Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/3615b1-73a9-4c3e-aad1-0335d1a748fc/1/ftv4Ov9DRRLFA3EvIikWAvVb_0g.mft
File:                     ftv4Ov9DRRLFA3EvIikWAvVb_0g.mft (raw, json)
Hash identifier:          80ropb8hWL7GqRZG02xrMCSWdc4VM1T//OyhpejzIwA=
Subject key identifier:   E5:F7:F8:36:31:EB:65:B8:A3:8F:54:DF:61:B2:FE:36:60:1E:99:6A
Authority key identifier: 7E:DB:F8:3A:FF:43:45:12:C5:03:71:2F:22:29:16:02:F5:5B:FF:48
Certificate issuer:       /CN=7edbf83aff434512c503712f22291602f55bff48
Certificate serial:       01976DAB1C61AE0607C89B73E8AF75ADF599
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ftv4Ov9DRRLFA3EvIikWAvVb_0g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/3615b1-73a9-4c3e-aad1-0335d1a748fc/1/ftv4Ov9DRRLFA3EvIikWAvVb_0g.mft
Manifest number:          1522
Signing time:             Sat 14 Jun 2025 09:00:19 +0000
Manifest this update:     Sat 14 Jun 2025 09:00:19 +0000
Manifest next update:     Sun 15 Jun 2025 09:00:19 +0000
Files and hashes:         1: CsQE55nTjZVIgwx6w1u3-dRgYa0.roa (hash: a95d3t9ywYxS9eXqUsbBAK9yU2vbYzv8cxs097vsyiA=)
                          2: ftv4Ov9DRRLFA3EvIikWAvVb_0g.crl (hash: w/9XbLJ9ts+ErO6EcQRjM0SOuMpRvxpLtmoeeM1suUY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/3615b1-73a9-4c3e-aad1-0335d1a748fc/1/ftv4Ov9DRRLFA3EvIikWAvVb_0g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/3615b1-73a9-4c3e-aad1-0335d1a748fc/1/ftv4Ov9DRRLFA3EvIikWAvVb_0g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ftv4Ov9DRRLFA3EvIikWAvVb_0g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 09:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:ab:1c:61:ae:06:07:c8:9b:73:e8:af:75:ad:f5:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7edbf83aff434512c503712f22291602f55bff48
        Validity
            Not Before: Jun 14 09:00:19 2025 GMT
            Not After : Jun 15 09:00:19 2025 GMT
        Subject: CN=e5f7f83631eb65b8a38f54df61b2fe36601e996a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e3:8d:aa:a6:4c:12:f8:53:d8:c1:d3:17:31:
                    42:34:fc:98:56:85:49:d5:bb:e2:57:85:5e:f8:77:
                    84:ba:0a:60:41:33:e0:5a:95:9a:d6:1f:79:41:1b:
                    e2:d0:58:5b:80:0c:92:d1:0f:c7:ba:59:4c:08:77:
                    53:2e:7a:72:d7:24:73:af:3e:9b:85:dc:e4:8a:7b:
                    8b:99:87:d2:62:a7:f2:52:84:54:0c:97:68:8b:43:
                    04:d0:95:4b:70:7f:65:6c:ec:f0:49:4f:c1:b5:c4:
                    51:63:6c:46:9d:02:a2:79:f9:52:81:94:3f:ef:22:
                    4b:39:f1:f5:81:41:50:5a:5f:9e:b8:14:29:53:44:
                    86:82:35:96:64:59:73:e6:c1:45:f5:ef:f9:a4:fc:
                    3f:0b:df:ce:87:52:e8:b2:d5:0d:e6:b8:20:bc:93:
                    54:aa:b2:d6:0c:7f:2e:50:cd:ac:a2:92:d2:4e:db:
                    48:ff:43:cd:ab:d8:0a:b2:35:9a:71:69:12:e1:30:
                    99:d6:29:a1:89:0c:a3:9e:bb:af:50:a0:fc:ac:6e:
                    f3:57:ee:a0:5f:f0:18:a7:42:2e:1e:98:10:da:7a:
                    7f:11:63:57:38:80:72:98:ba:98:95:75:ca:5c:19:
                    42:08:5a:26:01:83:77:70:bf:06:bc:e9:21:38:6b:
                    37:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:F7:F8:36:31:EB:65:B8:A3:8F:54:DF:61:B2:FE:36:60:1E:99:6A
            X509v3 Authority Key Identifier:
                keyid:7E:DB:F8:3A:FF:43:45:12:C5:03:71:2F:22:29:16:02:F5:5B:FF:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ftv4Ov9DRRLFA3EvIikWAvVb_0g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/3615b1-73a9-4c3e-aad1-0335d1a748fc/1/ftv4Ov9DRRLFA3EvIikWAvVb_0g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/3615b1-73a9-4c3e-aad1-0335d1a748fc/1/ftv4Ov9DRRLFA3EvIikWAvVb_0g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:25:5b:65:20:c8:f1:7a:36:9e:ca:2e:a8:fa:72:5b:53:a0:
         78:c3:95:0b:2c:13:77:2d:f1:cb:49:e0:c7:f9:5c:4f:2b:4e:
         53:5a:b9:d8:65:26:a4:2d:1b:f2:8a:88:06:34:9a:d0:51:c2:
         4e:73:f7:01:15:1f:0c:18:86:cb:68:fd:5e:aa:31:06:71:82:
         33:d1:68:98:1a:1d:d9:49:7c:f4:89:78:57:84:55:b6:29:ee:
         9d:ba:7e:1f:ab:4b:ed:7b:a7:5b:b2:f5:8f:ec:e3:41:b2:3f:
         94:97:76:20:c2:1a:79:97:82:74:d9:e8:4a:5f:aa:6e:c3:b9:
         87:4f:13:b2:29:25:ff:ef:24:05:2a:6a:d0:3f:cc:4e:99:ba:
         c5:4e:83:70:01:35:53:6c:ec:f4:d9:6d:19:fd:13:4f:c7:c1:
         34:bb:70:3a:3b:54:8a:d1:ce:c7:3a:09:cd:d6:91:70:ac:fe:
         d3:a9:75:b7:1c:c2:36:58:0d:76:2a:ca:87:3c:dc:ed:04:c3:
         7c:1f:f0:f1:8b:ef:30:28:54:98:e1:f1:16:0f:a7:93:a0:26:
         a0:c1:33:44:e2:fe:a8:e8:b2:c2:38:6f:fd:bf:8e:7a:c8:a5:
         20:58:e3:f4:ca:92:b4:52:65:32:5a:91:c2:ed:2d:be:77:dc:
         ad:b9:d5:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtqxxhrgYHyJtz6K91rfWZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlZGJmODNhZmY0MzQ1MTJjNTAzNzEyZjIyMjkxNjAyZjU1
YmZmNDgwHhcNMjUwNjE0MDkwMDE5WhcNMjUwNjE1MDkwMDE5WjAzMTEwLwYDVQQD
EyhlNWY3ZjgzNjMxZWI2NWI4YTM4ZjU0ZGY2MWIyZmUzNjYwMWU5OTZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAneONqqZMEvhT2MHTFzFCNPyYVoVJ
1bviV4Ve+HeEugpgQTPgWpWa1h95QRvi0FhbgAyS0Q/HullMCHdTLnpy1yRzrz6b
hdzkinuLmYfSYqfyUoRUDJdoi0ME0JVLcH9lbOzwSU/BtcRRY2xGnQKieflSgZQ/
7yJLOfH1gUFQWl+euBQpU0SGgjWWZFlz5sFF9e/5pPw/C9/Oh1LostUN5rggvJNU
qrLWDH8uUM2sopLSTttI/0PNq9gKsjWacWkS4TCZ1imhiQyjnruvUKD8rG7zV+6g
X/AYp0IuHpgQ2np/EWNXOIBymLqYlXXKXBlCCFomAYN3cL8GvOkhOGs3sQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOX3+DYx62W4o49U32Gy/jZgHplqMB8GA1UdIwQY
MBaAFH7b+Dr/Q0USxQNxLyIpFgL1W/9IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnR2NE92OURSUkxGQTNFdklpa1dBdlZiXzBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni8zNjE1YjEtNzNhOS00YzNlLWFhZDEt
MDMzNWQxYTc0OGZjLzEvZnR2NE92OURSUkxGQTNFdklpa1dBdlZiXzBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni8zNjE1YjEtNzNhOS00YzNlLWFhZDEtMDMzNWQxYTc0OGZj
LzEvZnR2NE92OURSUkxGQTNFdklpa1dBdlZiXzBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARyVbZSDI
8Xo2nsouqPpyW1OgeMOVCywTdy3xy0ngx/lcTytOU1q52GUmpC0b8oqIBjSa0FHC
TnP3ARUfDBiGy2j9XqoxBnGCM9FomBod2Ul89Il4V4RVtinunbp+H6tL7XunW7L1
j+zjQbI/lJd2IMIaeZeCdNnoSl+qbsO5h08Tsikl/+8kBSpq0D/MTpm6xU6DcAE1
U2zs9NltGf0TT8fBNLtwOjtUitHOxzoJzdaRcKz+06l1txzCNlgNdirKhzzc7QTD
fB/w8YvvMChUmOHxFg+nk6AmoMEzROL+qOiywjhv/b+OesilIFjj9MqStFJlMlqR
wu0tvnfcrbnVmg==
-----END CERTIFICATE-----
Generated at Sat Jun 14 19:57:20 2025 by rpki-client