Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.mft
File:                     1dC_Gtf8Np2Pv0PmLel6T6z-9rU.mft (raw, json)
Hash identifier:          BvnIf96fDs34j5t+cfCNp5/3PBHO7aCH8FrWVmjQKqQ=
Subject key identifier:   94:86:77:39:7E:F5:13:C9:7E:8D:BD:01:B6:E6:C1:94:B5:ED:A3:F5
Authority key identifier: D5:D0:BF:1A:D7:FC:36:9D:8F:BF:43:E6:2D:E9:7A:4F:AC:FE:F6:B5
Certificate issuer:       /CN=d5d0bf1ad7fc369d8fbf43e62de97a4facfef6b5
Certificate serial:       019771BFB439573779951FA1173A061C9F5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.mft
Manifest number:          0AD7
Signing time:             Sun 15 Jun 2025 04:01:18 +0000
Manifest this update:     Sun 15 Jun 2025 04:01:18 +0000
Manifest next update:     Mon 16 Jun 2025 04:01:18 +0000
Files and hashes:         1: 1dC_Gtf8Np2Pv0PmLel6T6z-9rU.crl (hash: nIFmsepiWCD748aB47PBWfjRbGj1xJFdq3sITZYPin8=)
                          2: mhdzxHyga_rpAnhJvnJWGrarNFw.roa (hash: l1WjIafW1o8IpUq72+h/DmsurJ/Xd4bFO/qecSh/CbU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 22:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:71:bf:b4:39:57:37:79:95:1f:a1:17:3a:06:1c:9f:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5d0bf1ad7fc369d8fbf43e62de97a4facfef6b5
        Validity
            Not Before: Jun 15 04:01:18 2025 GMT
            Not After : Jun 16 04:01:18 2025 GMT
        Subject: CN=948677397ef513c97e8dbd01b6e6c194b5eda3f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f9:91:76:a9:0c:c2:48:d4:01:fa:69:c0:84:
                    b3:69:6e:e4:4d:41:3a:38:74:c8:65:04:76:04:42:
                    b6:2d:f8:c8:ce:67:cd:fc:27:6c:aa:38:9e:ee:2b:
                    fd:de:9e:00:cd:5d:c8:2b:e0:9c:e9:8e:b2:2b:5f:
                    12:40:4f:83:53:d5:74:d4:58:35:67:b2:12:ea:56:
                    cb:29:e9:a1:8e:85:0a:3c:49:af:ba:89:5b:76:47:
                    3d:25:14:69:74:05:31:1e:61:6d:3e:4b:4f:ee:16:
                    08:f9:09:0b:f0:71:64:c7:88:92:03:b3:46:18:93:
                    d0:be:22:41:43:17:4e:06:cc:2a:8b:7b:89:d0:d8:
                    31:df:d2:1c:06:d5:db:2f:9b:ad:e7:4b:89:86:37:
                    1f:08:ac:87:d5:31:92:21:da:ea:6c:cb:c7:53:07:
                    7a:6b:59:12:3e:bd:fe:21:5d:94:e9:1d:43:52:5e:
                    3a:99:f3:e0:e8:42:25:c2:ee:ae:aa:1a:a0:74:22:
                    46:c1:f4:54:f8:11:38:24:5b:26:a4:56:78:16:1f:
                    d4:fc:36:3f:cb:20:d9:85:5e:6a:db:17:48:cc:93:
                    dd:21:9a:4e:7e:16:09:96:86:b7:62:e9:b3:1b:4a:
                    80:92:2b:e6:1f:e6:a1:bc:9e:fb:02:31:26:0f:2b:
                    58:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:86:77:39:7E:F5:13:C9:7E:8D:BD:01:B6:E6:C1:94:B5:ED:A3:F5
            X509v3 Authority Key Identifier:
                keyid:D5:D0:BF:1A:D7:FC:36:9D:8F:BF:43:E6:2D:E9:7A:4F:AC:FE:F6:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:b9:ec:e2:4e:71:ac:71:9f:f6:1a:28:fa:c3:54:ca:5b:96:
         15:a6:b8:02:91:56:25:a0:2c:e8:55:82:1b:d0:d4:33:f1:02:
         c6:37:a2:cf:8d:eb:93:a9:67:27:59:ab:45:4d:5c:fe:5f:6c:
         85:9e:32:63:1b:ef:01:ec:ad:bd:63:47:f4:ce:99:80:b5:95:
         a5:6b:8a:bc:97:d2:e2:3a:c2:13:fe:4a:c1:f4:4b:2d:ca:61:
         00:5b:5f:fa:83:3e:54:16:97:f3:22:45:f8:6c:0a:b8:e7:1c:
         93:0d:3f:16:8b:4d:5b:92:65:2c:be:a4:1f:58:cb:c6:5f:6e:
         ff:5d:43:a1:d9:94:d8:f8:77:07:30:a1:65:fd:47:d9:13:19:
         7c:fa:53:90:f9:f9:2c:1e:27:f8:fd:c8:3a:53:84:4f:9d:de:
         af:c9:d4:9e:f3:ea:ca:3f:ec:e6:0d:29:b3:eb:55:a9:9b:c8:
         7c:d8:c7:33:13:82:31:e5:97:67:6d:1d:7a:07:8e:c0:34:18:
         2c:60:aa:18:f7:7f:84:b6:4b:23:dd:62:7d:7d:e6:33:41:ce:
         84:9f:77:21:d2:05:6d:88:b7:c3:db:4b:fd:e9:0b:4b:bb:8d:
         3d:99:ea:d4:46:64:2d:8c:40:77:9b:32:1e:37:45:1e:4b:c9:
         12:5b:cc:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdxv7Q5Vzd5lR+hFzoGHJ9cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1ZDBiZjFhZDdmYzM2OWQ4ZmJmNDNlNjJkZTk3YTRmYWNm
ZWY2YjUwHhcNMjUwNjE1MDQwMTE4WhcNMjUwNjE2MDQwMTE4WjAzMTEwLwYDVQQD
Eyg5NDg2NzczOTdlZjUxM2M5N2U4ZGJkMDFiNmU2YzE5NGI1ZWRhM2Y1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/mRdqkMwkjUAfppwISzaW7kTUE6
OHTIZQR2BEK2LfjIzmfN/Cdsqjie7iv93p4AzV3IK+Cc6Y6yK18SQE+DU9V01Fg1
Z7IS6lbLKemhjoUKPEmvuolbdkc9JRRpdAUxHmFtPktP7hYI+QkL8HFkx4iSA7NG
GJPQviJBQxdOBswqi3uJ0Ngx39IcBtXbL5ut50uJhjcfCKyH1TGSIdrqbMvHUwd6
a1kSPr3+IV2U6R1DUl46mfPg6EIlwu6uqhqgdCJGwfRU+BE4JFsmpFZ4Fh/U/DY/
yyDZhV5q2xdIzJPdIZpOfhYJloa3YumzG0qAkivmH+ahvJ77AjEmDytY/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJSGdzl+9RPJfo29AbbmwZS17aP1MB8GA1UdIwQY
MBaAFNXQvxrX/Dadj79D5i3pek+s/va1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWRDX0d0ZjhOcDJQdjBQbUxlbDZUNnotOXJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi81NTM5ZTQtZDEwZC00OWM1LWJkY2Ut
ZWI3ZTljMGQzNzQ3LzEvMWRDX0d0ZjhOcDJQdjBQbUxlbDZUNnotOXJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi81NTM5ZTQtZDEwZC00OWM1LWJkY2UtZWI3ZTljMGQzNzQ3
LzEvMWRDX0d0ZjhOcDJQdjBQbUxlbDZUNnotOXJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa7ns4k5x
rHGf9hoo+sNUyluWFaa4ApFWJaAs6FWCG9DUM/ECxjeiz43rk6lnJ1mrRU1c/l9s
hZ4yYxvvAeytvWNH9M6ZgLWVpWuKvJfS4jrCE/5KwfRLLcphAFtf+oM+VBaX8yJF
+GwKuOcckw0/FotNW5JlLL6kH1jLxl9u/11DodmU2Ph3BzChZf1H2RMZfPpTkPn5
LB4n+P3IOlOET53er8nUnvPqyj/s5g0ps+tVqZvIfNjHMxOCMeWXZ20degeOwDQY
LGCqGPd/hLZLI91ifX3mM0HOhJ93IdIFbYi3w9tL/ekLS7uNPZnq1EZkLYxAd5sy
HjdFHkvJElvMnQ==
-----END CERTIFICATE-----
Generated at Sun Jun 15 07:33:14 2025 by rpki-client