Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/16661c-e77b-41c3-80e4-14ee32fc5d06/1/nwM4t9tUQAKUEDl1Fckw60UtdbA.mft
File:                     nwM4t9tUQAKUEDl1Fckw60UtdbA.mft (raw, json)
Hash identifier:          85LnbERXVX+cPAmO7L+Vqy3gfqWURnwGRN0Bl1RWrgY=
Subject key identifier:   6D:04:18:5C:06:3E:A5:5C:84:1C:AE:36:BF:C2:18:78:E5:ED:69:EF
Authority key identifier: 9F:03:38:B7:DB:54:40:02:94:10:39:75:15:C9:30:EB:45:2D:75:B0
Certificate issuer:       /CN=9f0338b7db5440029410397515c930eb452d75b0
Certificate serial:       0197B9D8DBE59858A7F822973D14A35A822E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nwM4t9tUQAKUEDl1Fckw60UtdbA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/16661c-e77b-41c3-80e4-14ee32fc5d06/1/nwM4t9tUQAKUEDl1Fckw60UtdbA.mft
Manifest number:          15B5
Signing time:             Sun 29 Jun 2025 04:01:26 +0000
Manifest this update:     Sun 29 Jun 2025 04:01:26 +0000
Manifest next update:     Mon 30 Jun 2025 04:01:26 +0000
Files and hashes:         1: HhSxQEAct_Hilmn4S8Eq6DvrLvI.roa (hash: crLyXY2X5OyUyjzwP0FotFChrfWXLKr+2gME4D4k2t8=)
                          2: nwM4t9tUQAKUEDl1Fckw60UtdbA.crl (hash: 42Lv4/bY5FaWuBKq2NWC4fcAzcsd6z0zoyrQIi7VXM8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/16661c-e77b-41c3-80e4-14ee32fc5d06/1/nwM4t9tUQAKUEDl1Fckw60UtdbA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/16661c-e77b-41c3-80e4-14ee32fc5d06/1/nwM4t9tUQAKUEDl1Fckw60UtdbA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nwM4t9tUQAKUEDl1Fckw60UtdbA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Jun 2025 04:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b9:d8:db:e5:98:58:a7:f8:22:97:3d:14:a3:5a:82:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f0338b7db5440029410397515c930eb452d75b0
        Validity
            Not Before: Jun 29 04:01:26 2025 GMT
            Not After : Jun 30 04:01:26 2025 GMT
        Subject: CN=6d04185c063ea55c841cae36bfc21878e5ed69ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:95:ea:ea:1c:91:ed:17:5f:55:0c:f2:93:12:
                    97:f8:3b:35:e2:04:e1:54:c4:cc:c8:41:a5:5b:91:
                    8c:16:64:fe:22:9d:78:4d:d4:18:c3:8e:aa:a2:1a:
                    76:15:a9:db:67:df:43:32:41:fc:f4:ec:34:6a:e5:
                    56:ce:af:0e:4e:43:95:62:fb:6f:e3:bc:e6:fb:f1:
                    ab:b5:80:65:cb:db:65:58:c6:04:b3:29:47:d2:18:
                    c9:84:79:fe:47:51:98:cc:fd:0f:df:82:86:b7:0e:
                    8d:45:42:bd:9c:de:fe:d3:44:63:eb:84:72:d7:f7:
                    03:a8:ba:e2:ef:6b:fc:ad:4c:f9:78:8a:a4:b4:3a:
                    23:44:f5:c0:4a:4e:fe:24:a1:aa:8b:48:c1:70:58:
                    84:8d:2c:15:47:eb:a4:61:65:58:50:c5:18:e3:87:
                    9a:35:77:a0:64:2e:4e:41:25:76:bf:55:a0:66:a7:
                    92:e8:e8:cc:35:dd:61:41:bb:17:2b:5e:e2:f3:cc:
                    bc:10:9a:cf:e8:6c:ec:a9:a5:ee:99:64:1a:63:6e:
                    75:4d:e2:48:26:46:9d:8a:24:9e:f9:4e:84:ec:87:
                    3a:76:be:f5:b1:0d:c5:13:83:82:dd:c7:92:bb:c7:
                    64:9f:41:3b:5b:f8:73:c0:83:7c:0b:ab:f2:e9:5e:
                    a2:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:04:18:5C:06:3E:A5:5C:84:1C:AE:36:BF:C2:18:78:E5:ED:69:EF
            X509v3 Authority Key Identifier:
                keyid:9F:03:38:B7:DB:54:40:02:94:10:39:75:15:C9:30:EB:45:2D:75:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwM4t9tUQAKUEDl1Fckw60UtdbA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/16661c-e77b-41c3-80e4-14ee32fc5d06/1/nwM4t9tUQAKUEDl1Fckw60UtdbA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/16661c-e77b-41c3-80e4-14ee32fc5d06/1/nwM4t9tUQAKUEDl1Fckw60UtdbA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:93:31:0d:6c:74:08:1f:38:7a:80:b7:c6:b2:f4:61:ee:72:
         58:7f:cf:b8:6b:2d:cc:db:c5:59:05:a2:b7:bd:0e:ea:c7:74:
         ec:70:2b:01:1e:3b:5e:f5:19:dd:ba:4a:67:1e:56:f4:87:3f:
         ea:99:d2:9c:9b:6b:43:34:77:50:d4:f7:f9:40:d6:4d:2b:2b:
         2c:5c:a1:97:ed:c1:8b:20:82:37:78:29:8d:80:89:5f:15:af:
         10:f8:77:dd:56:cd:78:7c:1b:59:ca:ac:ec:0f:33:77:58:c6:
         56:73:5f:c1:ca:6d:bc:19:df:cc:a3:5c:29:99:f2:5f:5e:e1:
         4f:24:79:73:bb:d6:35:2a:6b:e0:f0:b1:b1:9c:b9:b9:ae:e1:
         4e:cc:dd:6c:31:b2:a0:d4:cd:41:d3:ef:eb:f3:7a:19:06:ae:
         ed:9c:78:bd:05:70:f7:24:c5:dc:e3:aa:80:8e:ba:c4:a9:a2:
         46:3d:f7:b4:55:4d:90:ad:08:c4:9f:85:77:c4:71:b2:82:d2:
         1e:23:0d:9f:05:6d:1e:6b:01:2c:6f:2b:53:3d:39:35:21:f8:
         41:66:86:3f:57:4d:34:d8:80:04:6c:f5:b6:39:d7:96:a7:39:
         7e:e7:ca:18:e2:a6:c5:5d:4e:72:df:4d:1b:5e:04:a4:5a:80:
         08:42:36:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 11:10:52 2025 by rpki-client