Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/6d854c-c513-4290-95d4-93f9aefeeb12/1/K8J94IFvfguHpzPdMZkInlN_Jhw.mft
File:                     K8J94IFvfguHpzPdMZkInlN_Jhw.mft (raw, json)
Hash identifier:          +TB4nn5QkNiplfgDbgLHpE9J7L+uMwOAShaEjhzvhHM=
Subject key identifier:   F0:21:9D:42:78:75:92:18:B9:63:D4:4B:10:E6:A7:B0:A4:62:57:B3
Authority key identifier: 2B:C2:7D:E0:81:6F:7E:0B:87:A7:33:DD:31:99:08:9E:53:7F:26:1C
Certificate issuer:       /CN=2bc27de0816f7e0b87a733dd3199089e537f261c
Certificate serial:       01977B9E13C38CF643F3D84320E9ADFC0D76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K8J94IFvfguHpzPdMZkInlN_Jhw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/6d854c-c513-4290-95d4-93f9aefeeb12/1/K8J94IFvfguHpzPdMZkInlN_Jhw.mft
Manifest number:          0B87
Signing time:             Tue 17 Jun 2025 02:00:46 +0000
Manifest this update:     Tue 17 Jun 2025 02:00:46 +0000
Manifest next update:     Wed 18 Jun 2025 02:00:46 +0000
Files and hashes:         1: 37DCbHhm2sTXZoKnRAO3SOggtQQ.roa (hash: +uLJpv1JAEXe6w9bK9Js8rFmAHbw+aILnxdKvgw5Rzc=)
                          2: K8J94IFvfguHpzPdMZkInlN_Jhw.crl (hash: 1hRyefLEMsqdBnY9VVIP9ocSajnwAvyTH14n3vCT0/I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/6d854c-c513-4290-95d4-93f9aefeeb12/1/K8J94IFvfguHpzPdMZkInlN_Jhw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/6d854c-c513-4290-95d4-93f9aefeeb12/1/K8J94IFvfguHpzPdMZkInlN_Jhw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K8J94IFvfguHpzPdMZkInlN_Jhw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 21:51:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:7b:9e:13:c3:8c:f6:43:f3:d8:43:20:e9:ad:fc:0d:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc27de0816f7e0b87a733dd3199089e537f261c
        Validity
            Not Before: Jun 17 02:00:46 2025 GMT
            Not After : Jun 18 02:00:46 2025 GMT
        Subject: CN=f0219d4278759218b963d44b10e6a7b0a46257b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:b2:30:2f:4d:d2:b9:ed:2d:c1:a8:8b:f3:7c:
                    83:bb:10:f2:31:de:27:56:ec:c4:c4:8f:e5:2b:49:
                    c5:22:30:fe:44:7e:64:be:eb:45:7a:c1:a2:0d:0f:
                    86:d7:c5:46:4e:2d:b5:2c:36:b3:3c:1a:e3:ef:39:
                    ad:9c:8f:49:54:85:3e:ed:f2:64:71:6a:d7:ca:20:
                    bb:4b:8d:f5:f5:54:8c:c3:b3:38:da:5a:87:a4:fe:
                    43:e3:4c:56:b7:a7:32:1c:48:65:0e:b1:65:6c:e8:
                    84:8c:76:3b:9b:b8:09:13:b9:2a:4f:92:8a:bb:37:
                    b4:8f:45:8f:63:00:39:1a:71:33:ce:5b:5c:89:7f:
                    82:07:3d:b9:e5:0d:74:6a:c4:a6:ca:80:16:55:32:
                    e8:a0:16:89:c4:5d:d3:2e:c7:c5:aa:09:e6:44:13:
                    ec:48:1b:82:d3:ac:38:68:f9:fe:19:67:ef:35:f3:
                    bc:02:63:b4:79:c8:cd:4d:41:f5:d4:03:73:0d:bf:
                    6f:29:82:55:14:16:be:71:f8:42:42:02:d4:f9:6f:
                    b5:a5:90:cd:f3:1c:06:e1:d1:d5:c7:d7:7d:a6:7f:
                    a3:63:f9:06:96:7e:77:08:a1:ab:3b:19:8b:ce:62:
                    8b:95:0d:e8:80:70:16:af:3d:3d:30:07:4c:f3:1c:
                    42:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:21:9D:42:78:75:92:18:B9:63:D4:4B:10:E6:A7:B0:A4:62:57:B3
            X509v3 Authority Key Identifier:
                keyid:2B:C2:7D:E0:81:6F:7E:0B:87:A7:33:DD:31:99:08:9E:53:7F:26:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K8J94IFvfguHpzPdMZkInlN_Jhw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/6d854c-c513-4290-95d4-93f9aefeeb12/1/K8J94IFvfguHpzPdMZkInlN_Jhw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/6d854c-c513-4290-95d4-93f9aefeeb12/1/K8J94IFvfguHpzPdMZkInlN_Jhw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:bc:d8:f4:c3:c9:6c:a0:01:53:92:c0:c2:98:43:a1:29:17:
         29:5f:90:3a:66:ae:03:11:3a:ba:ce:8c:64:2e:da:a2:38:a8:
         5e:9c:a3:79:01:09:45:cc:fa:d8:06:77:e6:a3:8e:ab:bf:13:
         b3:80:51:e7:8b:80:69:16:97:83:71:5a:41:a1:77:b1:ad:68:
         ac:50:97:45:77:d7:53:50:0b:37:ae:f9:84:c0:90:27:c4:52:
         3b:20:f9:7d:b3:fa:59:be:c4:50:56:b5:90:c0:c6:3e:b1:5c:
         f5:f8:a3:da:1c:c9:0a:e3:4d:db:08:59:6f:87:8d:a5:8f:97:
         ae:2d:15:8a:29:66:d7:37:e6:31:6a:26:16:ab:80:4e:83:ae:
         55:68:da:09:32:53:4a:7b:bd:db:d4:95:80:46:74:66:99:10:
         09:5f:70:a8:cd:79:40:b8:1e:3d:b2:9a:8b:7d:dc:4b:12:c0:
         f0:33:9b:86:4b:53:06:ed:af:bb:10:1e:f0:58:aa:ff:60:85:
         1f:bd:7a:17:42:35:76:bb:c7:2b:85:c3:ec:a9:fc:05:eb:15:
         d3:ef:c7:59:75:f0:8f:2e:36:fe:b3:70:36:49:67:8c:0f:52:
         b8:c9:17:b5:35:bc:18:c6:bc:b1:3b:27:34:7f:d6:46:c2:b0:
         57:ab:51:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd7nhPDjPZD89hDIOmt/A12MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiYzI3ZGUwODE2ZjdlMGI4N2E3MzNkZDMxOTkwODllNTM3
ZjI2MWMwHhcNMjUwNjE3MDIwMDQ2WhcNMjUwNjE4MDIwMDQ2WjAzMTEwLwYDVQQD
EyhmMDIxOWQ0Mjc4NzU5MjE4Yjk2M2Q0NGIxMGU2YTdiMGE0NjI1N2IzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjbIwL03Sue0twaiL83yDuxDyMd4n
VuzExI/lK0nFIjD+RH5kvutFesGiDQ+G18VGTi21LDazPBrj7zmtnI9JVIU+7fJk
cWrXyiC7S4319VSMw7M42lqHpP5D40xWt6cyHEhlDrFlbOiEjHY7m7gJE7kqT5KK
uze0j0WPYwA5GnEzzltciX+CBz255Q10asSmyoAWVTLooBaJxF3TLsfFqgnmRBPs
SBuC06w4aPn+GWfvNfO8AmO0ecjNTUH11ANzDb9vKYJVFBa+cfhCQgLU+W+1pZDN
8xwG4dHVx9d9pn+jY/kGln53CKGrOxmLzmKLlQ3ogHAWrz09MAdM8xxCSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPAhnUJ4dZIYuWPUSxDmp7CkYlezMB8GA1UdIwQY
MBaAFCvCfeCBb34Lh6cz3TGZCJ5TfyYcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzhKOTRJRnZmZ3VIcHpQZE1aa0lubE5fSmh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy82ZDg1NGMtYzUxMy00MjkwLTk1ZDQt
OTNmOWFlZmVlYjEyLzEvSzhKOTRJRnZmZ3VIcHpQZE1aa0lubE5fSmh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy82ZDg1NGMtYzUxMy00MjkwLTk1ZDQtOTNmOWFlZmVlYjEy
LzEvSzhKOTRJRnZmZ3VIcHpQZE1aa0lubE5fSmh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfrzY9MPJ
bKABU5LAwphDoSkXKV+QOmauAxE6us6MZC7aojioXpyjeQEJRcz62AZ35qOOq78T
s4BR54uAaRaXg3FaQaF3sa1orFCXRXfXU1ALN675hMCQJ8RSOyD5fbP6Wb7EUFa1
kMDGPrFc9fij2hzJCuNN2whZb4eNpY+Xri0Viilm1zfmMWomFquAToOuVWjaCTJT
Snu929SVgEZ0ZpkQCV9wqM15QLgePbKai33cSxLA8DObhktTBu2vuxAe8Fiq/2CF
H716F0I1drvHK4XD7Kn8BesV0+/HWXXwjy42/rNwNklnjA9SuMkXtTW8GMa8sTsn
NH/WRsKwV6tRJA==
-----END CERTIFICATE-----
Generated at Tue Jun 17 04:21:32 2025 by rpki-client