Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.mft
File:                     O-_lCkD7FzJUHoqXRQq13ndHcdg.mft (raw, json)
Hash identifier:          qT/F5xeHEp4mIEL9oUfTB8ng64VPhjfC6uF1PPbp7L4=
Subject key identifier:   7B:62:64:FB:35:8A:BF:BD:D8:04:6D:9E:9B:E0:C0:23:A1:8C:1E:54
Authority key identifier: 3B:EF:E5:0A:40:FB:17:32:54:1E:8A:97:45:0A:B5:DE:77:47:71:D8
Certificate issuer:       /CN=3befe50a40fb1732541e8a97450ab5de774771d8
Certificate serial:       0197820E086FF3520BCE33996CDC5EC6D783
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O-_lCkD7FzJUHoqXRQq13ndHcdg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.mft
Manifest number:          032B
Signing time:             Wed 18 Jun 2025 08:00:46 +0000
Manifest this update:     Wed 18 Jun 2025 08:00:46 +0000
Manifest next update:     Thu 19 Jun 2025 08:00:46 +0000
Files and hashes:         1: 7-AQ6OnvZ4yiBI8g8iZcgy53KzA.roa (hash: cTRZ7K6oUrn2Rqx5R/D6Zllm9PmQV/y/ARWXdG55cmE=)
                          2: O-_lCkD7FzJUHoqXRQq13ndHcdg.crl (hash: R2k2RAiFDczF+JqtormmhE2hc7Mze6FIO8MUVw/Vsac=)
                          3: YOqzdqJgWVyd_2LgxM2J8gMVqBI.roa (hash: va3bKDhWKpgZL3Z4ed7EIl2pjSDDXrOal9gvmMpvSE0=)
                          4: aBnhuCyVg4pVl4Cu-1q0sSCGSow.roa (hash: VQIqr/RAqzgxu4SPZE6Psd9Jss+IRfVZ1r0b7rL29Wo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/O-_lCkD7FzJUHoqXRQq13ndHcdg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 19 Jun 2025 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:82:0e:08:6f:f3:52:0b:ce:33:99:6c:dc:5e:c6:d7:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3befe50a40fb1732541e8a97450ab5de774771d8
        Validity
            Not Before: Jun 18 08:00:46 2025 GMT
            Not After : Jun 19 08:00:46 2025 GMT
        Subject: CN=7b6264fb358abfbdd8046d9e9be0c023a18c1e54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:00:f0:f1:37:88:00:7a:4d:fb:97:0b:59:d5:
                    88:e7:42:4d:78:70:45:32:6b:8e:4d:fd:ab:eb:43:
                    aa:49:96:f4:43:fa:8f:10:24:69:ce:ed:54:da:03:
                    e6:ea:1a:c0:40:b1:70:eb:b9:79:b7:4a:27:51:75:
                    ca:b7:27:72:ad:b3:f0:c0:d3:66:6d:d1:68:32:07:
                    b4:79:3a:a5:fd:57:6d:d2:1d:f6:ab:7b:99:c1:ea:
                    7e:07:ce:a2:36:29:57:31:b2:df:2f:bf:f2:d9:24:
                    f4:11:d9:19:24:1a:59:43:fa:19:7e:b6:ff:a2:62:
                    2b:67:a4:c5:dd:c9:f0:a5:e8:a1:42:2d:6f:6a:01:
                    f7:07:c0:a8:03:da:f6:df:8a:a5:3e:87:b1:c8:88:
                    7b:48:1e:bf:ab:5a:eb:70:86:d3:9f:b6:83:83:1b:
                    18:f8:fd:92:4d:00:4c:5b:43:22:a9:59:16:13:71:
                    53:22:f5:3f:2b:61:f9:9a:c6:f3:75:e7:c6:4b:46:
                    dc:84:e3:67:06:64:d7:85:dd:e6:4d:68:ae:9c:1b:
                    8c:1a:75:ba:23:e8:86:c2:75:6a:80:79:43:cd:e2:
                    14:4f:4e:de:25:28:a2:0e:55:1d:c1:40:fa:f5:cf:
                    b3:5b:a1:8a:5c:2b:e3:b1:02:28:d0:c5:54:a2:f4:
                    77:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:62:64:FB:35:8A:BF:BD:D8:04:6D:9E:9B:E0:C0:23:A1:8C:1E:54
            X509v3 Authority Key Identifier:
                keyid:3B:EF:E5:0A:40:FB:17:32:54:1E:8A:97:45:0A:B5:DE:77:47:71:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-_lCkD7FzJUHoqXRQq13ndHcdg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:28:92:a9:af:5f:9d:c3:ac:a7:47:f9:12:32:0e:63:d9:25:
         34:3c:59:f5:d0:b8:bf:f6:f1:b2:a1:43:8a:32:83:0a:10:a4:
         7b:cc:3b:a4:19:8c:59:1b:8b:50:46:02:29:56:52:06:cf:dd:
         1e:bc:72:0b:b2:6a:55:97:9e:12:a0:56:52:6c:2e:47:5f:0c:
         32:0f:72:67:c0:ee:77:15:d7:2f:bd:3d:b7:be:9f:f3:10:01:
         3c:a7:f6:c2:68:d5:61:0a:58:55:3a:62:f6:88:5b:f3:14:f7:
         09:af:b0:47:48:b8:86:35:d8:dd:82:88:3d:f4:5e:3c:9e:26:
         36:3d:b2:13:f4:31:6c:bd:04:42:d7:f4:65:ea:2c:33:96:68:
         16:7b:9e:01:9c:19:4f:1d:4f:35:b7:b9:6a:eb:fb:3c:36:ec:
         45:58:93:b5:c0:cb:fb:89:e0:a1:d3:ca:0d:57:68:ba:f3:df:
         91:76:11:8d:1b:71:b9:b6:00:bc:06:66:75:d8:98:16:08:2d:
         89:75:a3:27:7e:44:70:5b:52:f0:ef:e9:3f:8f:46:ed:43:c0:
         f3:43:bc:80:b9:cb:37:a9:f3:87:75:a2:30:b5:95:64:93:8a:
         c9:9b:55:81:80:43:c4:e1:74:bc:fc:ac:a5:6b:4c:21:59:6b:
         93:e8:0f:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZeCDghv81ILzjOZbNxexteDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiZWZlNTBhNDBmYjE3MzI1NDFlOGE5NzQ1MGFiNWRlNzc0
NzcxZDgwHhcNMjUwNjE4MDgwMDQ2WhcNMjUwNjE5MDgwMDQ2WjAzMTEwLwYDVQQD
Eyg3YjYyNjRmYjM1OGFiZmJkZDgwNDZkOWU5YmUwYzAyM2ExOGMxZTU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwADw8TeIAHpN+5cLWdWI50JNeHBF
MmuOTf2r60OqSZb0Q/qPECRpzu1U2gPm6hrAQLFw67l5t0onUXXKtydyrbPwwNNm
bdFoMge0eTql/Vdt0h32q3uZwep+B86iNilXMbLfL7/y2ST0EdkZJBpZQ/oZfrb/
omIrZ6TF3cnwpeihQi1vagH3B8CoA9r234qlPoexyIh7SB6/q1rrcIbTn7aDgxsY
+P2STQBMW0MiqVkWE3FTIvU/K2H5msbzdefGS0bchONnBmTXhd3mTWiunBuMGnW6
I+iGwnVqgHlDzeIUT07eJSiiDlUdwUD69c+zW6GKXCvjsQIo0MVUovR3sQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHtiZPs1ir+92ARtnpvgwCOhjB5UMB8GA1UdIwQY
MBaAFDvv5QpA+xcyVB6Kl0UKtd53R3HYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTy1fbENrRDdGekpVSG9xWFJRcTEzbmRIY2RnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi84ZWY3NDAtMTA1Mi00OWVjLWE0MDkt
ZTYxNTQ5MzExN2QyLzEvTy1fbENrRDdGekpVSG9xWFJRcTEzbmRIY2RnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi84ZWY3NDAtMTA1Mi00OWVjLWE0MDktZTYxNTQ5MzExN2Qy
LzEvTy1fbENrRDdGekpVSG9xWFJRcTEzbmRIY2RnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeSiSqa9f
ncOsp0f5EjIOY9klNDxZ9dC4v/bxsqFDijKDChCke8w7pBmMWRuLUEYCKVZSBs/d
HrxyC7JqVZeeEqBWUmwuR18MMg9yZ8DudxXXL709t76f8xABPKf2wmjVYQpYVTpi
9ohb8xT3Ca+wR0i4hjXY3YKIPfRePJ4mNj2yE/QxbL0EQtf0ZeosM5ZoFnueAZwZ
Tx1PNbe5auv7PDbsRViTtcDL+4ngodPKDVdouvPfkXYRjRtxubYAvAZmddiYFggt
iXWjJ35EcFtS8O/pP49G7UPA80O8gLnLN6nzh3WiMLWVZJOKyZtVgYBDxOF0vPys
pWtMIVlrk+gPJA==
-----END CERTIFICATE-----
Generated at Wed Jun 18 09:35:34 2025 by rpki-client