Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/9cc39c-dd7b-4892-94bf-ee46ac018600/1/sLakm8wQ3jQOOdID9WZYvX1kjd8.mft
File:                     sLakm8wQ3jQOOdID9WZYvX1kjd8.mft (raw, json)
Hash identifier:          BQVUd++AuxMB9wuATcsgqPqw2CnrbLvxy3+xB92YLtQ=
Subject key identifier:   95:01:0D:CE:2E:89:00:1A:F4:F6:3B:14:C4:42:D2:BF:47:61:EC:EB
Authority key identifier: B0:B6:A4:9B:CC:10:DE:34:0E:39:D2:03:F5:66:58:BD:7D:64:8D:DF
Certificate issuer:       /CN=b0b6a49bcc10de340e39d203f56658bd7d648ddf
Certificate serial:       01977075764686D4A61BB2CE53A5AB07C0C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sLakm8wQ3jQOOdID9WZYvX1kjd8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/9cc39c-dd7b-4892-94bf-ee46ac018600/1/sLakm8wQ3jQOOdID9WZYvX1kjd8.mft
Manifest number:          12DE
Signing time:             Sat 14 Jun 2025 22:00:35 +0000
Manifest this update:     Sat 14 Jun 2025 22:00:35 +0000
Manifest next update:     Sun 15 Jun 2025 22:00:35 +0000
Files and hashes:         1: Atj5FbqUiBu2LLABCpGEzpH0Sg4.roa (hash: cBzZGlcz2mRnPCf/PBZJTLNK/ZEjrb5GaHlLhcC0rkI=)
                          2: GzsHZiR2L5z34hlU58GjHyHGhHk.roa (hash: zJEB0Ry2I/bKDFBGY5W04hlUw2kDIBYUIrcg6pqexm0=)
                          3: sLakm8wQ3jQOOdID9WZYvX1kjd8.crl (hash: Xhuyxa9WJiXJM6mWXActmoP6akYMZWvg9sswfs2oS/I=)
                          4: yd8rW0UVlTE0K5ESeZvtwc9yZa8.roa (hash: Y41c6KDcYXB4eyzG3GvmC+i3gLAgKFVoW5IRi29yMUs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/9cc39c-dd7b-4892-94bf-ee46ac018600/1/sLakm8wQ3jQOOdID9WZYvX1kjd8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/9cc39c-dd7b-4892-94bf-ee46ac018600/1/sLakm8wQ3jQOOdID9WZYvX1kjd8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sLakm8wQ3jQOOdID9WZYvX1kjd8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 19:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:70:75:76:46:86:d4:a6:1b:b2:ce:53:a5:ab:07:c0:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0b6a49bcc10de340e39d203f56658bd7d648ddf
        Validity
            Not Before: Jun 14 22:00:35 2025 GMT
            Not After : Jun 15 22:00:35 2025 GMT
        Subject: CN=95010dce2e89001af4f63b14c442d2bf4761eceb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1d:c1:8c:dc:7b:3c:9e:18:91:1a:b5:1e:33:
                    44:83:1c:b7:e4:f2:7b:17:44:f1:27:df:e0:9c:1e:
                    65:e1:4e:43:09:db:e1:d5:92:2b:57:fe:be:19:29:
                    c6:e6:9e:72:ce:fa:34:2e:6a:6c:a7:c8:39:6b:db:
                    52:05:5e:3c:6c:ef:f4:12:5d:cb:59:7b:1a:20:71:
                    50:92:73:d2:fe:4b:c7:79:31:a5:e0:91:46:aa:d3:
                    6f:3f:7d:03:3d:e7:7b:5a:c1:62:6f:ac:c0:dc:5d:
                    3f:b8:3c:18:25:ed:18:74:71:77:4a:bb:f7:bb:ce:
                    df:d9:d0:f5:ca:d0:56:ec:9c:d3:12:8a:94:47:5e:
                    7c:7c:56:2b:86:3b:1c:a3:f8:a9:db:fc:37:db:69:
                    cb:6e:16:ec:a5:95:43:82:79:ca:33:8a:9d:91:41:
                    ba:89:3d:92:45:fa:68:cb:00:69:e2:e8:1e:1b:d8:
                    70:46:81:5a:8d:80:73:9c:02:92:43:e8:d5:bf:2c:
                    07:f5:57:ce:11:0e:3c:16:30:8f:5f:61:94:60:7f:
                    11:52:19:73:fe:67:55:97:9d:6f:b7:e8:d5:97:fc:
                    e0:8f:b9:87:dd:5a:ea:70:12:e8:1a:96:38:07:d1:
                    cf:cf:75:16:ef:23:4b:ab:92:95:a6:a1:76:c4:6b:
                    bc:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:01:0D:CE:2E:89:00:1A:F4:F6:3B:14:C4:42:D2:BF:47:61:EC:EB
            X509v3 Authority Key Identifier:
                keyid:B0:B6:A4:9B:CC:10:DE:34:0E:39:D2:03:F5:66:58:BD:7D:64:8D:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLakm8wQ3jQOOdID9WZYvX1kjd8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/9cc39c-dd7b-4892-94bf-ee46ac018600/1/sLakm8wQ3jQOOdID9WZYvX1kjd8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/9cc39c-dd7b-4892-94bf-ee46ac018600/1/sLakm8wQ3jQOOdID9WZYvX1kjd8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:3d:84:3c:25:b3:42:2a:d5:bf:90:db:8a:01:35:a2:ec:e2:
         6c:33:57:21:ab:cf:3b:08:ef:47:61:87:7c:2e:17:92:28:80:
         ea:54:0d:e6:6c:30:41:6a:ca:3f:68:8f:8c:3a:9a:3b:b4:b1:
         71:ac:f0:18:39:a0:f2:00:22:22:9c:18:1a:35:af:14:91:7c:
         32:44:fa:bf:1b:69:9b:26:a9:d6:be:97:b9:ed:b7:6d:29:b5:
         80:54:5e:bf:23:10:bc:17:bb:51:cc:a7:84:6e:a1:b6:24:59:
         52:96:61:07:e5:8c:25:d1:08:09:f5:5a:0d:a7:d4:5f:6e:e0:
         b6:4a:51:3e:69:45:b4:0d:3c:59:c7:d7:9b:b6:8e:88:de:56:
         7c:6b:2f:9c:50:9b:86:02:f6:a3:48:92:f0:4c:61:52:c4:db:
         34:36:d4:9c:c7:0e:87:e2:69:44:a9:57:d0:2a:c0:fb:45:a6:
         e9:97:f4:75:79:1c:95:eb:43:82:c7:e8:df:a3:6b:27:03:82:
         51:1f:37:68:f4:8e:6e:89:2a:00:f0:a0:ba:64:d5:c5:25:f6:
         3c:84:54:e2:04:09:40:5f:0d:c9:3d:85:32:db:4b:61:6a:11:
         a4:ca:de:d7:9a:a8:b6:2d:25:99:bb:90:df:f5:2e:b1:ad:df:
         52:ff:44:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdwdXZGhtSmG7LOU6WrB8DDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwYjZhNDliY2MxMGRlMzQwZTM5ZDIwM2Y1NjY1OGJkN2Q2
NDhkZGYwHhcNMjUwNjE0MjIwMDM1WhcNMjUwNjE1MjIwMDM1WjAzMTEwLwYDVQQD
Eyg5NTAxMGRjZTJlODkwMDFhZjRmNjNiMTRjNDQyZDJiZjQ3NjFlY2ViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArh3BjNx7PJ4YkRq1HjNEgxy35PJ7
F0TxJ9/gnB5l4U5DCdvh1ZIrV/6+GSnG5p5yzvo0Lmpsp8g5a9tSBV48bO/0El3L
WXsaIHFQknPS/kvHeTGl4JFGqtNvP30DPed7WsFib6zA3F0/uDwYJe0YdHF3Srv3
u87f2dD1ytBW7JzTEoqUR158fFYrhjsco/ip2/w322nLbhbspZVDgnnKM4qdkUG6
iT2SRfpoywBp4ugeG9hwRoFajYBznAKSQ+jVvywH9VfOEQ48FjCPX2GUYH8RUhlz
/mdVl51vt+jVl/zgj7mH3VrqcBLoGpY4B9HPz3UW7yNLq5KVpqF2xGu8HwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJUBDc4uiQAa9PY7FMRC0r9HYezrMB8GA1UdIwQY
MBaAFLC2pJvMEN40DjnSA/VmWL19ZI3fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0xha204d1EzalFPT2RJRDlXWll2WDFramQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi85Y2MzOWMtZGQ3Yi00ODkyLTk0YmYt
ZWU0NmFjMDE4NjAwLzEvc0xha204d1EzalFPT2RJRDlXWll2WDFramQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi85Y2MzOWMtZGQ3Yi00ODkyLTk0YmYtZWU0NmFjMDE4NjAw
LzEvc0xha204d1EzalFPT2RJRDlXWll2WDFramQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFT2EPCWz
QirVv5DbigE1ouzibDNXIavPOwjvR2GHfC4XkiiA6lQN5mwwQWrKP2iPjDqaO7Sx
cazwGDmg8gAiIpwYGjWvFJF8MkT6vxtpmyap1r6Xue23bSm1gFRevyMQvBe7Ucyn
hG6htiRZUpZhB+WMJdEICfVaDafUX27gtkpRPmlFtA08WcfXm7aOiN5WfGsvnFCb
hgL2o0iS8ExhUsTbNDbUnMcOh+JpRKlX0CrA+0Wm6Zf0dXkcletDgsfo36NrJwOC
UR83aPSObokqAPCgumTVxSX2PIRU4gQJQF8NyT2FMttLYWoRpMre15qoti0lmbuQ
3/Uusa3fUv9EwQ==
-----END CERTIFICATE-----
Generated at Sun Jun 15 03:06:34 2025 by rpki-client