Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/d10813-fe61-4033-a433-5ee9b62246db/1/1-_OAtmdbnM1fgS4Gn_8XVHj7OKQ.mft
File:                     1-_OAtmdbnM1fgS4Gn_8XVHj7OKQ.mft (raw, json)
Hash identifier:          hfHoePuVf91XjhRexmwc0qKyhXyHjewG/utkACwGxFM=
Subject key identifier:   FB:D7:AC:61:65:41:43:42:47:D4:1D:DE:FF:02:1E:18:07:D4:F7:11
Authority key identifier: FB:F3:80:B6:67:5B:9C:CD:5F:81:2E:06:9F:FF:17:54:78:FB:38:A4
Certificate issuer:       /CN=fbf380b6675b9ccd5f812e069fff175478fb38a4
Certificate serial:       0197790A91481EADE4253BF5FEA4CCBCDFF2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-_OAtmdbnM1fgS4Gn_8XVHj7OKQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/d10813-fe61-4033-a433-5ee9b62246db/1/1-_OAtmdbnM1fgS4Gn_8XVHj7OKQ.mft
Manifest number:          10A1
Signing time:             Mon 16 Jun 2025 14:00:25 +0000
Manifest this update:     Mon 16 Jun 2025 14:00:25 +0000
Manifest next update:     Tue 17 Jun 2025 14:00:25 +0000
Files and hashes:         1: 1-_OAtmdbnM1fgS4Gn_8XVHj7OKQ.crl (hash: lIwHUNYMBPyI+UUP/dcU/3I17Nhv0gGmJ3rvGIvy8Ms=)
                          2: oCmBMF8iI8CutVf6sdX1dTs5wPg.roa (hash: TfgX1fiboG0xroG328eMyAxUa0ejT6atD6RIyf61++A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/d10813-fe61-4033-a433-5ee9b62246db/1/1-_OAtmdbnM1fgS4Gn_8XVHj7OKQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/d10813-fe61-4033-a433-5ee9b62246db/1/1-_OAtmdbnM1fgS4Gn_8XVHj7OKQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-_OAtmdbnM1fgS4Gn_8XVHj7OKQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 13:25:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:79:0a:91:48:1e:ad:e4:25:3b:f5:fe:a4:cc:bc:df:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbf380b6675b9ccd5f812e069fff175478fb38a4
        Validity
            Not Before: Jun 16 14:00:25 2025 GMT
            Not After : Jun 17 14:00:25 2025 GMT
        Subject: CN=fbd7ac616541434247d41ddeff021e1807d4f711
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ce:87:d9:42:6c:ce:56:5c:c2:a6:43:2d:cc:
                    7d:ea:6a:a5:dd:75:50:58:5b:97:bc:c2:d9:92:2e:
                    fc:4e:4b:22:7e:16:bc:4c:18:99:9b:0f:e7:5a:24:
                    c3:6f:a1:6f:ee:92:d3:46:e2:5c:93:f7:35:b7:77:
                    a1:0b:ad:df:b5:6a:3c:97:a1:bd:af:37:94:f5:38:
                    fe:10:2a:3d:b3:31:04:d9:30:8f:1c:9c:b4:f9:52:
                    ce:1d:81:63:d4:5f:01:89:cb:21:c9:3d:5e:6f:bd:
                    30:6a:9a:5d:30:0f:c1:af:1a:45:1e:b2:2b:cd:1c:
                    af:04:1e:5b:be:ac:f6:c9:8b:8a:91:99:b9:0b:b2:
                    cc:2c:b6:1b:6f:17:a9:cf:a1:2d:83:74:3c:72:9f:
                    1e:cf:48:16:e9:48:01:5a:c0:cf:96:42:90:a1:01:
                    0c:fe:55:59:3c:36:01:ee:25:75:c5:39:f6:43:76:
                    33:90:d4:88:1c:21:88:ea:de:a1:fb:d9:92:6a:f6:
                    a7:5c:2b:0f:c5:76:b4:e7:07:89:56:b4:c9:10:a0:
                    66:a2:75:a5:f3:19:22:72:89:34:b4:16:ba:ca:72:
                    e9:3c:bf:62:57:10:0d:ff:96:56:9c:c0:11:87:5c:
                    b3:3a:45:c1:63:33:08:ee:65:4f:bd:36:3c:84:17:
                    87:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:D7:AC:61:65:41:43:42:47:D4:1D:DE:FF:02:1E:18:07:D4:F7:11
            X509v3 Authority Key Identifier:
                keyid:FB:F3:80:B6:67:5B:9C:CD:5F:81:2E:06:9F:FF:17:54:78:FB:38:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-_OAtmdbnM1fgS4Gn_8XVHj7OKQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d10813-fe61-4033-a433-5ee9b62246db/1/1-_OAtmdbnM1fgS4Gn_8XVHj7OKQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d10813-fe61-4033-a433-5ee9b62246db/1/1-_OAtmdbnM1fgS4Gn_8XVHj7OKQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:fb:ea:ea:94:a6:9a:ea:f7:99:b5:03:51:c2:f3:3d:a0:53:
         28:81:b8:63:52:19:de:b7:51:2a:7d:b4:55:fc:e3:0a:5d:30:
         81:5e:7a:0a:bf:3d:61:ef:f7:e8:93:fb:c9:ab:b5:76:6a:c0:
         f6:85:e2:e1:52:2b:49:43:8d:8e:a9:02:c3:0d:d2:2c:d4:c5:
         cb:10:a1:c4:9f:2b:cd:d4:b4:b5:6f:62:72:57:b8:6c:4c:4a:
         e7:36:14:8c:a0:97:9e:38:d7:bd:57:8b:e0:62:3c:e5:5e:8c:
         f1:bc:57:a8:79:3a:76:9c:21:ea:96:06:f0:e9:4e:80:1a:0a:
         4e:dd:4f:92:b9:8e:10:8a:8e:b4:08:29:13:69:26:e1:e4:4a:
         79:64:57:86:da:2c:31:e6:d0:39:be:7f:31:20:4b:02:5c:70:
         7f:b1:69:92:8f:e7:27:64:a1:fc:3c:30:42:c4:4c:05:09:35:
         d4:97:1a:e6:db:44:ba:f9:b1:15:80:78:e8:18:86:61:e5:56:
         0b:77:92:73:d8:64:cb:de:94:34:4f:19:09:1c:be:32:67:3b:
         a1:dc:38:7c:95:f2:0c:67:bb:d2:c1:b3:94:af:43:c7:0d:23:
         02:39:f0:e5:f2:07:39:63:26:e6:0d:d2:fa:0c:74:1b:1e:58:
         73:c8:f5:ee
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZd5CpFIHq3kJTv1/qTMvN/yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiZjM4MGI2Njc1YjljY2Q1ZjgxMmUwNjlmZmYxNzU0Nzhm
YjM4YTQwHhcNMjUwNjE2MTQwMDI1WhcNMjUwNjE3MTQwMDI1WjAzMTEwLwYDVQQD
EyhmYmQ3YWM2MTY1NDE0MzQyNDdkNDFkZGVmZjAyMWUxODA3ZDRmNzExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxc6H2UJszlZcwqZDLcx96mql3XVQ
WFuXvMLZki78Tksifha8TBiZmw/nWiTDb6Fv7pLTRuJck/c1t3ehC63ftWo8l6G9
rzeU9Tj+ECo9szEE2TCPHJy0+VLOHYFj1F8BicshyT1eb70wappdMA/BrxpFHrIr
zRyvBB5bvqz2yYuKkZm5C7LMLLYbbxepz6Etg3Q8cp8ez0gW6UgBWsDPlkKQoQEM
/lVZPDYB7iV1xTn2Q3YzkNSIHCGI6t6h+9mSavanXCsPxXa05weJVrTJEKBmonWl
8xkicok0tBa6ynLpPL9iVxAN/5ZWnMARh1yzOkXBYzMI7mVPvTY8hBeHyQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFPvXrGFlQUNCR9Qd3v8CHhgH1PcRMB8GA1UdIwQY
MBaAFPvzgLZnW5zNX4EuBp//F1R4+zikMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1fT0F0bWRibk0xZmdTNEduXzhYVkhqN09LUS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmMvZDEwODEzLWZlNjEtNDAzMy1hNDMz
LTVlZTliNjIyNDZkYi8xLzEtX09BdG1kYm5NMWZnUzRHbl84WFZIajdPS1EubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzZjL2QxMDgxMy1mZTYxLTQwMzMtYTQzMy01ZWU5YjYyMjQ2
ZGIvMS8xLV9PQXRtZGJuTTFmZ1M0R25fOFhWSGo3T0tRLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAafvq
6pSmmur3mbUDUcLzPaBTKIG4Y1IZ3rdRKn20VfzjCl0wgV56Cr89Ye/36JP7yau1
dmrA9oXi4VIrSUONjqkCww3SLNTFyxChxJ8rzdS0tW9icle4bExK5zYUjKCXnjjX
vVeL4GI85V6M8bxXqHk6dpwh6pYG8OlOgBoKTt1PkrmOEIqOtAgpE2km4eRKeWRX
htosMebQOb5/MSBLAlxwf7Fpko/nJ2Sh/DwwQsRMBQk11Jca5ttEuvmxFYB46BiG
YeVWC3eSc9hky96UNE8ZCRy+Mmc7odw4fJXyDGe70sGzlK9Dxw0jAjnw5fIHOWMm
5g3S+gx0Gx5Yc8j17g==
-----END CERTIFICATE-----
Generated at Mon Jun 16 15:48:32 2025 by rpki-client