Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/fffcd6-83e2-4c59-b0c6-b7daa647809b/1/p9nJ2x4fiGAXe__cWPDvzZm5as4.mft
File:                     p9nJ2x4fiGAXe__cWPDvzZm5as4.mft (raw, json)
Hash identifier:          Nu2VsZ3Zgr0oakLl9WE4dBZcq7NtzaF7Jb02dscoH7I=
Subject key identifier:   12:BC:82:75:9B:4C:D1:88:C4:7D:D7:A4:C3:E3:D3:BE:0B:4D:C4:DA
Authority key identifier: A7:D9:C9:DB:1E:1F:88:60:17:7B:FF:DC:58:F0:EF:CD:99:B9:6A:CE
Certificate issuer:       /CN=a7d9c9db1e1f8860177bffdc58f0efcd99b96ace
Certificate serial:       0197B96A9C6C67C0FF7018F95F5C136D6627
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p9nJ2x4fiGAXe__cWPDvzZm5as4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/fffcd6-83e2-4c59-b0c6-b7daa647809b/1/p9nJ2x4fiGAXe__cWPDvzZm5as4.mft
Manifest number:          0D8F
Signing time:             Sun 29 Jun 2025 02:01:00 +0000
Manifest this update:     Sun 29 Jun 2025 02:01:00 +0000
Manifest next update:     Mon 30 Jun 2025 02:01:00 +0000
Files and hashes:         1: lC2KQAOisVOwxCnTUOf6nl08y8o.roa (hash: /DfGXFX3mvJ80lD2tCLD0oWxnch4EP1FqZDjENG9stE=)
                          2: p9nJ2x4fiGAXe__cWPDvzZm5as4.crl (hash: K5VsKcBE7LQqPzd+yDEo8tNU9kikA+sFKjsZ1iUUX8k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/fffcd6-83e2-4c59-b0c6-b7daa647809b/1/p9nJ2x4fiGAXe__cWPDvzZm5as4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/fffcd6-83e2-4c59-b0c6-b7daa647809b/1/p9nJ2x4fiGAXe__cWPDvzZm5as4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p9nJ2x4fiGAXe__cWPDvzZm5as4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Jun 2025 00:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b9:6a:9c:6c:67:c0:ff:70:18:f9:5f:5c:13:6d:66:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7d9c9db1e1f8860177bffdc58f0efcd99b96ace
        Validity
            Not Before: Jun 29 02:01:00 2025 GMT
            Not After : Jun 30 02:01:00 2025 GMT
        Subject: CN=12bc82759b4cd188c47dd7a4c3e3d3be0b4dc4da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:89:b7:97:f6:37:7c:b3:b2:ee:d0:03:d6:01:
                    78:89:72:40:bd:3f:0c:8c:9c:ca:46:90:95:1c:04:
                    72:c9:ee:a0:2f:ab:58:0f:14:fb:4d:46:2e:c2:7c:
                    8c:4d:7b:91:a9:6f:5b:56:7b:ef:67:bd:d6:26:7f:
                    b5:41:11:67:dc:9c:76:ff:20:2c:5a:ec:f6:c9:32:
                    cc:73:dc:5c:1e:07:fd:39:32:e0:2f:88:da:e7:bd:
                    9f:aa:13:17:ec:30:41:9f:7e:b3:0e:da:aa:82:b3:
                    d0:a1:72:36:4b:76:99:33:91:06:98:f4:c8:1e:01:
                    a3:91:80:bb:b4:92:20:b2:f8:e2:f7:c7:95:50:da:
                    81:7a:e4:0b:ab:cf:a4:eb:5e:c6:d9:90:67:0a:92:
                    59:fb:88:4f:af:6d:c1:be:19:96:a9:ef:77:04:57:
                    9e:fc:6c:8f:c5:2f:50:13:7c:a5:b7:c2:ee:87:2c:
                    11:5c:ee:30:de:e5:92:34:97:d4:08:32:44:0b:f2:
                    71:2d:00:0f:e3:54:92:1d:c0:18:70:3c:af:5c:26:
                    d8:97:99:30:2e:c4:44:7b:88:7c:9c:36:9e:ce:3d:
                    05:41:5a:27:c6:59:23:1c:c2:a5:24:fb:e5:cd:99:
                    de:b8:f5:76:77:13:1b:df:29:f6:53:d2:a0:a0:8c:
                    b4:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:BC:82:75:9B:4C:D1:88:C4:7D:D7:A4:C3:E3:D3:BE:0B:4D:C4:DA
            X509v3 Authority Key Identifier:
                keyid:A7:D9:C9:DB:1E:1F:88:60:17:7B:FF:DC:58:F0:EF:CD:99:B9:6A:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p9nJ2x4fiGAXe__cWPDvzZm5as4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/fffcd6-83e2-4c59-b0c6-b7daa647809b/1/p9nJ2x4fiGAXe__cWPDvzZm5as4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/fffcd6-83e2-4c59-b0c6-b7daa647809b/1/p9nJ2x4fiGAXe__cWPDvzZm5as4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:7c:f2:6f:d4:66:43:ca:14:2f:43:ca:d2:68:dd:1f:79:2a:
         0e:4c:28:d7:4e:75:be:e0:90:3f:74:50:05:92:82:14:bf:d0:
         ad:4c:5f:09:af:d5:8c:74:ae:a3:4e:ea:d3:27:03:4a:11:af:
         3f:28:ef:9b:61:8e:d9:68:ac:64:1c:19:69:1e:a8:4d:74:18:
         1d:52:97:54:e5:b1:37:87:10:3a:00:4b:02:4a:fc:e5:a9:f2:
         44:c5:43:62:60:8d:a0:15:60:96:f3:28:4e:f7:3a:c5:fb:4e:
         02:df:65:1d:3d:dc:94:7f:63:0c:ea:1d:e8:3c:1c:32:02:ce:
         bf:c3:9b:e7:f7:13:ba:a1:98:85:d3:b8:a1:f6:5f:7a:e8:39:
         60:3d:13:43:d8:e3:35:f0:4c:47:f3:ea:ca:9e:be:90:0e:f2:
         08:24:d1:15:76:cf:4f:fa:33:a9:83:80:eb:c8:87:78:c3:bf:
         28:e4:e8:2f:30:b7:e7:e2:1f:42:67:e1:1a:95:cb:94:26:fb:
         09:a7:25:85:46:b6:4a:53:8a:d0:e1:bb:0e:00:09:ec:55:eb:
         df:51:b5:a0:cb:bd:fb:d3:9b:30:7e:ba:f3:24:78:e4:69:a8:
         b1:cf:7a:55:82:22:d5:a8:71:5e:0d:4f:50:85:65:c8:f9:3e:
         d3:12:3c:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe5apxsZ8D/cBj5X1wTbWYnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3ZDljOWRiMWUxZjg4NjAxNzdiZmZkYzU4ZjBlZmNkOTli
OTZhY2UwHhcNMjUwNjI5MDIwMTAwWhcNMjUwNjMwMDIwMTAwWjAzMTEwLwYDVQQD
EygxMmJjODI3NTliNGNkMTg4YzQ3ZGQ3YTRjM2UzZDNiZTBiNGRjNGRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Im3l/Y3fLOy7tAD1gF4iXJAvT8M
jJzKRpCVHARyye6gL6tYDxT7TUYuwnyMTXuRqW9bVnvvZ73WJn+1QRFn3Jx2/yAs
Wuz2yTLMc9xcHgf9OTLgL4ja572fqhMX7DBBn36zDtqqgrPQoXI2S3aZM5EGmPTI
HgGjkYC7tJIgsvji98eVUNqBeuQLq8+k617G2ZBnCpJZ+4hPr23BvhmWqe93BFee
/GyPxS9QE3ylt8LuhywRXO4w3uWSNJfUCDJEC/JxLQAP41SSHcAYcDyvXCbYl5kw
LsREe4h8nDaezj0FQVonxlkjHMKlJPvlzZneuPV2dxMb3yn2U9KgoIy0YQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBK8gnWbTNGIxH3XpMPj074LTcTaMB8GA1UdIwQY
MBaAFKfZydseH4hgF3v/3Fjw782ZuWrOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDluSjJ4NGZpR0FYZV9fY1dQRHZ6Wm01YXM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9mZmZjZDYtODNlMi00YzU5LWIwYzYt
YjdkYWE2NDc4MDliLzEvcDluSjJ4NGZpR0FYZV9fY1dQRHZ6Wm01YXM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC9mZmZjZDYtODNlMi00YzU5LWIwYzYtYjdkYWE2NDc4MDli
LzEvcDluSjJ4NGZpR0FYZV9fY1dQRHZ6Wm01YXM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV3zyb9Rm
Q8oUL0PK0mjdH3kqDkwo1051vuCQP3RQBZKCFL/QrUxfCa/VjHSuo07q0ycDShGv
Pyjvm2GO2WisZBwZaR6oTXQYHVKXVOWxN4cQOgBLAkr85anyRMVDYmCNoBVglvMo
Tvc6xftOAt9lHT3clH9jDOod6DwcMgLOv8Ob5/cTuqGYhdO4ofZfeug5YD0TQ9jj
NfBMR/Pqyp6+kA7yCCTRFXbPT/ozqYOA68iHeMO/KOToLzC35+IfQmfhGpXLlCb7
CaclhUa2SlOK0OG7DgAJ7FXr31G1oMu9+9ObMH668yR45Gmosc96VYIi1ahxXg1P
UIVlyPk+0xI8wA==
-----END CERTIFICATE-----
Generated at Sun Jun 29 06:29:17 2025 by rpki-client