Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/d53d7c-a832-47b3-9f94-59c23054442d/1/nv2KDm5t1Wpu-CieSxhPDKAMM90.mft
File:                     nv2KDm5t1Wpu-CieSxhPDKAMM90.mft (raw, json)
Hash identifier:          E13YgbmkKTvnxZQMzNYz3SEL+91pfuu8Psy6x3qiwAU=
Subject key identifier:   C9:CC:18:B6:74:21:79:36:46:AE:A1:2E:08:80:D6:A7:16:29:33:7F
Authority key identifier: 9E:FD:8A:0E:6E:6D:D5:6A:6E:F8:28:9E:4B:18:4F:0C:A0:0C:33:DD
Certificate issuer:       /CN=9efd8a0e6e6dd56a6ef8289e4b184f0ca00c33dd
Certificate serial:       0197C2A530679B8DF2F1AE434756ED62B38C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nv2KDm5t1Wpu-CieSxhPDKAMM90.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/d53d7c-a832-47b3-9f94-59c23054442d/1/nv2KDm5t1Wpu-CieSxhPDKAMM90.mft
Manifest number:          15BA
Signing time:             Mon 30 Jun 2025 21:01:35 +0000
Manifest this update:     Mon 30 Jun 2025 21:01:35 +0000
Manifest next update:     Tue 01 Jul 2025 21:01:35 +0000
Files and hashes:         1: QNOJOIm1SKvhgHP8ibivnBfVSQA.roa (hash: pi8uHE5UurLC5GTyPY+S33YCsYwTr9zqOvpf//OyfMo=)
                          2: nv2KDm5t1Wpu-CieSxhPDKAMM90.crl (hash: ds3PM67p358jeyx+AOwV2yOln/AGXyOU1epKM/Qo/Zw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/d53d7c-a832-47b3-9f94-59c23054442d/1/nv2KDm5t1Wpu-CieSxhPDKAMM90.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/d53d7c-a832-47b3-9f94-59c23054442d/1/nv2KDm5t1Wpu-CieSxhPDKAMM90.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nv2KDm5t1Wpu-CieSxhPDKAMM90.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 01 Jul 2025 21:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c2:a5:30:67:9b:8d:f2:f1:ae:43:47:56:ed:62:b3:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9efd8a0e6e6dd56a6ef8289e4b184f0ca00c33dd
        Validity
            Not Before: Jun 30 21:01:35 2025 GMT
            Not After : Jul  1 21:01:35 2025 GMT
        Subject: CN=c9cc18b67421793646aea12e0880d6a71629337f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:00:b2:29:0c:a9:55:1f:39:10:77:1e:c4:df:
                    e4:3d:4e:7f:72:23:54:a0:e0:91:b1:78:23:51:44:
                    4f:01:87:f1:ff:48:c7:e9:4d:1e:32:37:d4:72:15:
                    4a:21:87:4f:95:76:86:d2:44:0d:6d:4f:15:3f:50:
                    14:9b:39:95:fd:2d:36:8f:27:33:80:11:8e:e7:6d:
                    30:81:f4:14:be:9a:6e:4e:2f:b2:1c:5f:74:5a:7b:
                    7c:dc:1b:07:ba:5f:6e:37:40:00:ca:29:ea:8c:6b:
                    bb:9a:0d:76:a2:1c:e8:be:25:04:03:97:c7:e8:20:
                    a5:a9:a0:5c:b9:90:4c:a8:30:3c:67:23:0f:5e:27:
                    23:4e:00:a1:f9:26:00:ee:e5:cb:19:5b:c8:32:97:
                    d3:77:54:66:8c:e8:18:30:04:08:a1:ac:54:6c:53:
                    9e:f7:81:55:c3:8c:b1:a2:05:4a:d2:4b:17:a9:1a:
                    4b:9f:44:d8:5a:b5:57:27:25:c9:00:8e:50:b2:ee:
                    9b:1e:58:8d:53:12:e0:07:d8:f7:91:93:94:00:b5:
                    65:f7:a3:22:b4:28:1f:86:15:74:2e:28:af:7a:9c:
                    20:8f:55:0f:7b:87:b5:b9:21:3f:80:3d:57:f5:8c:
                    3c:3e:0e:48:7c:95:3b:83:2d:ac:6c:e5:16:4a:91:
                    eb:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:CC:18:B6:74:21:79:36:46:AE:A1:2E:08:80:D6:A7:16:29:33:7F
            X509v3 Authority Key Identifier:
                keyid:9E:FD:8A:0E:6E:6D:D5:6A:6E:F8:28:9E:4B:18:4F:0C:A0:0C:33:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nv2KDm5t1Wpu-CieSxhPDKAMM90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d53d7c-a832-47b3-9f94-59c23054442d/1/nv2KDm5t1Wpu-CieSxhPDKAMM90.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d53d7c-a832-47b3-9f94-59c23054442d/1/nv2KDm5t1Wpu-CieSxhPDKAMM90.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:d5:fe:f0:76:79:fb:3b:e7:c8:28:97:16:bc:27:2e:f0:2d:
         5f:91:5f:f0:af:90:c5:60:81:03:e6:ca:2a:11:57:88:4e:45:
         d6:cc:c5:a2:36:52:d3:ba:66:16:18:2b:65:56:8b:2d:0b:a6:
         92:d1:41:2a:20:bd:01:50:57:b6:8d:bc:de:7b:9a:7f:aa:83:
         20:9a:9d:db:4b:84:69:9d:cb:14:2f:20:3b:45:cc:a6:02:17:
         15:e3:fb:e9:9a:86:bd:4c:ac:46:09:a7:a8:67:4e:61:fb:e2:
         d7:83:21:0f:0f:0a:c6:20:59:65:75:5e:d1:19:b3:de:d1:20:
         0d:55:04:bc:28:00:de:d9:a8:1c:96:1d:82:9f:1e:1a:0f:dc:
         a8:ad:fb:4d:2d:76:ba:d3:43:6b:43:e6:3f:3d:fb:d7:8d:5c:
         f7:25:44:98:a2:65:f3:41:9a:9d:5a:cc:05:a5:74:10:89:19:
         82:45:7a:ef:5d:c2:28:78:6a:83:b9:a5:b9:e6:3e:25:c7:99:
         16:c5:5e:e5:ce:0a:4c:0d:51:18:de:29:05:f2:8c:f5:8e:52:
         fe:90:83:54:55:67:72:db:aa:f7:d7:67:2f:4a:c7:43:4b:0e:
         d1:12:17:26:2d:37:e2:b7:6b:e7:82:3b:95:37:2d:ea:00:3c:
         e2:6c:62:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfCpTBnm43y8a5DR1btYrOMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllZmQ4YTBlNmU2ZGQ1NmE2ZWY4Mjg5ZTRiMTg0ZjBjYTAw
YzMzZGQwHhcNMjUwNjMwMjEwMTM1WhcNMjUwNzAxMjEwMTM1WjAzMTEwLwYDVQQD
EyhjOWNjMThiNjc0MjE3OTM2NDZhZWExMmUwODgwZDZhNzE2MjkzMzdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+gCyKQypVR85EHcexN/kPU5/ciNU
oOCRsXgjUURPAYfx/0jH6U0eMjfUchVKIYdPlXaG0kQNbU8VP1AUmzmV/S02jycz
gBGO520wgfQUvppuTi+yHF90Wnt83BsHul9uN0AAyinqjGu7mg12ohzoviUEA5fH
6CClqaBcuZBMqDA8ZyMPXicjTgCh+SYA7uXLGVvIMpfTd1RmjOgYMAQIoaxUbFOe
94FVw4yxogVK0ksXqRpLn0TYWrVXJyXJAI5Qsu6bHliNUxLgB9j3kZOUALVl96Mi
tCgfhhV0Liivepwgj1UPe4e1uSE/gD1X9Yw8Pg5IfJU7gy2sbOUWSpHr+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMnMGLZ0IXk2Rq6hLgiA1qcWKTN/MB8GA1UdIwQY
MBaAFJ79ig5ubdVqbvgonksYTwygDDPdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnYyS0RtNXQxV3B1LUNpZVN4aFBES0FNTTkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9kNTNkN2MtYTgzMi00N2IzLTlmOTQt
NTljMjMwNTQ0NDJkLzEvbnYyS0RtNXQxV3B1LUNpZVN4aFBES0FNTTkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9kNTNkN2MtYTgzMi00N2IzLTlmOTQtNTljMjMwNTQ0NDJk
LzEvbnYyS0RtNXQxV3B1LUNpZVN4aFBES0FNTTkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM9X+8HZ5
+zvnyCiXFrwnLvAtX5Ff8K+QxWCBA+bKKhFXiE5F1szFojZS07pmFhgrZVaLLQum
ktFBKiC9AVBXto283nuaf6qDIJqd20uEaZ3LFC8gO0XMpgIXFeP76ZqGvUysRgmn
qGdOYfvi14MhDw8KxiBZZXVe0Rmz3tEgDVUEvCgA3tmoHJYdgp8eGg/cqK37TS12
utNDa0PmPz37141c9yVEmKJl80GanVrMBaV0EIkZgkV6713CKHhqg7mlueY+JceZ
FsVe5c4KTA1RGN4pBfKM9Y5S/pCDVFVnctuq99dnL0rHQ0sO0RIXJi034rdr54I7
lTct6gA84mxiDA==
-----END CERTIFICATE-----
Generated at Tue Jul 1 07:33:53 2025 by rpki-client