Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/d3xJ0_YnM1GQ48LsNlThVM_UU5g.mft
File:                     d3xJ0_YnM1GQ48LsNlThVM_UU5g.mft (raw, json)
Hash identifier:          oySzHBKPfdFWCYndXoexRa1mQasLT1iBJRuVSWVLpqA=
Subject key identifier:   17:56:14:27:78:CC:AB:3D:28:3F:E4:E9:5D:69:C3:E2:23:5A:60:A7
Authority key identifier: 77:7C:49:D3:F6:27:33:51:90:E3:C2:EC:36:54:E1:54:CF:D4:53:98
Certificate issuer:       /CN=777c49d3f627335190e3c2ec3654e154cfd45398
Certificate serial:       01976929B8098B56D1D9758FE76184D8DA24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d3xJ0_YnM1GQ48LsNlThVM_UU5g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/d3xJ0_YnM1GQ48LsNlThVM_UU5g.mft
Manifest number:          0C76
Signing time:             Fri 13 Jun 2025 12:00:31 +0000
Manifest this update:     Fri 13 Jun 2025 12:00:31 +0000
Manifest next update:     Sat 14 Jun 2025 12:00:31 +0000
Files and hashes:         1: JS20272zzOd7lsvAhAy2fEVjeyI.roa (hash: cOcrvgmIxE66W+f+FGaVHK7zq1S4gdeOGb2xk9gX0lg=)
                          2: d3xJ0_YnM1GQ48LsNlThVM_UU5g.crl (hash: 9WWXMdDHZH5dT0+RERiNlTuRDc7t+JKXK1FF1fJ2Y90=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/d3xJ0_YnM1GQ48LsNlThVM_UU5g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/d3xJ0_YnM1GQ48LsNlThVM_UU5g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d3xJ0_YnM1GQ48LsNlThVM_UU5g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 12:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:29:b8:09:8b:56:d1:d9:75:8f:e7:61:84:d8:da:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=777c49d3f627335190e3c2ec3654e154cfd45398
        Validity
            Not Before: Jun 13 12:00:31 2025 GMT
            Not After : Jun 14 12:00:31 2025 GMT
        Subject: CN=1756142778ccab3d283fe4e95d69c3e2235a60a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:40:48:92:19:bb:78:df:ae:9b:9b:46:2c:a6:
                    b0:fb:28:b5:1b:30:98:95:ff:80:b8:9e:bd:55:fd:
                    29:0a:86:e1:a6:cf:ae:74:0d:e4:6e:09:8a:5a:22:
                    dd:6d:6c:69:11:97:fc:04:27:2b:10:00:8c:09:2a:
                    f1:b3:d8:f1:1c:fa:1f:56:61:59:65:3d:32:a7:23:
                    12:a7:3e:73:47:55:99:7f:4d:dc:e9:4a:0f:a3:fd:
                    08:56:9a:06:ac:ad:64:9f:b7:67:d3:ab:a3:92:0d:
                    21:54:01:59:ec:f0:a7:74:d1:b7:b9:11:40:09:6e:
                    0b:c6:0b:b6:ba:17:f3:f0:5e:e1:8c:c0:79:b3:74:
                    5b:c7:30:72:95:b6:94:a8:1f:a2:55:0d:a9:72:33:
                    bd:f7:d7:d6:12:f1:a2:18:4d:b3:bb:d6:c4:a7:ff:
                    f9:56:ff:0f:34:2d:9d:ee:dd:86:91:4c:9c:8d:93:
                    fa:f6:96:c4:9c:d4:9f:cc:9a:86:d7:da:8a:af:1d:
                    e0:5e:2c:3a:99:be:8a:b2:82:d2:85:2c:d6:57:ef:
                    8c:28:e6:84:03:d7:de:89:96:3d:62:b0:57:cb:23:
                    e8:43:66:8b:56:93:78:ec:bc:4e:09:0e:f2:8a:51:
                    6a:68:f0:08:a7:2c:2d:6b:63:a2:a0:c3:1d:0a:0a:
                    ef:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:56:14:27:78:CC:AB:3D:28:3F:E4:E9:5D:69:C3:E2:23:5A:60:A7
            X509v3 Authority Key Identifier:
                keyid:77:7C:49:D3:F6:27:33:51:90:E3:C2:EC:36:54:E1:54:CF:D4:53:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3xJ0_YnM1GQ48LsNlThVM_UU5g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/d3xJ0_YnM1GQ48LsNlThVM_UU5g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/d3xJ0_YnM1GQ48LsNlThVM_UU5g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:11:03:ba:af:6b:4b:a3:38:eb:55:62:74:9e:7a:97:57:0a:
         31:34:6b:86:cc:23:7b:ee:b8:39:79:01:12:11:8a:9d:65:ca:
         33:1b:a0:e3:c5:5f:7b:04:df:78:16:1e:ee:23:53:45:52:18:
         09:7c:63:e1:2d:9f:91:c7:01:ab:ff:4e:f3:d2:04:bd:ee:07:
         5f:f2:2e:0b:bd:5d:26:dd:13:6f:3a:0d:73:be:55:63:d1:3a:
         ef:b1:30:eb:3c:51:6c:3d:c1:5f:58:2c:8a:69:cc:df:06:e1:
         96:0b:2d:fb:60:17:0f:7b:42:77:4c:30:1e:31:0e:a6:56:ea:
         11:27:48:37:74:fd:02:13:92:26:93:dd:fa:21:6d:49:3a:0f:
         3e:fa:94:da:7b:54:ff:52:54:77:d8:05:aa:0c:18:1a:21:d8:
         83:c5:4d:c8:a9:0a:6f:d1:f1:81:96:9e:dc:77:71:c7:06:de:
         07:96:41:4c:f4:17:17:e1:93:74:a9:41:a8:53:b7:f9:a4:01:
         78:e7:d5:91:48:e6:17:5a:88:8e:17:f5:a0:c0:b2:0f:fe:7b:
         b0:cf:0c:ee:21:d5:e7:37:72:07:07:29:dd:1a:9b:96:ab:ce:
         ba:3e:24:ca:34:0e:96:dd:70:c7:03:fd:2d:5d:27:e7:bb:71:
         4f:b8:3c:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpKbgJi1bR2XWP52GE2NokMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3N2M0OWQzZjYyNzMzNTE5MGUzYzJlYzM2NTRlMTU0Y2Zk
NDUzOTgwHhcNMjUwNjEzMTIwMDMxWhcNMjUwNjE0MTIwMDMxWjAzMTEwLwYDVQQD
EygxNzU2MTQyNzc4Y2NhYjNkMjgzZmU0ZTk1ZDY5YzNlMjIzNWE2MGE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkBIkhm7eN+um5tGLKaw+yi1GzCY
lf+AuJ69Vf0pCobhps+udA3kbgmKWiLdbWxpEZf8BCcrEACMCSrxs9jxHPofVmFZ
ZT0ypyMSpz5zR1WZf03c6UoPo/0IVpoGrK1kn7dn06ujkg0hVAFZ7PCndNG3uRFA
CW4Lxgu2uhfz8F7hjMB5s3RbxzBylbaUqB+iVQ2pcjO999fWEvGiGE2zu9bEp//5
Vv8PNC2d7t2GkUycjZP69pbEnNSfzJqG19qKrx3gXiw6mb6KsoLShSzWV++MKOaE
A9feiZY9YrBXyyPoQ2aLVpN47LxOCQ7yilFqaPAIpywta2OioMMdCgrvpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBdWFCd4zKs9KD/k6V1pw+IjWmCnMB8GA1UdIwQY
MBaAFHd8SdP2JzNRkOPC7DZU4VTP1FOYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDN4SjBfWW5NMUdRNDhMc05sVGhWTV9VVTVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny81ZTdhMzEtZWU2My00MTIwLTk1MmMt
Y2QyZjhjOTRmOTc0LzEvZDN4SjBfWW5NMUdRNDhMc05sVGhWTV9VVTVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny81ZTdhMzEtZWU2My00MTIwLTk1MmMtY2QyZjhjOTRmOTc0
LzEvZDN4SjBfWW5NMUdRNDhMc05sVGhWTV9VVTVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqhEDuq9r
S6M461VidJ56l1cKMTRrhswje+64OXkBEhGKnWXKMxug48VfewTfeBYe7iNTRVIY
CXxj4S2fkccBq/9O89IEve4HX/IuC71dJt0TbzoNc75VY9E677Ew6zxRbD3BX1gs
imnM3wbhlgst+2AXD3tCd0wwHjEOplbqESdIN3T9AhOSJpPd+iFtSToPPvqU2ntU
/1JUd9gFqgwYGiHYg8VNyKkKb9HxgZae3HdxxwbeB5ZBTPQXF+GTdKlBqFO3+aQB
eOfVkUjmF1qIjhf1oMCyD/57sM8M7iHV5zdyBwcp3RqblqvOuj4kyjQOlt1wxwP9
LV0n57txT7g8fw==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:29:02 2025 by rpki-client