Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/cBXtJ1AFQI0qhqIwNwF0RDDto0o.mft
File:                     cBXtJ1AFQI0qhqIwNwF0RDDto0o.mft (raw, json)
Hash identifier:          Q3kpru3xxcyjlZPJ65jAnDt5hk7CJizhTriuOFnnMRY=
Subject key identifier:   1A:8C:B9:E0:74:0B:D8:6B:EA:B9:B1:9A:FA:8E:FF:7D:A8:E1:3E:8D
Authority key identifier: 70:15:ED:27:50:05:40:8D:2A:86:A2:30:37:01:74:44:30:ED:A3:4A
Certificate issuer:       /CN=7015ed275005408d2a86a2303701744430eda34a
Certificate serial:       019783C5BA412D12794E4AA1E1797CE5709D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cBXtJ1AFQI0qhqIwNwF0RDDto0o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/cBXtJ1AFQI0qhqIwNwF0RDDto0o.mft
Manifest number:          12B3
Signing time:             Wed 18 Jun 2025 16:01:02 +0000
Manifest this update:     Wed 18 Jun 2025 16:01:02 +0000
Manifest next update:     Thu 19 Jun 2025 16:01:02 +0000
Files and hashes:         1: HSf-a0eTcicBmzn4zJZRWXp92WE.roa (hash: vvlQV7Jpi0XVGKQA4HOtArKcD3xjeMm171XNaqqkcT0=)
                          2: a5SThzVTiz_HAgBiI_2C-cBicRU.roa (hash: cXR8rbnSwDhsbHRTW7l3Pqi32yZZ/V3whRHlpIMP7KU=)
                          3: cBXtJ1AFQI0qhqIwNwF0RDDto0o.crl (hash: vIJW+skXRlMsndJPCXHX8aLsIsVJFlJy5Y5xejKMssk=)
                          4: e8yOi_zjBd2PptdyDsyc4j2wCEY.roa (hash: gTBImvzLksx7wicV0C8XssUh2BDoKizjYT0J7tkJ1HY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/cBXtJ1AFQI0qhqIwNwF0RDDto0o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/cBXtJ1AFQI0qhqIwNwF0RDDto0o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cBXtJ1AFQI0qhqIwNwF0RDDto0o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 19 Jun 2025 16:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:83:c5:ba:41:2d:12:79:4e:4a:a1:e1:79:7c:e5:70:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7015ed275005408d2a86a2303701744430eda34a
        Validity
            Not Before: Jun 18 16:01:02 2025 GMT
            Not After : Jun 19 16:01:02 2025 GMT
        Subject: CN=1a8cb9e0740bd86beab9b19afa8eff7da8e13e8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:3e:52:1c:77:2d:17:da:24:5f:42:c7:9e:c8:
                    c6:19:ab:08:43:78:8a:e9:6a:df:c8:8e:3e:32:88:
                    fd:09:c9:c6:66:52:35:9a:0a:ee:99:8f:ef:57:c5:
                    8a:7e:08:79:a7:07:3f:c0:30:bf:80:b2:3d:aa:dc:
                    85:3a:c6:b8:14:cc:4d:ff:78:41:37:3a:49:b6:ca:
                    e9:1a:33:72:a3:75:8f:e9:3d:ae:3e:b9:1d:20:42:
                    17:9b:f0:30:cc:8b:88:c4:7b:d2:55:40:c1:03:d8:
                    d7:a8:1a:ea:93:e7:99:27:eb:a5:99:5f:6c:e3:ab:
                    fb:07:53:ec:a3:cd:49:c3:a1:a1:3d:16:74:2f:ac:
                    5b:84:52:1c:3a:0b:8b:35:27:e4:a9:c6:b4:63:64:
                    8a:f5:e2:05:c0:94:65:ff:ff:ed:1a:9f:44:c8:56:
                    6e:b3:0b:24:5c:b2:eb:10:7d:04:fc:d3:3d:34:91:
                    48:c4:3a:45:87:c0:94:db:ee:09:2b:6b:76:0a:e9:
                    1a:77:57:e3:f2:41:08:4c:c2:e8:1a:7a:7b:a0:e1:
                    06:70:0a:bc:73:8c:a5:7c:2c:0d:79:f3:c6:aa:66:
                    60:b6:97:f6:06:8f:ea:28:76:31:00:93:90:d7:29:
                    46:42:20:93:05:40:07:a3:b3:10:c3:b2:1c:9a:55:
                    b5:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:8C:B9:E0:74:0B:D8:6B:EA:B9:B1:9A:FA:8E:FF:7D:A8:E1:3E:8D
            X509v3 Authority Key Identifier:
                keyid:70:15:ED:27:50:05:40:8D:2A:86:A2:30:37:01:74:44:30:ED:A3:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cBXtJ1AFQI0qhqIwNwF0RDDto0o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/cBXtJ1AFQI0qhqIwNwF0RDDto0o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/cBXtJ1AFQI0qhqIwNwF0RDDto0o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:c7:bb:4b:99:dc:f4:55:59:f4:03:88:d1:b3:e9:39:77:a4:
         9e:c2:84:6a:33:a4:ec:17:a2:6b:f4:dd:94:88:7f:1d:e6:52:
         fa:ea:c4:4b:85:72:69:71:ce:89:e3:a1:9a:2c:13:1a:5f:5b:
         70:3b:71:f0:c4:50:7b:c7:57:c1:cc:7a:72:c8:cb:be:fa:a2:
         7e:fc:b7:7a:1c:c1:19:bd:aa:7c:91:eb:51:a5:43:68:08:12:
         ee:55:48:b5:ec:b7:57:54:f2:a7:48:bd:d2:15:cc:32:9a:cb:
         8b:39:35:0e:4c:84:49:27:0e:4f:15:6d:16:8a:b5:80:b2:40:
         44:ce:77:0a:d0:7f:00:d2:83:a8:f4:28:d1:62:1a:b6:c4:45:
         e7:74:0d:e7:c8:d6:17:99:42:07:78:53:4f:87:ae:3d:87:27:
         e8:3f:51:53:2c:b9:67:4f:95:a3:38:53:91:76:86:12:d2:c6:
         c9:80:af:ea:31:c4:53:31:56:2b:cb:cb:f9:9f:b5:05:de:e6:
         01:91:36:88:e8:8f:9d:f6:04:ce:97:73:12:3b:1c:8c:13:a5:
         75:1e:78:48:a1:2c:71:9f:11:e8:64:aa:c5:f9:1a:81:35:eb:
         c7:2d:44:18:d6:91:b1:5b:af:86:3b:2b:c6:37:5d:ce:95:25:
         57:eb:52:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZeDxbpBLRJ5Tkqh4Xl85XCdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwMTVlZDI3NTAwNTQwOGQyYTg2YTIzMDM3MDE3NDQ0MzBl
ZGEzNGEwHhcNMjUwNjE4MTYwMTAyWhcNMjUwNjE5MTYwMTAyWjAzMTEwLwYDVQQD
EygxYThjYjllMDc0MGJkODZiZWFiOWIxOWFmYThlZmY3ZGE4ZTEzZThkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmD5SHHctF9okX0LHnsjGGasIQ3iK
6WrfyI4+Moj9CcnGZlI1mgrumY/vV8WKfgh5pwc/wDC/gLI9qtyFOsa4FMxN/3hB
NzpJtsrpGjNyo3WP6T2uPrkdIEIXm/AwzIuIxHvSVUDBA9jXqBrqk+eZJ+ulmV9s
46v7B1Pso81Jw6GhPRZ0L6xbhFIcOguLNSfkqca0Y2SK9eIFwJRl///tGp9EyFZu
swskXLLrEH0E/NM9NJFIxDpFh8CU2+4JK2t2Cukad1fj8kEITMLoGnp7oOEGcAq8
c4ylfCwNefPGqmZgtpf2Bo/qKHYxAJOQ1ylGQiCTBUAHo7MQw7IcmlW1awIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBqMueB0C9hr6rmxmvqO/32o4T6NMB8GA1UdIwQY
MBaAFHAV7SdQBUCNKoaiMDcBdEQw7aNKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0JYdEoxQUZRSTBxaHFJd053RjBSRER0bzBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9kZGY1MjktMTUzNi00NGYwLTllZGEt
NGRhZDQ4YTE2ZTQyLzEvY0JYdEoxQUZRSTBxaHFJd053RjBSRER0bzBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC9kZGY1MjktMTUzNi00NGYwLTllZGEtNGRhZDQ4YTE2ZTQy
LzEvY0JYdEoxQUZRSTBxaHFJd053RjBSRER0bzBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN8e7S5nc
9FVZ9AOI0bPpOXeknsKEajOk7Beia/TdlIh/HeZS+urES4VyaXHOieOhmiwTGl9b
cDtx8MRQe8dXwcx6csjLvvqifvy3ehzBGb2qfJHrUaVDaAgS7lVItey3V1Typ0i9
0hXMMprLizk1DkyESScOTxVtFoq1gLJARM53CtB/ANKDqPQo0WIatsRF53QN58jW
F5lCB3hTT4euPYcn6D9RUyy5Z0+VozhTkXaGEtLGyYCv6jHEUzFWK8vL+Z+1Bd7m
AZE2iOiPnfYEzpdzEjscjBOldR54SKEscZ8R6GSqxfkagTXrxy1EGNaRsVuvhjsr
xjddzpUlV+tSIg==
-----END CERTIFICATE-----
Generated at Thu Jun 19 00:00:38 2025 by rpki-client