Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/632463-c2dc-4cb8-bc4f-2df99d8123b7/1/6VzBeM31rZJ5k55XaK6Ig_-_Nes.mft
File:                     6VzBeM31rZJ5k55XaK6Ig_-_Nes.mft (raw, json)
Hash identifier:          o1d1BGHA58kCBXIK60Rx18no5s6sKPkQBI9PBh+chgI=
Subject key identifier:   9A:04:FD:72:70:9D:E8:C3:01:D3:E8:54:75:51:8E:BF:88:42:63:13
Authority key identifier: E9:5C:C1:78:CD:F5:AD:92:79:93:9E:57:68:AE:88:83:FF:BF:35:EB
Certificate issuer:       /CN=e95cc178cdf5ad9279939e5768ae8883ffbf35eb
Certificate serial:       0197B7450C80B50BD7B146EE0F2CFE4B75CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6VzBeM31rZJ5k55XaK6Ig_-_Nes.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/632463-c2dc-4cb8-bc4f-2df99d8123b7/1/6VzBeM31rZJ5k55XaK6Ig_-_Nes.mft
Manifest number:          045E
Signing time:             Sat 28 Jun 2025 16:00:44 +0000
Manifest this update:     Sat 28 Jun 2025 16:00:44 +0000
Manifest next update:     Sun 29 Jun 2025 16:00:44 +0000
Files and hashes:         1: 6VzBeM31rZJ5k55XaK6Ig_-_Nes.crl (hash: dbg556U1FGW+duMNcZnMMo3pTjIpIt0RcKakzXNuZSM=)
                          2: b7x6ZKsbLCwY_tMdnPo9QIIdiU8.roa (hash: ZFZsgVw2f50KESlxtMB2pklQZAw0SjfBRhWTVivxDpk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/632463-c2dc-4cb8-bc4f-2df99d8123b7/1/6VzBeM31rZJ5k55XaK6Ig_-_Nes.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/632463-c2dc-4cb8-bc4f-2df99d8123b7/1/6VzBeM31rZJ5k55XaK6Ig_-_Nes.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6VzBeM31rZJ5k55XaK6Ig_-_Nes.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:45:0c:80:b5:0b:d7:b1:46:ee:0f:2c:fe:4b:75:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e95cc178cdf5ad9279939e5768ae8883ffbf35eb
        Validity
            Not Before: Jun 28 16:00:44 2025 GMT
            Not After : Jun 29 16:00:44 2025 GMT
        Subject: CN=9a04fd72709de8c301d3e85475518ebf88426313
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:fb:88:cd:f4:2e:99:f9:14:04:4b:39:46:30:
                    37:32:83:03:ca:2f:a1:66:2e:50:11:df:5b:e7:e3:
                    55:8c:5e:c7:fc:cc:e5:47:a8:a3:a5:0e:76:ab:37:
                    dd:bb:38:27:ca:94:ff:48:b8:0c:88:63:28:03:f3:
                    42:05:39:28:e9:3b:3c:3d:4f:1e:b2:ec:6c:15:e2:
                    31:a1:b3:e7:6e:23:7a:dd:64:7e:fc:8c:35:cf:ba:
                    b9:9d:59:06:c2:6d:cc:86:10:01:92:ff:32:8a:1e:
                    6e:21:13:0d:f4:a5:d7:7b:c4:eb:72:6b:7d:7d:00:
                    5b:e7:bf:8d:44:43:02:36:e3:c5:cd:bd:a4:39:e0:
                    7d:c7:36:b5:ab:c8:19:16:b4:dd:79:e3:cb:7b:ce:
                    08:8d:a0:8c:55:f5:97:20:93:81:cd:d9:0f:34:88:
                    ee:dc:0e:59:4f:03:e8:55:3e:dc:a0:50:e1:47:70:
                    83:46:51:da:4c:e3:60:94:1f:76:6d:0c:d6:1b:4c:
                    0b:c7:2c:57:0b:f5:5d:ea:4f:0c:4c:46:a0:ca:aa:
                    3b:15:15:03:6b:df:07:d9:0f:50:af:de:96:0f:a6:
                    b2:4b:7a:6f:d7:4d:02:67:40:29:ea:f4:b3:28:6b:
                    a8:90:b0:15:15:d2:06:8c:82:db:ad:ca:e6:3e:bf:
                    64:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:04:FD:72:70:9D:E8:C3:01:D3:E8:54:75:51:8E:BF:88:42:63:13
            X509v3 Authority Key Identifier:
                keyid:E9:5C:C1:78:CD:F5:AD:92:79:93:9E:57:68:AE:88:83:FF:BF:35:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6VzBeM31rZJ5k55XaK6Ig_-_Nes.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/632463-c2dc-4cb8-bc4f-2df99d8123b7/1/6VzBeM31rZJ5k55XaK6Ig_-_Nes.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/632463-c2dc-4cb8-bc4f-2df99d8123b7/1/6VzBeM31rZJ5k55XaK6Ig_-_Nes.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:20:65:2d:58:59:d7:19:cd:2e:1c:48:b6:8d:69:65:eb:fd:
         67:b0:0d:d4:ce:da:36:2d:d0:e5:aa:8d:b5:9e:66:3e:56:1c:
         1f:a9:87:93:f1:8d:ca:b7:20:c0:29:b9:58:13:82:1b:b0:32:
         34:f8:fb:0d:c6:a0:6e:6d:e1:86:83:f3:c0:30:2e:c5:b1:c8:
         48:5f:0b:b9:74:53:d3:ff:b0:22:1e:9b:15:2a:5d:d2:54:ac:
         1c:64:5e:72:12:ab:a2:fd:d1:15:cd:7d:ae:3e:4e:f1:a5:91:
         f2:f2:ec:6d:34:42:5d:03:25:3b:45:6b:e6:a0:5d:e3:69:48:
         a4:17:9f:e4:4f:7a:00:58:3d:f1:21:b0:cb:c6:aa:39:9d:56:
         6d:08:83:43:3e:27:46:ec:ba:d9:37:fa:a5:57:9a:c5:c4:aa:
         61:ab:35:bb:45:14:40:b3:95:20:78:d9:61:a4:2f:3c:65:f3:
         2e:85:8b:8f:06:bc:72:7d:68:95:e9:e7:ec:3d:29:33:c5:39:
         16:a5:3c:12:5c:98:b4:2b:8d:9b:ce:82:17:c0:b4:ba:fd:18:
         11:d4:da:be:48:e6:6f:41:f8:e0:8a:18:28:6d:aa:a1:a8:a7:
         19:a8:9c:e9:3a:fa:4e:f3:af:6b:b2:9a:ab:90:56:8c:cd:18:
         57:7d:c2:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3RQyAtQvXsUbuDyz+S3XPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5NWNjMTc4Y2RmNWFkOTI3OTkzOWU1NzY4YWU4ODgzZmZi
ZjM1ZWIwHhcNMjUwNjI4MTYwMDQ0WhcNMjUwNjI5MTYwMDQ0WjAzMTEwLwYDVQQD
Eyg5YTA0ZmQ3MjcwOWRlOGMzMDFkM2U4NTQ3NTUxOGViZjg4NDI2MzEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3vuIzfQumfkUBEs5RjA3MoMDyi+h
Zi5QEd9b5+NVjF7H/MzlR6ijpQ52qzfduzgnypT/SLgMiGMoA/NCBTko6Ts8PU8e
suxsFeIxobPnbiN63WR+/Iw1z7q5nVkGwm3MhhABkv8yih5uIRMN9KXXe8Trcmt9
fQBb57+NREMCNuPFzb2kOeB9xza1q8gZFrTdeePLe84IjaCMVfWXIJOBzdkPNIju
3A5ZTwPoVT7coFDhR3CDRlHaTONglB92bQzWG0wLxyxXC/Vd6k8MTEagyqo7FRUD
a98H2Q9Qr96WD6ayS3pv100CZ0Ap6vSzKGuokLAVFdIGjILbrcrmPr9kyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJoE/XJwnejDAdPoVHVRjr+IQmMTMB8GA1UdIwQY
MBaAFOlcwXjN9a2SeZOeV2iuiIP/vzXrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlZ6QmVNMzFyWko1azU1WGFLNklnXy1fTmVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy82MzI0NjMtYzJkYy00Y2I4LWJjNGYt
MmRmOTlkODEyM2I3LzEvNlZ6QmVNMzFyWko1azU1WGFLNklnXy1fTmVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy82MzI0NjMtYzJkYy00Y2I4LWJjNGYtMmRmOTlkODEyM2I3
LzEvNlZ6QmVNMzFyWko1azU1WGFLNklnXy1fTmVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjiBlLVhZ
1xnNLhxIto1pZev9Z7AN1M7aNi3Q5aqNtZ5mPlYcH6mHk/GNyrcgwCm5WBOCG7Ay
NPj7Dcagbm3hhoPzwDAuxbHISF8LuXRT0/+wIh6bFSpd0lSsHGRechKrov3RFc19
rj5O8aWR8vLsbTRCXQMlO0Vr5qBd42lIpBef5E96AFg98SGwy8aqOZ1WbQiDQz4n
Ruy62Tf6pVeaxcSqYas1u0UUQLOVIHjZYaQvPGXzLoWLjwa8cn1olenn7D0pM8U5
FqU8ElyYtCuNm86CF8C0uv0YEdTavkjmb0H44IoYKG2qoainGaic6Tr6TvOva7Ka
q5BWjM0YV33Cvg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:11:02 2025 by rpki-client