Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.mft
File:                     IPY4EHq7hK5vsDzB2yz9G8RIf40.mft (raw, json)
Hash identifier:          ztkd1gyOqBlgFxiDDB+HO+ROJUqEYoWM5EiZ01CtHOU=
Subject key identifier:   D5:AE:A6:B9:50:D3:CC:7E:D9:EA:0C:B7:2E:AD:44:5C:82:99:8D:7B
Authority key identifier: 20:F6:38:10:7A:BB:84:AE:6F:B0:3C:C1:DB:2C:FD:1B:C4:48:7F:8D
Certificate issuer:       /CN=20f638107abb84ae6fb03cc1db2cfd1bc4487f8d
Certificate serial:       019774F78B17E4E396912FB58910F243FDC1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IPY4EHq7hK5vsDzB2yz9G8RIf40.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.mft
Manifest number:          0F62
Signing time:             Sun 15 Jun 2025 19:01:09 +0000
Manifest this update:     Sun 15 Jun 2025 19:01:09 +0000
Manifest next update:     Mon 16 Jun 2025 19:01:09 +0000
Files and hashes:         1: IPY4EHq7hK5vsDzB2yz9G8RIf40.crl (hash: 8hx1Ki1cMJzshaQLUYU6y2bAyihcxBm6eT5WXo1ZS2Y=)
                          2: JK5dBkqsG4C8M2ttw7JiFgUdZew.roa (hash: vMhSi46i8JCqRLgPeW41NRu360WeGbF0LT7pGWnTq7U=)
                          3: VNrppWVy36SKNgtS_F1qaT2zJHY.roa (hash: 9DXGS+oBa4dlfj3+GMMrbil8G+vwg9kQTst1kCj/GhM=)
                          4: sLy4f0J28AKLnDg3qJ8vxAYCBx0.roa (hash: beKd4jqG4/esSSfPF84tT28gcKiXZoavsjTYolwvANc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IPY4EHq7hK5vsDzB2yz9G8RIf40.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 19:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:74:f7:8b:17:e4:e3:96:91:2f:b5:89:10:f2:43:fd:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20f638107abb84ae6fb03cc1db2cfd1bc4487f8d
        Validity
            Not Before: Jun 15 19:01:09 2025 GMT
            Not After : Jun 16 19:01:09 2025 GMT
        Subject: CN=d5aea6b950d3cc7ed9ea0cb72ead445c82998d7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a3:cd:19:f4:b2:36:3b:81:cd:b6:a5:15:a0:
                    94:3d:02:49:fc:10:88:d6:ea:39:1c:61:88:7c:7d:
                    59:fc:aa:bd:0b:a4:2f:80:f7:14:41:b3:7e:f1:f8:
                    54:a2:42:20:56:ea:c7:0b:5c:22:c5:16:b5:9d:ff:
                    b3:21:e9:85:83:c9:58:66:e3:a4:8a:78:68:46:35:
                    d4:33:d5:50:2e:eb:1d:d7:0a:61:4d:47:78:36:66:
                    f7:d8:5f:11:5b:70:9f:d6:3f:c9:f4:f3:78:9c:7d:
                    cb:76:c7:36:8e:57:56:2a:68:41:06:11:fd:44:9d:
                    c4:95:31:85:21:bd:1b:58:14:15:d0:83:b1:42:3f:
                    4e:6f:d8:e8:57:65:c2:da:75:5f:ab:cb:39:40:a4:
                    08:da:a6:a4:50:a4:87:a1:5e:97:26:d1:68:c3:22:
                    51:67:f4:e8:98:a3:5c:0b:d9:a6:ca:a7:84:46:37:
                    07:44:61:d1:99:ec:7b:2c:26:27:20:43:77:cd:14:
                    ce:70:61:2c:ef:40:a9:eb:df:8d:76:91:56:88:57:
                    e3:2b:2e:c2:21:97:2a:e5:4c:c6:c5:42:59:07:d8:
                    5b:5f:1e:6d:75:d4:34:9d:52:01:02:cb:b9:9e:15:
                    40:5d:b1:16:3c:cd:f9:92:1d:c3:57:d2:d8:f3:c8:
                    54:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:AE:A6:B9:50:D3:CC:7E:D9:EA:0C:B7:2E:AD:44:5C:82:99:8D:7B
            X509v3 Authority Key Identifier:
                keyid:20:F6:38:10:7A:BB:84:AE:6F:B0:3C:C1:DB:2C:FD:1B:C4:48:7F:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IPY4EHq7hK5vsDzB2yz9G8RIf40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:26:cc:d9:cb:be:52:42:42:f3:42:3b:8d:bf:11:48:c3:4f:
         b5:66:b1:d2:40:3c:11:c1:3d:0d:5b:4c:dc:26:4e:ae:8a:2d:
         8b:3c:45:aa:09:a0:2f:d6:4c:6a:91:76:07:37:77:c2:81:ac:
         15:0b:99:90:0e:62:35:20:7c:2e:2f:b8:ad:90:fa:83:4b:68:
         8d:2c:6b:aa:28:36:93:13:e9:f6:1f:b2:df:e9:21:3f:03:96:
         16:1d:c8:a5:10:28:99:19:45:1c:bb:10:8b:d6:d1:9a:dd:59:
         7c:9c:fa:1a:d1:07:22:89:b6:1d:3c:e6:c0:cc:8c:95:67:1d:
         05:88:7f:c6:ef:ac:06:b0:58:3f:63:15:87:b1:b3:9c:0b:2e:
         c1:2a:d0:66:8d:b8:ee:86:9f:ac:ec:3e:9d:74:97:f4:ae:6c:
         bf:b2:50:18:26:79:41:b5:a9:df:c6:f3:7c:54:84:3b:6a:9c:
         17:1e:cd:14:40:00:12:0d:ea:8c:2d:f8:2b:b6:5b:08:85:f3:
         8c:fb:ad:8e:1b:2d:e4:14:81:63:85:b8:1a:cb:52:94:a6:a8:
         ab:d6:4e:f3:45:88:83:c7:9d:0c:df:da:fc:8b:3e:8e:d2:12:
         ac:9d:8b:e4:84:3b:d5:38:a6:d5:63:3c:ea:42:77:2d:2a:d3:
         59:7e:fe:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd094sX5OOWkS+1iRDyQ/3BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwZjYzODEwN2FiYjg0YWU2ZmIwM2NjMWRiMmNmZDFiYzQ0
ODdmOGQwHhcNMjUwNjE1MTkwMTA5WhcNMjUwNjE2MTkwMTA5WjAzMTEwLwYDVQQD
EyhkNWFlYTZiOTUwZDNjYzdlZDllYTBjYjcyZWFkNDQ1YzgyOTk4ZDdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKPNGfSyNjuBzbalFaCUPQJJ/BCI
1uo5HGGIfH1Z/Kq9C6QvgPcUQbN+8fhUokIgVurHC1wixRa1nf+zIemFg8lYZuOk
inhoRjXUM9VQLusd1wphTUd4Nmb32F8RW3Cf1j/J9PN4nH3Ldsc2jldWKmhBBhH9
RJ3ElTGFIb0bWBQV0IOxQj9Ob9joV2XC2nVfq8s5QKQI2qakUKSHoV6XJtFowyJR
Z/TomKNcC9mmyqeERjcHRGHRmex7LCYnIEN3zRTOcGEs70Cp69+NdpFWiFfjKy7C
IZcq5UzGxUJZB9hbXx5tddQ0nVIBAsu5nhVAXbEWPM35kh3DV9LY88hU7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNWuprlQ08x+2eoMty6tRFyCmY17MB8GA1UdIwQY
MBaAFCD2OBB6u4Sub7A8wdss/RvESH+NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVBZNEVIcTdoSzV2c0R6QjJ5ejlHOFJJZjQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC80ZjU4MDgtMWMwNC00MjU1LTliODQt
YTgyODM2ZGUwNWZjLzEvSVBZNEVIcTdoSzV2c0R6QjJ5ejlHOFJJZjQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC80ZjU4MDgtMWMwNC00MjU1LTliODQtYTgyODM2ZGUwNWZj
LzEvSVBZNEVIcTdoSzV2c0R6QjJ5ejlHOFJJZjQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYybM2cu+
UkJC80I7jb8RSMNPtWax0kA8EcE9DVtM3CZOrootizxFqgmgL9ZMapF2Bzd3woGs
FQuZkA5iNSB8Li+4rZD6g0tojSxrqig2kxPp9h+y3+khPwOWFh3IpRAomRlFHLsQ
i9bRmt1ZfJz6GtEHIom2HTzmwMyMlWcdBYh/xu+sBrBYP2MVh7GznAsuwSrQZo24
7oafrOw+nXSX9K5sv7JQGCZ5QbWp38bzfFSEO2qcFx7NFEAAEg3qjC34K7ZbCIXz
jPutjhst5BSBY4W4GstSlKaoq9ZO80WIg8edDN/a/Is+jtISrJ2L5IQ71Tim1WM8
6kJ3LSrTWX7+tg==
-----END CERTIFICATE-----
Generated at Mon Jun 16 02:10:14 2025 by rpki-client