Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/felj7OLwup93SayjhUIPnXAuqos.mft
File:                     felj7OLwup93SayjhUIPnXAuqos.mft (raw, json)
Hash identifier:          kqxRwJuFe+DZe3VxyYnyVmKCLnusWzUzdh0HIxFuEGo=
Subject key identifier:   77:4B:6C:FD:D7:66:C2:BC:27:82:88:76:93:48:5E:5D:10:C5:A8:23
Authority key identifier: 7D:E9:63:EC:E2:F0:BA:9F:77:49:AC:A3:85:42:0F:9D:70:2E:AA:8B
Certificate issuer:       /CN=7de963ece2f0ba9f7749aca385420f9d702eaa8b
Certificate serial:       01976C62424FC6EB3DA5CF9DA99D8EB85EAC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/felj7OLwup93SayjhUIPnXAuqos.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/felj7OLwup93SayjhUIPnXAuqos.mft
Manifest number:          0E41
Signing time:             Sat 14 Jun 2025 03:01:08 +0000
Manifest this update:     Sat 14 Jun 2025 03:01:08 +0000
Manifest next update:     Sun 15 Jun 2025 03:01:08 +0000
Files and hashes:         1: POu4BRKwJ9b6QnLtzzujF-OJsSQ.roa (hash: XnOw29GXgrIDV++SsvKlXzYrR59LZbUOXYaVKIhexjc=)
                          2: felj7OLwup93SayjhUIPnXAuqos.crl (hash: AS8FYA9BNmJ2vbZG3Q86dWVijBvZBxxtbIojCp2VScg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/felj7OLwup93SayjhUIPnXAuqos.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/felj7OLwup93SayjhUIPnXAuqos.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/felj7OLwup93SayjhUIPnXAuqos.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:62:42:4f:c6:eb:3d:a5:cf:9d:a9:9d:8e:b8:5e:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7de963ece2f0ba9f7749aca385420f9d702eaa8b
        Validity
            Not Before: Jun 14 03:01:08 2025 GMT
            Not After : Jun 15 03:01:08 2025 GMT
        Subject: CN=774b6cfdd766c2bc2782887693485e5d10c5a823
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a2:87:eb:0b:43:f9:88:1a:66:49:53:54:3a:
                    e2:d1:9e:e9:20:82:0e:2e:92:8a:d8:b7:dd:a7:98:
                    58:1c:f0:7a:c3:8f:c5:5f:4b:0e:cb:00:19:da:51:
                    4b:d4:cb:44:47:1f:4b:d7:30:9a:6e:fc:7d:86:6b:
                    59:5a:04:1a:a6:38:4a:f9:c3:a9:b1:05:85:7f:77:
                    64:1e:de:89:27:07:41:de:ba:50:dd:64:ec:0c:2c:
                    3a:97:4e:8e:38:dd:e4:e1:e7:b1:35:8f:02:6b:73:
                    3b:4e:66:39:f8:20:c8:c0:a3:e4:45:fe:3c:50:11:
                    43:60:57:5f:53:4a:1d:24:2a:40:a4:e8:33:ba:d0:
                    d9:fb:42:26:80:32:9e:c8:8d:fa:71:6c:76:b1:0f:
                    71:fb:5c:15:ee:0c:5e:23:54:11:73:45:7c:0b:46:
                    f4:f5:cf:a4:68:07:43:12:61:11:9e:a6:e8:d1:b0:
                    5b:ec:31:9d:5c:0c:c0:24:a7:21:4a:bd:31:9a:12:
                    fa:dd:66:ea:19:56:fa:2d:82:c1:60:a0:3e:b4:16:
                    30:d1:cc:2b:e2:13:49:9d:36:dd:31:fe:4e:6f:cb:
                    48:4c:d5:b9:a6:0d:b0:11:6b:f6:25:cb:a5:49:e1:
                    56:c4:75:3d:ad:2c:9f:65:a0:65:0a:c1:3c:8c:ab:
                    f3:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:4B:6C:FD:D7:66:C2:BC:27:82:88:76:93:48:5E:5D:10:C5:A8:23
            X509v3 Authority Key Identifier:
                keyid:7D:E9:63:EC:E2:F0:BA:9F:77:49:AC:A3:85:42:0F:9D:70:2E:AA:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/felj7OLwup93SayjhUIPnXAuqos.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/felj7OLwup93SayjhUIPnXAuqos.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/felj7OLwup93SayjhUIPnXAuqos.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:77:64:a6:5e:f7:7e:b9:ac:4f:99:89:26:53:ca:1a:d5:9a:
         d7:7c:1f:18:ad:d4:d2:1b:f5:0c:86:42:47:07:78:84:c2:f6:
         57:1e:86:f0:9f:b8:3d:bc:74:ac:01:8c:e7:d0:fb:4d:39:17:
         f1:6c:af:1c:1e:d9:04:fc:47:a1:3c:f1:ab:96:05:c0:b2:e6:
         3c:4d:c0:78:64:43:a3:2d:82:ec:5e:e7:39:d0:dd:df:5b:a5:
         fe:de:7c:ab:73:01:fa:87:f1:75:64:6b:59:dc:37:b7:86:16:
         b8:04:c9:fc:dc:ed:4c:cf:e9:07:f0:a1:1b:01:b0:70:0b:43:
         1b:69:20:2b:2a:ff:57:ad:14:7e:c6:0f:d3:44:2a:f2:9c:e1:
         c5:7f:71:4f:3e:7a:e9:5a:02:5d:f1:8d:ad:9b:09:44:31:25:
         52:34:cc:97:54:04:41:9c:be:72:b8:78:29:90:f6:15:7d:ed:
         14:74:54:26:9f:da:2d:1c:30:f0:e8:92:ae:f0:fd:bd:da:7d:
         d6:36:b0:0f:b9:85:fa:28:f6:a5:2b:b9:cc:7b:59:60:aa:4e:
         1d:15:94:14:ca:69:ea:2b:67:46:ba:77:5a:bb:5b:f7:65:5f:
         8b:56:45:47:77:c2:94:9b:1f:27:22:3c:7c:bc:d0:7d:e8:db:
         aa:06:84:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsYkJPxus9pc+dqZ2OuF6sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkZTk2M2VjZTJmMGJhOWY3NzQ5YWNhMzg1NDIwZjlkNzAy
ZWFhOGIwHhcNMjUwNjE0MDMwMTA4WhcNMjUwNjE1MDMwMTA4WjAzMTEwLwYDVQQD
Eyg3NzRiNmNmZGQ3NjZjMmJjMjc4Mjg4NzY5MzQ4NWU1ZDEwYzVhODIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwaKH6wtD+YgaZklTVDri0Z7pIIIO
LpKK2Lfdp5hYHPB6w4/FX0sOywAZ2lFL1MtERx9L1zCabvx9hmtZWgQapjhK+cOp
sQWFf3dkHt6JJwdB3rpQ3WTsDCw6l06OON3k4eexNY8Ca3M7TmY5+CDIwKPkRf48
UBFDYFdfU0odJCpApOgzutDZ+0ImgDKeyI36cWx2sQ9x+1wV7gxeI1QRc0V8C0b0
9c+kaAdDEmERnqbo0bBb7DGdXAzAJKchSr0xmhL63WbqGVb6LYLBYKA+tBYw0cwr
4hNJnTbdMf5Ob8tITNW5pg2wEWv2JculSeFWxHU9rSyfZaBlCsE8jKvzZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHdLbP3XZsK8J4KIdpNIXl0QxagjMB8GA1UdIwQY
MBaAFH3pY+zi8Lqfd0mso4VCD51wLqqLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmVsajdPTHd1cDkzU2F5amhVSVBuWEF1cW9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9mZjYwNTItZmE4MC00NGI4LWFmY2Et
NmUyZGVhMDNkNTk2LzEvZmVsajdPTHd1cDkzU2F5amhVSVBuWEF1cW9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS9mZjYwNTItZmE4MC00NGI4LWFmY2EtNmUyZGVhMDNkNTk2
LzEvZmVsajdPTHd1cDkzU2F5amhVSVBuWEF1cW9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASndkpl73
frmsT5mJJlPKGtWa13wfGK3U0hv1DIZCRwd4hML2Vx6G8J+4Pbx0rAGM59D7TTkX
8WyvHB7ZBPxHoTzxq5YFwLLmPE3AeGRDoy2C7F7nOdDd31ul/t58q3MB+ofxdWRr
Wdw3t4YWuATJ/NztTM/pB/ChGwGwcAtDG2kgKyr/V60UfsYP00Qq8pzhxX9xTz56
6VoCXfGNrZsJRDElUjTMl1QEQZy+crh4KZD2FX3tFHRUJp/aLRww8OiSrvD9vdp9
1jawD7mF+ij2pSu5zHtZYKpOHRWUFMpp6itnRrp3Wrtb92Vfi1ZFR3fClJsfJyI8
fLzQfejbqgaErw==
-----END CERTIFICATE-----
Generated at Sat Jun 14 12:24:42 2025 by rpki-client