Gm0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/4d74d9-6c4c-4b14-815f-d262803cf644/1/n6c21GmBzkhjlN_vnHOLfr62Gm0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n6c21GmBzkhjlN_vnHOLfr62Gm0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:42:c2:00:05:fd:4a:d1:d2:c7:83:a7:76:38:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fa736d46981ce486394dfef9c738b7ebeb61a6d
        Validity
            Not Before: Aug 23 03:02:03 2025 GMT
            Not After : Aug 24 03:02:03 2025 GMT
        Subject: CN=e365e7c3197ab628d23ad93b2b92dbd532cdb0dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:51:24:a5:a8:6d:a8:58:52:3e:ed:3d:66:81:
                    4c:56:20:c2:ad:bf:aa:70:14:26:80:16:9c:cf:e4:
                    06:8e:2d:01:2e:23:07:0e:46:41:b0:85:d1:48:86:
                    0c:46:b0:9d:61:e8:e9:bc:da:54:19:ca:fb:49:36:
                    51:13:38:1f:2d:a1:b6:72:e5:17:ae:92:57:fa:92:
                    ba:d2:1a:40:6d:ae:a3:5d:15:f6:73:5b:52:76:ae:
                    b1:dc:4f:6b:d8:f7:f7:c8:96:11:70:50:82:97:27:
                    9d:5b:56:db:fc:87:9d:2b:2b:6c:9c:ab:45:18:26:
                    d9:e0:8b:b4:34:e7:fc:07:45:ed:f9:a3:9e:7f:4f:
                    1d:20:9b:55:0d:82:66:37:9b:1e:93:b6:6e:54:ff:
                    9e:00:f0:f4:b4:51:3f:21:ee:cf:bb:93:98:de:81:
                    5e:87:56:79:93:80:ad:f6:e1:38:eb:d7:ef:d7:0e:
                    44:f7:6f:32:ec:cc:4f:1f:c7:17:bc:07:e4:75:8b:
                    f8:86:d9:85:5f:87:8c:45:57:1c:7d:27:46:04:c9:
                    5b:e4:12:87:e2:72:de:6d:31:80:a7:eb:8e:53:7f:
                    38:b7:de:d5:91:e2:2a:90:79:d3:73:4f:43:04:71:
                    18:22:98:d2:f4:e6:a4:24:0d:0f:0b:eb:ef:8e:93:
                    9b:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:65:E7:C3:19:7A:B6:28:D2:3A:D9:3B:2B:92:DB:D5:32:CD:B0:DC
            X509v3 Authority Key Identifier:
                keyid:9F:A7:36:D4:69:81:CE:48:63:94:DF:EF:9C:73:8B:7E:BE:B6:1A:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n6c21GmBzkhjlN_vnHOLfr62Gm0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/4d74d9-6c4c-4b14-815f-d262803cf644/1/n6c21GmBzkhjlN_vnHOLfr62Gm0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/4d74d9-6c4c-4b14-815f-d262803cf644/1/n6c21GmBzkhjlN_vnHOLfr62Gm0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:71:d5:c0:a3:0e:e6:af:7a:20:86:37:a5:67:28:dd:b5:0d:
         3c:6e:48:43:53:17:95:c9:e1:e5:75:a2:a1:2d:c3:7c:59:3a:
         53:0a:cb:26:c1:af:c6:64:05:ad:97:7c:46:f9:87:46:03:1d:
         47:6f:04:5c:2b:b9:1d:af:d7:b6:4d:f7:fe:f5:1a:b2:46:56:
         af:c1:17:e7:30:3c:06:07:c3:0a:f2:06:c3:87:44:1c:92:1d:
         0f:b4:e5:c7:0e:a6:1b:70:cb:57:66:03:d6:c8:bb:7f:fe:e4:
         79:3b:1e:a8:3e:63:b1:07:52:da:94:62:aa:fc:55:7d:9e:a7:
         91:f4:86:66:7f:8b:16:53:ce:48:64:28:f9:ed:f3:8f:a4:97:
         54:56:cc:d7:9c:7c:4b:92:d2:91:ed:28:18:68:df:cb:9f:d8:
         0a:02:24:7e:da:96:76:65:3b:20:f0:2a:47:dc:5f:4a:0f:6d:
         8c:a0:05:17:7f:e0:dd:ca:1e:46:a3:92:f4:95:9c:eb:cf:52:
         c4:06:e0:63:77:42:dc:86:13:a4:aa:5c:62:27:b6:71:dd:59:
         01:ee:4a:c0:3c:60:ab:62:21:44:b1:eb:ee:fc:b0:cf:d0:b3:
         0f:91:92:8a:b7:41:4f:28:d9:d4:aa:ae:5b:ce:e9:1e:87:c9:
         2d:0d:36:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4ELCAAX9StHSx4OndjihMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmYTczNmQ0Njk4MWNlNDg2Mzk0ZGZlZjljNzM4YjdlYmVi
NjFhNmQwHhcNMjUwODIzMDMwMjAzWhcNMjUwODI0MDMwMjAzWjAzMTEwLwYDVQQD
EyhlMzY1ZTdjMzE5N2FiNjI4ZDIzYWQ5M2IyYjkyZGJkNTMyY2RiMGRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxlEkpahtqFhSPu09ZoFMViDCrb+q
cBQmgBacz+QGji0BLiMHDkZBsIXRSIYMRrCdYejpvNpUGcr7STZREzgfLaG2cuUX
rpJX+pK60hpAba6jXRX2c1tSdq6x3E9r2Pf3yJYRcFCClyedW1bb/IedKytsnKtF
GCbZ4Iu0NOf8B0Xt+aOef08dIJtVDYJmN5sek7ZuVP+eAPD0tFE/Ie7Pu5OY3oFe
h1Z5k4Ct9uE469fv1w5E928y7MxPH8cXvAfkdYv4htmFX4eMRVccfSdGBMlb5BKH
4nLebTGAp+uOU384t97VkeIqkHnTc09DBHEYIpjS9OakJA0PC+vvjpObjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFONl58MZerYo0jrZOyuS29UyzbDcMB8GA1UdIwQY
MBaAFJ+nNtRpgc5IY5Tf75xzi36+thptMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjZjMjFHbUJ6a2hqbE5fdm5IT0xmcjYyR20wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC80ZDc0ZDktNmM0Yy00YjE0LTgxNWYt
ZDI2MjgwM2NmNjQ0LzEvbjZjMjFHbUJ6a2hqbE5fdm5IT0xmcjYyR20wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC80ZDc0ZDktNmM0Yy00YjE0LTgxNWYtZDI2MjgwM2NmNjQ0
LzEvbjZjMjFHbUJ6a2hqbE5fdm5IT0xmcjYyR20wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsXHVwKMO
5q96IIY3pWco3bUNPG5IQ1MXlcnh5XWioS3DfFk6UwrLJsGvxmQFrZd8RvmHRgMd
R28EXCu5Ha/Xtk33/vUaskZWr8EX5zA8BgfDCvIGw4dEHJIdD7Tlxw6mG3DLV2YD
1si7f/7keTseqD5jsQdS2pRiqvxVfZ6nkfSGZn+LFlPOSGQo+e3zj6SXVFbM15x8
S5LSke0oGGjfy5/YCgIkftqWdmU7IPAqR9xfSg9tjKAFF3/g3coeRqOS9JWc689S
xAbgY3dC3IYTpKpcYie2cd1ZAe5KwDxgq2IhRLHr7vywz9CzD5GSirdBTyjZ1Kqu
W87pHofJLQ02yQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:23:32 2025 by rpki-client