Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/f861f2-bf83-4241-bb6a-aefd80872532/1/cQcchaNIKVj4fwMrZGMZjH_Z6wc.mft
File:                     cQcchaNIKVj4fwMrZGMZjH_Z6wc.mft (raw, json)
Hash identifier:          nuUMsByd4owunQQL3H0XraFbO9cgdeRMlo7+eT3Jw0A=
Subject key identifier:   E6:19:F7:4D:3E:8E:5D:54:FC:BE:46:A6:D4:A2:CB:42:53:6F:91:24
Authority key identifier: 71:07:1C:85:A3:48:29:58:F8:7F:03:2B:64:63:19:8C:7F:D9:EB:07
Certificate issuer:       /CN=71071c85a3482958f87f032b6463198c7fd9eb07
Certificate serial:       019770AC1F50B28F226C5BC05C301D0A255B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cQcchaNIKVj4fwMrZGMZjH_Z6wc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/f861f2-bf83-4241-bb6a-aefd80872532/1/cQcchaNIKVj4fwMrZGMZjH_Z6wc.mft
Manifest number:          1260
Signing time:             Sat 14 Jun 2025 23:00:17 +0000
Manifest this update:     Sat 14 Jun 2025 23:00:17 +0000
Manifest next update:     Sun 15 Jun 2025 23:00:17 +0000
Files and hashes:         1: cQcchaNIKVj4fwMrZGMZjH_Z6wc.crl (hash: FlXfFAGsKLrt1h7VVgDhvkTQr5G2NgbdT/EamIjSAQo=)
                          2: oDKhHV25asaAZwnOhgVY2UWIJ6I.roa (hash: TBtdjF9kT0kXckzBss688u22tMu+NiF4J0DL0v5u2x0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/f861f2-bf83-4241-bb6a-aefd80872532/1/cQcchaNIKVj4fwMrZGMZjH_Z6wc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/f861f2-bf83-4241-bb6a-aefd80872532/1/cQcchaNIKVj4fwMrZGMZjH_Z6wc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cQcchaNIKVj4fwMrZGMZjH_Z6wc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 22:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:70:ac:1f:50:b2:8f:22:6c:5b:c0:5c:30:1d:0a:25:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71071c85a3482958f87f032b6463198c7fd9eb07
        Validity
            Not Before: Jun 14 23:00:17 2025 GMT
            Not After : Jun 15 23:00:17 2025 GMT
        Subject: CN=e619f74d3e8e5d54fcbe46a6d4a2cb42536f9124
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:22:09:10:be:62:3f:91:c4:12:e1:07:c7:2b:
                    e3:a8:da:3a:f7:3a:64:e7:7c:a0:0a:bd:bb:5e:ef:
                    32:1a:ab:a8:72:6f:da:60:49:c8:25:eb:02:80:c7:
                    4d:0e:5a:8a:1a:93:f4:64:0e:3e:50:5a:8b:2b:c9:
                    83:b5:6e:19:6d:35:55:22:d8:80:dc:ea:b8:27:9e:
                    05:a4:1d:8d:02:cb:c8:35:d2:8a:4c:00:90:4b:80:
                    4d:28:d8:23:93:70:b6:50:71:56:e8:ba:c6:7d:9a:
                    4a:40:89:49:de:29:76:2c:7f:f3:1a:27:7a:6e:e1:
                    f5:b2:70:ec:f8:f1:84:4b:1b:d4:1a:82:e8:c8:16:
                    19:98:fd:86:85:9a:ec:e5:08:78:52:3d:16:c8:bd:
                    94:11:fc:07:d0:7a:48:75:49:62:10:6e:a5:53:46:
                    bf:6e:c3:73:51:dc:0f:00:41:19:dd:9f:3c:b0:21:
                    29:e0:24:cd:03:c4:aa:44:a3:31:6a:c5:03:db:41:
                    12:fd:53:4c:ca:c3:10:05:1b:76:2c:ce:ac:82:15:
                    e8:3b:27:f7:70:03:65:46:f0:a4:90:e2:b7:3f:b0:
                    c6:ee:ec:53:9d:fb:85:02:13:f6:8a:b2:43:30:75:
                    e6:5d:30:a1:00:a8:3f:7b:32:90:71:de:79:bc:9f:
                    2a:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:19:F7:4D:3E:8E:5D:54:FC:BE:46:A6:D4:A2:CB:42:53:6F:91:24
            X509v3 Authority Key Identifier:
                keyid:71:07:1C:85:A3:48:29:58:F8:7F:03:2B:64:63:19:8C:7F:D9:EB:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cQcchaNIKVj4fwMrZGMZjH_Z6wc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f861f2-bf83-4241-bb6a-aefd80872532/1/cQcchaNIKVj4fwMrZGMZjH_Z6wc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f861f2-bf83-4241-bb6a-aefd80872532/1/cQcchaNIKVj4fwMrZGMZjH_Z6wc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:a4:98:f7:73:be:18:0a:85:5c:c3:32:00:31:06:83:44:88:
         bb:40:8c:73:6f:46:2f:b1:7d:19:f5:e0:b9:c4:e1:7e:19:10:
         ff:91:b0:57:0c:5d:a6:be:47:86:d6:17:8b:0f:86:49:c9:9a:
         6c:76:88:fa:d8:16:54:af:c7:50:02:69:c7:13:37:e6:81:de:
         70:ba:74:c2:6b:91:4d:c9:ce:7e:bd:0c:a0:b9:66:4a:4b:36:
         76:3a:bb:24:09:db:9f:c3:4a:13:44:09:d7:b8:45:96:77:e0:
         72:92:6f:dd:aa:95:f0:3e:b4:05:4d:26:25:8e:6c:be:23:99:
         72:ff:3a:09:a7:29:59:dd:8c:1e:6b:75:cd:9b:4a:c9:de:a3:
         46:4f:6e:32:27:40:30:81:b5:4f:7b:a2:8a:50:c9:08:81:c1:
         30:52:d7:84:10:19:db:fb:4d:bd:a4:91:12:50:b3:c7:c0:48:
         75:21:f4:db:c3:4a:0b:7a:d7:5f:9d:33:ce:26:88:b2:ed:48:
         9f:0f:ea:5c:4a:c5:5b:42:41:f2:48:8d:15:80:bb:e1:9e:40:
         a2:d8:d7:cf:45:b7:04:49:96:05:0f:6b:69:b5:65:be:30:36:
         bc:d2:38:61:df:2f:88:63:8e:a5:29:d3:a2:03:1d:d5:4d:44:
         28:cc:ff:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdwrB9Qso8ibFvAXDAdCiVbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxMDcxYzg1YTM0ODI5NThmODdmMDMyYjY0NjMxOThjN2Zk
OWViMDcwHhcNMjUwNjE0MjMwMDE3WhcNMjUwNjE1MjMwMDE3WjAzMTEwLwYDVQQD
EyhlNjE5Zjc0ZDNlOGU1ZDU0ZmNiZTQ2YTZkNGEyY2I0MjUzNmY5MTI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxyIJEL5iP5HEEuEHxyvjqNo69zpk
53ygCr27Xu8yGquocm/aYEnIJesCgMdNDlqKGpP0ZA4+UFqLK8mDtW4ZbTVVItiA
3Oq4J54FpB2NAsvINdKKTACQS4BNKNgjk3C2UHFW6LrGfZpKQIlJ3il2LH/zGid6
buH1snDs+PGESxvUGoLoyBYZmP2GhZrs5Qh4Uj0WyL2UEfwH0HpIdUliEG6lU0a/
bsNzUdwPAEEZ3Z88sCEp4CTNA8SqRKMxasUD20ES/VNMysMQBRt2LM6sghXoOyf3
cANlRvCkkOK3P7DG7uxTnfuFAhP2irJDMHXmXTChAKg/ezKQcd55vJ8qdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOYZ900+jl1U/L5GptSiy0JTb5EkMB8GA1UdIwQY
MBaAFHEHHIWjSClY+H8DK2RjGYx/2esHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1FjY2hhTklLVmo0ZndNclpHTVpqSF9aNndjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9mODYxZjItYmY4My00MjQxLWJiNmEt
YWVmZDgwODcyNTMyLzEvY1FjY2hhTklLVmo0ZndNclpHTVpqSF9aNndjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi9mODYxZjItYmY4My00MjQxLWJiNmEtYWVmZDgwODcyNTMy
LzEvY1FjY2hhTklLVmo0ZndNclpHTVpqSF9aNndjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs6SY93O+
GAqFXMMyADEGg0SIu0CMc29GL7F9GfXgucThfhkQ/5GwVwxdpr5HhtYXiw+GScma
bHaI+tgWVK/HUAJpxxM35oHecLp0wmuRTcnOfr0MoLlmSks2djq7JAnbn8NKE0QJ
17hFlnfgcpJv3aqV8D60BU0mJY5sviOZcv86CacpWd2MHmt1zZtKyd6jRk9uMidA
MIG1T3uiilDJCIHBMFLXhBAZ2/tNvaSRElCzx8BIdSH028NKC3rXX50zziaIsu1I
nw/qXErFW0JB8kiNFYC74Z5AotjXz0W3BEmWBQ9rabVlvjA2vNI4Yd8viGOOpSnT
ogMd1U1EKMz/+Q==
-----END CERTIFICATE-----
Generated at Sun Jun 15 07:36:26 2025 by rpki-client