Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/SuvUVD3ynaZOQjLvN5H1NFc8EvE.mft
File:                     SuvUVD3ynaZOQjLvN5H1NFc8EvE.mft (raw, json)
Hash identifier:          9F5tqZ9mRFJjRBEhuMqaiPCtxy26Mfh6utcV1iLA+T8=
Subject key identifier:   77:E7:41:25:82:A2:84:62:BA:46:4D:90:0E:8E:FD:50:A6:DF:C8:A6
Authority key identifier: 4A:EB:D4:54:3D:F2:9D:A6:4E:42:32:EF:37:91:F5:34:57:3C:12:F1
Certificate issuer:       /CN=4aebd4543df29da64e4232ef3791f534573c12f1
Certificate serial:       01976F9A56371889C92A21C430F47B2F4A77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SuvUVD3ynaZOQjLvN5H1NFc8EvE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/SuvUVD3ynaZOQjLvN5H1NFc8EvE.mft
Manifest number:          0994
Signing time:             Sat 14 Jun 2025 18:01:14 +0000
Manifest this update:     Sat 14 Jun 2025 18:01:14 +0000
Manifest next update:     Sun 15 Jun 2025 18:01:14 +0000
Files and hashes:         1: SuvUVD3ynaZOQjLvN5H1NFc8EvE.crl (hash: AHrqCgH/xMJjjH4YpHWwpVp78o0lXmv/84kLZjKVCRU=)
                          2: gljPZRHD4o8JNjNIJxHbyh4kaRQ.roa (hash: ynLfSUBP+/RK0hSDUfdxyie+FGZVBwWsIpKno/W57hk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/SuvUVD3ynaZOQjLvN5H1NFc8EvE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/SuvUVD3ynaZOQjLvN5H1NFc8EvE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SuvUVD3ynaZOQjLvN5H1NFc8EvE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 18:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:9a:56:37:18:89:c9:2a:21:c4:30:f4:7b:2f:4a:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4aebd4543df29da64e4232ef3791f534573c12f1
        Validity
            Not Before: Jun 14 18:01:14 2025 GMT
            Not After : Jun 15 18:01:14 2025 GMT
        Subject: CN=77e7412582a28462ba464d900e8efd50a6dfc8a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:52:a8:ed:fd:67:44:31:c9:70:16:44:84:d1:
                    35:a0:e5:37:7f:90:b2:45:1d:55:52:43:a8:c8:0b:
                    b6:d3:e8:f7:8c:49:43:d2:bd:92:38:e5:c2:d0:f7:
                    49:7d:c0:6b:79:d9:0b:74:f4:72:b3:48:5c:ab:9c:
                    6e:d9:45:31:b1:d0:7d:bb:9d:01:66:77:41:f8:6b:
                    78:9f:63:74:64:95:00:8c:54:79:f8:6c:d9:24:02:
                    0e:40:0b:b2:dc:03:f8:f6:3e:88:2e:84:18:07:eb:
                    85:43:01:16:54:dd:37:a7:43:06:44:c0:c2:20:f1:
                    a5:d8:78:50:15:90:cd:3a:78:b8:c2:56:10:4f:e4:
                    46:8a:45:fb:e4:a1:81:9f:ae:5f:d0:fe:49:7e:56:
                    c4:8b:2e:32:24:e8:09:75:af:d1:6f:9a:d5:43:e9:
                    34:74:93:6d:5a:ec:47:f1:ef:07:1d:74:46:04:a8:
                    e7:70:cf:28:e2:4f:4d:a2:f8:9d:dd:c4:7b:02:59:
                    ed:44:e4:88:64:f1:d9:cf:97:59:e1:9f:2a:f4:39:
                    c9:89:da:79:e4:b0:e4:fd:17:3f:76:61:1a:b7:37:
                    f4:12:d7:de:db:40:ef:b1:0d:19:a7:e8:8d:01:ae:
                    f0:b6:e2:e7:50:18:af:de:af:20:55:19:1e:0c:a3:
                    12:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:E7:41:25:82:A2:84:62:BA:46:4D:90:0E:8E:FD:50:A6:DF:C8:A6
            X509v3 Authority Key Identifier:
                keyid:4A:EB:D4:54:3D:F2:9D:A6:4E:42:32:EF:37:91:F5:34:57:3C:12:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SuvUVD3ynaZOQjLvN5H1NFc8EvE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/SuvUVD3ynaZOQjLvN5H1NFc8EvE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e55ca1-d11c-48b9-8306-d003063ae5bb/1/SuvUVD3ynaZOQjLvN5H1NFc8EvE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:1c:af:42:e1:e3:c5:c0:f2:6b:68:74:48:be:56:57:c2:32:
         b8:26:bb:02:2a:ce:70:16:37:6c:e9:ba:bf:6d:b9:89:dc:bd:
         91:01:da:11:88:71:a3:27:7d:e3:bd:0a:19:23:de:7f:87:a4:
         c7:73:9a:60:0f:e3:24:8d:81:4c:47:db:b1:fd:a0:a9:8a:a2:
         db:16:be:b5:b7:96:eb:6f:b3:0d:0f:e9:37:2e:bb:eb:55:6f:
         77:f7:aa:27:72:eb:b0:a9:07:4f:ce:8b:2d:63:cb:ca:86:4e:
         08:6f:1a:b0:0b:64:91:3e:24:c3:cd:d8:11:0b:1e:c7:50:6c:
         32:2b:eb:d6:1c:f5:cb:71:04:94:45:6d:14:bd:bd:0a:dd:06:
         f5:aa:33:6c:84:cf:65:1b:47:c1:df:a4:6e:cb:cd:70:91:03:
         0f:97:6e:ec:39:d1:a7:2b:5c:2d:e9:e1:a1:0a:03:00:b7:05:
         fc:7d:d4:8c:78:cf:8f:d6:85:f7:ee:3a:59:19:9e:1c:fa:07:
         53:6a:da:98:4a:51:ff:2f:69:67:3e:ea:5a:58:97:a0:8f:04:
         8c:28:8f:88:ef:00:a6:c3:2f:07:43:c5:d4:91:93:31:69:3b:
         37:39:f8:81:60:f6:a3:7b:f9:c6:7b:8e:04:1a:ce:73:6d:d5:
         d0:34:8d:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdvmlY3GInJKiHEMPR7L0p3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhZWJkNDU0M2RmMjlkYTY0ZTQyMzJlZjM3OTFmNTM0NTcz
YzEyZjEwHhcNMjUwNjE0MTgwMTE0WhcNMjUwNjE1MTgwMTE0WjAzMTEwLwYDVQQD
Eyg3N2U3NDEyNTgyYTI4NDYyYmE0NjRkOTAwZThlZmQ1MGE2ZGZjOGE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4VKo7f1nRDHJcBZEhNE1oOU3f5Cy
RR1VUkOoyAu20+j3jElD0r2SOOXC0PdJfcBredkLdPRys0hcq5xu2UUxsdB9u50B
ZndB+Gt4n2N0ZJUAjFR5+GzZJAIOQAuy3AP49j6ILoQYB+uFQwEWVN03p0MGRMDC
IPGl2HhQFZDNOni4wlYQT+RGikX75KGBn65f0P5JflbEiy4yJOgJda/Rb5rVQ+k0
dJNtWuxH8e8HHXRGBKjncM8o4k9Novid3cR7AlntROSIZPHZz5dZ4Z8q9DnJidp5
5LDk/Rc/dmEatzf0Etfe20DvsQ0Zp+iNAa7wtuLnUBiv3q8gVRkeDKMS4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHfnQSWCooRiukZNkA6O/VCm38imMB8GA1UdIwQY
MBaAFErr1FQ98p2mTkIy7zeR9TRXPBLxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3V2VVZEM3luYVpPUWpMdk41SDFORmM4RXZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9lNTVjYTEtZDExYy00OGI5LTgzMDYt
ZDAwMzA2M2FlNWJiLzEvU3V2VVZEM3luYVpPUWpMdk41SDFORmM4RXZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni9lNTVjYTEtZDExYy00OGI5LTgzMDYtZDAwMzA2M2FlNWJi
LzEvU3V2VVZEM3luYVpPUWpMdk41SDFORmM4RXZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbRyvQuHj
xcDya2h0SL5WV8IyuCa7AirOcBY3bOm6v225idy9kQHaEYhxoyd9470KGSPef4ek
x3OaYA/jJI2BTEfbsf2gqYqi2xa+tbeW62+zDQ/pNy6761Vvd/eqJ3LrsKkHT86L
LWPLyoZOCG8asAtkkT4kw83YEQsex1BsMivr1hz1y3EElEVtFL29Ct0G9aozbITP
ZRtHwd+kbsvNcJEDD5du7DnRpytcLenhoQoDALcF/H3UjHjPj9aF9+46WRmeHPoH
U2ramEpR/y9pZz7qWliXoI8EjCiPiO8ApsMvB0PF1JGTMWk7Nzn4gWD2o3v5xnuO
BBrOc23V0DSNWA==
-----END CERTIFICATE-----
Generated at Sat Jun 14 23:19:00 2025 by rpki-client