Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/deb648-f433-43f1-9c83-d0edec9728e5/1/j6L4iSbgvYQBxzztt36ZyU3MUtc.mft
File:                     j6L4iSbgvYQBxzztt36ZyU3MUtc.mft (raw, json)
Hash identifier:          rTBntL0byA2V/r0Zw8u/XWH1vA4/Ahcg6rtt3uHgr8Y=
Subject key identifier:   89:BE:AB:15:7A:2B:9D:AB:BA:61:37:0E:C4:22:20:2C:2A:E9:31:E2
Authority key identifier: 8F:A2:F8:89:26:E0:BD:84:01:C7:3C:ED:B7:7E:99:C9:4D:CC:52:D7
Certificate issuer:       /CN=8fa2f88926e0bd8401c73cedb77e99c94dcc52d7
Certificate serial:       0197722D329682217B23DB3830CFA646B11C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j6L4iSbgvYQBxzztt36ZyU3MUtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/deb648-f433-43f1-9c83-d0edec9728e5/1/j6L4iSbgvYQBxzztt36ZyU3MUtc.mft
Manifest number:          13ED
Signing time:             Sun 15 Jun 2025 06:00:53 +0000
Manifest this update:     Sun 15 Jun 2025 06:00:53 +0000
Manifest next update:     Mon 16 Jun 2025 06:00:53 +0000
Files and hashes:         1: hqd990q1gLSW7SBs-f4MtsS4OUs.roa (hash: Cj5NNPUEfRQP2HpFQ4Vq0r88rz0ljjQnf6HR7Q/0ozE=)
                          2: j6L4iSbgvYQBxzztt36ZyU3MUtc.crl (hash: OM3+iaENjYLjyJCyppBG4zFIbUriSs0/UcWUa11hstc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/deb648-f433-43f1-9c83-d0edec9728e5/1/j6L4iSbgvYQBxzztt36ZyU3MUtc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/deb648-f433-43f1-9c83-d0edec9728e5/1/j6L4iSbgvYQBxzztt36ZyU3MUtc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j6L4iSbgvYQBxzztt36ZyU3MUtc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 22:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:72:2d:32:96:82:21:7b:23:db:38:30:cf:a6:46:b1:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fa2f88926e0bd8401c73cedb77e99c94dcc52d7
        Validity
            Not Before: Jun 15 06:00:53 2025 GMT
            Not After : Jun 16 06:00:53 2025 GMT
        Subject: CN=89beab157a2b9dabba61370ec422202c2ae931e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:06:22:ce:39:71:32:c7:db:76:23:82:55:8d:
                    2f:6a:99:df:46:f6:c5:b3:02:84:15:e9:c4:1e:e6:
                    a6:1f:59:c9:28:dc:e7:39:c7:d4:6a:7d:10:63:aa:
                    81:6f:43:42:d4:73:d0:64:10:a0:74:7c:8d:db:17:
                    63:10:b1:dc:b7:67:3c:aa:c4:76:ac:d4:be:bb:e6:
                    2b:89:84:81:a4:ad:ba:ab:b0:71:3d:8a:c2:b1:d6:
                    da:32:88:8b:0d:5c:fb:b7:03:cc:bb:d3:9e:02:13:
                    16:db:df:c4:f9:e3:49:eb:b6:34:55:16:f5:6a:53:
                    9e:e7:56:7c:cc:74:43:ec:99:03:2d:a7:44:d8:c2:
                    b9:62:f0:6c:b4:6c:64:9b:cf:21:64:28:3c:6c:4b:
                    e7:81:54:c4:88:67:09:a1:63:e2:99:3d:92:5b:5b:
                    64:5f:e7:36:e6:b3:f1:9d:0f:d5:ed:36:60:3f:97:
                    57:49:ca:23:de:4c:d9:9e:0b:b1:98:a4:f0:1f:07:
                    ee:03:92:28:07:12:c8:83:a7:d6:bb:59:6e:72:68:
                    80:1a:2d:36:50:24:f2:96:97:bb:83:25:66:5c:f4:
                    96:cf:24:e9:24:ff:2b:af:33:ee:ef:26:67:71:9c:
                    8a:a0:f8:f0:ca:a9:23:cc:f9:ab:cb:36:31:e9:9e:
                    9a:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:BE:AB:15:7A:2B:9D:AB:BA:61:37:0E:C4:22:20:2C:2A:E9:31:E2
            X509v3 Authority Key Identifier:
                keyid:8F:A2:F8:89:26:E0:BD:84:01:C7:3C:ED:B7:7E:99:C9:4D:CC:52:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j6L4iSbgvYQBxzztt36ZyU3MUtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/deb648-f433-43f1-9c83-d0edec9728e5/1/j6L4iSbgvYQBxzztt36ZyU3MUtc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/deb648-f433-43f1-9c83-d0edec9728e5/1/j6L4iSbgvYQBxzztt36ZyU3MUtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:18:ca:a5:8c:06:f1:82:4f:54:53:cd:8e:d1:62:59:70:55:
         c7:82:6b:8b:c6:4a:bd:a7:48:be:3b:a4:27:63:f9:26:49:ee:
         2e:2d:78:61:cf:33:a0:d8:09:c8:0a:79:5b:9b:d4:b5:ab:90:
         49:49:11:f0:09:2e:54:a9:72:39:96:a0:46:37:c8:15:6c:0d:
         48:82:fa:db:b9:25:e5:d6:8b:2d:bb:1c:a1:1e:0b:83:b8:cb:
         50:09:a6:80:d6:b5:85:4b:73:f9:0d:b8:ce:fc:e1:51:cd:89:
         6c:33:59:6a:38:f6:95:94:1f:95:02:cd:8c:ba:f9:e8:04:48:
         bb:41:59:16:fc:4a:a9:96:fa:c5:bd:49:2a:50:e7:04:04:89:
         9b:f5:fd:cf:39:e5:d8:76:fc:dc:1a:28:53:04:b5:0e:84:b8:
         93:37:ad:e3:01:37:2d:b7:de:e8:34:9e:f0:82:3e:8a:32:7e:
         93:52:ee:5e:6c:9b:6b:0e:5f:9b:f1:6d:a6:ff:09:7c:21:4a:
         b3:d1:59:a6:3a:1f:8c:ca:c6:ae:3b:25:83:ff:3e:3f:6c:c6:
         98:7d:e0:18:f6:2a:a4:6b:97:3d:3c:03:0f:e2:7c:89:1f:56:
         a2:dd:94:9e:9f:83:87:c4:e1:c7:18:a4:ed:3b:8c:3b:ee:e6:
         bd:d1:30:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdyLTKWgiF7I9s4MM+mRrEcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmYTJmODg5MjZlMGJkODQwMWM3M2NlZGI3N2U5OWM5NGRj
YzUyZDcwHhcNMjUwNjE1MDYwMDUzWhcNMjUwNjE2MDYwMDUzWjAzMTEwLwYDVQQD
Eyg4OWJlYWIxNTdhMmI5ZGFiYmE2MTM3MGVjNDIyMjAyYzJhZTkzMWUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3gYizjlxMsfbdiOCVY0vapnfRvbF
swKEFenEHuamH1nJKNznOcfUan0QY6qBb0NC1HPQZBCgdHyN2xdjELHct2c8qsR2
rNS+u+YriYSBpK26q7BxPYrCsdbaMoiLDVz7twPMu9OeAhMW29/E+eNJ67Y0VRb1
alOe51Z8zHRD7JkDLadE2MK5YvBstGxkm88hZCg8bEvngVTEiGcJoWPimT2SW1tk
X+c25rPxnQ/V7TZgP5dXScoj3kzZnguxmKTwHwfuA5IoBxLIg6fWu1lucmiAGi02
UCTylpe7gyVmXPSWzyTpJP8rrzPu7yZncZyKoPjwyqkjzPmryzYx6Z6azwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIm+qxV6K52rumE3DsQiICwq6THiMB8GA1UdIwQY
MBaAFI+i+Ikm4L2EAcc87bd+mclNzFLXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajZMNGlTYmd2WVFCeHp6dHQzNlp5VTNNVXRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9kZWI2NDgtZjQzMy00M2YxLTljODMt
ZDBlZGVjOTcyOGU1LzEvajZMNGlTYmd2WVFCeHp6dHQzNlp5VTNNVXRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC9kZWI2NDgtZjQzMy00M2YxLTljODMtZDBlZGVjOTcyOGU1
LzEvajZMNGlTYmd2WVFCeHp6dHQzNlp5VTNNVXRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQhjKpYwG
8YJPVFPNjtFiWXBVx4Jri8ZKvadIvjukJ2P5JknuLi14Yc8zoNgJyAp5W5vUtauQ
SUkR8AkuVKlyOZagRjfIFWwNSIL627kl5daLLbscoR4Lg7jLUAmmgNa1hUtz+Q24
zvzhUc2JbDNZajj2lZQflQLNjLr56ARIu0FZFvxKqZb6xb1JKlDnBASJm/X9zznl
2Hb83BooUwS1DoS4kzet4wE3Lbfe6DSe8II+ijJ+k1LuXmybaw5fm/Ftpv8JfCFK
s9FZpjofjMrGrjslg/8+P2zGmH3gGPYqpGuXPTwDD+J8iR9Wot2Unp+Dh8Thxxik
7TuMO+7mvdEwCw==
-----END CERTIFICATE-----
Generated at Sun Jun 15 07:32:17 2025 by rpki-client