Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/3318d9-5669-4920-a55c-73a63b259beb/1/I0tEmJRYnRb2dr_ygqvtqlbMe40.mft
File:                     I0tEmJRYnRb2dr_ygqvtqlbMe40.mft (raw, json)
Hash identifier:          vNP4Y+ffwzuKWXZlqMXSWgNvGpVolbM1lN2GBdJpFNA=
Subject key identifier:   B5:9B:A8:1D:16:3C:76:2A:A0:C3:DE:E2:86:D6:12:8B:74:E9:20:91
Authority key identifier: 23:4B:44:98:94:58:9D:16:F6:76:BF:F2:82:AB:ED:AA:56:CC:7B:8D
Certificate issuer:       /CN=234b449894589d16f676bff282abedaa56cc7b8d
Certificate serial:       01976F9A79EBE409C40E0B7D54B106674DDD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I0tEmJRYnRb2dr_ygqvtqlbMe40.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/3318d9-5669-4920-a55c-73a63b259beb/1/I0tEmJRYnRb2dr_ygqvtqlbMe40.mft
Manifest number:          05CC
Signing time:             Sat 14 Jun 2025 18:01:24 +0000
Manifest this update:     Sat 14 Jun 2025 18:01:24 +0000
Manifest next update:     Sun 15 Jun 2025 18:01:24 +0000
Files and hashes:         1: EBtcNhOJ92IGPVl-KdrFygnNVn4.roa (hash: Ykla49kgLw0fjmlAc5cpzOXx1fYgIVxrEDqc3yCSjAA=)
                          2: I0tEmJRYnRb2dr_ygqvtqlbMe40.crl (hash: 4xw38LgbSaigId15ooG8aW3RwsSsvI8rTuYt8XQt7Eo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/3318d9-5669-4920-a55c-73a63b259beb/1/I0tEmJRYnRb2dr_ygqvtqlbMe40.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/3318d9-5669-4920-a55c-73a63b259beb/1/I0tEmJRYnRb2dr_ygqvtqlbMe40.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I0tEmJRYnRb2dr_ygqvtqlbMe40.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 18:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:9a:79:eb:e4:09:c4:0e:0b:7d:54:b1:06:67:4d:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=234b449894589d16f676bff282abedaa56cc7b8d
        Validity
            Not Before: Jun 14 18:01:24 2025 GMT
            Not After : Jun 15 18:01:24 2025 GMT
        Subject: CN=b59ba81d163c762aa0c3dee286d6128b74e92091
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:e8:20:42:57:41:71:b0:c3:af:f3:70:da:98:
                    66:74:b5:2f:ef:c5:c8:85:e1:b6:09:1c:66:fa:31:
                    d4:9d:8e:70:07:3c:97:69:06:f6:f5:78:5e:2b:4f:
                    85:ad:56:43:2a:04:ec:74:0b:43:c9:b7:64:3f:7b:
                    8d:09:7a:83:8a:01:5a:cc:14:04:45:a9:80:39:84:
                    3c:27:92:a0:d7:d0:c2:8a:2e:fe:a2:5c:7b:24:da:
                    7d:92:1c:3e:0a:c2:7c:4d:00:ce:59:35:a3:ac:97:
                    8e:a0:44:cf:14:36:7c:66:ff:77:da:18:4b:cb:72:
                    7a:d2:ef:f4:6f:da:ec:77:02:b3:00:f2:19:12:a7:
                    01:0d:36:29:a5:a9:63:a9:f4:ff:11:93:f8:5b:54:
                    12:93:62:d2:d9:61:1d:f0:a5:72:53:bd:01:94:22:
                    cf:40:53:b4:c1:4a:7e:70:ac:b0:b3:07:86:47:6d:
                    06:a6:37:73:bc:b7:28:79:84:f8:bb:93:a4:90:73:
                    48:90:b7:fd:8b:99:93:c9:cf:dd:ac:33:17:a2:5d:
                    f1:7e:4c:56:2a:29:28:35:25:48:76:86:c9:14:e0:
                    c1:61:aa:0e:e9:54:3f:1f:be:8f:92:0d:b2:44:24:
                    83:ba:c5:e9:44:e4:bc:f2:52:7c:6e:68:6a:24:80:
                    c9:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:9B:A8:1D:16:3C:76:2A:A0:C3:DE:E2:86:D6:12:8B:74:E9:20:91
            X509v3 Authority Key Identifier:
                keyid:23:4B:44:98:94:58:9D:16:F6:76:BF:F2:82:AB:ED:AA:56:CC:7B:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0tEmJRYnRb2dr_ygqvtqlbMe40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3318d9-5669-4920-a55c-73a63b259beb/1/I0tEmJRYnRb2dr_ygqvtqlbMe40.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3318d9-5669-4920-a55c-73a63b259beb/1/I0tEmJRYnRb2dr_ygqvtqlbMe40.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:32:42:74:95:49:24:a2:28:8a:58:c2:a5:fe:e2:e8:b3:8d:
         6a:b6:11:64:ad:96:a5:62:e9:dd:24:4c:d7:b5:ce:0c:3b:91:
         87:f5:60:23:eb:3f:5b:d0:78:16:40:c3:e4:6f:5f:2c:fa:19:
         7d:4c:99:28:ca:38:6f:49:a7:aa:4f:e3:08:c0:0a:8e:3b:05:
         a6:ad:78:fd:54:7f:97:7d:f9:5e:bf:ec:0e:4f:d6:22:a2:5b:
         d8:de:93:a1:a0:75:44:8e:41:d6:36:f4:58:8b:96:05:72:a2:
         b8:e1:61:dd:04:fd:82:e9:00:4f:6d:79:c6:3f:7e:7c:70:1a:
         31:04:96:43:a3:9d:5c:73:b3:48:7b:39:d0:f5:3b:9f:b8:c5:
         de:7e:8b:39:a4:9d:c3:d0:74:0f:21:8b:76:59:b2:dc:8b:5a:
         69:2d:f0:01:af:54:d6:cf:27:1d:13:89:b4:bf:05:cd:10:8f:
         eb:05:88:3b:a7:d6:fe:a3:d8:54:d9:57:8b:c8:1f:a2:34:01:
         8f:1a:6a:8e:32:2b:e1:ed:45:ab:0d:13:b7:a0:e9:86:38:ba:
         13:9c:a7:65:67:b7:f4:37:05:e5:6b:cf:66:bb:2a:08:43:94:
         ac:b2:57:2a:d8:69:f3:d0:52:8e:1e:b3:58:3d:b3:ee:d2:39:
         60:d9:ae:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdvmnnr5AnEDgt9VLEGZ03dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzNGI0NDk4OTQ1ODlkMTZmNjc2YmZmMjgyYWJlZGFhNTZj
YzdiOGQwHhcNMjUwNjE0MTgwMTI0WhcNMjUwNjE1MTgwMTI0WjAzMTEwLwYDVQQD
EyhiNTliYTgxZDE2M2M3NjJhYTBjM2RlZTI4NmQ2MTI4Yjc0ZTkyMDkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5OggQldBcbDDr/Nw2phmdLUv78XI
heG2CRxm+jHUnY5wBzyXaQb29XheK0+FrVZDKgTsdAtDybdkP3uNCXqDigFazBQE
RamAOYQ8J5Kg19DCii7+olx7JNp9khw+CsJ8TQDOWTWjrJeOoETPFDZ8Zv932hhL
y3J60u/0b9rsdwKzAPIZEqcBDTYppaljqfT/EZP4W1QSk2LS2WEd8KVyU70BlCLP
QFO0wUp+cKywsweGR20GpjdzvLcoeYT4u5OkkHNIkLf9i5mTyc/drDMXol3xfkxW
KikoNSVIdobJFODBYaoO6VQ/H76Pkg2yRCSDusXpROS88lJ8bmhqJIDJzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLWbqB0WPHYqoMPe4obWEot06SCRMB8GA1UdIwQY
MBaAFCNLRJiUWJ0W9na/8oKr7apWzHuNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTB0RW1KUlluUmIyZHJfeWdxdnRxbGJNZTQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8zMzE4ZDktNTY2OS00OTIwLWE1NWMt
NzNhNjNiMjU5YmViLzEvSTB0RW1KUlluUmIyZHJfeWdxdnRxbGJNZTQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC8zMzE4ZDktNTY2OS00OTIwLWE1NWMtNzNhNjNiMjU5YmVi
LzEvSTB0RW1KUlluUmIyZHJfeWdxdnRxbGJNZTQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATTJCdJVJ
JKIoiljCpf7i6LONarYRZK2WpWLp3SRM17XODDuRh/VgI+s/W9B4FkDD5G9fLPoZ
fUyZKMo4b0mnqk/jCMAKjjsFpq14/VR/l335Xr/sDk/WIqJb2N6ToaB1RI5B1jb0
WIuWBXKiuOFh3QT9gukAT215xj9+fHAaMQSWQ6OdXHOzSHs50PU7n7jF3n6LOaSd
w9B0DyGLdlmy3ItaaS3wAa9U1s8nHROJtL8FzRCP6wWIO6fW/qPYVNlXi8gfojQB
jxpqjjIr4e1Fqw0Tt6Dphji6E5ynZWe39DcF5WvPZrsqCEOUrLJXKthp89BSjh6z
WD2z7tI5YNmuyg==
-----END CERTIFICATE-----
Generated at Sun Jun 15 00:15:03 2025 by rpki-client