Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/802e9e-f982-449d-8b70-76c05cf5f2e6/1/NpxxPFGYfh_6VIInf18cjLci9Es.mft
File:                     NpxxPFGYfh_6VIInf18cjLci9Es.mft (raw, json)
Hash identifier:          hd7lR4qvmBD2qjCZaBYyU6W+3TOO7XtZx8Z+2NblDa4=
Subject key identifier:   AC:CF:1B:92:7B:9A:48:CF:AA:37:F8:23:8B:00:91:3C:7D:48:66:F9
Authority key identifier: 36:9C:71:3C:51:98:7E:1F:FA:54:82:27:7F:5F:1C:8C:B7:22:F4:4B
Certificate issuer:       /CN=369c713c51987e1ffa5482277f5f1c8cb722f44b
Certificate serial:       0197B6A1B91C24F0A5833BFD6EC69DACD1E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NpxxPFGYfh_6VIInf18cjLci9Es.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/802e9e-f982-449d-8b70-76c05cf5f2e6/1/NpxxPFGYfh_6VIInf18cjLci9Es.mft
Manifest number:          09B8
Signing time:             Sat 28 Jun 2025 13:02:21 +0000
Manifest this update:     Sat 28 Jun 2025 13:02:21 +0000
Manifest next update:     Sun 29 Jun 2025 13:02:21 +0000
Files and hashes:         1: 6dTT-rARhT9SKaU0Q5LyIvW6cuU.roa (hash: AGsDOWQR4BMJI4oi03KYaFPz/MqqxHtOCzcXxJU+zUU=)
                          2: 9fxVVEARajC-2ASXFi0_DFGSBc8.roa (hash: hXfrG37neyCRh8L2PA4JPhumP6PxcdmlSO8PbLD9FY4=)
                          3: FW_JqLhHC7LyHZmaeSFALgStml0.roa (hash: pWsELGWJQyn59BiBQF9FnS772zDDCwVPNTG6tAAe2Fg=)
                          4: NpxxPFGYfh_6VIInf18cjLci9Es.crl (hash: 73pZs346CvVP+rbyI5MQd4YghXPjE1NnIO/VRL2nWIs=)
                          5: rwCQmNOuZE_kryjC8QIDqyzBek8.roa (hash: OHzMcdBam5j/wfHUyz5DszdE5+OjpxcpG78RADThpWo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/802e9e-f982-449d-8b70-76c05cf5f2e6/1/NpxxPFGYfh_6VIInf18cjLci9Es.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/802e9e-f982-449d-8b70-76c05cf5f2e6/1/NpxxPFGYfh_6VIInf18cjLci9Es.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NpxxPFGYfh_6VIInf18cjLci9Es.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a1:b9:1c:24:f0:a5:83:3b:fd:6e:c6:9d:ac:d1:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=369c713c51987e1ffa5482277f5f1c8cb722f44b
        Validity
            Not Before: Jun 28 13:02:21 2025 GMT
            Not After : Jun 29 13:02:21 2025 GMT
        Subject: CN=accf1b927b9a48cfaa37f8238b00913c7d4866f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c2:ab:aa:0e:2d:d2:b3:cb:76:18:c7:cb:87:
                    d6:22:d6:1b:b1:74:54:7d:23:2d:dd:b8:6e:bd:f5:
                    89:40:d5:f0:89:4a:f3:09:d3:31:ae:be:83:95:f5:
                    94:bf:7a:04:35:cf:a3:b1:63:4d:81:1b:97:98:e1:
                    ae:0a:8f:3a:42:73:2b:e7:f9:b0:73:1d:22:b3:de:
                    e0:4a:f1:eb:ea:13:f0:1a:60:0d:44:d9:07:1f:92:
                    ff:65:33:8d:9c:be:19:10:96:5d:6e:78:a4:42:12:
                    b1:c3:a8:a7:00:89:b2:75:85:39:6e:0a:59:2e:01:
                    50:d0:67:52:6f:52:28:1c:22:41:af:3c:f0:6b:7d:
                    14:ad:57:d0:30:bf:c3:e9:3a:79:e1:ff:44:94:32:
                    ae:cd:05:52:56:3e:af:bd:e1:9d:a7:a1:02:40:0d:
                    fc:eb:ee:55:36:9d:70:1a:c3:d8:70:f7:9c:1c:a6:
                    77:7d:56:9e:13:ad:dd:76:46:73:58:b9:ab:c6:20:
                    58:7c:bc:16:eb:5a:ee:82:c9:ab:62:30:8a:b2:ff:
                    35:26:ac:e6:fa:dc:98:00:31:e4:ee:61:73:f2:cf:
                    23:19:19:a8:e2:fc:34:e2:a5:0b:ae:84:24:d6:75:
                    d4:1e:e9:fa:63:a9:c2:67:e5:84:9a:18:66:50:6d:
                    57:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:CF:1B:92:7B:9A:48:CF:AA:37:F8:23:8B:00:91:3C:7D:48:66:F9
            X509v3 Authority Key Identifier:
                keyid:36:9C:71:3C:51:98:7E:1F:FA:54:82:27:7F:5F:1C:8C:B7:22:F4:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpxxPFGYfh_6VIInf18cjLci9Es.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/802e9e-f982-449d-8b70-76c05cf5f2e6/1/NpxxPFGYfh_6VIInf18cjLci9Es.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/802e9e-f982-449d-8b70-76c05cf5f2e6/1/NpxxPFGYfh_6VIInf18cjLci9Es.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:7b:f2:e4:12:13:1b:7a:e4:d9:3a:9d:6d:75:66:96:71:87:
         86:36:2e:53:b1:44:82:20:37:5f:6e:3d:39:6d:a5:77:e1:57:
         b7:c6:d7:4e:d0:69:a9:79:68:65:ab:eb:15:20:b6:f1:f8:a6:
         db:27:5f:58:96:eb:82:a2:06:17:6c:98:81:3b:e1:a8:5d:78:
         00:09:1e:6c:9f:d3:69:5e:87:da:a7:3c:52:17:f2:31:e5:a5:
         3c:eb:92:c3:07:17:f3:12:83:ec:3d:4e:f6:a5:ef:df:2d:9d:
         92:51:5c:c1:68:27:b0:e8:a6:45:55:53:9a:65:57:5c:18:45:
         f2:9e:b6:cc:af:32:0c:eb:7e:ce:bd:1d:cd:4d:18:96:34:aa:
         fa:f6:4d:26:48:07:fb:51:9b:7c:1a:8b:6c:ca:8a:df:bb:5b:
         b3:3c:90:5e:a9:f0:76:7d:2d:b3:e0:fc:76:98:a8:a5:b7:d7:
         ea:76:cd:34:cf:33:2f:05:5a:15:13:72:2a:ad:90:3d:52:c6:
         e2:31:b5:bc:f2:28:43:46:11:79:06:86:83:c1:16:7f:10:ce:
         50:c0:7b:51:52:50:0e:be:2a:4a:64:cc:95:f6:b0:8e:5c:a0:
         8d:e5:b3:24:c9:53:bd:10:c2:a6:f8:f9:9f:b8:c5:18:2b:10:
         44:3b:d9:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2obkcJPClgzv9bsadrNHjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2OWM3MTNjNTE5ODdlMWZmYTU0ODIyNzdmNWYxYzhjYjcy
MmY0NGIwHhcNMjUwNjI4MTMwMjIxWhcNMjUwNjI5MTMwMjIxWjAzMTEwLwYDVQQD
EyhhY2NmMWI5MjdiOWE0OGNmYWEzN2Y4MjM4YjAwOTEzYzdkNDg2NmY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsKrqg4t0rPLdhjHy4fWItYbsXRU
fSMt3bhuvfWJQNXwiUrzCdMxrr6DlfWUv3oENc+jsWNNgRuXmOGuCo86QnMr5/mw
cx0is97gSvHr6hPwGmANRNkHH5L/ZTONnL4ZEJZdbnikQhKxw6inAImydYU5bgpZ
LgFQ0GdSb1IoHCJBrzzwa30UrVfQML/D6Tp54f9ElDKuzQVSVj6vveGdp6ECQA38
6+5VNp1wGsPYcPecHKZ3fVaeE63ddkZzWLmrxiBYfLwW61rugsmrYjCKsv81Jqzm
+tyYADHk7mFz8s8jGRmo4vw04qULroQk1nXUHun6Y6nCZ+WEmhhmUG1XxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKzPG5J7mkjPqjf4I4sAkTx9SGb5MB8GA1UdIwQY
MBaAFDaccTxRmH4f+lSCJ39fHIy3IvRLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnB4eFBGR1lmaF82VklJbmYxOGNqTGNpOUVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84MDJlOWUtZjk4Mi00NDlkLThiNzAt
NzZjMDVjZjVmMmU2LzEvTnB4eFBGR1lmaF82VklJbmYxOGNqTGNpOUVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84MDJlOWUtZjk4Mi00NDlkLThiNzAtNzZjMDVjZjVmMmU2
LzEvTnB4eFBGR1lmaF82VklJbmYxOGNqTGNpOUVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMHvy5BIT
G3rk2TqdbXVmlnGHhjYuU7FEgiA3X249OW2ld+FXt8bXTtBpqXloZavrFSC28fim
2ydfWJbrgqIGF2yYgTvhqF14AAkebJ/TaV6H2qc8UhfyMeWlPOuSwwcX8xKD7D1O
9qXv3y2dklFcwWgnsOimRVVTmmVXXBhF8p62zK8yDOt+zr0dzU0YljSq+vZNJkgH
+1GbfBqLbMqK37tbszyQXqnwdn0ts+D8dpiopbfX6nbNNM8zLwVaFRNyKq2QPVLG
4jG1vPIoQ0YReQaGg8EWfxDOUMB7UVJQDr4qSmTMlfawjlygjeWzJMlTvRDCpvj5
n7jFGCsQRDvZIw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:53:50 2025 by rpki-client