Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/75baf6-724f-4c0b-be89-2fd63a12d66c/1/N6VPsHvqPfVW41k0VNMg5PAO7yw.mft
File:                     N6VPsHvqPfVW41k0VNMg5PAO7yw.mft (raw, json)
Hash identifier:          tx4hI2iMXasYtxjQ57sWlrF9ZsFdae5+Wqwg3ZcOMAA=
Subject key identifier:   D8:AA:D9:E0:AE:82:5A:48:EB:39:25:20:FD:44:75:31:51:E8:BE:F8
Authority key identifier: 37:A5:4F:B0:7B:EA:3D:F5:56:E3:59:34:54:D3:20:E4:F0:0E:EF:2C
Certificate issuer:       /CN=37a54fb07bea3df556e3593454d320e4f00eef2c
Certificate serial:       0197B5FC4F60A4C17180444C46206F9F9911
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N6VPsHvqPfVW41k0VNMg5PAO7yw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/75baf6-724f-4c0b-be89-2fd63a12d66c/1/N6VPsHvqPfVW41k0VNMg5PAO7yw.mft
Manifest number:          03CC
Signing time:             Sat 28 Jun 2025 10:01:40 +0000
Manifest this update:     Sat 28 Jun 2025 10:01:40 +0000
Manifest next update:     Sun 29 Jun 2025 10:01:40 +0000
Files and hashes:         1: N6VPsHvqPfVW41k0VNMg5PAO7yw.crl (hash: 6CBKxvr9+ps3qY7sFGcZDJ1KV4zebdlKYLkrSQLfVfg=)
                          2: Z9jKPG-aJrl0Zezz0qMB35u4yX4.roa (hash: 2A8HZxxRaB1bgoi8TMjFDPNN3FGgJuX9XCmcDH5eYKg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/75baf6-724f-4c0b-be89-2fd63a12d66c/1/N6VPsHvqPfVW41k0VNMg5PAO7yw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/75baf6-724f-4c0b-be89-2fd63a12d66c/1/N6VPsHvqPfVW41k0VNMg5PAO7yw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N6VPsHvqPfVW41k0VNMg5PAO7yw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b5:fc:4f:60:a4:c1:71:80:44:4c:46:20:6f:9f:99:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37a54fb07bea3df556e3593454d320e4f00eef2c
        Validity
            Not Before: Jun 28 10:01:40 2025 GMT
            Not After : Jun 29 10:01:40 2025 GMT
        Subject: CN=d8aad9e0ae825a48eb392520fd44753151e8bef8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:30:ae:f9:0e:24:ec:13:da:2c:f0:d6:9d:cc:
                    eb:3e:b5:02:d9:5e:e8:3f:82:d6:9a:7b:f3:ce:0b:
                    fc:32:dc:c8:db:c9:ad:3e:d4:e8:6b:8b:35:dc:40:
                    47:de:5f:5e:78:f8:47:d1:22:5b:17:62:eb:60:44:
                    62:55:3f:5f:5e:af:b3:51:79:0d:7c:a1:56:8c:35:
                    c9:d5:62:f6:35:c1:b7:b2:5a:8c:69:e1:24:46:37:
                    86:5d:55:d0:c9:4a:39:74:f2:48:8b:bb:09:a8:79:
                    64:1e:e1:c0:10:ea:12:1a:b6:81:a0:f5:8c:2e:82:
                    e9:a1:15:c9:20:fa:72:ea:41:6a:c4:a8:70:80:82:
                    9f:ff:1d:9e:07:31:b4:a8:6a:23:07:50:da:3f:5e:
                    79:d2:3c:85:ae:36:ee:7f:00:62:37:12:0d:12:4a:
                    07:f5:a2:a4:e4:11:9d:d8:3c:e7:2e:f1:09:b4:d1:
                    31:08:d1:41:93:89:c7:21:25:e7:b2:ca:a8:47:ec:
                    0a:3b:3e:77:1e:7b:f1:8e:91:50:2a:07:21:64:64:
                    a1:14:a9:bf:ed:5f:1c:a1:41:2f:15:78:b0:30:6f:
                    f2:97:e1:5e:b7:eb:cb:cf:13:27:ab:67:2b:cf:c9:
                    a4:9f:60:f6:8b:4a:6b:97:1c:91:96:d4:e6:76:a9:
                    16:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:AA:D9:E0:AE:82:5A:48:EB:39:25:20:FD:44:75:31:51:E8:BE:F8
            X509v3 Authority Key Identifier:
                keyid:37:A5:4F:B0:7B:EA:3D:F5:56:E3:59:34:54:D3:20:E4:F0:0E:EF:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N6VPsHvqPfVW41k0VNMg5PAO7yw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/75baf6-724f-4c0b-be89-2fd63a12d66c/1/N6VPsHvqPfVW41k0VNMg5PAO7yw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/75baf6-724f-4c0b-be89-2fd63a12d66c/1/N6VPsHvqPfVW41k0VNMg5PAO7yw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:7c:18:fc:16:71:ab:f6:2f:2e:13:fc:9c:b6:cc:5e:5d:e4:
         64:65:a5:ef:28:6f:e1:06:f7:72:15:63:cf:e7:b9:6f:9d:98:
         44:36:59:dc:d4:76:51:f8:e1:27:58:e5:64:17:a9:67:a1:13:
         94:9c:36:51:ce:1c:f0:fc:2c:1a:f3:27:96:53:c0:f4:dc:1a:
         2c:f9:e6:3c:29:98:4a:16:69:93:f6:9a:ae:3d:2e:50:10:39:
         6a:8e:24:69:2b:16:cc:99:d2:40:d5:c0:de:0f:7c:eb:98:f7:
         50:d7:c5:47:03:67:f2:7e:4d:78:b4:b3:90:45:a8:bf:67:5b:
         25:55:e6:57:9e:d4:b1:c6:51:14:dc:c4:e5:2a:d5:5f:48:b2:
         32:ad:df:de:70:8a:c7:0e:2f:90:83:2f:1c:76:86:5d:cc:72:
         3f:30:f8:17:3d:ce:d2:33:76:8d:8d:5c:67:a6:21:5b:0f:ab:
         81:cc:d0:7b:e2:26:dd:82:f4:ae:31:0e:90:81:70:00:c7:f1:
         f7:6b:e0:28:f5:06:b7:de:b8:a6:ec:1a:08:da:49:71:2b:30:
         18:a9:19:36:52:54:ee:5d:22:44:d1:1b:d4:f2:dd:a7:d1:62:
         75:bd:3e:39:8a:a6:06:07:de:f2:f6:c2:3a:b9:de:6a:5a:5c:
         c2:4b:af:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe1/E9gpMFxgERMRiBvn5kRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3YTU0ZmIwN2JlYTNkZjU1NmUzNTkzNDU0ZDMyMGU0ZjAw
ZWVmMmMwHhcNMjUwNjI4MTAwMTQwWhcNMjUwNjI5MTAwMTQwWjAzMTEwLwYDVQQD
EyhkOGFhZDllMGFlODI1YTQ4ZWIzOTI1MjBmZDQ0NzUzMTUxZThiZWY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0DCu+Q4k7BPaLPDWnczrPrUC2V7o
P4LWmnvzzgv8MtzI28mtPtToa4s13EBH3l9eePhH0SJbF2LrYERiVT9fXq+zUXkN
fKFWjDXJ1WL2NcG3slqMaeEkRjeGXVXQyUo5dPJIi7sJqHlkHuHAEOoSGraBoPWM
LoLpoRXJIPpy6kFqxKhwgIKf/x2eBzG0qGojB1DaP1550jyFrjbufwBiNxINEkoH
9aKk5BGd2DznLvEJtNExCNFBk4nHISXnssqoR+wKOz53HnvxjpFQKgchZGShFKm/
7V8coUEvFXiwMG/yl+Fet+vLzxMnq2crz8mkn2D2i0prlxyRltTmdqkWTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNiq2eCuglpI6zklIP1EdTFR6L74MB8GA1UdIwQY
MBaAFDelT7B76j31VuNZNFTTIOTwDu8sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjZWUHNIdnFQZlZXNDFrMFZOTWc1UEFPN3l3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi83NWJhZjYtNzI0Zi00YzBiLWJlODkt
MmZkNjNhMTJkNjZjLzEvTjZWUHNIdnFQZlZXNDFrMFZOTWc1UEFPN3l3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi83NWJhZjYtNzI0Zi00YzBiLWJlODktMmZkNjNhMTJkNjZj
LzEvTjZWUHNIdnFQZlZXNDFrMFZOTWc1UEFPN3l3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM3wY/BZx
q/YvLhP8nLbMXl3kZGWl7yhv4Qb3chVjz+e5b52YRDZZ3NR2UfjhJ1jlZBepZ6ET
lJw2Uc4c8PwsGvMnllPA9NwaLPnmPCmYShZpk/aarj0uUBA5ao4kaSsWzJnSQNXA
3g9865j3UNfFRwNn8n5NeLSzkEWov2dbJVXmV57UscZRFNzE5SrVX0iyMq3f3nCK
xw4vkIMvHHaGXcxyPzD4Fz3O0jN2jY1cZ6YhWw+rgczQe+Im3YL0rjEOkIFwAMfx
92vgKPUGt964puwaCNpJcSswGKkZNlJU7l0iRNEb1PLdp9Fidb0+OYqmBgfe8vbC
Ornealpcwkuvmg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 18:54:45 2025 by rpki-client