Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/AH5rWqQ302kxUVAqIRSW431K4sU.mft
File:                     AH5rWqQ302kxUVAqIRSW431K4sU.mft (raw, json)
Hash identifier:          h6+KPrANRTDyB9N/2B4xBV3HnEP1apxqC2c+fhCtGNk=
Subject key identifier:   FC:38:E0:56:9D:59:20:80:A8:B0:20:BD:37:D0:9D:EF:CC:DC:6E:ED
Authority key identifier: 00:7E:6B:5A:A4:37:D3:69:31:51:50:2A:21:14:96:E3:7D:4A:E2:C5
Certificate issuer:       /CN=007e6b5aa437d3693151502a211496e37d4ae2c5
Certificate serial:       019768F3041FB00A0E9C3CEC53AA644DC049
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AH5rWqQ302kxUVAqIRSW431K4sU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/AH5rWqQ302kxUVAqIRSW431K4sU.mft
Manifest number:          130A
Signing time:             Fri 13 Jun 2025 11:00:46 +0000
Manifest this update:     Fri 13 Jun 2025 11:00:46 +0000
Manifest next update:     Sat 14 Jun 2025 11:00:46 +0000
Files and hashes:         1: 6F_Q4XpRKgEexZcCv84M_kGGwx8.roa (hash: jzUe5knYI2NZSGwBtOwn1dJh+2wMTZvaI6KEnoCDN6M=)
                          2: AH5rWqQ302kxUVAqIRSW431K4sU.crl (hash: R1q8ipJ5NFbRdJ04oGAE6ZlJ8XpXJaJg/X0ZYxMKmS8=)
                          3: Ry-o6BvHlNuOD_d14wdLVmhDsgM.roa (hash: S/jHrYJPbAAtdA+RZZOotd+GpMfWfmGdhS0b8Kc0V30=)
                          4: VFSqRzcGMZ3Y2JFZb1Fsblb27nQ.roa (hash: UUfcXkF0GWrqVSNu+3z9VDCb/uLRbXj4ZsTEe5POQ7M=)
                          5: W_b0Ax5Mpx_fhvv-92F8GttV04I.roa (hash: y/SVVGY3IuSmMubg1JbInzxD9q8qop1Ol37UDvpp3pE=)
                          6: gZrmTs3ukQIINjYb9akCKLL_iZM.roa (hash: WbSg2tywBgMqpLgEuUZPOKgd7CPp10c7QuJJvyuvaco=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/AH5rWqQ302kxUVAqIRSW431K4sU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/AH5rWqQ302kxUVAqIRSW431K4sU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AH5rWqQ302kxUVAqIRSW431K4sU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 11:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:68:f3:04:1f:b0:0a:0e:9c:3c:ec:53:aa:64:4d:c0:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=007e6b5aa437d3693151502a211496e37d4ae2c5
        Validity
            Not Before: Jun 13 11:00:46 2025 GMT
            Not After : Jun 14 11:00:46 2025 GMT
        Subject: CN=fc38e0569d592080a8b020bd37d09defccdc6eed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:1a:f7:02:6f:2f:cc:6e:c0:5d:46:56:25:1d:
                    a1:5d:b1:57:b3:9c:0e:ac:14:cc:9d:a7:4b:54:73:
                    35:4c:24:60:d9:c0:10:20:38:9f:81:ac:62:dc:86:
                    a6:a8:c8:1a:83:1e:98:6b:89:88:b2:a8:b3:de:b9:
                    75:d6:cc:20:96:e7:12:8e:2e:26:ad:aa:2e:15:d8:
                    11:f4:be:ce:80:57:ac:2b:61:f4:8a:ae:60:2f:69:
                    0c:f8:62:09:d5:e1:90:5a:cd:80:e4:dd:0d:1d:c8:
                    23:76:61:6c:c5:8e:c5:1f:64:43:82:c9:b7:d7:25:
                    e5:6d:10:6b:42:20:02:7e:3e:04:be:cd:c0:68:60:
                    e4:da:fa:04:ef:8f:d7:ab:26:e1:50:ce:36:45:68:
                    aa:51:86:7a:d4:c8:95:22:05:ac:68:f0:7f:fd:f4:
                    9d:fe:0d:1c:fe:b6:e3:29:a8:0f:39:c7:17:92:50:
                    d0:7b:f6:fe:fc:02:09:f2:46:bf:a5:da:a4:f4:74:
                    f6:4d:d6:63:be:ee:b3:ec:e7:16:0c:b0:04:56:b8:
                    01:26:a6:0c:a1:9a:0f:b9:01:8f:87:c6:53:b3:79:
                    0d:cb:a5:17:3d:47:5d:d0:80:b3:e1:19:0e:ec:ba:
                    86:89:9e:74:53:9b:4f:6b:c8:5d:48:8b:0d:2b:ac:
                    63:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:38:E0:56:9D:59:20:80:A8:B0:20:BD:37:D0:9D:EF:CC:DC:6E:ED
            X509v3 Authority Key Identifier:
                keyid:00:7E:6B:5A:A4:37:D3:69:31:51:50:2A:21:14:96:E3:7D:4A:E2:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AH5rWqQ302kxUVAqIRSW431K4sU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/AH5rWqQ302kxUVAqIRSW431K4sU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/AH5rWqQ302kxUVAqIRSW431K4sU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:1c:07:9a:b4:4d:f5:fd:55:77:fa:eb:4f:6e:45:36:c4:34:
         d3:a2:9a:ae:2d:58:c9:3a:fe:77:94:f7:8d:d5:ec:d5:2b:ac:
         fa:8d:82:f4:0b:e1:90:b8:03:99:00:82:e6:7b:3e:be:d1:ad:
         0b:8f:9e:8d:2a:16:b0:c3:61:c5:83:f4:15:2d:9a:99:ec:4e:
         71:46:7f:71:65:4d:f7:45:ed:ee:bf:84:d1:60:9e:46:02:89:
         46:28:05:74:d1:34:27:2d:ca:ba:77:00:3c:c3:22:4a:3e:58:
         d6:76:dd:3e:27:9d:fd:dd:98:5a:b4:5f:0a:02:40:3f:88:d3:
         22:2b:9e:88:b7:27:fb:84:be:ea:33:76:5c:9e:35:25:88:b7:
         71:ff:da:ff:d9:fa:19:ac:0e:7e:66:55:47:5c:4b:f5:7c:c6:
         70:ab:b0:7e:e7:f1:cb:02:74:47:40:57:12:92:5f:bb:7b:4e:
         b2:f1:52:51:27:d8:93:4a:c0:f6:63:2f:73:6e:cb:28:af:f9:
         c3:03:41:d8:37:17:65:8c:2b:97:0e:15:8e:08:a9:2a:fc:a4:
         89:88:72:94:07:b9:00:80:b9:7c:d0:97:f0:54:ee:b9:c3:35:
         79:8b:e3:88:95:91:68:0e:6c:e8:7b:b1:59:8c:07:b8:7f:57:
         ff:28:02:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdo8wQfsAoOnDzsU6pkTcBJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwN2U2YjVhYTQzN2QzNjkzMTUxNTAyYTIxMTQ5NmUzN2Q0
YWUyYzUwHhcNMjUwNjEzMTEwMDQ2WhcNMjUwNjE0MTEwMDQ2WjAzMTEwLwYDVQQD
EyhmYzM4ZTA1NjlkNTkyMDgwYThiMDIwYmQzN2QwOWRlZmNjZGM2ZWVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhr3Am8vzG7AXUZWJR2hXbFXs5wO
rBTMnadLVHM1TCRg2cAQIDifgaxi3IamqMgagx6Ya4mIsqiz3rl11swglucSji4m
raouFdgR9L7OgFesK2H0iq5gL2kM+GIJ1eGQWs2A5N0NHcgjdmFsxY7FH2RDgsm3
1yXlbRBrQiACfj4Evs3AaGDk2voE74/XqybhUM42RWiqUYZ61MiVIgWsaPB//fSd
/g0c/rbjKagPOccXklDQe/b+/AIJ8ka/pdqk9HT2TdZjvu6z7OcWDLAEVrgBJqYM
oZoPuQGPh8ZTs3kNy6UXPUdd0ICz4RkO7LqGiZ50U5tPa8hdSIsNK6xjkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPw44FadWSCAqLAgvTfQne/M3G7tMB8GA1UdIwQY
MBaAFAB+a1qkN9NpMVFQKiEUluN9SuLFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUg1cldxUTMwMmt4VVZBcUlSU1c0MzFLNHNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy81MThmYWItNzYwNi00ODMyLWFhNjYt
NWE4YzY3ODQyMzg5LzEvQUg1cldxUTMwMmt4VVZBcUlSU1c0MzFLNHNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy81MThmYWItNzYwNi00ODMyLWFhNjYtNWE4YzY3ODQyMzg5
LzEvQUg1cldxUTMwMmt4VVZBcUlSU1c0MzFLNHNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAexwHmrRN
9f1Vd/rrT25FNsQ006Kari1YyTr+d5T3jdXs1Sus+o2C9AvhkLgDmQCC5ns+vtGt
C4+ejSoWsMNhxYP0FS2amexOcUZ/cWVN90Xt7r+E0WCeRgKJRigFdNE0Jy3KuncA
PMMiSj5Y1nbdPied/d2YWrRfCgJAP4jTIiueiLcn+4S+6jN2XJ41JYi3cf/a/9n6
GawOfmZVR1xL9XzGcKuwfufxywJ0R0BXEpJfu3tOsvFSUSfYk0rA9mMvc27LKK/5
wwNB2DcXZYwrlw4VjgipKvykiYhylAe5AIC5fNCX8FTuucM1eYvjiJWRaA5s6Hux
WYwHuH9X/ygC+w==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:58:11 2025 by rpki-client