Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/453cfd-535c-4d2a-bb27-436b3ee7ed35/1/9Fe8GTpZWUint6CWtxC7UmKDD0E.mft
File:                     9Fe8GTpZWUint6CWtxC7UmKDD0E.mft (raw, json)
Hash identifier:          46g9aI2Uxi7g9LiEwq1PnXk6RHZagQ5/ni3rxzMHN+0=
Subject key identifier:   69:75:42:7A:0F:C9:D9:80:74:86:D7:2B:0D:83:0A:60:1B:37:36:7C
Authority key identifier: F4:57:BC:19:3A:59:59:48:A7:B7:A0:96:B7:10:BB:52:62:83:0F:41
Certificate issuer:       /CN=f457bc193a595948a7b7a096b710bb5262830f41
Certificate serial:       01976E504882A9C48D96BB82BF3BD6EF078B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9Fe8GTpZWUint6CWtxC7UmKDD0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/453cfd-535c-4d2a-bb27-436b3ee7ed35/1/9Fe8GTpZWUint6CWtxC7UmKDD0E.mft
Manifest number:          045E
Signing time:             Sat 14 Jun 2025 12:00:44 +0000
Manifest this update:     Sat 14 Jun 2025 12:00:44 +0000
Manifest next update:     Sun 15 Jun 2025 12:00:44 +0000
Files and hashes:         1: 9Fe8GTpZWUint6CWtxC7UmKDD0E.crl (hash: e3sinpFOCN1FUFHKuyb8v9Pyn+wBuxmTUjWlytv/yBM=)
                          2: xnHt0Sid4zmp1F0aRhNqu7-Fkzo.roa (hash: YOstIt3g/6bqPmSn4Km52QkT6mGNeFzORgGZTgeX8Ls=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/453cfd-535c-4d2a-bb27-436b3ee7ed35/1/9Fe8GTpZWUint6CWtxC7UmKDD0E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/453cfd-535c-4d2a-bb27-436b3ee7ed35/1/9Fe8GTpZWUint6CWtxC7UmKDD0E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9Fe8GTpZWUint6CWtxC7UmKDD0E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6e:50:48:82:a9:c4:8d:96:bb:82:bf:3b:d6:ef:07:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f457bc193a595948a7b7a096b710bb5262830f41
        Validity
            Not Before: Jun 14 12:00:44 2025 GMT
            Not After : Jun 15 12:00:44 2025 GMT
        Subject: CN=6975427a0fc9d9807486d72b0d830a601b37367c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f5:60:8a:3c:c1:a9:0e:8c:15:67:f7:ed:47:
                    8b:f9:c8:8f:5b:52:06:fe:d9:60:54:32:71:7d:bc:
                    d9:f4:51:4b:e9:45:6e:e5:52:3e:d2:7f:48:41:ec:
                    99:d3:de:17:ff:31:35:28:a7:ae:75:df:ce:07:26:
                    09:50:7b:0e:d2:7c:ca:25:ba:31:e1:47:e6:81:fb:
                    33:77:6d:4b:5b:75:bd:25:42:42:16:7e:82:36:61:
                    50:59:f2:61:24:d7:2e:15:41:82:6c:05:c2:0e:2e:
                    3d:4c:77:d4:3c:b2:cc:c6:86:de:88:5d:47:f8:b1:
                    f6:06:c7:2f:d4:87:71:cd:70:33:63:d3:ac:f3:f2:
                    bb:db:5e:1d:e4:f7:bf:0e:8a:f8:c1:e5:94:99:c1:
                    07:af:63:22:ea:60:61:fd:b9:cc:75:e4:f6:38:98:
                    51:36:38:c6:07:9d:e1:1e:1b:bc:ff:a7:4d:2c:b9:
                    95:ab:88:bb:1c:89:71:67:bc:57:36:ae:b1:4c:ab:
                    97:84:30:17:0a:a1:22:e1:11:a5:fc:f5:ac:fa:28:
                    00:54:ff:7d:fc:e9:0c:57:66:d9:d0:44:0a:4b:98:
                    43:56:10:d4:13:4a:93:ec:14:ed:d9:3f:60:c7:73:
                    b4:c2:50:5b:60:50:a4:64:83:e6:8f:e3:4e:6c:70:
                    31:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:75:42:7A:0F:C9:D9:80:74:86:D7:2B:0D:83:0A:60:1B:37:36:7C
            X509v3 Authority Key Identifier:
                keyid:F4:57:BC:19:3A:59:59:48:A7:B7:A0:96:B7:10:BB:52:62:83:0F:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Fe8GTpZWUint6CWtxC7UmKDD0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/453cfd-535c-4d2a-bb27-436b3ee7ed35/1/9Fe8GTpZWUint6CWtxC7UmKDD0E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/453cfd-535c-4d2a-bb27-436b3ee7ed35/1/9Fe8GTpZWUint6CWtxC7UmKDD0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:99:d2:5c:85:dc:43:3e:c4:db:8e:1a:50:75:a8:8a:a2:bf:
         5e:74:2a:a3:d8:73:dd:bb:d7:63:63:b8:90:ef:ec:f3:0e:65:
         2e:cb:1e:64:d2:c6:79:91:71:b8:8d:1c:bf:fa:43:30:10:91:
         07:c1:58:ef:ce:1a:7b:69:2c:5e:9b:fa:70:85:67:03:3f:a1:
         46:91:22:46:5a:33:fd:57:96:71:fa:77:bd:b1:c4:eb:70:8f:
         14:ce:9a:a4:47:94:69:35:f3:85:dc:d3:44:fd:aa:d7:24:4c:
         80:88:b7:71:37:52:06:58:b7:73:c8:e2:22:4d:a9:17:71:5c:
         26:61:60:ba:2d:c1:b0:86:7a:91:8a:0d:72:70:f1:0a:60:09:
         03:a5:15:eb:78:be:c4:a3:a1:d9:46:ac:e2:81:b3:2f:22:83:
         2c:f3:43:ec:60:89:8e:64:4f:18:07:d5:19:55:a7:74:50:6d:
         fd:68:5d:bd:9f:19:94:bc:6b:b8:56:02:46:00:87:bc:a7:e5:
         0a:f8:75:6e:34:44:52:48:71:2f:8c:a4:70:b0:41:ef:b1:70:
         16:11:08:af:73:92:e4:e0:60:41:10:fe:85:f5:78:65:24:7f:
         0f:d0:cc:39:35:51:a8:51:c2:69:4a:72:cc:29:8d:39:15:eb:
         06:16:7a:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZduUEiCqcSNlruCvzvW7weLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0NTdiYzE5M2E1OTU5NDhhN2I3YTA5NmI3MTBiYjUyNjI4
MzBmNDEwHhcNMjUwNjE0MTIwMDQ0WhcNMjUwNjE1MTIwMDQ0WjAzMTEwLwYDVQQD
Eyg2OTc1NDI3YTBmYzlkOTgwNzQ4NmQ3MmIwZDgzMGE2MDFiMzczNjdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/VgijzBqQ6MFWf37UeL+ciPW1IG
/tlgVDJxfbzZ9FFL6UVu5VI+0n9IQeyZ094X/zE1KKeudd/OByYJUHsO0nzKJbox
4Ufmgfszd21LW3W9JUJCFn6CNmFQWfJhJNcuFUGCbAXCDi49THfUPLLMxobeiF1H
+LH2Bscv1IdxzXAzY9Os8/K7214d5Pe/Dor4weWUmcEHr2Mi6mBh/bnMdeT2OJhR
NjjGB53hHhu8/6dNLLmVq4i7HIlxZ7xXNq6xTKuXhDAXCqEi4RGl/PWs+igAVP99
/OkMV2bZ0EQKS5hDVhDUE0qT7BTt2T9gx3O0wlBbYFCkZIPmj+NObHAxnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGl1QnoPydmAdIbXKw2DCmAbNzZ8MB8GA1UdIwQY
MBaAFPRXvBk6WVlIp7eglrcQu1Jigw9BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUZlOEdUcFpXVWludDZDV3R4QzdVbUtERDBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC80NTNjZmQtNTM1Yy00ZDJhLWJiMjct
NDM2YjNlZTdlZDM1LzEvOUZlOEdUcFpXVWludDZDV3R4QzdVbUtERDBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC80NTNjZmQtNTM1Yy00ZDJhLWJiMjctNDM2YjNlZTdlZDM1
LzEvOUZlOEdUcFpXVWludDZDV3R4QzdVbUtERDBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASpnSXIXc
Qz7E244aUHWoiqK/XnQqo9hz3bvXY2O4kO/s8w5lLsseZNLGeZFxuI0cv/pDMBCR
B8FY784ae2ksXpv6cIVnAz+hRpEiRloz/VeWcfp3vbHE63CPFM6apEeUaTXzhdzT
RP2q1yRMgIi3cTdSBli3c8jiIk2pF3FcJmFgui3BsIZ6kYoNcnDxCmAJA6UV63i+
xKOh2Uas4oGzLyKDLPND7GCJjmRPGAfVGVWndFBt/WhdvZ8ZlLxruFYCRgCHvKfl
Cvh1bjREUkhxL4ykcLBB77FwFhEIr3OS5OBgQRD+hfV4ZSR/D9DMOTVRqFHCaUpy
zCmNORXrBhZ6HQ==
-----END CERTIFICATE-----
Generated at Sat Jun 14 22:16:29 2025 by rpki-client