Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.mft
File:                     8dK6iiqWoHtbZMr4cykOIHjZZKY.mft (raw, json)
Hash identifier:          ru7adMX9pk9+/Z9xrtl8oJrp9vx5AAPXP/JiKY7mx9M=
Subject key identifier:   8B:F3:71:9A:7D:EB:0E:E2:DF:BD:AD:98:00:EF:8E:15:ED:13:5E:BE
Authority key identifier: F1:D2:BA:8A:2A:96:A0:7B:5B:64:CA:F8:73:29:0E:20:78:D9:64:A6
Certificate issuer:       /CN=f1d2ba8a2a96a07b5b64caf873290e2078d964a6
Certificate serial:       019774891834E069B96490B1C9F1651F8A5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8dK6iiqWoHtbZMr4cykOIHjZZKY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.mft
Manifest number:          0513
Signing time:             Sun 15 Jun 2025 17:00:30 +0000
Manifest this update:     Sun 15 Jun 2025 17:00:30 +0000
Manifest next update:     Mon 16 Jun 2025 17:00:30 +0000
Files and hashes:         1: 1-a6iBHASMUxMW7asjxbfE0QEd5w.roa (hash: m3RXlatEBF9cA7N2EEjPPwV4+LMKEGb0hrpMsfXqqsk=)
                          2: 8dK6iiqWoHtbZMr4cykOIHjZZKY.crl (hash: YmXtiA7IIOMGR0jCRnJdWIFwAxLS4pMIU81c3/ZjwIg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8dK6iiqWoHtbZMr4cykOIHjZZKY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 17:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:74:89:18:34:e0:69:b9:64:90:b1:c9:f1:65:1f:8a:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1d2ba8a2a96a07b5b64caf873290e2078d964a6
        Validity
            Not Before: Jun 15 17:00:30 2025 GMT
            Not After : Jun 16 17:00:30 2025 GMT
        Subject: CN=8bf3719a7deb0ee2dfbdad9800ef8e15ed135ebe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e4:d7:04:a4:57:89:bb:24:93:4b:01:a1:ba:
                    98:7e:f5:6a:5a:82:f3:4d:a0:54:cc:38:29:4a:51:
                    34:b5:9d:94:f8:eb:ca:26:d5:2d:d5:b3:e0:7b:cd:
                    8b:a3:4f:85:e4:1b:88:b8:a8:69:38:d0:1f:d1:87:
                    ef:da:24:14:aa:b3:35:c4:0b:92:35:ba:af:32:8a:
                    96:ed:48:bd:56:d0:dc:74:d0:5e:d2:42:bd:da:41:
                    63:a8:a1:29:ca:a0:f5:52:a2:16:90:da:1e:2e:d4:
                    4b:32:89:02:8b:7a:bd:de:3a:4c:12:65:32:39:9e:
                    7a:52:5a:5d:42:fe:89:b3:b0:99:c1:50:97:9b:94:
                    06:45:81:93:0b:26:39:5b:2c:61:5e:27:b7:43:72:
                    9a:3d:9a:b7:04:55:8e:d9:ad:ae:22:60:3f:63:7e:
                    ed:c5:96:e0:4c:cc:9a:bb:af:2b:98:4d:a5:e1:10:
                    df:5f:52:76:f8:73:b9:c8:82:95:13:ae:a5:c5:58:
                    49:db:a9:d9:70:72:e8:7a:a4:36:c9:fb:dc:11:7e:
                    64:4d:d5:af:21:5e:a8:7d:aa:3d:4a:65:1e:52:8e:
                    4f:e1:37:c7:5f:e8:fd:f3:22:3e:24:5c:df:80:2d:
                    5b:e0:cb:48:b7:ca:77:4d:e2:79:97:99:91:a4:e8:
                    e5:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:F3:71:9A:7D:EB:0E:E2:DF:BD:AD:98:00:EF:8E:15:ED:13:5E:BE
            X509v3 Authority Key Identifier:
                keyid:F1:D2:BA:8A:2A:96:A0:7B:5B:64:CA:F8:73:29:0E:20:78:D9:64:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dK6iiqWoHtbZMr4cykOIHjZZKY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:6c:4e:2f:c3:a1:b3:23:bf:4f:02:af:73:44:0d:5a:ad:56:
         8d:eb:de:04:ec:79:64:86:ec:27:52:44:4c:9a:58:f3:10:b3:
         a1:5a:d2:cd:16:e7:69:99:b7:8b:7b:75:97:1f:b1:b8:03:a8:
         c3:16:f4:23:b2:ae:7b:e3:2b:8a:e0:43:59:1f:88:56:74:93:
         8c:49:8e:a4:d0:11:d3:36:ba:c5:3f:07:9e:97:0b:9f:3d:17:
         91:9a:50:36:6c:32:6f:31:7a:d6:75:d5:da:c0:e2:83:26:88:
         db:0b:1d:07:09:e2:03:38:3b:e2:a1:59:e5:da:00:49:a8:da:
         ac:10:79:00:b6:d5:d3:10:0d:51:c0:59:fc:33:ac:0d:f3:cb:
         3b:18:f7:1e:2b:26:27:c0:3c:ed:2d:9d:d3:1a:a3:d1:00:88:
         5d:1d:cf:8e:8e:b4:80:a7:91:21:c4:28:aa:98:cd:2d:10:8d:
         06:b7:a7:0d:e0:bc:44:a1:c3:3a:3c:4e:a9:df:50:20:31:b2:
         c5:05:5d:b7:35:b6:6c:b2:ac:22:5b:75:69:fc:ff:5b:59:eb:
         0e:93:60:4d:3b:09:f2:ce:28:b8:96:de:99:a4:1d:3a:58:f6:
         0f:85:d8:a2:f2:bf:06:14:a3:39:b4:05:6b:c6:b6:fc:93:71:
         8b:fb:36:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd0iRg04Gm5ZJCxyfFlH4pcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxZDJiYThhMmE5NmEwN2I1YjY0Y2FmODczMjkwZTIwNzhk
OTY0YTYwHhcNMjUwNjE1MTcwMDMwWhcNMjUwNjE2MTcwMDMwWjAzMTEwLwYDVQQD
Eyg4YmYzNzE5YTdkZWIwZWUyZGZiZGFkOTgwMGVmOGUxNWVkMTM1ZWJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+TXBKRXibskk0sBobqYfvVqWoLz
TaBUzDgpSlE0tZ2U+OvKJtUt1bPge82Lo0+F5BuIuKhpONAf0Yfv2iQUqrM1xAuS
NbqvMoqW7Ui9VtDcdNBe0kK92kFjqKEpyqD1UqIWkNoeLtRLMokCi3q93jpMEmUy
OZ56UlpdQv6Js7CZwVCXm5QGRYGTCyY5WyxhXie3Q3KaPZq3BFWO2a2uImA/Y37t
xZbgTMyau68rmE2l4RDfX1J2+HO5yIKVE66lxVhJ26nZcHLoeqQ2yfvcEX5kTdWv
IV6ofao9SmUeUo5P4TfHX+j98yI+JFzfgC1b4MtIt8p3TeJ5l5mRpOjl6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIvzcZp96w7i372tmADvjhXtE16+MB8GA1UdIwQY
MBaAFPHSuooqlqB7W2TK+HMpDiB42WSmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGRLNmlpcVdvSHRiWk1yNGN5a09JSGpaWktZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS84MDc1YTAtMGM1ZS00Yzc4LWJkYjEt
ZDE2ODk4MDE2Y2ZlLzEvOGRLNmlpcVdvSHRiWk1yNGN5a09JSGpaWktZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS84MDc1YTAtMGM1ZS00Yzc4LWJkYjEtZDE2ODk4MDE2Y2Zl
LzEvOGRLNmlpcVdvSHRiWk1yNGN5a09JSGpaWktZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOmxOL8Oh
syO/TwKvc0QNWq1WjeveBOx5ZIbsJ1JETJpY8xCzoVrSzRbnaZm3i3t1lx+xuAOo
wxb0I7Kue+MriuBDWR+IVnSTjEmOpNAR0za6xT8HnpcLnz0XkZpQNmwybzF61nXV
2sDigyaI2wsdBwniAzg74qFZ5doASajarBB5ALbV0xANUcBZ/DOsDfPLOxj3Hism
J8A87S2d0xqj0QCIXR3Pjo60gKeRIcQoqpjNLRCNBrenDeC8RKHDOjxOqd9QIDGy
xQVdtzW2bLKsIlt1afz/W1nrDpNgTTsJ8s4ouJbemaQdOlj2D4XYovK/BhSjObQF
a8a2/JNxi/s2Pg==
-----END CERTIFICATE-----
Generated at Mon Jun 16 02:44:27 2025 by rpki-client