Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.mft
File:                     nkNy9jkyun_o8WG1ZLk4YGFKgLo.mft (raw, json)
Hash identifier:          mKxkCol2lmcy5tQe2cxsWw3GchMrM4NE5h/dMpb5cdg=
Subject key identifier:   79:66:A8:31:67:44:E3:CB:9F:38:2C:8F:E8:FB:93:D4:54:7A:31:6D
Authority key identifier: 9E:43:72:F6:39:32:BA:7F:E8:F1:61:B5:64:B9:38:60:61:4A:80:BA
Certificate issuer:       /CN=9e4372f63932ba7fe8f161b564b93860614a80ba
Certificate serial:       0198D660A77C8A0FB35040BDD8E697DF7D1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nkNy9jkyun_o8WG1ZLk4YGFKgLo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.mft
Manifest number:          063D
Signing time:             Sat 23 Aug 2025 10:01:55 +0000
Manifest this update:     Sat 23 Aug 2025 10:01:55 +0000
Manifest next update:     Sun 24 Aug 2025 10:01:55 +0000
Files and hashes:         1: TaAxyGE0YZ7m-xRwM6T1q9wMqQw.roa (hash: 76tscvyJdodgkrjTmEZQdEHR921zYs8tliL/2ouT7RA=)
                          2: nkNy9jkyun_o8WG1ZLk4YGFKgLo.crl (hash: 2FGNR4hcFXHycOISAcpsbT4iYYrgDZlJ1SatLbDA4K8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nkNy9jkyun_o8WG1ZLk4YGFKgLo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 10:01:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:60:a7:7c:8a:0f:b3:50:40:bd:d8:e6:97:df:7d:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e4372f63932ba7fe8f161b564b93860614a80ba
        Validity
            Not Before: Aug 23 10:01:55 2025 GMT
            Not After : Aug 24 10:01:55 2025 GMT
        Subject: CN=7966a8316744e3cb9f382c8fe8fb93d4547a316d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:f0:74:f0:cb:f8:eb:48:00:1e:36:bd:1e:5a:
                    52:b8:88:a8:51:84:db:79:24:dd:56:b0:ea:a2:e9:
                    4e:8e:39:88:70:e0:84:c3:9d:c3:7f:88:f7:03:a0:
                    3e:b8:26:ff:32:51:24:2f:3c:d4:56:8c:07:ad:ea:
                    3f:d9:c7:95:f0:72:e9:28:74:43:a7:61:7f:7c:fe:
                    b0:bb:ff:9d:0b:a6:11:8a:44:98:f1:49:30:de:28:
                    5f:c3:90:7d:56:6d:c6:4c:db:0c:77:ac:36:f6:1c:
                    11:c8:1a:83:0d:75:5c:17:de:96:3c:a2:3a:2f:e1:
                    4d:1b:b8:c7:05:63:6c:4d:cd:e4:ad:c9:0e:bd:99:
                    fb:12:18:ae:94:f0:ec:10:08:96:0a:02:6b:f5:9d:
                    a0:a5:69:0f:22:ad:be:80:99:b6:3f:18:a4:27:26:
                    53:b4:6d:5e:e1:80:fc:a6:26:dd:33:bb:c8:b8:3c:
                    7b:aa:d4:b0:22:fa:37:a8:fb:cc:14:05:d6:02:d7:
                    d5:ee:ea:37:05:93:75:85:9a:80:44:e5:5f:96:e8:
                    a2:a4:3e:6e:e8:a6:e0:67:f6:a3:4c:c2:72:26:b5:
                    bb:d7:cb:fa:d7:e1:7f:3f:d2:6b:3f:7e:37:1a:9e:
                    20:5d:42:59:2d:ee:f1:0a:e9:6f:68:d6:53:74:8f:
                    36:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:66:A8:31:67:44:E3:CB:9F:38:2C:8F:E8:FB:93:D4:54:7A:31:6D
            X509v3 Authority Key Identifier:
                keyid:9E:43:72:F6:39:32:BA:7F:E8:F1:61:B5:64:B9:38:60:61:4A:80:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkNy9jkyun_o8WG1ZLk4YGFKgLo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/3967a6-79f3-4aff-b34b-ae0ea6643bbd/1/nkNy9jkyun_o8WG1ZLk4YGFKgLo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:f8:e1:88:25:89:c1:f5:9b:db:f4:74:0a:14:3f:f9:1b:56:
         ac:16:17:11:35:66:e5:6f:0c:85:98:d9:12:cb:23:87:be:7a:
         cf:e1:b2:65:ea:1f:ee:5d:ca:bc:c2:2b:67:5c:25:fd:c1:74:
         41:07:ea:d4:2e:3d:72:5a:7d:75:a2:67:51:4a:2f:bf:ce:3a:
         4e:e0:77:df:c0:df:6a:a2:7a:a3:1c:da:cb:22:5d:bc:03:72:
         04:4c:45:77:5a:c5:70:9d:53:dc:76:e0:6b:c3:1a:85:35:79:
         21:5a:83:87:83:89:f9:73:ff:f7:62:ff:1c:b6:0d:b4:48:1c:
         a8:d3:7b:c0:b3:97:f2:8b:72:47:6e:03:60:9d:26:5c:bd:35:
         70:89:20:95:58:9e:3a:37:58:77:90:74:4a:e5:39:8c:ba:e1:
         b2:40:c6:39:97:d9:10:1f:4f:7f:c8:02:d6:dc:73:1b:43:31:
         20:11:63:a8:47:2c:55:1d:e5:32:09:bd:52:e7:93:30:33:90:
         13:de:a4:df:4b:02:09:16:5a:b2:6f:85:1b:6b:3f:c4:3f:ed:
         d1:03:bb:ef:b4:c0:88:8a:17:6f:15:7a:ae:24:08:37:1d:aa:
         f7:4b:09:ae:ec:14:e6:96:3d:47:ed:5c:87:17:c2:4c:bb:1d:
         47:36:63:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYKd8ig+zUEC92OaX330bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllNDM3MmY2MzkzMmJhN2ZlOGYxNjFiNTY0YjkzODYwNjE0
YTgwYmEwHhcNMjUwODIzMTAwMTU1WhcNMjUwODI0MTAwMTU1WjAzMTEwLwYDVQQD
Eyg3OTY2YTgzMTY3NDRlM2NiOWYzODJjOGZlOGZiOTNkNDU0N2EzMTZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2PB08Mv460gAHja9HlpSuIioUYTb
eSTdVrDqoulOjjmIcOCEw53Df4j3A6A+uCb/MlEkLzzUVowHreo/2ceV8HLpKHRD
p2F/fP6wu/+dC6YRikSY8Ukw3ihfw5B9Vm3GTNsMd6w29hwRyBqDDXVcF96WPKI6
L+FNG7jHBWNsTc3krckOvZn7EhiulPDsEAiWCgJr9Z2gpWkPIq2+gJm2PxikJyZT
tG1e4YD8pibdM7vIuDx7qtSwIvo3qPvMFAXWAtfV7uo3BZN1hZqAROVfluiipD5u
6KbgZ/ajTMJyJrW718v61+F/P9JrP343Gp4gXUJZLe7xCulvaNZTdI82JwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHlmqDFnROPLnzgsj+j7k9RUejFtMB8GA1UdIwQY
MBaAFJ5DcvY5Mrp/6PFhtWS5OGBhSoC6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmtOeTlqa3l1bl9vOFdHMVpMazRZR0ZLZ0xvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi8zOTY3YTYtNzlmMy00YWZmLWIzNGIt
YWUwZWE2NjQzYmJkLzEvbmtOeTlqa3l1bl9vOFdHMVpMazRZR0ZLZ0xvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi8zOTY3YTYtNzlmMy00YWZmLWIzNGItYWUwZWE2NjQzYmJk
LzEvbmtOeTlqa3l1bl9vOFdHMVpMazRZR0ZLZ0xvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT/jhiCWJ
wfWb2/R0ChQ/+RtWrBYXETVm5W8MhZjZEssjh756z+GyZeof7l3KvMIrZ1wl/cF0
QQfq1C49clp9daJnUUovv846TuB338DfaqJ6oxzayyJdvANyBExFd1rFcJ1T3Hbg
a8MahTV5IVqDh4OJ+XP/92L/HLYNtEgcqNN7wLOX8otyR24DYJ0mXL01cIkglVie
OjdYd5B0SuU5jLrhskDGOZfZEB9Pf8gC1txzG0MxIBFjqEcsVR3lMgm9UueTMDOQ
E96k30sCCRZasm+FG2s/xD/t0QO777TAiIoXbxV6riQINx2q90sJruwU5pY9R+1c
hxfCTLsdRzZjZQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:58:01 2025 by rpki-client