Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/9f0539-fd74-4eec-9131-49319b9479f3/1/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.mft
File:                     1-94SuRyx8pM6e-jq_y0-Nd6zgaY.mft (raw, json)
Hash identifier:          FBeEAsxQmq7hNuYNBI4l4XCTrHcFYv6fO8wFd6GnKZo=
Subject key identifier:   E5:75:CE:4F:47:39:2F:A4:15:F3:AC:F0:45:51:00:4E:DF:F2:11:9F
Authority key identifier: FB:DE:12:B9:1C:B1:F2:93:3A:7B:E8:EA:FF:2D:3E:35:DE:B3:81:A6
Certificate issuer:       /CN=fbde12b91cb1f2933a7be8eaff2d3e35deb381a6
Certificate serial:       01978661559EAC5C98C89FEE11222AE03DD9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/9f0539-fd74-4eec-9131-49319b9479f3/1/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.mft
Manifest number:          05F6
Signing time:             Thu 19 Jun 2025 04:10:15 +0000
Manifest this update:     Thu 19 Jun 2025 04:10:15 +0000
Manifest next update:     Fri 20 Jun 2025 04:10:15 +0000
Files and hashes:         1: 1-94SuRyx8pM6e-jq_y0-Nd6zgaY.crl (hash: mPl2IFYE6aElphLKPJb428MtERhShCKBt+d894SqPpQ=)
                          2: NZJDMNeawRRaR2kN6M6VUEMWS6s.roa (hash: 4yyzbuml8orMhWCVhBPIpnlBdZcJZlvRc7XP5PPxwGI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/9f0539-fd74-4eec-9131-49319b9479f3/1/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/9f0539-fd74-4eec-9131-49319b9479f3/1/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 20 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:86:61:55:9e:ac:5c:98:c8:9f:ee:11:22:2a:e0:3d:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbde12b91cb1f2933a7be8eaff2d3e35deb381a6
        Validity
            Not Before: Jun 19 04:10:15 2025 GMT
            Not After : Jun 20 04:10:15 2025 GMT
        Subject: CN=e575ce4f47392fa415f3acf04551004edff2119f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:08:e2:2c:97:43:2b:e8:9f:f3:88:50:0a:41:
                    d9:60:2a:8c:b1:97:e4:19:17:c6:66:67:22:f7:6c:
                    cb:b4:0f:50:25:ba:d8:c3:f3:91:f9:90:83:91:b1:
                    91:b3:70:a7:d4:47:4f:43:3a:88:c2:66:28:02:bf:
                    b4:b8:81:97:4c:24:27:47:36:b9:cf:26:4e:b9:0d:
                    62:3a:37:70:6f:10:54:ef:56:34:39:36:ea:47:da:
                    1d:c6:0d:21:a0:df:f0:94:13:87:99:3b:2d:3b:0f:
                    47:75:60:49:a9:a0:09:c3:34:45:95:51:8a:15:ce:
                    5c:77:91:ec:24:55:e9:0c:e1:fa:bd:49:2f:0a:99:
                    bd:1f:92:ef:13:20:82:6e:b1:d0:57:fb:6e:c2:01:
                    cd:1c:54:04:62:d0:98:8d:99:8b:e4:5b:02:8b:9b:
                    57:62:f8:a7:85:c6:b6:24:b9:83:e5:8c:43:5b:c8:
                    0b:59:b2:dd:10:c6:3f:03:73:47:80:ef:21:34:83:
                    6f:9a:cb:7c:36:d6:bb:f6:fc:35:04:ac:bb:12:78:
                    29:b2:03:8d:39:4d:52:9c:51:5c:f4:19:6a:37:a7:
                    25:ab:c1:be:9f:27:a4:f3:83:29:19:61:90:d2:c7:
                    a7:39:33:5b:33:a5:fe:b5:0b:c5:e6:e4:32:3c:39:
                    45:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:75:CE:4F:47:39:2F:A4:15:F3:AC:F0:45:51:00:4E:DF:F2:11:9F
            X509v3 Authority Key Identifier:
                keyid:FB:DE:12:B9:1C:B1:F2:93:3A:7B:E8:EA:FF:2D:3E:35:DE:B3:81:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9f0539-fd74-4eec-9131-49319b9479f3/1/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9f0539-fd74-4eec-9131-49319b9479f3/1/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:b4:2f:25:5f:5f:c1:e1:86:5c:d1:fc:d0:e5:50:7e:b8:6b:
         ef:e2:0d:a6:50:d7:0a:ec:ad:d0:59:0a:87:6b:04:64:f8:b7:
         43:c8:a0:96:8c:8d:7f:82:45:4c:c2:f5:db:18:90:82:84:96:
         e9:0a:4d:35:74:f9:38:59:fa:6d:54:5c:72:cb:2e:08:e2:39:
         2c:e1:f4:cc:6a:ba:14:8f:70:46:a1:a4:56:19:3d:b1:e9:12:
         22:d7:31:9e:df:55:35:e3:cd:7b:03:16:eb:79:2f:46:1f:b8:
         33:01:06:d5:b4:bd:82:48:2a:ca:e4:6d:ea:9f:62:3f:7c:de:
         46:19:31:3e:67:aa:75:a8:7a:ac:c9:2b:ec:2a:8e:20:8b:23:
         2c:3e:16:63:7c:df:d7:a6:29:1f:b0:b5:6b:77:94:44:95:d3:
         0d:51:2d:9e:20:8b:65:72:fe:45:c3:d7:6f:16:99:5a:63:fe:
         2c:b0:b9:0c:56:dc:ae:02:d0:fc:19:7c:06:ab:09:b0:6d:6a:
         a8:e3:74:b6:cb:e7:c2:c8:06:1d:c3:83:6d:e0:dd:2a:61:65:
         57:68:5c:95:0e:42:36:4a:e5:74:da:5c:f2:cf:28:bc:13:21:
         dd:b5:cb:ec:43:bf:5a:cd:34:e9:8f:a2:95:cb:5a:bd:7a:1d:
         bb:1b:76:f6
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZeGYVWerFyYyJ/uESIq4D3ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiZGUxMmI5MWNiMWYyOTMzYTdiZThlYWZmMmQzZTM1ZGVi
MzgxYTYwHhcNMjUwNjE5MDQxMDE1WhcNMjUwNjIwMDQxMDE1WjAzMTEwLwYDVQQD
EyhlNTc1Y2U0ZjQ3MzkyZmE0MTVmM2FjZjA0NTUxMDA0ZWRmZjIxMTlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgjiLJdDK+if84hQCkHZYCqMsZfk
GRfGZmci92zLtA9QJbrYw/OR+ZCDkbGRs3Cn1EdPQzqIwmYoAr+0uIGXTCQnRza5
zyZOuQ1iOjdwbxBU71Y0OTbqR9odxg0hoN/wlBOHmTstOw9HdWBJqaAJwzRFlVGK
Fc5cd5HsJFXpDOH6vUkvCpm9H5LvEyCCbrHQV/tuwgHNHFQEYtCYjZmL5FsCi5tX
Yvinhca2JLmD5YxDW8gLWbLdEMY/A3NHgO8hNINvmst8Nta79vw1BKy7EngpsgON
OU1SnFFc9BlqN6clq8G+nyek84MpGWGQ0senOTNbM6X+tQvF5uQyPDlFFwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFOV1zk9HOS+kFfOs8EVRAE7f8hGfMB8GA1UdIwQY
MBaAFPveErkcsfKTOnvo6v8tPjXes4GmMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS05NFN1Unl4OHBNNmUtanFfeTAtTmQ2emdhWS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzYvOWYwNTM5LWZkNzQtNGVlYy05MTMx
LTQ5MzE5Yjk0NzlmMy8xLzEtOTRTdVJ5eDhwTTZlLWpxX3kwLU5kNnpnYVkubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzc2LzlmMDUzOS1mZDc0LTRlZWMtOTEzMS00OTMxOWI5NDc5
ZjMvMS8xLTk0U3VSeXg4cE02ZS1qcV95MC1OZDZ6Z2FZLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh7Qv
JV9fweGGXNH80OVQfrhr7+INplDXCuyt0FkKh2sEZPi3Q8igloyNf4JFTML12xiQ
goSW6QpNNXT5OFn6bVRccssuCOI5LOH0zGq6FI9wRqGkVhk9sekSItcxnt9VNePN
ewMW63kvRh+4MwEG1bS9gkgqyuRt6p9iP3zeRhkxPmeqdah6rMkr7CqOIIsjLD4W
Y3zf16YpH7C1a3eURJXTDVEtniCLZXL+RcPXbxaZWmP+LLC5DFbcrgLQ/Bl8BqsJ
sG1qqON0tsvnwsgGHcODbeDdKmFlV2hclQ5CNkrldNpc8s8ovBMh3bXL7EO/Ws00
6Y+ilctavXoduxt29g==
-----END CERTIFICATE-----
Generated at Thu Jun 19 09:58:00 2025 by rpki-client