Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/8366ae-575d-4fde-8e92-0089944980ca/1/1RXy6RSc4bQoyPHt_ACSFeKEf1U.mft
File:                     1RXy6RSc4bQoyPHt_ACSFeKEf1U.mft (raw, json)
Hash identifier:          g0efvxnn61IcjPfKeg0L3DZOFVmbyrfIfwJxO7jm/K8=
Subject key identifier:   4E:D4:E1:A8:8C:4F:76:B4:1C:38:60:1F:2A:7C:D6:30:BA:F0:B0:62
Authority key identifier: D5:15:F2:E9:14:9C:E1:B4:28:C8:F1:ED:FC:00:92:15:E2:84:7F:55
Certificate issuer:       /CN=d515f2e9149ce1b428c8f1edfc009215e2847f55
Certificate serial:       01976D3D7D3D1C862DA8C94AB05C0D2481BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1RXy6RSc4bQoyPHt_ACSFeKEf1U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/8366ae-575d-4fde-8e92-0089944980ca/1/1RXy6RSc4bQoyPHt_ACSFeKEf1U.mft
Manifest number:          0331
Signing time:             Sat 14 Jun 2025 07:00:35 +0000
Manifest this update:     Sat 14 Jun 2025 07:00:35 +0000
Manifest next update:     Sun 15 Jun 2025 07:00:35 +0000
Files and hashes:         1: 1RXy6RSc4bQoyPHt_ACSFeKEf1U.crl (hash: ON+hQPy6LAJbNfJ9D4jZrc9BnMzGpZneRdjLesFW7nE=)
                          2: D3Qa_sAxJ4QAW9BgsqA95qoNdoU.roa (hash: gHeiDeVEOHYv0WXJX1y/YBwNlFOyEUt5hFygVZ9yIyc=)
                          3: YNsqLkitHpqkjiltdLgc2bdx6rs.roa (hash: 3Qov5yHW6YQLGF3KdMXPXf4671PbN4pLA5bsaPPsRlI=)
                          4: gkfVq5pqris09sYZ6oxV9_B3k7k.roa (hash: txlMX2TP/JiHw0qHy7bbrrf1DRw3ThhHjdL7DQDHFqs=)
                          5: zi6tgxxdXu-KjRvwqkHo4TAbCCY.roa (hash: /Ka11sy39OKnCI674OTDKtIC713gWaXNerptag8ixr0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/8366ae-575d-4fde-8e92-0089944980ca/1/1RXy6RSc4bQoyPHt_ACSFeKEf1U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/8366ae-575d-4fde-8e92-0089944980ca/1/1RXy6RSc4bQoyPHt_ACSFeKEf1U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1RXy6RSc4bQoyPHt_ACSFeKEf1U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:3d:7d:3d:1c:86:2d:a8:c9:4a:b0:5c:0d:24:81:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d515f2e9149ce1b428c8f1edfc009215e2847f55
        Validity
            Not Before: Jun 14 07:00:35 2025 GMT
            Not After : Jun 15 07:00:35 2025 GMT
        Subject: CN=4ed4e1a88c4f76b41c38601f2a7cd630baf0b062
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:f0:ee:7b:63:7b:c7:e6:bd:2f:02:b2:af:1c:
                    d9:98:96:e1:ba:a3:d5:8d:d2:15:7f:45:15:c1:da:
                    f1:76:e8:28:17:46:72:05:e2:f6:40:79:5b:63:44:
                    95:d6:9d:ea:ab:92:f3:53:8a:78:45:ca:1b:e0:9c:
                    f0:6d:c2:b8:3a:ad:bc:6f:be:21:9c:e7:b9:30:31:
                    71:3e:14:63:93:52:48:ff:2d:be:66:32:97:0e:0e:
                    e7:f8:c5:9e:04:b2:a3:49:5f:1e:72:72:55:c0:a0:
                    74:2d:7c:87:47:95:61:6e:57:6c:3e:40:08:43:49:
                    59:97:39:7f:09:df:4c:37:da:5f:61:99:e2:a5:a5:
                    86:dc:ad:96:2e:e7:c6:0a:82:09:f2:2e:29:99:ca:
                    02:d5:89:55:70:ea:c3:d6:65:4d:70:c8:cf:5e:3b:
                    04:79:05:6b:e3:02:15:cb:8f:78:77:45:ba:27:48:
                    10:c6:6f:ae:5f:5c:df:af:e2:5d:c9:b7:05:29:1d:
                    25:88:c2:f0:8a:af:42:c5:f5:37:e3:39:45:5b:69:
                    1a:61:5e:6f:4b:c9:93:90:5f:36:8f:d7:d1:60:96:
                    87:b9:fc:c6:07:a3:19:dc:77:c7:d0:76:fe:f6:aa:
                    f6:23:df:19:b7:1a:ae:12:2f:c2:7e:e7:8d:4e:5f:
                    7a:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:D4:E1:A8:8C:4F:76:B4:1C:38:60:1F:2A:7C:D6:30:BA:F0:B0:62
            X509v3 Authority Key Identifier:
                keyid:D5:15:F2:E9:14:9C:E1:B4:28:C8:F1:ED:FC:00:92:15:E2:84:7F:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1RXy6RSc4bQoyPHt_ACSFeKEf1U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8366ae-575d-4fde-8e92-0089944980ca/1/1RXy6RSc4bQoyPHt_ACSFeKEf1U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8366ae-575d-4fde-8e92-0089944980ca/1/1RXy6RSc4bQoyPHt_ACSFeKEf1U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:27:d5:7f:5e:2c:54:39:16:3d:77:3e:fe:b7:d7:7e:21:9e:
         3c:6a:66:ae:91:d5:6a:ae:84:6e:d0:6c:de:52:4d:8d:53:29:
         9e:b8:46:40:fc:1e:7b:32:c5:69:96:0d:1d:7e:1c:8c:85:2c:
         18:16:74:1a:1c:d6:a5:55:ff:a1:f2:5d:d4:6b:56:19:b4:ea:
         b1:bd:c7:89:14:91:8e:91:71:33:63:ba:a9:b5:43:34:22:7a:
         3e:5f:ac:7a:eb:ce:fe:6f:43:e1:44:77:ab:68:a4:29:4f:b9:
         52:3a:2d:32:71:73:86:a0:2b:e4:2d:cb:f8:38:76:59:a9:4d:
         ec:ae:b2:a7:38:dc:f5:cb:2f:c5:06:fd:95:ca:cf:1c:0e:8a:
         5e:b9:bf:d7:04:9b:fb:e3:4c:dc:3a:b3:55:0f:ea:24:ec:ce:
         6b:e2:92:de:f6:c3:04:3a:db:16:c8:c2:ff:73:c7:d8:7a:5d:
         59:2e:52:1c:7e:3f:ac:be:4f:18:c8:75:f0:83:14:9b:1a:c6:
         c2:59:ce:04:27:c5:f6:c3:3f:fc:d1:6c:4c:0d:2b:df:6e:2a:
         c3:80:03:79:e4:80:1c:56:e1:17:54:63:ad:31:cd:54:97:cb:
         a0:4b:ac:bb:f5:c1:08:d8:12:4c:b6:ce:df:81:29:8a:71:a6:
         9c:2a:f0:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtPX09HIYtqMlKsFwNJIG6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1MTVmMmU5MTQ5Y2UxYjQyOGM4ZjFlZGZjMDA5MjE1ZTI4
NDdmNTUwHhcNMjUwNjE0MDcwMDM1WhcNMjUwNjE1MDcwMDM1WjAzMTEwLwYDVQQD
Eyg0ZWQ0ZTFhODhjNGY3NmI0MWMzODYwMWYyYTdjZDYzMGJhZjBiMDYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4vDue2N7x+a9LwKyrxzZmJbhuqPV
jdIVf0UVwdrxdugoF0ZyBeL2QHlbY0SV1p3qq5LzU4p4Rcob4JzwbcK4Oq28b74h
nOe5MDFxPhRjk1JI/y2+ZjKXDg7n+MWeBLKjSV8ecnJVwKB0LXyHR5VhbldsPkAI
Q0lZlzl/Cd9MN9pfYZnipaWG3K2WLufGCoIJ8i4pmcoC1YlVcOrD1mVNcMjPXjsE
eQVr4wIVy494d0W6J0gQxm+uX1zfr+JdybcFKR0liMLwiq9CxfU34zlFW2kaYV5v
S8mTkF82j9fRYJaHufzGB6MZ3HfH0Hb+9qr2I98ZtxquEi/CfueNTl964wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE7U4aiMT3a0HDhgHyp81jC68LBiMB8GA1UdIwQY
MBaAFNUV8ukUnOG0KMjx7fwAkhXihH9VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVJYeTZSU2M0YlFveVBIdF9BQ1NGZUtFZjFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS84MzY2YWUtNTc1ZC00ZmRlLThlOTIt
MDA4OTk0NDk4MGNhLzEvMVJYeTZSU2M0YlFveVBIdF9BQ1NGZUtFZjFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS84MzY2YWUtNTc1ZC00ZmRlLThlOTItMDA4OTk0NDk4MGNh
LzEvMVJYeTZSU2M0YlFveVBIdF9BQ1NGZUtFZjFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUyfVf14s
VDkWPXc+/rfXfiGePGpmrpHVaq6EbtBs3lJNjVMpnrhGQPweezLFaZYNHX4cjIUs
GBZ0GhzWpVX/ofJd1GtWGbTqsb3HiRSRjpFxM2O6qbVDNCJ6Pl+seuvO/m9D4UR3
q2ikKU+5UjotMnFzhqAr5C3L+Dh2WalN7K6ypzjc9csvxQb9lcrPHA6KXrm/1wSb
++NM3DqzVQ/qJOzOa+KS3vbDBDrbFsjC/3PH2HpdWS5SHH4/rL5PGMh18IMUmxrG
wlnOBCfF9sM//NFsTA0r324qw4ADeeSAHFbhF1RjrTHNVJfLoEusu/XBCNgSTLbO
34EpinGmnCrwzg==
-----END CERTIFICATE-----
Generated at Sat Jun 14 10:44:56 2025 by rpki-client