Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft
File:                     1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft (raw, json)
Hash identifier:          gbeUYx1sigr1lZ5KJTWSUdjy1K10OJ2jPdeCb+LFujU=
Subject key identifier:   F9:F8:96:74:2E:52:19:E5:3B:C8:87:F0:F7:FA:F9:32:84:FF:89:1A
Authority key identifier: D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C
Certificate issuer:       /CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c
Certificate serial:       019775D2BE8B439CD95E3C4607240304FF36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft
Manifest number:          021B
Signing time:             Sun 15 Jun 2025 23:00:34 +0000
Manifest this update:     Sun 15 Jun 2025 23:00:34 +0000
Manifest next update:     Mon 16 Jun 2025 23:00:34 +0000
Files and hashes:         1: 1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl (hash: 520y7EOgPt2RSic/e8S701HOdz9JxI8YUBCL1nO2eV4=)
                          2: S_UvXYrcwi02mD9XS72xM5GP0XM.roa (hash: tDWixxPYWWKm64Sflrs16Hs5q2OnmoXj3QlJNoGIgAE=)
                          3: UF3Vre6C-2uWPd901r4ODYt5AHA.roa (hash: eNmvyxetTd0QVI6G0VkpJaSR8G25jRhf1MP+bDcaMic=)
                          4: _ZvG0PlF42L37wxQnyxCZfeMoAM.roa (hash: Z8GPW7jOAC9/r+ylozkesuGuO/RAGB5R1mOtBovFWng=)
                          5: nya5VnmImUQCPczzWGzozyYmAoM.roa (hash: qg+/w/vLW7M/opQjKzbc9S+ktTmX4UXhPUmqd4d4i7s=)
                          6: oZWWF5zyx5ocTW76AkaqmRcZRbc.roa (hash: Md76ioroY7UyB9QPN3x3zrcMAb6sqenqdiEF83Lxjww=)
                          7: wG4o-qI2-SFDukKFY7nO5neU430.roa (hash: yujHQG+kbMes0VhHuaufvfh3r/oBAVTjRJJ1+dXsMPA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:59:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:75:d2:be:8b:43:9c:d9:5e:3c:46:07:24:03:04:ff:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c
        Validity
            Not Before: Jun 15 23:00:34 2025 GMT
            Not After : Jun 16 23:00:34 2025 GMT
        Subject: CN=f9f896742e5219e53bc887f0f7faf93284ff891a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:71:90:9d:a2:24:eb:00:29:d0:2e:91:f6:ff:
                    ff:7e:0a:7d:84:7f:ba:1b:7e:65:53:6b:91:6f:6f:
                    fc:51:02:19:53:02:f6:c1:66:e8:ee:84:7a:24:e2:
                    22:9f:c8:26:e4:92:ce:00:a6:ab:bc:b1:4b:a7:a3:
                    05:18:e2:31:b3:23:b5:e2:3c:1b:12:d2:c3:68:94:
                    cc:25:72:a0:39:4d:1d:77:fe:74:c5:51:12:c0:9e:
                    98:d9:5c:ef:44:40:14:50:bc:6a:ac:bb:6d:7b:cc:
                    0d:d5:be:f4:cd:1e:0f:ae:9e:9a:48:e6:fa:34:75:
                    64:7d:82:63:c3:95:a6:84:58:70:28:31:27:81:62:
                    ca:67:de:fc:35:42:7b:5f:6d:12:fc:24:6e:f6:38:
                    b7:25:68:6b:37:29:32:53:9e:d7:92:d7:59:ae:f7:
                    ee:d7:87:a9:58:be:af:04:9e:ad:69:ba:f2:8c:07:
                    88:12:68:03:87:94:46:8d:44:e1:d8:c5:ad:ec:1b:
                    57:ee:00:60:1c:5d:cf:8a:b3:54:33:41:c2:50:3d:
                    6c:fd:b4:5d:6b:19:de:ae:3a:e6:65:db:e7:e7:22:
                    1c:7e:93:e3:e4:df:fa:c2:e2:f1:d0:1a:d3:53:07:
                    c9:4c:88:e2:98:ca:95:ae:a0:4f:1d:d3:9a:c5:3e:
                    79:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:F8:96:74:2E:52:19:E5:3B:C8:87:F0:F7:FA:F9:32:84:FF:89:1A
            X509v3 Authority Key Identifier:
                keyid:D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:93:ff:5f:d7:51:a3:11:6b:b0:fe:21:c5:3e:be:36:10:0c:
         88:bf:2f:2c:bc:18:13:40:5d:ee:16:42:5a:52:1b:ba:8b:83:
         33:44:a6:9e:0a:23:55:84:9f:73:a5:2f:c5:39:88:4b:3e:f4:
         27:20:36:0b:35:12:c3:87:a9:43:69:62:4e:53:2d:3d:1f:7e:
         d1:af:34:d9:e7:e6:28:7f:68:74:76:86:7f:09:1d:f0:c5:21:
         e8:66:51:25:ab:c5:0b:97:93:6e:c6:1e:11:41:4b:ba:90:9b:
         ae:aa:cd:44:d2:5c:0d:92:9f:72:56:d1:35:bd:32:b0:28:dc:
         f4:08:80:96:ac:11:70:f1:21:ca:a1:1f:2f:9c:88:b7:31:8d:
         cf:8f:74:b8:8c:37:22:11:1f:4a:4d:f7:3d:16:0a:98:dd:93:
         d7:2a:d5:ab:1e:c1:0f:da:1b:2f:5c:78:e0:37:7c:29:af:27:
         60:b3:9b:06:6d:2a:3c:6a:1f:c5:c4:a8:42:16:a6:9f:e0:08:
         0e:6c:98:d5:e2:f1:6e:4f:39:7e:16:8a:5f:88:0d:c7:b4:ba:
         0a:14:e5:7c:a6:f0:76:4e:9f:74:c1:63:53:5c:1a:75:ff:7f:
         08:e8:c1:de:b5:d6:b9:d7:32:da:65:48:6f:99:54:9d:78:9a:
         ab:5f:6f:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd10r6LQ5zZXjxGByQDBP82MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0Y2UyYmYwMDAxY2Q0MzBlOTI3N2ZiMDBlZDFhYmU1MWMw
YjVjN2MwHhcNMjUwNjE1MjMwMDM0WhcNMjUwNjE2MjMwMDM0WjAzMTEwLwYDVQQD
EyhmOWY4OTY3NDJlNTIxOWU1M2JjODg3ZjBmN2ZhZjkzMjg0ZmY4OTFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnGQnaIk6wAp0C6R9v//fgp9hH+6
G35lU2uRb2/8UQIZUwL2wWbo7oR6JOIin8gm5JLOAKarvLFLp6MFGOIxsyO14jwb
EtLDaJTMJXKgOU0dd/50xVESwJ6Y2VzvREAUULxqrLtte8wN1b70zR4Prp6aSOb6
NHVkfYJjw5WmhFhwKDEngWLKZ978NUJ7X20S/CRu9ji3JWhrNykyU57XktdZrvfu
14epWL6vBJ6tabryjAeIEmgDh5RGjUTh2MWt7BtX7gBgHF3PirNUM0HCUD1s/bRd
axnerjrmZdvn5yIcfpPj5N/6wuLx0BrTUwfJTIjimMqVrqBPHdOaxT55tQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPn4lnQuUhnlO8iH8Pf6+TKE/4kaMB8GA1UdIwQY
MBaAFNTOK/AAHNQw6Sd/sA7Rq+UcC1x8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMU00cjhBQWMxRERwSjMtd0R0R3I1UndMWEh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9iYTBiZDMtYjM2NS00NDYxLThmZmEt
MWY1NDMxZTJhNWFmLzEvMU00cjhBQWMxRERwSjMtd0R0R3I1UndMWEh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9iYTBiZDMtYjM2NS00NDYxLThmZmEtMWY1NDMxZTJhNWFm
LzEvMU00cjhBQWMxRERwSjMtd0R0R3I1UndMWEh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFpP/X9dR
oxFrsP4hxT6+NhAMiL8vLLwYE0Bd7hZCWlIbuouDM0SmngojVYSfc6UvxTmISz70
JyA2CzUSw4epQ2liTlMtPR9+0a802efmKH9odHaGfwkd8MUh6GZRJavFC5eTbsYe
EUFLupCbrqrNRNJcDZKfclbRNb0ysCjc9AiAlqwRcPEhyqEfL5yItzGNz490uIw3
IhEfSk33PRYKmN2T1yrVqx7BD9obL1x44Dd8Ka8nYLObBm0qPGofxcSoQhamn+AI
DmyY1eLxbk85fhaKX4gNx7S6ChTlfKbwdk6fdMFjU1wadf9/COjB3rXWudcy2mVI
b5lUnXiaq19v7g==
-----END CERTIFICATE-----
Generated at Mon Jun 16 05:29:17 2025 by rpki-client