Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/162560-b4c5-4f0d-9c06-18bdf8847418/1/9nTwyNFsu1ELuh_jrEaF7uNW-Oc.mft
File:                     9nTwyNFsu1ELuh_jrEaF7uNW-Oc.mft (raw, json)
Hash identifier:          caU0p27l8ISU82GThcaz8tBaiH1IyYhr5q63uCTVcNU=
Subject key identifier:   47:1C:80:85:6E:B3:76:63:ED:62:4F:CF:00:3F:DF:9C:9E:0E:6A:27
Authority key identifier: F6:74:F0:C8:D1:6C:BB:51:0B:BA:1F:E3:AC:46:85:EE:E3:56:F8:E7
Certificate issuer:       /CN=f674f0c8d16cbb510bba1fe3ac4685eee356f8e7
Certificate serial:       0197B70F2A3D650E4DEAD50B7B137076314A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9nTwyNFsu1ELuh_jrEaF7uNW-Oc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/162560-b4c5-4f0d-9c06-18bdf8847418/1/9nTwyNFsu1ELuh_jrEaF7uNW-Oc.mft
Manifest number:          04A0
Signing time:             Sat 28 Jun 2025 15:01:53 +0000
Manifest this update:     Sat 28 Jun 2025 15:01:53 +0000
Manifest next update:     Sun 29 Jun 2025 15:01:53 +0000
Files and hashes:         1: 9nTwyNFsu1ELuh_jrEaF7uNW-Oc.crl (hash: V9iWwSCTtzwY0x8b/eTcBGgx/7o5MzKK12xzPB3yopw=)
                          2: tjboCeupGoWMhzNMAbe1acyZSfo.roa (hash: 4a1e4ZJ2rm6Y1i2yYMJDPx5U9pmumE35uvRPVX+uXuM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/162560-b4c5-4f0d-9c06-18bdf8847418/1/9nTwyNFsu1ELuh_jrEaF7uNW-Oc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/162560-b4c5-4f0d-9c06-18bdf8847418/1/9nTwyNFsu1ELuh_jrEaF7uNW-Oc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9nTwyNFsu1ELuh_jrEaF7uNW-Oc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0f:2a:3d:65:0e:4d:ea:d5:0b:7b:13:70:76:31:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f674f0c8d16cbb510bba1fe3ac4685eee356f8e7
        Validity
            Not Before: Jun 28 15:01:53 2025 GMT
            Not After : Jun 29 15:01:53 2025 GMT
        Subject: CN=471c80856eb37663ed624fcf003fdf9c9e0e6a27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:be:67:6e:7d:63:27:79:31:95:c8:e2:6d:8d:
                    50:c9:63:8e:22:17:4c:49:75:02:8e:14:9b:74:71:
                    5b:92:0e:4b:af:87:8b:a4:be:85:08:6f:a7:b6:03:
                    99:35:21:e6:6d:8d:94:d3:35:f6:dd:77:65:99:ff:
                    b5:7d:6e:89:a7:74:84:72:29:47:0e:bd:7c:b7:d9:
                    73:11:d4:15:1d:64:5a:f4:53:b2:6d:5d:15:be:de:
                    a1:51:e2:0f:bc:01:ab:2d:71:2b:05:33:2f:27:bf:
                    a5:62:c6:06:5e:72:16:f8:e0:a8:db:d9:86:55:8d:
                    3c:53:c7:2d:22:30:72:10:a3:21:f0:5e:e5:38:aa:
                    1c:2f:40:2c:b2:7b:7b:83:1c:d3:67:0d:6d:d7:e7:
                    24:9c:0c:a8:bb:ed:33:dc:ad:2b:89:5f:85:a6:b8:
                    90:1d:7b:52:d7:75:c5:d8:21:d6:66:ad:27:b8:19:
                    a7:c3:8f:e9:b7:60:0e:3a:02:37:6e:cd:a5:2e:c7:
                    cb:e4:ae:e8:8c:f9:27:5e:5b:89:2a:7c:3b:a1:09:
                    81:ef:a4:fb:7d:72:3d:0b:49:1f:f6:89:95:09:4c:
                    e5:7e:02:cf:13:14:a0:84:74:aa:ac:ea:a5:7f:65:
                    de:06:27:32:49:87:e2:f9:d3:a1:1d:b5:4b:06:d6:
                    0e:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:1C:80:85:6E:B3:76:63:ED:62:4F:CF:00:3F:DF:9C:9E:0E:6A:27
            X509v3 Authority Key Identifier:
                keyid:F6:74:F0:C8:D1:6C:BB:51:0B:BA:1F:E3:AC:46:85:EE:E3:56:F8:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9nTwyNFsu1ELuh_jrEaF7uNW-Oc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/162560-b4c5-4f0d-9c06-18bdf8847418/1/9nTwyNFsu1ELuh_jrEaF7uNW-Oc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/162560-b4c5-4f0d-9c06-18bdf8847418/1/9nTwyNFsu1ELuh_jrEaF7uNW-Oc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:cb:8f:73:45:84:94:e5:43:8b:9e:04:1b:af:dc:2e:b3:05:
         1b:13:83:a6:0a:1e:bd:8b:40:8c:2b:d8:79:39:39:f7:90:db:
         68:ae:ac:13:65:da:9f:e4:82:15:19:b1:ac:1e:1e:12:28:47:
         37:20:cd:11:78:9e:d2:ac:e9:27:b5:4b:43:d8:91:60:6f:ae:
         ed:ad:91:f1:31:bf:5e:45:17:82:8d:eb:b6:82:76:ce:0b:e9:
         3d:c8:43:99:70:6f:6b:08:58:8c:c5:5f:d4:8d:78:2b:3c:0e:
         93:b5:85:a7:89:76:32:90:12:0f:bf:1b:e9:15:6f:ea:89:ea:
         58:59:72:84:88:21:f7:3e:13:8e:f3:2b:3c:b9:17:d6:0f:40:
         d0:a7:f9:c3:8f:16:cb:00:bb:4d:46:4f:5c:de:da:89:13:0e:
         e3:e2:27:36:99:3c:53:ea:15:bf:0d:8d:35:7e:30:d1:16:e2:
         3c:2b:f9:19:0b:10:62:a0:9b:30:e7:92:60:d6:a6:cd:5c:0a:
         18:45:1b:12:5a:14:f3:07:96:48:6f:3f:7d:df:f4:fd:fe:dc:
         8d:29:96:b4:76:5a:6b:8e:a0:62:b6:b5:51:bb:5a:67:94:62:
         39:d8:3d:79:42:31:f9:15:ac:b3:b7:03:a8:01:dd:cd:3f:3b:
         1c:26:85:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3Dyo9ZQ5N6tULexNwdjFKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2NzRmMGM4ZDE2Y2JiNTEwYmJhMWZlM2FjNDY4NWVlZTM1
NmY4ZTcwHhcNMjUwNjI4MTUwMTUzWhcNMjUwNjI5MTUwMTUzWjAzMTEwLwYDVQQD
Eyg0NzFjODA4NTZlYjM3NjYzZWQ2MjRmY2YwMDNmZGY5YzllMGU2YTI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAir5nbn1jJ3kxlcjibY1QyWOOIhdM
SXUCjhSbdHFbkg5Lr4eLpL6FCG+ntgOZNSHmbY2U0zX23Xdlmf+1fW6Jp3SEcilH
Dr18t9lzEdQVHWRa9FOybV0Vvt6hUeIPvAGrLXErBTMvJ7+lYsYGXnIW+OCo29mG
VY08U8ctIjByEKMh8F7lOKocL0Assnt7gxzTZw1t1+cknAyou+0z3K0riV+FpriQ
HXtS13XF2CHWZq0nuBmnw4/pt2AOOgI3bs2lLsfL5K7ojPknXluJKnw7oQmB76T7
fXI9C0kf9omVCUzlfgLPExSghHSqrOqlf2XeBicySYfi+dOhHbVLBtYO1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEccgIVus3Zj7WJPzwA/35yeDmonMB8GA1UdIwQY
MBaAFPZ08MjRbLtRC7of46xGhe7jVvjnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOW5Ud3lORnN1MUVMdWhfanJFYUY3dU5XLU9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8xNjI1NjAtYjRjNS00ZjBkLTljMDYt
MThiZGY4ODQ3NDE4LzEvOW5Ud3lORnN1MUVMdWhfanJFYUY3dU5XLU9jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS8xNjI1NjAtYjRjNS00ZjBkLTljMDYtMThiZGY4ODQ3NDE4
LzEvOW5Ud3lORnN1MUVMdWhfanJFYUY3dU5XLU9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtMuPc0WE
lOVDi54EG6/cLrMFGxODpgoevYtAjCvYeTk595DbaK6sE2Xan+SCFRmxrB4eEihH
NyDNEXie0qzpJ7VLQ9iRYG+u7a2R8TG/XkUXgo3rtoJ2zgvpPchDmXBvawhYjMVf
1I14KzwOk7WFp4l2MpASD78b6RVv6onqWFlyhIgh9z4TjvMrPLkX1g9A0Kf5w48W
ywC7TUZPXN7aiRMO4+InNpk8U+oVvw2NNX4w0RbiPCv5GQsQYqCbMOeSYNamzVwK
GEUbEloU8weWSG8/fd/0/f7cjSmWtHZaa46gYra1UbtaZ5RiOdg9eUIx+RWss7cD
qAHdzT87HCaFOg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:31:10 2025 by rpki-client