Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/SnX6lUdbre63H4ROCwtEtqj-qf4.mft
File:                     SnX6lUdbre63H4ROCwtEtqj-qf4.mft (raw, json)
Hash identifier:          veTS9eCsc1LhRPFUi1AswJHXHFNfRRrM+QddT02AwC8=
Subject key identifier:   01:74:92:AF:E2:3E:BB:C7:2D:E7:E5:46:92:04:CE:94:97:7C:BE:2D
Authority key identifier: 4A:75:FA:95:47:5B:AD:EE:B7:1F:84:4E:0B:0B:44:B6:A8:FE:A9:FE
Certificate issuer:       /CN=4a75fa95475badeeb71f844e0b0b44b6a8fea9fe
Certificate serial:       01978B47DEAA9C8CB439F692235A975B3EA3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SnX6lUdbre63H4ROCwtEtqj-qf4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/SnX6lUdbre63H4ROCwtEtqj-qf4.mft
Manifest number:          088D
Signing time:             Fri 20 Jun 2025 03:00:32 +0000
Manifest this update:     Fri 20 Jun 2025 03:00:32 +0000
Manifest next update:     Sat 21 Jun 2025 03:00:32 +0000
Files and hashes:         1: SnX6lUdbre63H4ROCwtEtqj-qf4.crl (hash: 6QX1ua4HGP5FeR+W3t0eO2mDj/8XcVf80lz7+sRjKbU=)
                          2: _2GPXm0W5pqTGfOSlDVI1ePI1QE.roa (hash: 9R3xfYmKYkm/k3uZLHas6Z2h3l83dSwTWGdwQsjNnVM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/SnX6lUdbre63H4ROCwtEtqj-qf4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/SnX6lUdbre63H4ROCwtEtqj-qf4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SnX6lUdbre63H4ROCwtEtqj-qf4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 20 Jun 2025 19:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:8b:47:de:aa:9c:8c:b4:39:f6:92:23:5a:97:5b:3e:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a75fa95475badeeb71f844e0b0b44b6a8fea9fe
        Validity
            Not Before: Jun 20 03:00:32 2025 GMT
            Not After : Jun 21 03:00:32 2025 GMT
        Subject: CN=017492afe23ebbc72de7e5469204ce94977cbe2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:94:10:85:d9:90:95:83:36:69:0d:1a:a2:ed:
                    bc:ef:b9:d2:aa:5b:9f:40:8a:79:fa:80:b2:a0:8f:
                    98:d1:c5:05:0e:58:51:33:39:5f:e1:78:f6:89:a4:
                    3e:e0:1e:62:85:e5:96:b2:88:38:ae:14:91:3c:d7:
                    69:c9:5a:57:4e:73:c0:88:cb:d9:5e:69:a9:74:ed:
                    49:cc:e7:ed:ee:45:38:6e:be:45:9f:d2:e5:1c:4f:
                    b6:9a:37:30:e8:02:3f:eb:de:8b:48:25:6b:dd:50:
                    5d:87:69:fe:16:93:a1:44:65:b9:c1:14:35:61:a7:
                    33:be:17:5f:1e:f7:4b:8d:3c:a2:e5:35:4d:f0:fb:
                    c8:89:9e:38:af:21:c3:9c:91:66:70:70:47:d1:86:
                    a6:f0:ec:35:5e:b4:0e:ab:3d:f6:1a:09:8a:23:53:
                    31:1f:1d:68:86:8b:d6:93:ac:fb:5f:f4:14:3c:54:
                    9c:01:d5:2e:83:0b:37:b1:e5:a6:34:e6:eb:ca:96:
                    1c:38:34:3c:2e:9b:de:83:59:8f:b7:a6:86:18:e6:
                    cf:43:2c:8a:39:cd:43:65:3b:5c:a3:0b:e9:ea:b6:
                    e8:1f:fa:62:d3:f5:45:1f:09:35:96:5c:f0:de:c0:
                    16:da:b9:ce:2a:55:99:f9:65:18:de:9a:bb:30:3c:
                    52:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:74:92:AF:E2:3E:BB:C7:2D:E7:E5:46:92:04:CE:94:97:7C:BE:2D
            X509v3 Authority Key Identifier:
                keyid:4A:75:FA:95:47:5B:AD:EE:B7:1F:84:4E:0B:0B:44:B6:A8:FE:A9:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SnX6lUdbre63H4ROCwtEtqj-qf4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/SnX6lUdbre63H4ROCwtEtqj-qf4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/SnX6lUdbre63H4ROCwtEtqj-qf4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:bb:e0:2f:1b:d2:b6:e2:ac:b4:b7:7f:73:3b:55:ec:2d:12:
         74:31:c1:78:16:b4:43:fd:2d:86:a9:51:d3:2e:73:88:72:b8:
         5a:be:53:4c:d1:d9:59:ef:73:27:b1:78:3b:4b:d1:2d:9e:90:
         5b:4b:11:9c:f4:95:36:a3:5b:ed:29:4e:7c:ed:04:91:b7:d2:
         47:7b:6b:52:c6:d7:f8:f7:63:d1:d7:49:6f:f6:6c:7c:5b:69:
         4c:07:36:ad:58:54:24:aa:d8:6e:50:20:f9:4d:8a:27:95:2b:
         1d:07:cb:ec:c5:08:de:fc:31:43:fa:64:23:03:22:f0:10:4f:
         c4:94:8f:2d:e8:1f:3f:d7:5c:6f:cc:a3:19:24:39:d4:ca:70:
         00:d8:44:15:72:17:e1:5d:83:b2:37:a6:c5:5f:f4:1d:bf:c5:
         54:33:a8:03:8f:e7:68:ee:e8:64:79:7f:a3:11:c2:11:7b:c7:
         c9:40:69:64:16:be:3a:49:36:64:05:2e:27:1a:a6:45:92:c5:
         2d:a6:df:87:59:a1:31:bc:61:99:69:80:67:6e:4c:cf:68:77:
         76:76:e8:25:86:bb:40:38:d6:60:a8:f5:94:bd:11:42:d6:d6:
         ac:74:6f:2e:89:7a:e1:c6:d1:26:d8:ca:e7:78:31:64:43:56:
         38:87:15:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZeLR96qnIy0OfaSI1qXWz6jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNzVmYTk1NDc1YmFkZWViNzFmODQ0ZTBiMGI0NGI2YThm
ZWE5ZmUwHhcNMjUwNjIwMDMwMDMyWhcNMjUwNjIxMDMwMDMyWjAzMTEwLwYDVQQD
EygwMTc0OTJhZmUyM2ViYmM3MmRlN2U1NDY5MjA0Y2U5NDk3N2NiZTJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpQQhdmQlYM2aQ0aou2877nSqluf
QIp5+oCyoI+Y0cUFDlhRMzlf4Xj2iaQ+4B5iheWWsog4rhSRPNdpyVpXTnPAiMvZ
XmmpdO1JzOft7kU4br5Fn9LlHE+2mjcw6AI/696LSCVr3VBdh2n+FpOhRGW5wRQ1
YaczvhdfHvdLjTyi5TVN8PvIiZ44ryHDnJFmcHBH0Yam8Ow1XrQOqz32GgmKI1Mx
Hx1ohovWk6z7X/QUPFScAdUugws3seWmNObrypYcODQ8Lpveg1mPt6aGGObPQyyK
Oc1DZTtcowvp6rboH/pi0/VFHwk1llzw3sAW2rnOKlWZ+WUY3pq7MDxSOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAF0kq/iPrvHLeflRpIEzpSXfL4tMB8GA1UdIwQY
MBaAFEp1+pVHW63utx+ETgsLRLao/qn+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU25YNmxVZGJyZTYzSDRST0N3dEV0cWotcWY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy85OTA1OTUtNTE1Ny00MDM2LWI2MDEt
NjA4NDNiNWJiYjgxLzEvU25YNmxVZGJyZTYzSDRST0N3dEV0cWotcWY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy85OTA1OTUtNTE1Ny00MDM2LWI2MDEtNjA4NDNiNWJiYjgx
LzEvU25YNmxVZGJyZTYzSDRST0N3dEV0cWotcWY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT7vgLxvS
tuKstLd/cztV7C0SdDHBeBa0Q/0thqlR0y5ziHK4Wr5TTNHZWe9zJ7F4O0vRLZ6Q
W0sRnPSVNqNb7SlOfO0EkbfSR3trUsbX+Pdj0ddJb/ZsfFtpTAc2rVhUJKrYblAg
+U2KJ5UrHQfL7MUI3vwxQ/pkIwMi8BBPxJSPLegfP9dcb8yjGSQ51MpwANhEFXIX
4V2DsjemxV/0Hb/FVDOoA4/naO7oZHl/oxHCEXvHyUBpZBa+Okk2ZAUuJxqmRZLF
Labfh1mhMbxhmWmAZ25Mz2h3dnboJYa7QDjWYKj1lL0RQtbWrHRvLol64cbRJtjK
53gxZENWOIcVWQ==
-----END CERTIFICATE-----
Generated at Fri Jun 20 05:38:52 2025 by rpki-client