Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.mft
File:                     ncNmr2zgsan2AXOxS1_d1-C5YwY.mft (raw, json)
Hash identifier:          x1IJ8TrsKMT7kZm6EAeBcrWd1wp93TsdALm1gOAPDaw=
Subject key identifier:   76:8A:7E:DB:82:AD:1A:00:91:0F:BE:E2:C3:8F:39:4D:8E:DC:9E:83
Authority key identifier: 9D:C3:66:AF:6C:E0:B1:A9:F6:01:73:B1:4B:5F:DD:D7:E0:B9:63:06
Certificate issuer:       /CN=9dc366af6ce0b1a9f60173b14b5fddd7e0b96306
Certificate serial:       0197B820FB500C0943EDF15426A461B62D30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ncNmr2zgsan2AXOxS1_d1-C5YwY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.mft
Manifest number:          1573
Signing time:             Sat 28 Jun 2025 20:00:58 +0000
Manifest this update:     Sat 28 Jun 2025 20:00:58 +0000
Manifest next update:     Sun 29 Jun 2025 20:00:58 +0000
Files and hashes:         1: Hq4qtu3Hmw7ihPLhHJm0o3HW0ME.roa (hash: cBO4YeU2VYitDB5gOiHBAGdFdmypsOGShw+oH/O7hOQ=)
                          2: ncNmr2zgsan2AXOxS1_d1-C5YwY.crl (hash: +dd/qv7SVosnRaSS93VcpYp2NeVql1pE8dppg6veNqs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ncNmr2zgsan2AXOxS1_d1-C5YwY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:20:fb:50:0c:09:43:ed:f1:54:26:a4:61:b6:2d:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9dc366af6ce0b1a9f60173b14b5fddd7e0b96306
        Validity
            Not Before: Jun 28 20:00:58 2025 GMT
            Not After : Jun 29 20:00:58 2025 GMT
        Subject: CN=768a7edb82ad1a00910fbee2c38f394d8edc9e83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:09:43:bb:1a:f2:38:73:c5:b6:30:75:70:c2:
                    46:0a:21:c5:dc:ae:49:62:cb:43:7f:21:78:06:71:
                    cb:07:db:73:5c:a9:6f:0b:84:dc:b2:8f:61:04:72:
                    1b:a7:da:6e:ee:b0:64:7d:98:64:3a:6a:e4:f4:97:
                    62:8f:20:9f:52:f8:ca:dc:cb:c6:0e:d2:2b:61:48:
                    f3:69:f1:e0:b0:45:d2:22:66:77:92:97:75:b3:f8:
                    9c:28:0c:9a:54:e8:a6:b4:57:36:9a:e5:05:a1:9d:
                    56:35:9e:3d:7b:a2:ff:5f:0b:04:b1:f4:ae:a8:de:
                    65:6a:34:5a:d3:38:d1:cf:b3:ea:67:1c:a8:a7:b2:
                    00:c7:00:9a:4f:75:64:d0:d5:14:81:d0:47:98:b7:
                    8b:1a:ff:de:13:b7:8b:51:5e:83:4b:6e:34:7d:ce:
                    87:c8:38:e1:6f:a3:77:1d:00:d0:5e:ff:e9:e3:ea:
                    f4:0d:89:8f:59:31:84:e2:36:da:24:29:44:d4:99:
                    f2:e7:31:e8:00:bb:00:e8:ef:b2:aa:e7:e3:f2:8e:
                    96:8b:7d:a2:2d:3e:6a:79:32:58:02:1a:e9:5d:38:
                    ad:67:a3:dc:ce:99:0d:a6:39:2b:3d:e7:8d:bd:bb:
                    9e:ee:d0:7f:6d:b8:a0:a6:44:e7:9a:17:63:f0:ff:
                    ab:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:8A:7E:DB:82:AD:1A:00:91:0F:BE:E2:C3:8F:39:4D:8E:DC:9E:83
            X509v3 Authority Key Identifier:
                keyid:9D:C3:66:AF:6C:E0:B1:A9:F6:01:73:B1:4B:5F:DD:D7:E0:B9:63:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ncNmr2zgsan2AXOxS1_d1-C5YwY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:18:35:91:80:6d:81:5b:d9:7e:74:a7:e1:5c:d9:eb:a8:11:
         84:e0:4d:e0:ce:8b:81:9c:35:cd:28:2e:ec:3b:61:c0:f0:03:
         85:e1:eb:a4:6c:62:41:07:ad:90:c7:2e:32:e2:7e:0b:45:c8:
         38:09:d7:3b:fd:6b:dc:30:05:5b:9f:97:e2:95:a7:d2:c7:4f:
         ea:b8:86:66:01:1b:8b:3e:bc:f5:71:81:cd:db:74:67:f1:84:
         c2:4b:a2:b7:ee:c3:88:b6:ef:68:74:01:2b:77:fe:fc:53:7b:
         dd:30:df:12:9b:cf:14:49:e5:83:27:95:e2:90:d0:e1:8c:c3:
         52:dd:d0:fd:24:e8:67:47:2a:cd:e1:92:7f:ac:d1:ab:21:73:
         fe:0a:89:d2:0e:90:68:9e:80:7a:a6:1c:03:f5:e0:50:c3:75:
         9b:be:b9:3f:6c:c1:f3:14:4d:82:fb:9f:91:58:15:0f:19:7b:
         1a:32:35:04:c7:66:c6:a9:a6:41:a8:16:e3:a6:97:12:97:40:
         79:33:86:ec:80:74:20:0b:2c:84:1e:2f:17:72:f1:f7:bd:31:
         2d:8d:38:67:2e:96:7c:97:e9:62:9a:bf:f0:4a:c0:97:70:99:
         53:a8:2b:0f:e9:29:ae:ab:7b:0b:7e:34:c2:72:ac:cd:a0:1a:
         49:0a:ff:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4IPtQDAlD7fFUJqRhti0wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkYzM2NmFmNmNlMGIxYTlmNjAxNzNiMTRiNWZkZGQ3ZTBi
OTYzMDYwHhcNMjUwNjI4MjAwMDU4WhcNMjUwNjI5MjAwMDU4WjAzMTEwLwYDVQQD
Eyg3NjhhN2VkYjgyYWQxYTAwOTEwZmJlZTJjMzhmMzk0ZDhlZGM5ZTgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmglDuxryOHPFtjB1cMJGCiHF3K5J
YstDfyF4BnHLB9tzXKlvC4Tcso9hBHIbp9pu7rBkfZhkOmrk9JdijyCfUvjK3MvG
DtIrYUjzafHgsEXSImZ3kpd1s/icKAyaVOimtFc2muUFoZ1WNZ49e6L/XwsEsfSu
qN5lajRa0zjRz7PqZxyop7IAxwCaT3Vk0NUUgdBHmLeLGv/eE7eLUV6DS240fc6H
yDjhb6N3HQDQXv/p4+r0DYmPWTGE4jbaJClE1Jny5zHoALsA6O+yqufj8o6Wi32i
LT5qeTJYAhrpXTitZ6PczpkNpjkrPeeNvbue7tB/bbigpkTnmhdj8P+rHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHaKftuCrRoAkQ++4sOPOU2O3J6DMB8GA1UdIwQY
MBaAFJ3DZq9s4LGp9gFzsUtf3dfguWMGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmNObXIyemdzYW4yQVhPeFMxX2QxLUM1WXdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC83ODhmY2YtNjBmMy00MjZmLTk4NTgt
ODJmNDc2YjVjZmRiLzEvbmNObXIyemdzYW4yQVhPeFMxX2QxLUM1WXdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC83ODhmY2YtNjBmMy00MjZmLTk4NTgtODJmNDc2YjVjZmRi
LzEvbmNObXIyemdzYW4yQVhPeFMxX2QxLUM1WXdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALBg1kYBt
gVvZfnSn4VzZ66gRhOBN4M6LgZw1zSgu7DthwPADheHrpGxiQQetkMcuMuJ+C0XI
OAnXO/1r3DAFW5+X4pWn0sdP6riGZgEbiz689XGBzdt0Z/GEwkuit+7DiLbvaHQB
K3f+/FN73TDfEpvPFEnlgyeV4pDQ4YzDUt3Q/SToZ0cqzeGSf6zRqyFz/gqJ0g6Q
aJ6AeqYcA/XgUMN1m765P2zB8xRNgvufkVgVDxl7GjI1BMdmxqmmQagW46aXEpdA
eTOG7IB0IAsshB4vF3Lx970xLY04Zy6WfJfpYpq/8ErAl3CZU6grD+kprqt7C340
wnKszaAaSQr/kQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:55:54 2025 by rpki-client