Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/774f37-0e57-49e6-8865-a64ba4b8fa19/1/gZuXsgzLT2llGOR8Q3JZqJE-cq4.mft
File:                     gZuXsgzLT2llGOR8Q3JZqJE-cq4.mft (raw, json)
Hash identifier:          xC6tL0PPFvNxfw3y7pznh6rlgjG8My2lp6PDNtUm/2U=
Subject key identifier:   DF:CD:99:1D:50:4A:A0:B3:67:84:7D:F9:8D:BF:C6:48:13:7D:3E:E1
Authority key identifier: 81:9B:97:B2:0C:CB:4F:69:65:18:E4:7C:43:72:59:A8:91:3E:72:AE
Certificate issuer:       /CN=819b97b20ccb4f696518e47c437259a8913e72ae
Certificate serial:       01976C61FDB63CA5A0F499DB10CDAB278B7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gZuXsgzLT2llGOR8Q3JZqJE-cq4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/774f37-0e57-49e6-8865-a64ba4b8fa19/1/gZuXsgzLT2llGOR8Q3JZqJE-cq4.mft
Manifest number:          0FDE
Signing time:             Sat 14 Jun 2025 03:00:50 +0000
Manifest this update:     Sat 14 Jun 2025 03:00:50 +0000
Manifest next update:     Sun 15 Jun 2025 03:00:50 +0000
Files and hashes:         1: 20-9mytYHMHndruQgUnF8ikroR8.roa (hash: 2lr50ig6vbMmIzHsYNAhFoZOypQ5RbpTRGyrByTCT20=)
                          2: fI8A3CovPrmNEuNSOd5whasfei4.roa (hash: vdsVJdsI5nRx6IGPnIMOMSeTTdkDkOzyswcHJNq1lig=)
                          3: g1EKkeORDxQo9Cif76DEx1ayRZo.roa (hash: vbPzjHWrPv/5Wuh7IZWDGYTkmh23maqwjvKxVVDLrlI=)
                          4: gZuXsgzLT2llGOR8Q3JZqJE-cq4.crl (hash: 01PdoKvT+SCexYT3ymQ2YecyRrQP88Erdhxv92kuAhw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/774f37-0e57-49e6-8865-a64ba4b8fa19/1/gZuXsgzLT2llGOR8Q3JZqJE-cq4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/774f37-0e57-49e6-8865-a64ba4b8fa19/1/gZuXsgzLT2llGOR8Q3JZqJE-cq4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gZuXsgzLT2llGOR8Q3JZqJE-cq4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:61:fd:b6:3c:a5:a0:f4:99:db:10:cd:ab:27:8b:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=819b97b20ccb4f696518e47c437259a8913e72ae
        Validity
            Not Before: Jun 14 03:00:50 2025 GMT
            Not After : Jun 15 03:00:50 2025 GMT
        Subject: CN=dfcd991d504aa0b367847df98dbfc648137d3ee1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:b3:c3:eb:31:72:06:3e:43:44:25:60:18:65:
                    f4:fe:50:b0:24:12:11:b1:bf:54:10:12:4e:d9:45:
                    24:1a:9b:c5:a2:ef:89:8d:33:24:c4:f9:99:8d:70:
                    56:13:a9:cc:a7:1c:03:7c:b1:2b:84:79:4a:66:38:
                    29:7a:5f:20:03:d7:05:9b:a5:7b:7c:91:b2:c7:c0:
                    bb:aa:2d:13:f1:41:1e:ce:b9:4e:94:3c:d2:26:e6:
                    b8:ab:9b:ed:04:43:90:1c:bf:8a:51:f1:27:5c:4a:
                    19:bd:9c:31:71:0c:6f:db:e6:8d:77:a1:ce:b0:ac:
                    f4:10:62:90:f6:bf:94:21:8f:2e:3f:3b:bd:65:31:
                    3e:29:10:47:e3:98:64:cd:c9:66:78:b1:21:85:8a:
                    3b:ca:dc:32:d0:87:b6:85:09:a9:83:fd:95:c2:db:
                    b1:b8:56:99:c7:46:de:8c:f2:0a:90:a2:c1:78:52:
                    3f:2a:7e:69:81:7f:31:a1:7e:05:7c:55:f1:e5:a6:
                    15:e8:49:4d:16:19:9c:41:2e:af:4b:40:30:89:0d:
                    b3:82:76:f5:f1:9c:34:14:4a:33:fd:22:98:ba:e8:
                    8e:78:0b:d2:29:de:52:c3:b2:3e:e2:05:97:f1:73:
                    20:e5:4e:34:4e:b6:c3:77:f1:59:48:3d:b6:2b:df:
                    52:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:CD:99:1D:50:4A:A0:B3:67:84:7D:F9:8D:BF:C6:48:13:7D:3E:E1
            X509v3 Authority Key Identifier:
                keyid:81:9B:97:B2:0C:CB:4F:69:65:18:E4:7C:43:72:59:A8:91:3E:72:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZuXsgzLT2llGOR8Q3JZqJE-cq4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/774f37-0e57-49e6-8865-a64ba4b8fa19/1/gZuXsgzLT2llGOR8Q3JZqJE-cq4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/774f37-0e57-49e6-8865-a64ba4b8fa19/1/gZuXsgzLT2llGOR8Q3JZqJE-cq4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:59:c3:71:a0:ed:0a:0f:93:40:b0:f2:5c:59:17:f1:de:27:
         f1:7c:f8:36:36:a6:b7:f0:a0:f8:01:b9:01:e6:d8:1a:98:20:
         f0:93:ab:59:f1:ff:fe:ae:50:fe:4e:e4:08:cf:86:a5:7b:e8:
         a1:ce:cd:68:f1:94:90:71:55:a4:f9:7a:e4:0d:d1:d9:dd:49:
         b8:c9:60:93:57:67:1b:01:01:cf:98:97:cd:f4:ee:23:1b:58:
         68:12:aa:98:bf:f1:df:db:eb:2b:ea:7e:85:d5:78:5c:0e:4e:
         d5:be:ff:34:c1:9f:aa:cd:1d:3f:f7:71:b8:b8:87:4f:3c:cd:
         17:5c:b5:8c:fe:7c:c8:84:f4:cc:40:02:5f:b8:71:18:64:f5:
         00:57:3f:36:a8:68:a9:af:0a:e4:aa:eb:44:6c:bc:43:cb:2c:
         6d:18:ae:1f:40:32:42:e1:4e:22:96:4b:b7:78:e9:8a:d6:fd:
         eb:6d:82:c6:b6:c8:54:f9:1e:73:6d:f4:05:06:98:21:2b:53:
         e7:f1:eb:81:c7:52:c8:de:ad:a5:8f:8c:22:0d:f3:93:de:aa:
         0d:33:cc:84:a1:95:f0:e5:26:e6:32:6b:56:a4:71:d3:24:d8:
         dd:79:c8:19:56:91:9a:f8:f8:ce:4d:83:c9:3f:7d:18:04:6c:
         12:57:38:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsYf22PKWg9JnbEM2rJ4t+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxOWI5N2IyMGNjYjRmNjk2NTE4ZTQ3YzQzNzI1OWE4OTEz
ZTcyYWUwHhcNMjUwNjE0MDMwMDUwWhcNMjUwNjE1MDMwMDUwWjAzMTEwLwYDVQQD
EyhkZmNkOTkxZDUwNGFhMGIzNjc4NDdkZjk4ZGJmYzY0ODEzN2QzZWUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbPD6zFyBj5DRCVgGGX0/lCwJBIR
sb9UEBJO2UUkGpvFou+JjTMkxPmZjXBWE6nMpxwDfLErhHlKZjgpel8gA9cFm6V7
fJGyx8C7qi0T8UEezrlOlDzSJua4q5vtBEOQHL+KUfEnXEoZvZwxcQxv2+aNd6HO
sKz0EGKQ9r+UIY8uPzu9ZTE+KRBH45hkzclmeLEhhYo7ytwy0Ie2hQmpg/2Vwtux
uFaZx0bejPIKkKLBeFI/Kn5pgX8xoX4FfFXx5aYV6ElNFhmcQS6vS0AwiQ2zgnb1
8Zw0FEoz/SKYuuiOeAvSKd5Sw7I+4gWX8XMg5U40TrbDd/FZSD22K99S1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN/NmR1QSqCzZ4R9+Y2/xkgTfT7hMB8GA1UdIwQY
MBaAFIGbl7IMy09pZRjkfENyWaiRPnKuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1p1WHNnekxUMmxsR09SOFEzSlpxSkUtY3E0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy83NzRmMzctMGU1Ny00OWU2LTg4NjUt
YTY0YmE0YjhmYTE5LzEvZ1p1WHNnekxUMmxsR09SOFEzSlpxSkUtY3E0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy83NzRmMzctMGU1Ny00OWU2LTg4NjUtYTY0YmE0YjhmYTE5
LzEvZ1p1WHNnekxUMmxsR09SOFEzSlpxSkUtY3E0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjVnDcaDt
Cg+TQLDyXFkX8d4n8Xz4Njamt/Cg+AG5AebYGpgg8JOrWfH//q5Q/k7kCM+GpXvo
oc7NaPGUkHFVpPl65A3R2d1JuMlgk1dnGwEBz5iXzfTuIxtYaBKqmL/x39vrK+p+
hdV4XA5O1b7/NMGfqs0dP/dxuLiHTzzNF1y1jP58yIT0zEACX7hxGGT1AFc/Nqho
qa8K5KrrRGy8Q8ssbRiuH0AyQuFOIpZLt3jpitb9622CxrbIVPkec230BQaYIStT
5/HrgcdSyN6tpY+MIg3zk96qDTPMhKGV8OUm5jJrVqRx0yTY3XnIGVaRmvj4zk2D
yT99GARsElc42w==
-----END CERTIFICATE-----
Generated at Sat Jun 14 11:52:19 2025 by rpki-client