Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/c3d220-4985-4d19-8200-608097f18d83/1/c0w1Ecv_CSgWQYvkd8tVPWa1uE8.mft
File:                     c0w1Ecv_CSgWQYvkd8tVPWa1uE8.mft (raw, json)
Hash identifier:          v/NlfbbbaGZF/nmU82U/k0fPMf/1touJI98QHxeKWMs=
Subject key identifier:   C5:47:58:CC:CC:55:28:07:0B:96:F7:F1:F5:93:D5:D3:60:7F:1E:17
Authority key identifier: 73:4C:35:11:CB:FF:09:28:16:41:8B:E4:77:CB:55:3D:66:B5:B8:4F
Certificate issuer:       /CN=734c3511cbff092816418be477cb553d66b5b84f
Certificate serial:       0197778AB1C7747A6FD9174FC5A54691F875
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c0w1Ecv_CSgWQYvkd8tVPWa1uE8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/c3d220-4985-4d19-8200-608097f18d83/1/c0w1Ecv_CSgWQYvkd8tVPWa1uE8.mft
Manifest number:          142D
Signing time:             Mon 16 Jun 2025 07:01:07 +0000
Manifest this update:     Mon 16 Jun 2025 07:01:07 +0000
Manifest next update:     Tue 17 Jun 2025 07:01:07 +0000
Files and hashes:         1: c0w1Ecv_CSgWQYvkd8tVPWa1uE8.crl (hash: qXZL8r5SL2j5NnKgyTSAXiRRcWGnSc5xHo5jbxe5LkU=)
                          2: s3lH6NKYWmmwJhlNdBC0Z4wTX7s.roa (hash: yGRXRmilLINdMy7QeallAtPWcWMTpoSWpUomtg+4yo4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/c3d220-4985-4d19-8200-608097f18d83/1/c0w1Ecv_CSgWQYvkd8tVPWa1uE8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/c3d220-4985-4d19-8200-608097f18d83/1/c0w1Ecv_CSgWQYvkd8tVPWa1uE8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c0w1Ecv_CSgWQYvkd8tVPWa1uE8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:40:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:77:8a:b1:c7:74:7a:6f:d9:17:4f:c5:a5:46:91:f8:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=734c3511cbff092816418be477cb553d66b5b84f
        Validity
            Not Before: Jun 16 07:01:07 2025 GMT
            Not After : Jun 17 07:01:07 2025 GMT
        Subject: CN=c54758cccc5528070b96f7f1f593d5d3607f1e17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:65:99:b3:b1:d4:2f:96:fb:03:c9:5a:87:d6:
                    2e:02:5f:83:19:89:49:c9:5d:5d:17:56:07:5a:cc:
                    81:bd:e1:ec:f5:70:35:be:44:92:c3:bd:a9:79:f1:
                    24:d6:4d:10:61:64:f0:28:a0:2a:91:66:c0:04:68:
                    89:06:14:b8:21:35:07:8f:31:1e:17:8b:45:fc:34:
                    fa:7a:a5:38:85:d8:2c:5f:53:73:29:a0:c8:1b:e4:
                    f8:2e:11:a9:ce:78:51:c4:12:fb:ed:0f:71:05:e7:
                    aa:46:f3:83:e3:b2:d8:f5:d3:a4:4b:70:1d:19:ff:
                    6e:b6:52:48:93:9f:be:70:ad:87:15:f5:44:a8:07:
                    3b:e9:0f:44:38:77:70:89:2a:40:3f:b5:cf:0e:37:
                    8e:56:69:a1:fc:a3:20:c3:93:6c:21:25:a0:36:78:
                    4e:58:b6:fb:89:7c:c0:90:88:e0:5c:85:4c:76:4e:
                    b1:06:43:42:ef:8e:18:c1:13:d1:10:4b:39:25:7d:
                    4e:90:d7:44:a5:b9:6b:e8:4d:03:4b:12:5e:57:70:
                    14:b0:bd:39:b0:1a:f4:1d:bb:dd:38:4c:61:df:a5:
                    3a:ca:ee:ce:9b:4d:e3:ff:59:6f:90:34:92:53:98:
                    c3:59:4b:74:73:9d:68:23:ed:b0:23:ee:1f:48:4f:
                    1c:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:47:58:CC:CC:55:28:07:0B:96:F7:F1:F5:93:D5:D3:60:7F:1E:17
            X509v3 Authority Key Identifier:
                keyid:73:4C:35:11:CB:FF:09:28:16:41:8B:E4:77:CB:55:3D:66:B5:B8:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0w1Ecv_CSgWQYvkd8tVPWa1uE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/c3d220-4985-4d19-8200-608097f18d83/1/c0w1Ecv_CSgWQYvkd8tVPWa1uE8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/c3d220-4985-4d19-8200-608097f18d83/1/c0w1Ecv_CSgWQYvkd8tVPWa1uE8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:98:95:38:aa:3b:50:b5:58:5b:0b:b0:53:d1:82:91:7d:0b:
         80:d9:4a:ca:ff:ac:dd:8c:20:df:a6:99:85:6b:fb:1a:ca:01:
         a6:14:18:57:b9:88:03:8b:de:df:bc:c0:fe:0e:92:0a:57:fe:
         29:63:c8:84:36:05:40:1a:80:cf:d8:8b:ab:4f:6b:f7:69:20:
         ce:30:f1:08:9b:8c:fb:aa:c0:3a:5c:ad:d4:f7:0d:b5:9c:c7:
         e4:07:ec:34:a6:e1:1b:e0:db:7b:86:32:61:da:36:f4:01:34:
         83:bb:8e:97:50:bb:a1:16:88:68:b0:1b:ee:1c:0c:8f:31:14:
         b3:ed:9d:1f:e4:9b:48:bf:e2:b9:17:b6:9d:89:c3:bb:5c:59:
         a3:7b:51:ca:5f:32:16:e9:4d:b9:03:63:ee:66:78:f5:35:b2:
         38:07:68:2d:cf:54:cf:2d:0a:cf:31:14:1b:8d:5e:8f:33:d9:
         57:c2:bb:f0:6f:f6:f9:70:ff:e0:73:70:b4:6f:9b:79:5e:fd:
         c0:c2:3d:38:43:1b:cb:e4:da:f1:d5:f0:ea:67:a3:a0:ed:c2:
         7b:0e:6b:f0:b8:db:be:5d:d6:b6:35:a5:b5:30:bd:f2:ef:d1:
         01:3a:a0:12:b2:1e:33:49:82:93:d2:c2:05:89:b5:88:8e:60:
         e7:6e:e9:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd3irHHdHpv2RdPxaVGkfh1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczNGMzNTExY2JmZjA5MjgxNjQxOGJlNDc3Y2I1NTNkNjZi
NWI4NGYwHhcNMjUwNjE2MDcwMTA3WhcNMjUwNjE3MDcwMTA3WjAzMTEwLwYDVQQD
EyhjNTQ3NThjY2NjNTUyODA3MGI5NmY3ZjFmNTkzZDVkMzYwN2YxZTE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWWZs7HUL5b7A8lah9YuAl+DGYlJ
yV1dF1YHWsyBveHs9XA1vkSSw72pefEk1k0QYWTwKKAqkWbABGiJBhS4ITUHjzEe
F4tF/DT6eqU4hdgsX1NzKaDIG+T4LhGpznhRxBL77Q9xBeeqRvOD47LY9dOkS3Ad
Gf9utlJIk5++cK2HFfVEqAc76Q9EOHdwiSpAP7XPDjeOVmmh/KMgw5NsISWgNnhO
WLb7iXzAkIjgXIVMdk6xBkNC744YwRPREEs5JX1OkNdEpblr6E0DSxJeV3AUsL05
sBr0HbvdOExh36U6yu7Om03j/1lvkDSSU5jDWUt0c51oI+2wI+4fSE8cjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMVHWMzMVSgHC5b38fWT1dNgfx4XMB8GA1UdIwQY
MBaAFHNMNRHL/wkoFkGL5HfLVT1mtbhPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzB3MUVjdl9DU2dXUVl2a2Q4dFZQV2ExdUU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9jM2QyMjAtNDk4NS00ZDE5LTgyMDAt
NjA4MDk3ZjE4ZDgzLzEvYzB3MUVjdl9DU2dXUVl2a2Q4dFZQV2ExdUU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi9jM2QyMjAtNDk4NS00ZDE5LTgyMDAtNjA4MDk3ZjE4ZDgz
LzEvYzB3MUVjdl9DU2dXUVl2a2Q4dFZQV2ExdUU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoJiVOKo7
ULVYWwuwU9GCkX0LgNlKyv+s3Ywg36aZhWv7GsoBphQYV7mIA4ve37zA/g6SClf+
KWPIhDYFQBqAz9iLq09r92kgzjDxCJuM+6rAOlyt1PcNtZzH5AfsNKbhG+Dbe4Yy
Ydo29AE0g7uOl1C7oRaIaLAb7hwMjzEUs+2dH+SbSL/iuRe2nYnDu1xZo3tRyl8y
FulNuQNj7mZ49TWyOAdoLc9Uzy0KzzEUG41ejzPZV8K78G/2+XD/4HNwtG+beV79
wMI9OEMby+Ta8dXw6mejoO3Cew5r8Ljbvl3WtjWltTC98u/RATqgErIeM0mCk9LC
BYm1iI5g527p6g==
-----END CERTIFICATE-----
Generated at Mon Jun 16 09:47:25 2025 by rpki-client