Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/66369c-02f9-4947-9cb4-84b725158347/1/tpV8pIOvC2f5c7CFlyzMXF7QP3w.mft
File:                     tpV8pIOvC2f5c7CFlyzMXF7QP3w.mft (raw, json)
Hash identifier:          /mQQALMujue+g8g3eSmGf+5KXr0r7zmgRm2/MwZaXec=
Subject key identifier:   D8:89:B8:CB:C6:15:91:83:99:30:38:97:54:0A:66:8C:E9:9E:88:27
Authority key identifier: B6:95:7C:A4:83:AF:0B:67:F9:73:B0:85:97:2C:CC:5C:5E:D0:3F:7C
Certificate issuer:       /CN=b6957ca483af0b67f973b085972ccc5c5ed03f7c
Certificate serial:       01976BBD4A725341E8D02477CE1C071E0E03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tpV8pIOvC2f5c7CFlyzMXF7QP3w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/66369c-02f9-4947-9cb4-84b725158347/1/tpV8pIOvC2f5c7CFlyzMXF7QP3w.mft
Manifest number:          13A4
Signing time:             Sat 14 Jun 2025 00:00:56 +0000
Manifest this update:     Sat 14 Jun 2025 00:00:56 +0000
Manifest next update:     Sun 15 Jun 2025 00:00:56 +0000
Files and hashes:         1: VMjps0TDOc6vg4EVncBcfziPs7o.roa (hash: F5yYItxb8pdHFsuwCVpmcCXEuMNoj5mX3+RkzMDL76c=)
                          2: tpV8pIOvC2f5c7CFlyzMXF7QP3w.crl (hash: sODVakvZRnY7Qp6NwUEopThJ/J5OMcniksg7ejde/94=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/66369c-02f9-4947-9cb4-84b725158347/1/tpV8pIOvC2f5c7CFlyzMXF7QP3w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/66369c-02f9-4947-9cb4-84b725158347/1/tpV8pIOvC2f5c7CFlyzMXF7QP3w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tpV8pIOvC2f5c7CFlyzMXF7QP3w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 00:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6b:bd:4a:72:53:41:e8:d0:24:77:ce:1c:07:1e:0e:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6957ca483af0b67f973b085972ccc5c5ed03f7c
        Validity
            Not Before: Jun 14 00:00:56 2025 GMT
            Not After : Jun 15 00:00:56 2025 GMT
        Subject: CN=d889b8cbc615918399303897540a668ce99e8827
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:45:c4:ea:9e:b0:57:83:7a:88:2b:53:f1:bf:
                    ce:c5:e9:f8:e0:4b:7d:76:4d:6f:9d:f0:5d:74:72:
                    25:24:6e:ff:84:98:89:ac:4d:3e:83:cf:d1:91:1a:
                    78:11:60:68:45:a7:38:84:9d:4a:75:05:d2:8f:a6:
                    76:c4:21:fe:4c:35:45:01:6e:e1:98:c1:e5:93:67:
                    1a:97:e9:af:dd:3e:ea:a7:44:0a:fa:38:a5:53:ca:
                    83:7b:b6:d7:d4:e7:a9:a9:ca:8a:b1:8a:70:82:99:
                    65:c3:c2:8f:1b:f5:b4:6b:45:d8:6b:77:4b:35:d4:
                    15:81:6f:98:c2:05:e2:ea:61:48:1c:1b:88:25:91:
                    38:6f:9c:84:5d:1b:24:f9:86:72:71:08:28:5f:cd:
                    79:a7:04:e7:46:fb:ce:a0:13:7a:47:b9:ff:01:ed:
                    30:31:69:f0:39:53:c2:ab:ec:fc:be:c3:3a:98:d2:
                    aa:82:94:06:2d:ba:a7:47:e3:54:43:c9:78:4c:19:
                    7b:9a:7d:77:58:9d:c0:1f:2f:f1:0f:f8:bc:81:fd:
                    b3:96:29:21:92:36:c6:ff:02:48:7d:e0:f2:2b:4f:
                    87:10:7a:40:3b:7e:1e:85:97:ae:b2:ad:1f:8d:d2:
                    28:91:14:d4:1e:9b:ca:25:c6:5a:c3:32:ae:81:eb:
                    c7:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:89:B8:CB:C6:15:91:83:99:30:38:97:54:0A:66:8C:E9:9E:88:27
            X509v3 Authority Key Identifier:
                keyid:B6:95:7C:A4:83:AF:0B:67:F9:73:B0:85:97:2C:CC:5C:5E:D0:3F:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tpV8pIOvC2f5c7CFlyzMXF7QP3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/66369c-02f9-4947-9cb4-84b725158347/1/tpV8pIOvC2f5c7CFlyzMXF7QP3w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/66369c-02f9-4947-9cb4-84b725158347/1/tpV8pIOvC2f5c7CFlyzMXF7QP3w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:f1:1f:98:81:9d:b3:7c:80:c1:ac:17:cf:66:46:44:30:aa:
         32:9e:2b:fb:b5:19:48:c8:57:46:30:b7:f1:ac:1e:db:c6:f2:
         6e:cb:9c:e5:9d:0f:95:a2:3a:2e:06:ee:84:d2:8c:da:e2:c9:
         20:a1:85:b9:98:79:ce:5c:aa:a8:11:9c:88:26:1e:fb:f9:58:
         ce:55:e3:58:8e:a4:43:f7:86:f3:9e:25:7b:75:f4:e2:65:da:
         19:33:72:e7:db:42:dc:5f:c0:0c:68:3f:08:b1:32:17:e2:c1:
         c8:b9:e6:d5:b0:b9:60:7c:fc:91:e2:50:48:c6:58:58:09:bc:
         ca:2c:93:93:e8:04:43:ab:89:2a:f5:8d:36:7f:bf:ec:e5:bd:
         35:56:c5:8e:34:38:c6:33:85:c4:d2:1f:76:8b:79:b6:6b:51:
         20:5d:82:c3:b4:96:b3:3b:b2:cb:44:74:c7:ad:55:a4:65:06:
         96:a5:b3:12:e9:d2:73:b0:78:fd:f2:95:ae:8b:32:3e:04:44:
         69:e4:15:ea:b0:bc:a1:ab:da:d6:00:b1:85:04:3d:32:69:d9:
         d9:d7:a7:9a:95:5a:6b:40:89:b0:e3:71:e4:aa:f8:d4:99:43:
         18:65:ae:df:72:ab:57:69:c5:c5:1c:14:17:04:fb:90:67:e0:
         3c:ec:2b:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdrvUpyU0Ho0CR3zhwHHg4DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2OTU3Y2E0ODNhZjBiNjdmOTczYjA4NTk3MmNjYzVjNWVk
MDNmN2MwHhcNMjUwNjE0MDAwMDU2WhcNMjUwNjE1MDAwMDU2WjAzMTEwLwYDVQQD
EyhkODg5YjhjYmM2MTU5MTgzOTkzMDM4OTc1NDBhNjY4Y2U5OWU4ODI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0XE6p6wV4N6iCtT8b/Oxen44Et9
dk1vnfBddHIlJG7/hJiJrE0+g8/RkRp4EWBoRac4hJ1KdQXSj6Z2xCH+TDVFAW7h
mMHlk2cal+mv3T7qp0QK+jilU8qDe7bX1OepqcqKsYpwgpllw8KPG/W0a0XYa3dL
NdQVgW+YwgXi6mFIHBuIJZE4b5yEXRsk+YZycQgoX815pwTnRvvOoBN6R7n/Ae0w
MWnwOVPCq+z8vsM6mNKqgpQGLbqnR+NUQ8l4TBl7mn13WJ3AHy/xD/i8gf2zlikh
kjbG/wJIfeDyK0+HEHpAO34ehZeusq0fjdIokRTUHpvKJcZawzKugevH1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNiJuMvGFZGDmTA4l1QKZozpnognMB8GA1UdIwQY
MBaAFLaVfKSDrwtn+XOwhZcszFxe0D98MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHBWOHBJT3ZDMmY1YzdDRmx5ek1YRjdRUDN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy82NjM2OWMtMDJmOS00OTQ3LTljYjQt
ODRiNzI1MTU4MzQ3LzEvdHBWOHBJT3ZDMmY1YzdDRmx5ek1YRjdRUDN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy82NjM2OWMtMDJmOS00OTQ3LTljYjQtODRiNzI1MTU4MzQ3
LzEvdHBWOHBJT3ZDMmY1YzdDRmx5ek1YRjdRUDN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARvEfmIGd
s3yAwawXz2ZGRDCqMp4r+7UZSMhXRjC38awe28bybsuc5Z0PlaI6LgbuhNKM2uLJ
IKGFuZh5zlyqqBGciCYe+/lYzlXjWI6kQ/eG854le3X04mXaGTNy59tC3F/ADGg/
CLEyF+LByLnm1bC5YHz8keJQSMZYWAm8yiyTk+gEQ6uJKvWNNn+/7OW9NVbFjjQ4
xjOFxNIfdot5tmtRIF2Cw7SWszuyy0R0x61VpGUGlqWzEunSc7B4/fKVrosyPgRE
aeQV6rC8oava1gCxhQQ9MmnZ2denmpVaa0CJsONx5Kr41JlDGGWu33KrV2nFxRwU
FwT7kGfgPOwr1A==
-----END CERTIFICATE-----
Generated at Sat Jun 14 09:59:29 2025 by rpki-client