Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/2b0928-5cb6-4d6b-a8ad-00e55a2499d0/1/n3g9_Cib-qPEuhsyTx27V_WGoB0.mft
File:                     n3g9_Cib-qPEuhsyTx27V_WGoB0.mft (raw, json)
Hash identifier:          dG/wd3icGGosb+zr2gElEK/0jn+HGwI/o5Q7NYL8THY=
Subject key identifier:   59:A4:A0:FF:00:B9:BA:0E:0D:E6:2F:7C:54:00:15:F0:7C:92:27:08
Authority key identifier: 9F:78:3D:FC:28:9B:FA:A3:C4:BA:1B:32:4F:1D:BB:57:F5:86:A0:1D
Certificate issuer:       /CN=9f783dfc289bfaa3c4ba1b324f1dbb57f586a01d
Certificate serial:       0196B7B579962F3365C4C52D1F4451F6CB1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n3g9_Cib-qPEuhsyTx27V_WGoB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/2b0928-5cb6-4d6b-a8ad-00e55a2499d0/1/n3g9_Cib-qPEuhsyTx27V_WGoB0.mft
Manifest number:          0185
Signing time:             Sat 10 May 2025 01:00:45 +0000
Manifest this update:     Sat 10 May 2025 01:00:45 +0000
Manifest next update:     Sun 11 May 2025 01:00:45 +0000
Files and hashes:         1: AE5IQSZ07aDFdSNH0kV7_4HeAEw.roa (hash: urftXRrLYNfHknYhlBilfeq0wuuzqoCnp0BIMu9jSb4=)
                          2: n3g9_Cib-qPEuhsyTx27V_WGoB0.crl (hash: xJlykWA0ZMdYCCv2/d6/YzdPWdxoBZ1eTGXJinuPJpc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/2b0928-5cb6-4d6b-a8ad-00e55a2499d0/1/n3g9_Cib-qPEuhsyTx27V_WGoB0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/2b0928-5cb6-4d6b-a8ad-00e55a2499d0/1/n3g9_Cib-qPEuhsyTx27V_WGoB0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n3g9_Cib-qPEuhsyTx27V_WGoB0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b7:b5:79:96:2f:33:65:c4:c5:2d:1f:44:51:f6:cb:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f783dfc289bfaa3c4ba1b324f1dbb57f586a01d
        Validity
            Not Before: May 10 01:00:45 2025 GMT
            Not After : May 11 01:00:45 2025 GMT
        Subject: CN=59a4a0ff00b9ba0e0de62f7c540015f07c922708
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:40:0c:fd:b9:2a:d7:27:b9:f5:23:99:0b:64:
                    23:fc:85:15:07:3b:7f:57:db:5e:2f:8e:d4:ca:03:
                    e1:19:e6:07:0c:d3:16:8d:fe:dc:d6:d7:91:1f:a2:
                    38:d8:c4:ab:b2:fe:7a:a1:d9:ea:d5:4f:ef:0f:77:
                    5c:4f:2f:3e:2c:2b:5b:08:3d:77:9d:b9:72:0d:df:
                    5f:1e:89:3e:4a:88:1a:2c:9d:b1:5b:e2:b0:59:4c:
                    af:af:0d:8a:e8:81:c2:fe:f0:80:eb:9e:18:04:8e:
                    9d:91:89:a4:d5:24:8f:c7:e7:17:e8:31:3d:ed:9c:
                    45:64:6b:07:0e:75:7b:b0:87:d0:b8:eb:fe:2c:09:
                    f0:66:a0:7f:b1:a1:3a:a3:89:5c:9c:88:82:ce:b7:
                    78:16:47:14:6b:22:d0:ca:5b:71:27:04:8c:45:de:
                    a5:02:2d:96:68:c2:60:23:20:a0:0c:e9:89:5e:3e:
                    71:9b:1e:68:8b:b6:3f:75:55:cd:f1:57:72:dd:94:
                    65:8e:35:ce:b4:c7:98:4b:d3:ac:80:dd:d7:c5:5b:
                    10:cb:22:b4:62:95:f1:84:01:18:12:d8:3b:e6:71:
                    b5:df:f9:53:f0:60:93:d9:d2:31:ea:9f:de:ea:00:
                    a2:3b:25:ce:06:79:15:ce:f0:f5:76:3a:79:c1:60:
                    27:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:A4:A0:FF:00:B9:BA:0E:0D:E6:2F:7C:54:00:15:F0:7C:92:27:08
            X509v3 Authority Key Identifier:
                keyid:9F:78:3D:FC:28:9B:FA:A3:C4:BA:1B:32:4F:1D:BB:57:F5:86:A0:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n3g9_Cib-qPEuhsyTx27V_WGoB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2b0928-5cb6-4d6b-a8ad-00e55a2499d0/1/n3g9_Cib-qPEuhsyTx27V_WGoB0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2b0928-5cb6-4d6b-a8ad-00e55a2499d0/1/n3g9_Cib-qPEuhsyTx27V_WGoB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:49:5e:ee:9f:2a:81:0f:5c:63:b0:14:40:ca:13:2b:6b:0b:
         27:2c:bc:40:d5:d2:be:9f:3f:b3:df:a5:f9:dd:67:18:c0:35:
         ca:fd:fd:0c:11:75:d2:3c:9a:73:27:de:94:2a:f3:1a:a4:fd:
         dd:f1:2c:a7:a8:f0:de:9b:7d:7d:a1:1f:f1:13:97:bc:9f:3f:
         c7:19:b2:cc:3f:ad:72:08:fe:bd:80:73:1c:15:30:5f:b5:44:
         59:eb:56:fd:ae:22:28:c8:42:61:cb:30:7d:24:49:9e:7a:84:
         b4:b7:81:5e:da:ac:29:73:93:5f:7f:6f:25:23:6d:31:a4:a7:
         e6:c5:1e:d4:3f:d6:bb:4b:60:ec:fb:06:46:7f:c7:a4:5c:b3:
         15:be:6c:29:b7:5a:31:8b:12:c0:04:0b:3c:59:f3:5c:08:32:
         26:39:63:83:ef:c8:2a:bf:92:71:d9:a9:d2:14:b1:ae:89:db:
         ac:6c:4b:df:91:aa:06:3e:f8:a3:c8:36:d0:6e:99:1d:b4:b5:
         93:d4:f8:9f:30:2c:f2:5f:09:53:db:1f:92:66:21:32:75:28:
         7e:12:7e:99:db:13:f0:3f:8b:b6:a8:c2:a1:14:ae:c9:a2:5b:
         01:52:d7:bf:06:8d:40:2c:3a:0b:66:2d:41:3e:6d:57:6e:aa:
         95:13:92:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa3tXmWLzNlxMUtH0RR9ssaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmNzgzZGZjMjg5YmZhYTNjNGJhMWIzMjRmMWRiYjU3ZjU4
NmEwMWQwHhcNMjUwNTEwMDEwMDQ1WhcNMjUwNTExMDEwMDQ1WjAzMTEwLwYDVQQD
Eyg1OWE0YTBmZjAwYjliYTBlMGRlNjJmN2M1NDAwMTVmMDdjOTIyNzA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlUAM/bkq1ye59SOZC2Qj/IUVBzt/
V9teL47UygPhGeYHDNMWjf7c1teRH6I42MSrsv56odnq1U/vD3dcTy8+LCtbCD13
nblyDd9fHok+SogaLJ2xW+KwWUyvrw2K6IHC/vCA654YBI6dkYmk1SSPx+cX6DE9
7ZxFZGsHDnV7sIfQuOv+LAnwZqB/saE6o4lcnIiCzrd4FkcUayLQyltxJwSMRd6l
Ai2WaMJgIyCgDOmJXj5xmx5oi7Y/dVXN8Vdy3ZRljjXOtMeYS9OsgN3XxVsQyyK0
YpXxhAEYEtg75nG13/lT8GCT2dIx6p/e6gCiOyXOBnkVzvD1djp5wWAnnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFmkoP8AuboODeYvfFQAFfB8kicIMB8GA1UdIwQY
MBaAFJ94Pfwom/qjxLobMk8du1f1hqAdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjNnOV9DaWItcVBFdWhzeVR4MjdWX1dHb0IwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS8yYjA5MjgtNWNiNi00ZDZiLWE4YWQt
MDBlNTVhMjQ5OWQwLzEvbjNnOV9DaWItcVBFdWhzeVR4MjdWX1dHb0IwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS8yYjA5MjgtNWNiNi00ZDZiLWE4YWQtMDBlNTVhMjQ5OWQw
LzEvbjNnOV9DaWItcVBFdWhzeVR4MjdWX1dHb0IwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA0le7p8q
gQ9cY7AUQMoTK2sLJyy8QNXSvp8/s9+l+d1nGMA1yv39DBF10jyacyfelCrzGqT9
3fEsp6jw3pt9faEf8ROXvJ8/xxmyzD+tcgj+vYBzHBUwX7VEWetW/a4iKMhCYcsw
fSRJnnqEtLeBXtqsKXOTX39vJSNtMaSn5sUe1D/Wu0tg7PsGRn/HpFyzFb5sKbda
MYsSwAQLPFnzXAgyJjljg+/IKr+Scdmp0hSxronbrGxL35GqBj74o8g20G6ZHbS1
k9T4nzAs8l8JU9sfkmYhMnUofhJ+mdsT8D+LtqjCoRSuyaJbAVLXvwaNQCw6C2Yt
QT5tV26qlROSdQ==
-----END CERTIFICATE-----
Generated at Sat May 10 05:34:30 2025 by rpki-client