Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.mft
File:                     n2PP8kRuzsvr4BJGNpgLR-CyD6Y.mft (raw, json)
Hash identifier:          rxLOtvNwBVPl6Ru+2Xr/B39MjlzzONTBPJpi5jSYOSg=
Subject key identifier:   B5:A3:81:ED:AC:62:9F:21:A9:09:AE:70:EE:86:0E:01:29:D1:B5:83
Authority key identifier: 9F:63:CF:F2:44:6E:CE:CB:EB:E0:12:46:36:98:0B:47:E0:B2:0F:A6
Certificate issuer:       /CN=9f63cff2446ececbebe0124636980b47e0b20fa6
Certificate serial:       019771881013F1A0A402AB0BF477E066F65F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.mft
Manifest number:          0D00
Signing time:             Sun 15 Jun 2025 03:00:31 +0000
Manifest this update:     Sun 15 Jun 2025 03:00:31 +0000
Manifest next update:     Mon 16 Jun 2025 03:00:31 +0000
Files and hashes:         1: 3PWYGF7PsxnPXxj5QLlwFzdRhbc.roa (hash: aJRxgQh7BxmkL4a1Mj0Fr2c3xjK5a/VBrY9HD8oJxXw=)
                          2: Zui9qtQV4KiP1G1w7-U9vy20ZFM.roa (hash: wpcPrt+AyPc1ASjLftJfcLWQI1C4woYgXnX5ExSKCJw=)
                          3: n2PP8kRuzsvr4BJGNpgLR-CyD6Y.crl (hash: D7TdDnu0QRJwj7YIMI568Qs94UP+dowKmKX6F7GZ/f4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 22:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:71:88:10:13:f1:a0:a4:02:ab:0b:f4:77:e0:66:f6:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f63cff2446ececbebe0124636980b47e0b20fa6
        Validity
            Not Before: Jun 15 03:00:31 2025 GMT
            Not After : Jun 16 03:00:31 2025 GMT
        Subject: CN=b5a381edac629f21a909ae70ee860e0129d1b583
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:cc:a2:26:2c:ae:57:10:ef:3f:ef:83:80:b0:
                    86:29:68:9a:ac:78:b2:d5:30:b9:37:f9:f0:2a:92:
                    e7:cb:71:e8:1d:31:0e:37:2d:a7:f6:f2:a3:77:5a:
                    24:cd:8d:f1:55:43:e7:26:08:cb:20:aa:40:08:21:
                    af:06:f8:12:07:f9:da:38:fb:1a:fc:ab:8d:7b:3c:
                    41:01:25:2a:08:1f:ee:80:94:29:82:00:8b:49:e8:
                    e2:67:3e:b8:91:13:d1:12:e6:bc:33:31:5c:80:76:
                    4a:3c:a2:78:63:9c:32:fa:d5:56:77:de:be:e2:3f:
                    33:28:b4:8e:48:b4:e6:24:be:13:c0:0e:a8:0e:4e:
                    e7:a8:d9:89:35:a7:56:b1:3d:a9:bb:9a:8f:88:1c:
                    e6:83:64:d7:cb:76:73:b0:16:cf:7f:ee:8b:ad:de:
                    68:13:ca:08:09:22:68:3b:46:ff:53:ac:33:da:f2:
                    e8:c8:fc:e2:97:e4:fd:14:b5:92:8d:f4:71:1f:00:
                    86:53:a6:98:c8:73:ac:ff:44:8e:2b:ba:b6:db:fa:
                    2e:dd:b6:4a:35:c4:64:ad:96:32:65:47:65:8c:9a:
                    0e:d0:64:42:b3:05:e2:68:e6:45:f7:d1:1b:84:43:
                    b2:f9:c3:4b:3c:9d:2e:18:c5:8e:79:c6:36:af:24:
                    42:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:A3:81:ED:AC:62:9F:21:A9:09:AE:70:EE:86:0E:01:29:D1:B5:83
            X509v3 Authority Key Identifier:
                keyid:9F:63:CF:F2:44:6E:CE:CB:EB:E0:12:46:36:98:0B:47:E0:B2:0F:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:9d:5c:db:87:51:35:f6:24:36:a5:c1:8f:ca:0c:e3:b8:77:
         f9:da:1a:09:63:15:24:e2:84:a5:43:9b:ab:16:26:a6:90:7a:
         48:4d:2f:d9:37:fe:5c:0a:dc:9d:92:62:e4:3f:ec:fe:02:ba:
         a5:b2:8a:a2:78:ae:11:55:b6:25:87:9d:6d:84:61:97:0a:71:
         df:c0:68:fa:8a:18:35:87:b2:71:d4:55:58:b3:d0:f0:0e:08:
         1b:fc:49:55:7a:8f:d3:92:1a:ed:01:9f:ec:6a:be:ad:39:e7:
         3e:7f:a6:8b:ec:e7:76:e1:9a:30:b8:97:0c:ee:5b:21:f6:fb:
         d4:49:52:fb:5b:be:ab:00:d1:a8:68:4d:d3:2d:76:16:bc:12:
         02:a1:a2:32:9e:e9:63:af:47:d3:3f:af:9f:bc:6b:7b:a0:f0:
         da:04:98:bc:f1:45:ac:d0:fc:3b:c2:e7:aa:ba:11:10:74:92:
         c0:dc:77:bc:ca:84:63:72:6d:0a:7d:73:7b:90:27:6e:c1:22:
         af:99:21:6b:38:07:5b:4a:26:8d:35:47:e1:a4:3d:54:c9:8d:
         2f:7a:72:87:3a:92:49:fb:45:a1:9b:fa:e7:5d:76:cc:c5:f2:
         ba:e7:5b:98:63:6f:80:64:77:e4:c3:2e:6e:78:07:c3:f2:84:
         21:5c:e6:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdxiBAT8aCkAqsL9HfgZvZfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmNjNjZmYyNDQ2ZWNlY2JlYmUwMTI0NjM2OTgwYjQ3ZTBi
MjBmYTYwHhcNMjUwNjE1MDMwMDMxWhcNMjUwNjE2MDMwMDMxWjAzMTEwLwYDVQQD
EyhiNWEzODFlZGFjNjI5ZjIxYTkwOWFlNzBlZTg2MGUwMTI5ZDFiNTgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsyiJiyuVxDvP++DgLCGKWiarHiy
1TC5N/nwKpLny3HoHTEONy2n9vKjd1okzY3xVUPnJgjLIKpACCGvBvgSB/naOPsa
/KuNezxBASUqCB/ugJQpggCLSejiZz64kRPREua8MzFcgHZKPKJ4Y5wy+tVWd96+
4j8zKLSOSLTmJL4TwA6oDk7nqNmJNadWsT2pu5qPiBzmg2TXy3ZzsBbPf+6Lrd5o
E8oICSJoO0b/U6wz2vLoyPzil+T9FLWSjfRxHwCGU6aYyHOs/0SOK7q22/ou3bZK
NcRkrZYyZUdljJoO0GRCswXiaOZF99EbhEOy+cNLPJ0uGMWOecY2ryRCcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLWjge2sYp8hqQmucO6GDgEp0bWDMB8GA1UdIwQY
MBaAFJ9jz/JEbs7L6+ASRjaYC0fgsg+mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjJQUDhrUnV6c3ZyNEJKR05wZ0xSLUN5RDZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi8yZjMyMjktYTEzMC00ZGM4LWE0N2It
MmRjMjZkYzRiYzExLzEvbjJQUDhrUnV6c3ZyNEJKR05wZ0xSLUN5RDZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi8yZjMyMjktYTEzMC00ZGM4LWE0N2ItMmRjMjZkYzRiYzEx
LzEvbjJQUDhrUnV6c3ZyNEJKR05wZ0xSLUN5RDZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHp1c24dR
NfYkNqXBj8oM47h3+doaCWMVJOKEpUObqxYmppB6SE0v2Tf+XArcnZJi5D/s/gK6
pbKKoniuEVW2JYedbYRhlwpx38Bo+ooYNYeycdRVWLPQ8A4IG/xJVXqP05Ia7QGf
7Gq+rTnnPn+mi+znduGaMLiXDO5bIfb71ElS+1u+qwDRqGhN0y12FrwSAqGiMp7p
Y69H0z+vn7xre6Dw2gSYvPFFrND8O8LnqroREHSSwNx3vMqEY3JtCn1ze5AnbsEi
r5khazgHW0omjTVH4aQ9VMmNL3pyhzqSSftFoZv65112zMXyuudbmGNvgGR35MMu
bngHw/KEIVzmOA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 07:36:27 2025 by rpki-client