Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/98a8b9-8e99-4db3-b061-e9230e588626/1/rLwtpPrHe7qtKaWYa0EH9THtLj4.mft
File:                     rLwtpPrHe7qtKaWYa0EH9THtLj4.mft (raw, json)
Hash identifier:          Ys+anrrvz7Zy/n+Y3wITrXVhjaITua2C8BTRBzdXLXU=
Subject key identifier:   10:18:95:3B:61:30:86:66:48:EB:78:34:F9:AD:D7:D7:F8:70:78:49
Authority key identifier: AC:BC:2D:A4:FA:C7:7B:BA:AD:29:A5:98:6B:41:07:F5:31:ED:2E:3E
Certificate issuer:       /CN=acbc2da4fac77bbaad29a5986b4107f531ed2e3e
Certificate serial:       01976C2B3EFAA3891B5D6A4FAE13AFEE3B13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rLwtpPrHe7qtKaWYa0EH9THtLj4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/98a8b9-8e99-4db3-b061-e9230e588626/1/rLwtpPrHe7qtKaWYa0EH9THtLj4.mft
Manifest number:          1444
Signing time:             Sat 14 Jun 2025 02:01:02 +0000
Manifest this update:     Sat 14 Jun 2025 02:01:02 +0000
Manifest next update:     Sun 15 Jun 2025 02:01:02 +0000
Files and hashes:         1: idTCOx8-4Tst-Qoz7K6F7H3dYN4.roa (hash: arkT/3jnb38g6YOrTZp9aafP6pWkmdDHWiUSBAjozQo=)
                          2: rLwtpPrHe7qtKaWYa0EH9THtLj4.crl (hash: Gfq8rMJG7UZM1nYTOul/Agc4c5GHh0WLftY8pI4U1Ro=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/98a8b9-8e99-4db3-b061-e9230e588626/1/rLwtpPrHe7qtKaWYa0EH9THtLj4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/98a8b9-8e99-4db3-b061-e9230e588626/1/rLwtpPrHe7qtKaWYa0EH9THtLj4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rLwtpPrHe7qtKaWYa0EH9THtLj4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:2b:3e:fa:a3:89:1b:5d:6a:4f:ae:13:af:ee:3b:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acbc2da4fac77bbaad29a5986b4107f531ed2e3e
        Validity
            Not Before: Jun 14 02:01:02 2025 GMT
            Not After : Jun 15 02:01:02 2025 GMT
        Subject: CN=1018953b6130866648eb7834f9add7d7f8707849
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:eb:94:43:87:7d:9b:4b:55:19:c4:57:17:85:
                    94:b3:6e:25:be:bb:23:e7:b9:fa:5f:d9:a8:c4:64:
                    53:b1:0b:1b:52:f8:23:c9:05:1b:a1:df:77:15:24:
                    65:62:f2:a2:83:9f:43:f4:2c:0f:f3:b6:83:2a:6a:
                    bd:88:69:01:98:73:f7:ec:eb:9c:c7:fd:81:61:ab:
                    1c:4b:7b:4d:82:39:1c:0f:c1:ac:cb:7e:e3:31:66:
                    0d:33:86:e4:d4:a5:91:98:9a:a7:8f:13:a7:a4:f9:
                    2d:24:21:28:98:ad:a5:02:d7:be:42:da:3d:7a:9f:
                    25:50:49:5d:29:40:bd:02:29:7f:11:ab:89:86:a7:
                    a2:fc:d4:da:9a:78:1a:d4:4f:6e:d0:27:8e:99:56:
                    bd:db:95:41:1b:8b:16:dd:b1:f2:2d:c3:e9:4f:ec:
                    eb:81:b8:7a:ee:53:03:dd:01:38:9f:5a:66:d0:b4:
                    7c:f6:2e:4a:fe:4a:f5:57:32:01:ff:62:46:42:b9:
                    8c:d9:8a:dd:4e:c8:c6:ac:21:c6:e2:6d:40:82:93:
                    ae:91:9f:3a:92:93:76:f3:3b:64:0f:86:27:e6:5e:
                    b9:88:9c:80:8f:e4:4a:f8:1b:6b:0c:d5:24:c8:2e:
                    5f:17:4d:e6:8d:6e:6d:52:c4:8c:ed:96:2f:fb:e7:
                    a5:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:18:95:3B:61:30:86:66:48:EB:78:34:F9:AD:D7:D7:F8:70:78:49
            X509v3 Authority Key Identifier:
                keyid:AC:BC:2D:A4:FA:C7:7B:BA:AD:29:A5:98:6B:41:07:F5:31:ED:2E:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rLwtpPrHe7qtKaWYa0EH9THtLj4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/98a8b9-8e99-4db3-b061-e9230e588626/1/rLwtpPrHe7qtKaWYa0EH9THtLj4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/98a8b9-8e99-4db3-b061-e9230e588626/1/rLwtpPrHe7qtKaWYa0EH9THtLj4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:63:8d:d9:8d:d6:72:17:56:29:b1:ca:fc:b7:45:e8:53:b9:
         86:4a:00:7c:ad:57:32:ea:00:1a:b3:b2:52:9f:58:fc:3e:d0:
         c4:25:47:db:90:b7:ea:56:4c:b8:cd:d1:ac:63:d5:66:24:37:
         ba:f0:e2:ca:7f:f2:63:4b:11:4b:b4:a0:36:cb:fb:41:4e:6c:
         99:fc:84:7c:9e:56:20:74:84:67:b9:5f:21:40:0e:f5:5c:19:
         09:dc:76:fa:39:34:b0:33:20:7d:51:3c:48:fc:98:11:b6:17:
         45:ef:04:13:c0:95:bc:66:87:f7:63:f8:56:68:51:2b:c8:2d:
         35:a8:04:68:f3:58:31:66:6d:47:9f:28:61:e5:f5:cb:1f:5d:
         67:e6:c9:17:8c:1c:a6:46:26:5b:65:d6:54:12:98:bb:60:b5:
         31:be:d5:b3:e2:57:cc:d1:07:29:36:68:30:c5:05:4f:25:51:
         6e:22:76:e6:84:9d:c6:10:f6:d7:f8:13:f0:2c:a0:8c:c8:6f:
         b1:cd:3d:a8:91:56:7f:0b:40:d6:84:d2:29:c4:61:57:49:bc:
         3c:95:fc:26:24:22:13:d4:37:80:38:34:91:ff:a8:a5:ed:d6:
         c3:1b:d6:69:2b:aa:23:73:48:07:8e:f7:31:03:95:67:55:b1:
         62:5f:c8:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsKz76o4kbXWpPrhOv7jsTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjYmMyZGE0ZmFjNzdiYmFhZDI5YTU5ODZiNDEwN2Y1MzFl
ZDJlM2UwHhcNMjUwNjE0MDIwMTAyWhcNMjUwNjE1MDIwMTAyWjAzMTEwLwYDVQQD
EygxMDE4OTUzYjYxMzA4NjY2NDhlYjc4MzRmOWFkZDdkN2Y4NzA3ODQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOuUQ4d9m0tVGcRXF4WUs24lvrsj
57n6X9moxGRTsQsbUvgjyQUbod93FSRlYvKig59D9CwP87aDKmq9iGkBmHP37Ouc
x/2BYascS3tNgjkcD8Gsy37jMWYNM4bk1KWRmJqnjxOnpPktJCEomK2lAte+Qto9
ep8lUEldKUC9Ail/EauJhqei/NTamnga1E9u0CeOmVa925VBG4sW3bHyLcPpT+zr
gbh67lMD3QE4n1pm0LR89i5K/kr1VzIB/2JGQrmM2YrdTsjGrCHG4m1AgpOukZ86
kpN28ztkD4Yn5l65iJyAj+RK+BtrDNUkyC5fF03mjW5tUsSM7ZYv++elawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBAYlTthMIZmSOt4NPmt19f4cHhJMB8GA1UdIwQY
MBaAFKy8LaT6x3u6rSmlmGtBB/Ux7S4+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckx3dHBQckhlN3F0S2FXWWEwRUg5VEh0TGo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS85OGE4YjktOGU5OS00ZGIzLWIwNjEt
ZTkyMzBlNTg4NjI2LzEvckx3dHBQckhlN3F0S2FXWWEwRUg5VEh0TGo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS85OGE4YjktOGU5OS00ZGIzLWIwNjEtZTkyMzBlNTg4NjI2
LzEvckx3dHBQckhlN3F0S2FXWWEwRUg5VEh0TGo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWWON2Y3W
chdWKbHK/LdF6FO5hkoAfK1XMuoAGrOyUp9Y/D7QxCVH25C36lZMuM3RrGPVZiQ3
uvDiyn/yY0sRS7SgNsv7QU5smfyEfJ5WIHSEZ7lfIUAO9VwZCdx2+jk0sDMgfVE8
SPyYEbYXRe8EE8CVvGaH92P4VmhRK8gtNagEaPNYMWZtR58oYeX1yx9dZ+bJF4wc
pkYmW2XWVBKYu2C1Mb7Vs+JXzNEHKTZoMMUFTyVRbiJ25oSdxhD21/gT8CygjMhv
sc09qJFWfwtA1oTSKcRhV0m8PJX8JiQiE9Q3gDg0kf+ope3WwxvWaSuqI3NIB473
MQOVZ1WxYl/Iyw==
-----END CERTIFICATE-----
Generated at Sat Jun 14 09:50:47 2025 by rpki-client