Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/34acf4-747f-45fe-8129-402f1fb848cf/1/zOV9yCNN9fWdZ_3GhWuyYucZP1I.mft
File:                     zOV9yCNN9fWdZ_3GhWuyYucZP1I.mft (raw, json)
Hash identifier:          wY8YvfQhZFo0WEuaXNByLv9QTmoq7z2f7Dmp1MdHhg0=
Subject key identifier:   89:FF:7C:5D:BE:AE:D9:43:FB:DF:3A:BC:5D:97:57:41:85:FB:7F:E8
Authority key identifier: CC:E5:7D:C8:23:4D:F5:F5:9D:67:FD:C6:85:6B:B2:62:E7:19:3F:52
Certificate issuer:       /CN=cce57dc8234df5f59d67fdc6856bb262e7193f52
Certificate serial:       01976C2AD41FEDFB86FD7D326C235AD4DAD7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zOV9yCNN9fWdZ_3GhWuyYucZP1I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/34acf4-747f-45fe-8129-402f1fb848cf/1/zOV9yCNN9fWdZ_3GhWuyYucZP1I.mft
Manifest number:          0D5A
Signing time:             Sat 14 Jun 2025 02:00:35 +0000
Manifest this update:     Sat 14 Jun 2025 02:00:35 +0000
Manifest next update:     Sun 15 Jun 2025 02:00:35 +0000
Files and hashes:         1: F8CkVi3Azk4IP8l0xbj9A7utWT4.roa (hash: E5Iv0quJqPnudHATWcToHknlwXYMpaxnHvHdqASmVUA=)
                          2: zOV9yCNN9fWdZ_3GhWuyYucZP1I.crl (hash: tlEjmnyrSUbmzowpuTozl3NSrhORin+uEVmyTwnnGsg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/34acf4-747f-45fe-8129-402f1fb848cf/1/zOV9yCNN9fWdZ_3GhWuyYucZP1I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/34acf4-747f-45fe-8129-402f1fb848cf/1/zOV9yCNN9fWdZ_3GhWuyYucZP1I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zOV9yCNN9fWdZ_3GhWuyYucZP1I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:2a:d4:1f:ed:fb:86:fd:7d:32:6c:23:5a:d4:da:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cce57dc8234df5f59d67fdc6856bb262e7193f52
        Validity
            Not Before: Jun 14 02:00:35 2025 GMT
            Not After : Jun 15 02:00:35 2025 GMT
        Subject: CN=89ff7c5dbeaed943fbdf3abc5d97574185fb7fe8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:92:72:b4:2e:a5:89:1b:04:78:1b:09:3a:3c:
                    46:0c:0a:69:64:49:bd:2e:b4:31:9a:c1:f7:e4:31:
                    e1:f2:e6:12:37:01:5c:64:a6:4e:e9:c7:49:74:e4:
                    4f:9d:cd:46:8f:20:2d:aa:a6:cc:57:94:9a:b9:8d:
                    5e:09:ac:0e:88:38:03:c7:2f:d1:10:1e:20:bd:1f:
                    40:92:1c:57:94:aa:99:77:c7:3d:83:ab:b8:9d:18:
                    6e:d2:03:b5:1c:16:7a:89:2a:26:d6:58:7e:5c:3a:
                    3e:87:46:d7:4a:b4:ed:55:28:3b:78:dc:3b:93:4d:
                    c9:97:65:ab:c6:29:6d:ed:82:67:fa:fd:2d:a7:b0:
                    b1:ea:b2:46:6c:64:af:26:11:a6:9d:81:cc:0b:15:
                    fc:aa:80:2e:3b:70:e8:1b:ba:8b:0c:2d:07:c3:a8:
                    4e:de:83:1a:37:c9:ab:3f:65:c1:55:ec:01:41:26:
                    97:c3:28:2a:de:92:5f:e4:5c:63:c8:65:f9:5b:11:
                    3a:35:78:bf:03:af:48:13:5b:c0:67:bd:6b:2d:63:
                    f1:77:ff:a0:5a:ed:cc:d3:ab:ab:83:98:b0:e9:03:
                    66:4b:38:97:9f:7c:50:eb:5b:6b:29:97:b7:3d:7e:
                    5a:94:61:32:b3:4a:28:be:ba:79:ba:c0:a5:4c:46:
                    bb:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:FF:7C:5D:BE:AE:D9:43:FB:DF:3A:BC:5D:97:57:41:85:FB:7F:E8
            X509v3 Authority Key Identifier:
                keyid:CC:E5:7D:C8:23:4D:F5:F5:9D:67:FD:C6:85:6B:B2:62:E7:19:3F:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zOV9yCNN9fWdZ_3GhWuyYucZP1I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/34acf4-747f-45fe-8129-402f1fb848cf/1/zOV9yCNN9fWdZ_3GhWuyYucZP1I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/34acf4-747f-45fe-8129-402f1fb848cf/1/zOV9yCNN9fWdZ_3GhWuyYucZP1I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:37:c4:0f:3b:ce:85:21:78:37:f5:2a:41:c9:07:7f:4f:cf:
         0b:b2:7e:b1:52:1a:a2:6d:54:4f:b5:f8:78:d1:21:f9:20:f1:
         2d:8b:18:cc:3d:27:b2:08:3f:71:88:35:7c:a3:5c:7c:a5:c6:
         b9:a5:b2:7a:67:53:2a:b7:20:fb:85:4b:6d:25:d3:c8:24:86:
         85:7e:7b:e2:7a:14:88:1b:77:87:a0:58:ef:af:25:f8:05:2f:
         67:ed:c3:67:d6:32:76:a5:5c:92:3f:cb:ea:51:38:e0:4e:ca:
         e8:53:99:5f:c1:ad:c8:75:d3:35:db:a5:23:b6:48:0b:43:82:
         e6:99:c1:2c:8d:8e:d3:8a:b2:c5:2e:25:54:02:c6:c9:38:2d:
         bf:25:cc:dd:79:24:22:0b:63:70:1d:f6:2f:49:8e:10:96:df:
         60:fb:39:f7:02:85:3d:6e:a0:21:c7:79:77:64:31:42:42:41:
         cd:3b:7d:72:eb:7a:a4:ab:dd:6a:e8:be:d2:10:a7:25:53:b6:
         0d:4b:3f:2e:20:17:af:ff:b7:7b:a5:e1:fb:42:2b:08:2c:7a:
         41:93:71:79:c6:d7:56:c7:73:44:5e:79:45:97:32:fd:ca:8d:
         7b:7a:39:00:9a:b0:1d:68:36:42:77:55:da:15:d3:80:53:0b:
         d3:ac:a4:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsKtQf7fuG/X0ybCNa1NrXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjZTU3ZGM4MjM0ZGY1ZjU5ZDY3ZmRjNjg1NmJiMjYyZTcx
OTNmNTIwHhcNMjUwNjE0MDIwMDM1WhcNMjUwNjE1MDIwMDM1WjAzMTEwLwYDVQQD
Eyg4OWZmN2M1ZGJlYWVkOTQzZmJkZjNhYmM1ZDk3NTc0MTg1ZmI3ZmU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZJytC6liRsEeBsJOjxGDAppZEm9
LrQxmsH35DHh8uYSNwFcZKZO6cdJdORPnc1GjyAtqqbMV5SauY1eCawOiDgDxy/R
EB4gvR9AkhxXlKqZd8c9g6u4nRhu0gO1HBZ6iSom1lh+XDo+h0bXSrTtVSg7eNw7
k03Jl2Wrxilt7YJn+v0tp7Cx6rJGbGSvJhGmnYHMCxX8qoAuO3DoG7qLDC0Hw6hO
3oMaN8mrP2XBVewBQSaXwygq3pJf5FxjyGX5WxE6NXi/A69IE1vAZ71rLWPxd/+g
Wu3M06urg5iw6QNmSziXn3xQ61trKZe3PX5alGEys0oovrp5usClTEa7uQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIn/fF2+rtlD+986vF2XV0GF+3/oMB8GA1UdIwQY
MBaAFMzlfcgjTfX1nWf9xoVrsmLnGT9SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvek9WOXlDTk45ZldkWl8zR2hXdXlZdWNaUDFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8zNGFjZjQtNzQ3Zi00NWZlLTgxMjkt
NDAyZjFmYjg0OGNmLzEvek9WOXlDTk45ZldkWl8zR2hXdXlZdWNaUDFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC8zNGFjZjQtNzQ3Zi00NWZlLTgxMjktNDAyZjFmYjg0OGNm
LzEvek9WOXlDTk45ZldkWl8zR2hXdXlZdWNaUDFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAljfEDzvO
hSF4N/UqQckHf0/PC7J+sVIaom1UT7X4eNEh+SDxLYsYzD0nsgg/cYg1fKNcfKXG
uaWyemdTKrcg+4VLbSXTyCSGhX574noUiBt3h6BY768l+AUvZ+3DZ9YydqVckj/L
6lE44E7K6FOZX8GtyHXTNdulI7ZIC0OC5pnBLI2O04qyxS4lVALGyTgtvyXM3Xkk
IgtjcB32L0mOEJbfYPs59wKFPW6gIcd5d2QxQkJBzTt9cut6pKvdaui+0hCnJVO2
DUs/LiAXr/+3e6Xh+0IrCCx6QZNxecbXVsdzRF55RZcy/cqNe3o5AJqwHWg2QndV
2hXTgFML06yk+g==
-----END CERTIFICATE-----
Generated at Sat Jun 14 10:10:11 2025 by rpki-client