Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/333034-e737-436d-b149-3119d3332282/1/njQ_BMJ9FUVaqlzapFadN6iJUNc.mft
File:                     njQ_BMJ9FUVaqlzapFadN6iJUNc.mft (raw, json)
Hash identifier:          5h8D+YvDJEh6KBg1irqKRscKhosyCRcCCaWdBoG7GC4=
Subject key identifier:   43:7B:79:4E:D8:64:3E:B1:0F:7E:2C:CD:09:80:AE:8E:8F:99:23:94
Authority key identifier: 9E:34:3F:04:C2:7D:15:45:5A:AA:5C:DA:A4:56:9D:37:A8:89:50:D7
Certificate issuer:       /CN=9e343f04c27d15455aaa5cdaa4569d37a88950d7
Certificate serial:       0197B7B3770607610200533FF15275B09CD5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/njQ_BMJ9FUVaqlzapFadN6iJUNc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/333034-e737-436d-b149-3119d3332282/1/njQ_BMJ9FUVaqlzapFadN6iJUNc.mft
Manifest number:          12E4
Signing time:             Sat 28 Jun 2025 18:01:21 +0000
Manifest this update:     Sat 28 Jun 2025 18:01:21 +0000
Manifest next update:     Sun 29 Jun 2025 18:01:21 +0000
Files and hashes:         1: MspHMRx79y2hbQhEiM4afU6NUCQ.roa (hash: Umb9OOhu/lMtmCnjDzYDKJVcT/aByAqAtDT/npY6pzk=)
                          2: njQ_BMJ9FUVaqlzapFadN6iJUNc.crl (hash: BrCdktwOVqH9YdPCqg4kkWGq90lGXh+FCuJ6tuePKks=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/333034-e737-436d-b149-3119d3332282/1/njQ_BMJ9FUVaqlzapFadN6iJUNc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/333034-e737-436d-b149-3119d3332282/1/njQ_BMJ9FUVaqlzapFadN6iJUNc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/njQ_BMJ9FUVaqlzapFadN6iJUNc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:b3:77:06:07:61:02:00:53:3f:f1:52:75:b0:9c:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e343f04c27d15455aaa5cdaa4569d37a88950d7
        Validity
            Not Before: Jun 28 18:01:21 2025 GMT
            Not After : Jun 29 18:01:21 2025 GMT
        Subject: CN=437b794ed8643eb10f7e2ccd0980ae8e8f992394
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:8b:2c:63:6e:c9:aa:37:4e:14:83:bc:13:f5:
                    47:f4:1c:e1:7f:fa:52:f9:fa:55:40:1d:1e:ae:f6:
                    1f:72:4e:95:af:d8:72:c1:c9:8f:7e:2e:45:b7:8d:
                    2a:51:fd:92:7e:eb:fa:88:b5:f8:37:5b:9c:f7:fd:
                    99:cf:ff:07:26:de:d7:59:49:66:47:8b:3b:79:60:
                    22:f3:4d:45:57:76:05:0a:ad:26:01:8e:cc:79:9a:
                    87:f2:ad:83:fd:1c:2a:6e:69:d1:86:fa:7f:71:b5:
                    05:c3:e6:0d:24:ff:f3:a5:02:57:25:a0:d4:ff:a9:
                    b7:f5:39:8c:46:7e:3f:c5:8e:b8:e7:d4:a8:b4:e5:
                    fb:06:29:bc:54:f4:98:1e:77:64:21:da:b9:1c:dd:
                    cd:a2:64:f3:80:c9:f2:90:7d:f7:1f:19:bb:03:2c:
                    79:5d:85:35:d3:f1:7b:ae:d1:c1:33:6a:ba:99:83:
                    89:72:f4:33:0b:9b:50:ef:7d:35:e9:04:74:9d:de:
                    53:3c:ce:a9:dc:47:24:48:ab:db:23:47:ac:62:7e:
                    97:ac:e5:40:33:17:90:fe:d6:2f:35:b2:90:9a:07:
                    8d:3c:df:33:07:3c:06:34:72:08:bd:5d:40:b8:60:
                    9d:8c:7d:fe:d0:e2:5e:23:71:de:ce:0f:f1:53:68:
                    d8:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:7B:79:4E:D8:64:3E:B1:0F:7E:2C:CD:09:80:AE:8E:8F:99:23:94
            X509v3 Authority Key Identifier:
                keyid:9E:34:3F:04:C2:7D:15:45:5A:AA:5C:DA:A4:56:9D:37:A8:89:50:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njQ_BMJ9FUVaqlzapFadN6iJUNc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/333034-e737-436d-b149-3119d3332282/1/njQ_BMJ9FUVaqlzapFadN6iJUNc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/333034-e737-436d-b149-3119d3332282/1/njQ_BMJ9FUVaqlzapFadN6iJUNc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:c2:50:b7:b7:bc:8d:1e:39:16:d1:c0:95:e4:85:be:75:74:
         36:d8:e0:cc:51:17:5f:dc:e0:54:b4:a9:94:6d:eb:c7:7c:af:
         fb:6b:26:aa:d2:e7:5d:71:5d:c6:5e:54:0c:19:ec:42:0a:3f:
         94:71:9f:67:e0:10:2a:eb:85:7a:12:2d:ff:77:33:65:a0:7d:
         d2:9e:08:92:75:4a:94:3b:d3:65:21:93:40:df:e3:f8:97:9f:
         3f:49:9a:19:5e:3d:fb:cd:3c:3b:2e:1f:20:70:b8:66:94:19:
         80:5d:0a:12:7b:17:73:71:2e:f5:71:53:a2:c6:f0:a2:aa:09:
         44:33:31:9c:d9:5f:c3:33:e8:ca:97:e5:d8:8a:1f:49:53:ed:
         ad:e7:2b:3a:6e:59:d5:4c:88:48:22:87:a9:0d:df:84:17:df:
         02:3e:5d:56:c7:4e:3e:25:e6:45:0c:c9:b7:82:c3:46:d3:e2:
         7c:a9:66:38:73:5d:12:b5:68:82:63:18:a4:e3:a1:6a:79:f2:
         98:27:9c:b6:ad:02:43:82:b1:22:67:74:bd:55:e9:c0:5f:4f:
         5f:f8:07:eb:66:e4:4c:f6:30:b0:0a:81:40:ab:b1:f8:04:9c:
         cf:ed:a3:30:61:6a:f5:a7:57:f6:96:60:f3:84:9e:83:3d:78:
         87:5e:24:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3s3cGB2ECAFM/8VJ1sJzVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllMzQzZjA0YzI3ZDE1NDU1YWFhNWNkYWE0NTY5ZDM3YTg4
OTUwZDcwHhcNMjUwNjI4MTgwMTIxWhcNMjUwNjI5MTgwMTIxWjAzMTEwLwYDVQQD
Eyg0MzdiNzk0ZWQ4NjQzZWIxMGY3ZTJjY2QwOTgwYWU4ZThmOTkyMzk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIssY27JqjdOFIO8E/VH9Bzhf/pS
+fpVQB0ervYfck6Vr9hywcmPfi5Ft40qUf2Sfuv6iLX4N1uc9/2Zz/8HJt7XWUlm
R4s7eWAi801FV3YFCq0mAY7MeZqH8q2D/RwqbmnRhvp/cbUFw+YNJP/zpQJXJaDU
/6m39TmMRn4/xY6459SotOX7Bim8VPSYHndkIdq5HN3NomTzgMnykH33Hxm7Ayx5
XYU10/F7rtHBM2q6mYOJcvQzC5tQ73016QR0nd5TPM6p3EckSKvbI0esYn6XrOVA
MxeQ/tYvNbKQmgeNPN8zBzwGNHIIvV1AuGCdjH3+0OJeI3Hezg/xU2jYEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEN7eU7YZD6xD34szQmAro6PmSOUMB8GA1UdIwQY
MBaAFJ40PwTCfRVFWqpc2qRWnTeoiVDXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmpRX0JNSjlGVVZhcWx6YXBGYWRONmlKVU5jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8zMzMwMzQtZTczNy00MzZkLWIxNDkt
MzExOWQzMzMyMjgyLzEvbmpRX0JNSjlGVVZhcWx6YXBGYWRONmlKVU5jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy8zMzMwMzQtZTczNy00MzZkLWIxNDktMzExOWQzMzMyMjgy
LzEvbmpRX0JNSjlGVVZhcWx6YXBGYWRONmlKVU5jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbMJQt7e8
jR45FtHAleSFvnV0NtjgzFEXX9zgVLSplG3rx3yv+2smqtLnXXFdxl5UDBnsQgo/
lHGfZ+AQKuuFehIt/3czZaB90p4IknVKlDvTZSGTQN/j+JefP0maGV49+808Oy4f
IHC4ZpQZgF0KEnsXc3Eu9XFTosbwoqoJRDMxnNlfwzPoypfl2IofSVPtrecrOm5Z
1UyISCKHqQ3fhBffAj5dVsdOPiXmRQzJt4LDRtPifKlmOHNdErVogmMYpOOhanny
mCectq0CQ4KxImd0vVXpwF9PX/gH62bkTPYwsAqBQKux+AScz+2jMGFq9adX9pZg
84Segz14h14kjw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:00:04 2025 by rpki-client