Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/c3206a-9c16-4527-8b89-6e8dcbaeaf7f/1/1-V055baJCkbIzlyQN-bSY2XoV7w.mft
File:                     1-V055baJCkbIzlyQN-bSY2XoV7w.mft (raw, json)
Hash identifier:          vaVZ9WHSTy5y/L1ArVfHoBgoj05tvJxat+Qb1HU/3xg=
Subject key identifier:   F9:38:AD:47:78:71:BA:CB:85:18:94:E0:F9:E2:D7:15:8D:4D:A0:2D
Authority key identifier: F9:5D:39:E5:B6:89:0A:46:C8:CE:5C:90:37:E6:D2:63:65:E8:57:BC
Certificate issuer:       /CN=f95d39e5b6890a46c8ce5c9037e6d26365e857bc
Certificate serial:       01977CE7A7839580D5C3057DD1D7AC3EBFFD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-V055baJCkbIzlyQN-bSY2XoV7w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/c3206a-9c16-4527-8b89-6e8dcbaeaf7f/1/1-V055baJCkbIzlyQN-bSY2XoV7w.mft
Manifest number:          0AA0
Signing time:             Tue 17 Jun 2025 08:00:45 +0000
Manifest this update:     Tue 17 Jun 2025 08:00:45 +0000
Manifest next update:     Wed 18 Jun 2025 08:00:45 +0000
Files and hashes:         1: 1-V055baJCkbIzlyQN-bSY2XoV7w.crl (hash: +pjzMkw+H1V1pxIuAvBtZ4uilvoK9KtYHbtUUmEmu4c=)
                          2: 30wxplZBtekiYfq89WhRrKa7cbQ.roa (hash: A+ApiR7nBxu7bspZZM8VxqWi7UoEVIuDQiaPLO/t9cs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/c3206a-9c16-4527-8b89-6e8dcbaeaf7f/1/1-V055baJCkbIzlyQN-bSY2XoV7w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/c3206a-9c16-4527-8b89-6e8dcbaeaf7f/1/1-V055baJCkbIzlyQN-bSY2XoV7w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-V055baJCkbIzlyQN-bSY2XoV7w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 18 Jun 2025 08:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:7c:e7:a7:83:95:80:d5:c3:05:7d:d1:d7:ac:3e:bf:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f95d39e5b6890a46c8ce5c9037e6d26365e857bc
        Validity
            Not Before: Jun 17 08:00:45 2025 GMT
            Not After : Jun 18 08:00:45 2025 GMT
        Subject: CN=f938ad477871bacb851894e0f9e2d7158d4da02d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:f0:94:13:91:9f:39:9d:36:e8:81:1a:b6:0e:
                    e4:f6:bb:ab:9f:30:df:6e:e8:b5:24:f7:7a:15:17:
                    ae:f9:2f:23:a2:db:42:ff:ea:e3:e1:fd:c6:66:a2:
                    94:44:b8:c8:33:73:c2:64:fd:c6:b1:d4:e5:86:14:
                    43:a4:dd:8a:80:c2:aa:cb:34:2f:e4:cb:05:77:04:
                    0e:e1:ec:59:d9:a5:12:6f:ad:b8:a9:fe:10:54:55:
                    5e:51:53:44:38:4d:b5:50:39:96:c6:2b:d4:26:7c:
                    d6:ab:7d:07:74:f0:b7:82:3e:6e:bd:ef:de:ed:eb:
                    ea:10:0f:0b:4e:10:9c:e7:86:42:ab:ff:1c:1d:fd:
                    e9:01:36:c6:9d:6d:d5:c6:fa:f9:e9:c8:88:42:9c:
                    d3:46:b7:41:06:0d:fe:a6:6f:5f:a9:13:68:db:cf:
                    20:17:dc:99:5e:3f:36:9f:5d:c5:87:19:9a:41:3e:
                    20:94:3c:01:77:83:61:17:c6:82:cd:fc:e5:b5:b6:
                    c8:20:bb:e7:cd:4e:c2:62:af:01:df:73:da:ab:82:
                    8f:00:21:f0:5d:ba:f1:2e:eb:d2:70:33:53:d6:75:
                    8b:12:9e:b6:5f:1f:61:66:1c:e7:24:60:cc:58:f8:
                    56:57:72:86:a5:bf:fb:a3:ad:2f:e8:84:f9:59:48:
                    c3:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:38:AD:47:78:71:BA:CB:85:18:94:E0:F9:E2:D7:15:8D:4D:A0:2D
            X509v3 Authority Key Identifier:
                keyid:F9:5D:39:E5:B6:89:0A:46:C8:CE:5C:90:37:E6:D2:63:65:E8:57:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-V055baJCkbIzlyQN-bSY2XoV7w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c3206a-9c16-4527-8b89-6e8dcbaeaf7f/1/1-V055baJCkbIzlyQN-bSY2XoV7w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c3206a-9c16-4527-8b89-6e8dcbaeaf7f/1/1-V055baJCkbIzlyQN-bSY2XoV7w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:c7:4a:1e:11:d7:a6:9b:c4:3f:02:cd:ed:72:d4:1f:3e:66:
         b2:70:51:b5:0d:ce:d7:19:89:e2:ef:81:fe:f5:12:9e:2f:e9:
         b2:46:1c:2b:f8:d8:9f:c7:88:47:92:e2:ab:d2:f7:28:a1:15:
         4b:86:a5:c2:e8:cb:d4:0c:ee:a3:c6:ef:7f:59:97:37:10:de:
         90:2e:b8:d7:8b:ec:88:64:02:79:31:ff:bb:c1:9c:af:7b:d1:
         26:50:64:d7:37:bc:65:26:e0:bc:3c:57:af:11:da:09:6e:76:
         f8:a0:31:d8:22:83:4a:1a:90:e6:b2:75:32:83:33:75:e2:76:
         17:53:8a:b0:5e:2d:e5:51:98:9a:a5:92:b3:84:14:e0:da:60:
         76:48:a3:41:0c:10:95:35:24:d2:64:33:8f:7e:81:bd:d6:94:
         4f:28:84:7e:5d:b4:da:10:2e:e2:59:8e:47:f8:fb:75:98:82:
         97:0a:61:23:cb:98:cd:2b:bf:f9:59:c2:0d:d0:bc:70:11:ec:
         c2:c4:d7:b6:df:32:50:18:a3:99:2c:af:40:0a:62:c5:1b:25:
         08:1c:91:7f:ab:90:ca:71:c8:cb:53:05:96:77:5a:43:9a:1c:
         1c:ef:06:98:a3:6b:b7:40:ec:ee:a9:c6:fb:93:2f:72:e4:82:
         7e:af:44:21
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZd856eDlYDVwwV90desPr/9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5NWQzOWU1YjY4OTBhNDZjOGNlNWM5MDM3ZTZkMjYzNjVl
ODU3YmMwHhcNMjUwNjE3MDgwMDQ1WhcNMjUwNjE4MDgwMDQ1WjAzMTEwLwYDVQQD
EyhmOTM4YWQ0Nzc4NzFiYWNiODUxODk0ZTBmOWUyZDcxNThkNGRhMDJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/CUE5GfOZ026IEatg7k9rurnzDf
bui1JPd6FReu+S8jottC/+rj4f3GZqKURLjIM3PCZP3GsdTlhhRDpN2KgMKqyzQv
5MsFdwQO4exZ2aUSb624qf4QVFVeUVNEOE21UDmWxivUJnzWq30HdPC3gj5uve/e
7evqEA8LThCc54ZCq/8cHf3pATbGnW3Vxvr56ciIQpzTRrdBBg3+pm9fqRNo288g
F9yZXj82n13FhxmaQT4glDwBd4NhF8aCzfzltbbIILvnzU7CYq8B33Paq4KPACHw
XbrxLuvScDNT1nWLEp62Xx9hZhznJGDMWPhWV3KGpb/7o60v6IT5WUjDZwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFPk4rUd4cbrLhRiU4Pni1xWNTaAtMB8GA1UdIwQY
MBaAFPldOeW2iQpGyM5ckDfm0mNl6Fe8MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1WMDU1YmFKQ2tiSXpseVFOLWJTWTJYb1Y3dy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTcvYzMyMDZhLTljMTYtNDUyNy04Yjg5
LTZlOGRjYmFlYWY3Zi8xLzEtVjA1NWJhSkNrYkl6bHlRTi1iU1kyWG9WN3cubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzU3L2MzMjA2YS05YzE2LTQ1MjctOGI4OS02ZThkY2JhZWFm
N2YvMS8xLVYwNTViYUpDa2JJemx5UU4tYlNZMlhvVjd3LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp8dK
HhHXppvEPwLN7XLUHz5msnBRtQ3O1xmJ4u+B/vUSni/pskYcK/jYn8eIR5Liq9L3
KKEVS4alwujL1Azuo8bvf1mXNxDekC6414vsiGQCeTH/u8Gcr3vRJlBk1ze8ZSbg
vDxXrxHaCW52+KAx2CKDShqQ5rJ1MoMzdeJ2F1OKsF4t5VGYmqWSs4QU4Npgdkij
QQwQlTUk0mQzj36BvdaUTyiEfl202hAu4lmOR/j7dZiClwphI8uYzSu/+VnCDdC8
cBHswsTXtt8yUBijmSyvQApixRslCByRf6uQynHIy1MFlndaQ5ocHO8GmKNrt0Ds
7qnG+5MvcuSCfq9EIQ==
-----END CERTIFICATE-----
Generated at Tue Jun 17 16:21:32 2025 by rpki-client