Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/d2354a-f3c2-41d5-b292-a9d267acf664/1/KeRudYZejUoIHktd2kbTyUADZ5s.mft
File:                     KeRudYZejUoIHktd2kbTyUADZ5s.mft (raw, json)
Hash identifier:          UbJMFoyhuqY5wD7irWZ8MD2clO7rawcgLHm6kP7gznY=
Subject key identifier:   C3:7F:0E:98:A6:85:0F:DF:31:1D:FD:48:B3:1E:EA:A2:0D:4B:BD:A9
Authority key identifier: 29:E4:6E:75:86:5E:8D:4A:08:1E:4B:5D:DA:46:D3:C9:40:03:67:9B
Certificate issuer:       /CN=29e46e75865e8d4a081e4b5dda46d3c94003679b
Certificate serial:       01976C2AA028DE089630CE935F94EA3487D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KeRudYZejUoIHktd2kbTyUADZ5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/d2354a-f3c2-41d5-b292-a9d267acf664/1/KeRudYZejUoIHktd2kbTyUADZ5s.mft
Manifest number:          146D
Signing time:             Sat 14 Jun 2025 02:00:22 +0000
Manifest this update:     Sat 14 Jun 2025 02:00:22 +0000
Manifest next update:     Sun 15 Jun 2025 02:00:22 +0000
Files and hashes:         1: KeRudYZejUoIHktd2kbTyUADZ5s.crl (hash: jXDV8EFwvrLeGIutMdRZ9qFqNxK3RwWumsTb0XcNX6k=)
                          2: sYwqpJAH6xt25FV658_Z0b8PqQ4.roa (hash: nTc7YSWaucHsViUALBoDYtryVR1AkC4pCCvnaDdeVwQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/d2354a-f3c2-41d5-b292-a9d267acf664/1/KeRudYZejUoIHktd2kbTyUADZ5s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/d2354a-f3c2-41d5-b292-a9d267acf664/1/KeRudYZejUoIHktd2kbTyUADZ5s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KeRudYZejUoIHktd2kbTyUADZ5s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:2a:a0:28:de:08:96:30:ce:93:5f:94:ea:34:87:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29e46e75865e8d4a081e4b5dda46d3c94003679b
        Validity
            Not Before: Jun 14 02:00:22 2025 GMT
            Not After : Jun 15 02:00:22 2025 GMT
        Subject: CN=c37f0e98a6850fdf311dfd48b31eeaa20d4bbda9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:cb:80:08:e0:97:c9:bc:24:5d:77:7e:53:b7:
                    d8:73:f1:e4:f1:b6:59:ae:68:1b:49:e9:51:11:6d:
                    75:03:b9:c4:58:7e:f8:c6:76:3d:12:3c:d4:6b:90:
                    11:99:7f:8e:ff:da:ac:b3:de:f4:65:53:95:7d:33:
                    84:1e:b4:79:53:27:9f:ec:f7:46:11:a7:f4:bc:48:
                    37:e0:ec:03:52:33:98:80:b3:c7:61:a1:bc:07:dd:
                    a2:84:77:9c:38:1c:82:e8:39:cb:f8:90:b4:20:45:
                    c3:6a:bf:cc:32:bd:03:99:61:1c:15:05:10:f2:81:
                    20:28:ea:d1:a7:db:a1:c6:5a:40:e2:09:51:71:98:
                    86:81:8d:5b:c0:ca:f5:14:6d:70:46:bb:db:a0:b3:
                    86:7f:13:2e:e2:cf:27:5f:79:af:84:cb:f8:3a:22:
                    e5:69:61:9d:58:a6:29:a2:4b:33:63:cc:f0:25:bb:
                    85:92:9c:69:dd:cf:3a:6e:d6:f2:61:14:60:f4:ab:
                    a6:e4:92:ab:e1:53:5d:e1:a9:7e:90:78:61:dd:cb:
                    12:b0:47:02:b5:ed:09:13:ad:5f:4a:d3:0c:64:bc:
                    39:76:df:6e:30:99:43:62:86:7f:82:34:cf:2c:10:
                    1c:3e:e0:fd:dd:93:52:ad:20:b3:56:a0:d5:84:45:
                    dc:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:7F:0E:98:A6:85:0F:DF:31:1D:FD:48:B3:1E:EA:A2:0D:4B:BD:A9
            X509v3 Authority Key Identifier:
                keyid:29:E4:6E:75:86:5E:8D:4A:08:1E:4B:5D:DA:46:D3:C9:40:03:67:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KeRudYZejUoIHktd2kbTyUADZ5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d2354a-f3c2-41d5-b292-a9d267acf664/1/KeRudYZejUoIHktd2kbTyUADZ5s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d2354a-f3c2-41d5-b292-a9d267acf664/1/KeRudYZejUoIHktd2kbTyUADZ5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:0c:e7:24:7a:e4:3f:53:99:b1:71:b6:ef:a9:5b:cc:ad:ab:
         45:2d:6d:e6:cf:ea:7f:0e:3d:69:ff:4e:fa:98:c2:70:1d:69:
         b6:cf:26:08:f7:09:d8:fa:34:b5:e7:56:87:a2:76:ac:1d:a5:
         fa:e5:c3:35:22:75:d7:5e:19:c5:51:b0:96:16:e9:7b:87:3b:
         7c:a7:8d:b3:76:bd:ff:8a:01:c5:28:da:1f:3b:9c:49:e8:8f:
         29:96:48:da:40:f0:1f:3a:f3:09:02:57:b6:0a:26:8f:eb:21:
         6e:ee:c0:81:b1:7f:10:94:0b:b5:d4:a7:ba:9d:74:20:bd:8b:
         8b:54:ad:15:a1:ff:25:72:5c:3f:33:8c:be:02:8c:81:9e:52:
         2a:7f:3b:e9:1e:3a:16:d4:ca:61:18:bf:17:40:37:2c:83:4f:
         e5:fd:97:e6:57:08:cc:dd:e8:45:87:8e:94:2d:cb:3b:48:9e:
         d8:63:60:db:e7:ef:3f:43:0b:1d:7b:b7:9c:9e:29:ec:1a:20:
         40:95:58:96:9f:ca:51:28:28:c0:02:ce:4d:17:2f:78:2e:97:
         cf:49:8d:0e:57:bf:bd:fe:5c:00:43:07:60:08:b9:44:2f:92:
         08:fc:9e:dd:17:5f:ff:99:d3:7c:75:14:4d:9d:a6:ee:81:a0:
         b9:25:87:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsKqAo3giWMM6TX5TqNIfVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5ZTQ2ZTc1ODY1ZThkNGEwODFlNGI1ZGRhNDZkM2M5NDAw
MzY3OWIwHhcNMjUwNjE0MDIwMDIyWhcNMjUwNjE1MDIwMDIyWjAzMTEwLwYDVQQD
EyhjMzdmMGU5OGE2ODUwZmRmMzExZGZkNDhiMzFlZWFhMjBkNGJiZGE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscuACOCXybwkXXd+U7fYc/Hk8bZZ
rmgbSelREW11A7nEWH74xnY9EjzUa5ARmX+O/9qss970ZVOVfTOEHrR5Uyef7PdG
Eaf0vEg34OwDUjOYgLPHYaG8B92ihHecOByC6DnL+JC0IEXDar/MMr0DmWEcFQUQ
8oEgKOrRp9uhxlpA4glRcZiGgY1bwMr1FG1wRrvboLOGfxMu4s8nX3mvhMv4OiLl
aWGdWKYpokszY8zwJbuFkpxp3c86btbyYRRg9Kum5JKr4VNd4al+kHhh3csSsEcC
te0JE61fStMMZLw5dt9uMJlDYoZ/gjTPLBAcPuD93ZNSrSCzVqDVhEXcaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMN/DpimhQ/fMR39SLMe6qINS72pMB8GA1UdIwQY
MBaAFCnkbnWGXo1KCB5LXdpG08lAA2ebMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2VSdWRZWmVqVW9JSGt0ZDJrYlR5VUFEWjVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9kMjM1NGEtZjNjMi00MWQ1LWIyOTIt
YTlkMjY3YWNmNjY0LzEvS2VSdWRZWmVqVW9JSGt0ZDJrYlR5VUFEWjVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi9kMjM1NGEtZjNjMi00MWQ1LWIyOTItYTlkMjY3YWNmNjY0
LzEvS2VSdWRZWmVqVW9JSGt0ZDJrYlR5VUFEWjVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADQznJHrk
P1OZsXG276lbzK2rRS1t5s/qfw49af9O+pjCcB1pts8mCPcJ2Po0tedWh6J2rB2l
+uXDNSJ1114ZxVGwlhbpe4c7fKeNs3a9/4oBxSjaHzucSeiPKZZI2kDwHzrzCQJX
tgomj+shbu7AgbF/EJQLtdSnup10IL2Li1StFaH/JXJcPzOMvgKMgZ5SKn876R46
FtTKYRi/F0A3LINP5f2X5lcIzN3oRYeOlC3LO0ie2GNg2+fvP0MLHXu3nJ4p7Bog
QJVYlp/KUSgowALOTRcveC6Xz0mNDle/vf5cAEMHYAi5RC+SCPye3Rdf/5nTfHUU
TZ2m7oGguSWHSg==
-----END CERTIFICATE-----
Generated at Sat Jun 14 10:17:49 2025 by rpki-client